last executing test programs: 4.149216297s ago: executing program 3 (id=4333): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 32) ioctl(r2, 0x8b1b, &(0x7f0000000040)) (async, rerun: 32) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r1, 0x1, 0x1, 0x6, @multicast}, 0x14) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3.970727795s ago: executing program 1 (id=4337): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000004ac0)=0x2c, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd62}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)=r6}, 0x20) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="14000000100001000000000059e4ad6d0000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002340000000e0a01020000000000000000010000000900020073797a320000000008000440000000030900010073797a3000000000140000001000010000000000000000000000000a"], 0xb8}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r1, &(0x7f0000004d40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x20, 0x0) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x30, r11, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "0ebfd61996044fb4249989f65f4e7f3ee7"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r9, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8400}, 0xc, &(0x7f00000002c0)={&(0x7f0000001180)={0x1a0, r11, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xfc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x3462793e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1a5c25e5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x5, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x0, 0x4, {{0x0, 0x1, @in6={0xa, 0x4e24, 0xfffff13f, @loopback, 0x1}}, {0x0, 0x2, @in6={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x34}, 0x7ff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x0, 0x1, @l2={'eth', 0x3a, 'ip6gretap0\x00'}}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0xd5fd46b1938b921c}, 0x4880) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000008000000071102f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x48, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) socket$isdn(0x22, 0x3, 0x23) 3.706241377s ago: executing program 3 (id=4340): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000000c0)=0xa) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000000c0)=0xa) (async) openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) (async) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) (async) close(r1) (async) 3.480132318s ago: executing program 3 (id=4343): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)="144737861017cf5a9b7380c988ca", 0xe}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}, {&(0x7f0000000100)="8fbf99afeeaa61b70870f62823c564031458d42fd357f76310054f824c8e6ddb0267ce08412354ade7c55fbf8312ee12ea2ea0aba968119e204df638f6424c12cb72e27544bed2bea52413d00500838fd8", 0x51}], 0x2}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)="144737861017cf5a9b7380c988ca", 0xe}], 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)) (async) getsockopt$sock_cred(r5, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) (async) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}, {&(0x7f0000000100)="8fbf99afeeaa61b70870f62823c564031458d42fd357f76310054f824c8e6ddb0267ce08412354ade7c55fbf8312ee12ea2ea0aba968119e204df638f6424c12cb72e27544bed2bea52413d00500838fd8", 0x51}], 0x2}, 0x0) (async) 3.476510565s ago: executing program 2 (id=4344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040) 3.363244278s ago: executing program 2 (id=4345): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0}, 0x90) (async, rerun: 32) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) (async, rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async, rerun: 64) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) (rerun: 64) sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0xffffffea, 0x0}, 0x20040005) (async) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) (rerun: 64) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x4) (async, rerun: 64) shutdown(r4, 0x0) (async, rerun: 64) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) r10 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r10, &(0x7f0000000280)={0x1d, r9, 0x2, {0x0, 0xf0}, 0x2}, 0x18) (async) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) 3.19201763s ago: executing program 0 (id=4346): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000200), 0x4) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x34, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x4800) r4 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) getsockopt$bt_hci(r4, 0x84, 0x7c, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) ioctl$sock_netdev_private(r4, 0x89f8, &(0x7f0000001000)="bc5a18") (async) ioctl$sock_netdev_private(r4, 0x89f8, &(0x7f0000001000)="bc5a18") r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r5, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}}], 0x2, 0x48800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @payload={{0xc}, @void}}]}], {0x14, 0x10}}, 0x94}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @payload={{0xc}, @void}}]}], {0x14, 0x10}}, 0x94}}, 0x0) shutdown(r5, 0x1) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt(r7, 0x7, 0x4, &(0x7f0000001040)=""/34, &(0x7f00000010c0)=0x22) (async) getsockopt(r7, 0x7, 0x4, &(0x7f0000001040)=""/34, &(0x7f00000010c0)=0x22) 3.190521346s ago: executing program 2 (id=4347): r0 = socket(0x2a, 0x2, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0xfffffffd}]}}}]}, 0x3c}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001008661562af1294d3a0100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000090000000060a010400000000000000000100000108000b400000000068000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000300001800c0001006269747769736500200002800800034000000002080001400000001408000240000000c9040004800900010073797a30"], 0x104}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x800, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8954, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtfilter={0x3d48, 0x2c, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0xfff3}, {0xffe0}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_basic={{0xa}, {0x3d18, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x7, 0xffff}}, @TCA_BASIC_ACT={0x228, 0x3, [@m_skbedit={0x180, 0x1a, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xde}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0xa}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xa7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0xffe0}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0xa4, 0x5, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x40, 0x2, 0xfffffffb, 0x2}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}]}, {0x29, 0x6, "2584e9a38d8c0eb2bf054ed384c64e60205852562f45f5eb6c4bd76fd491f24432aafd1dba"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0xb8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe}}, @TCA_EMATCH_TREE_LIST={0x94, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x90, 0x3, 0x0, 0x0, {{0xd6, 0x0, 0x5}, "f3804e197e5737da1ea27669c9a7df0bb31f902684da6a39e765640fec99705775b51062f89c32b01885c359b0be61534a0a483626a70cd7ee884180ffbee6b538b9d858508c94bd960eeff843c281291166620c5c93c3204974ee30a5ecb20f27f52209517bd3a5fa67cdba839c1adab93cafda2554453b16c7ed1bf33cd2b08b5d85"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}]}, @TCA_BASIC_ACT={0x25b4, 0x3, [@m_ct={0x1088, 0x1, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}, @TCA_CT_ACTION={0x6, 0x3, 0x12}, @TCA_CT_ZONE={0x6, 0x4, 0xcd}, @TCA_CT_LABELS_MASK={0x14, 0x8, "54969b2ab364adc1c7d18f0a389e377a"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0x1d}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "e6fb0bbde2dae4748d9e8f2fb299c4e4"}]}, {0x1004, 0x6, "9f4982473e686c1dfc9b23bcb21e9e9a409a845ac0fe4f107013000cd4ed3ee08895eccd87595a5c386dcb4487a6ddb144d59f5c443fa88f361d972d867268e1164108f668b2426b933fa48e12876d10130d6f4b290bdb3f0121f7fa1c16d49f0e89c7b1bd6e3e93ca6faade9e4876d2af6073dfcd5fdde0d0e0c410df84c16e07b5fb7617eaefa0d9d32d403268bdd4b3782af52fd81eaf41fce8d25f62a736baf2808f3186dcb3a31aa122e9443cf0dc88b0c105f63326dfa294536714b76d048185da2ccf81825a7823c6cda6dd09e4d88931ab6b5f1c19eb5d3cc96579e488dab644697420e0b411f87e3cb7e3b5f9b37a7cf556b56306b1fb05b3b549f454f0c404139de99ef7b67d9646c2328db1356b7c75ec1892ca57f7a565cdc3f0cdf2537463facf1822f1303218fd48445ae8fe947ab9455f1ac5ad9397659b6a3298b22b881047dc8420534f5d9c17ecd496902175c0ea1d8935b60e57b96678c4329e96cf04751426668506e7b5862b15c49929aa5aa1efab5033048f5ca9c91db9a9aa05746cb5cf592245109d6b77a6c08e53c6a47ead37e8c32583f4e9e6e51ada3752c29c3ff9b5ea19784c14b65daf1489e1ac5982ad0ae85ca5865f16a918388ae75a3b6e3ca68fb047a4e768f862060717d4cb2870c02bc972e6bcd3a8bdd8fac940bd3475f35e0dff3b992ff777aeafb1b07399b25d87faff53d457944dded948d2775dbf095e66bcdc51b1b43355c91f9e03183d3b6ed22de1ede6f25ff7324e05f7503001d1899b82073d86b9097165feb9f4a4555677413c04b78b2de1378ead292c5a2583906e7bd92809c2c864c44cf5ffa507f571810371b63656dece89e2dde6b9acf2682df553a613488d5f951e14e62826725af425960ec00191218305b6d95d7794baab6c0eee9ebc16eee9ae04a3d26686a8b7797e82b9aeb7f706090f11ecdc76d5acf105fcf4556504422d019e60f0af072f4dec23402461d2f81f4024f258e986a51b590e771df805e9c43a0c4f01b66f350913ee1ef4d81ef20775a4fc9d005e3230bb6f4bd3b207d2e8f0fe305ec6be6fa77153217707df358e6316b4547f713e3b43b1df440fe3d07cf856ff545dc57b744a55323a0e8199a1205d9160013c780aebd1be7c91a29dad21103b8e3e9aee156790183cfd73e685df6e059dd4922f25f2fe6a06aad68d431030dd562a3646b7702e18cdc7db01aeebedb5229e3b34b39123eca1d354bba274a73eb1525735f0e5219866bdf05a643736d858598b583d69f1f7bf950cdbc964d19f0b0b2b2046d7408751e89eff318a88c325b5e445cf65531949cf2db7f0279946a2eacd8e1269c92f92eb3509b8412805e5f796bdb57801e7da4e0b2c990fec74255d78e34ee476c820c7fd7a567a0a657146c60ca180b9afac489fc270b4ad8cbfc284521b16a089250a04ca6f27e9b41b783e0a845ecf023601e88c8f1111219db125f79e51edc918cef63d0cea35fc8f05a46a62dc43b83842255564ca901dbd2a742334dd938e97765be35be197039a9b3ed687445e07c6ecaf235a1f92cb8d97d3e6047c874b48dff3a904a0d0393bbce613976825626d97e67a05c6292824f4cc1d21998382e3d42159b2f2a5a9103aedda3d2e6cdaa2d822ef1359dc8c2ed09bc85cf4f51ed8f624b905f5bff7229c7aa7fa6ee0034fb5adebf4312f90b89737e8b6869ba9f817590f94d7e046380b17c3e2b97d12bcf280531d9e6a4f7840ecbc53c4390379fcd211e3736c6308e008e5f13d8333de0eb1ab7ff94c70ec1afd408a23396867a34ea9d281a18902946f7558180bf5ee2a4d32cc0d88da6322a78cf6a89ef46309fa08cdb3036a0a23564050adc90bc21eb8bb78183a36b3fe3bad7d51fa379057342ccb08c62e1e1b5ca4dea42866419f4943d35a12f5c9580be548db66d60ea6223d8771d4e74bfed60e2ab55ccb5a2bb06fa25b9f259601385b5ded9b6070ee30889a62588a2a616dd608f35800138671ce7bc22e33e8ab290241cd46a9d716bea8cf825f7960c100c1bb5a5efbc8af8367c935d3152159e231182987adca2bb75cd7e2e7522ff4cbeb79d9723d7d4cd3fb843c169198904108a80352e3cfad4ce58b5476c3a90398292644bbf89885d79b75b512776f34004ebd32c4d41c7d0de33608bd7226d160cca5de3d8338945a3fd06bc84474d02282df22479ee124330573f5126dd2fadf5d04f88f79436f369318b92828c78307a525c676e9d2bf990e35827eac7d7a0adc2e3701a67f2f19a5e1789585f1a26e78bb7f2d4e704669b86bbd0e2d6d0863904318dd9cd7f733b14e9992719871f57460177f749a5168bc59d8582e2a3b6c9b37a0a5d4a2964494522b8015b49f85a2b39b82f0766e69cdb012c6c8cf2681b1469fd40d95863a18c8614eec1133a7043d42a6a7dbbc5888089a6f0fd2086c7a9a3d8bf445b1a6bc23010b0c47fb12ec85fd5c55119ea585ee2ae626cc856a7e3615ddf5bcf29c603e67e0a59445ccf51e1b6393eebc3edd9134ac3514e9dbfbbd9d35148aca690214669876095eb916524188359b91a4ee16b0b1014f8b93053b5c340490627751a3dd458baebeb633223dfb097615801906841d3108cf68f9e2a9fa54f8846b180781f36ac77bba9500689f684aced8ec26820298196018c690c6751c78bd7836c6f397725015945a38e20c41a5d200006552039c95eeb2452229224193520ce1d5940f0b2c65e9e9ec32d8362bd7c3109d185a9e3011446446dc02c48fc0b23d27c2089021db0bca8cac76e3b4b7c4c1899c4899eae841d1b99a0e01d28b2bfbe3a8bf06110a63ca68369dfce37539401f7b8b366db4d11ae0ddfd70dc836d21481c5eced1f687ab4b7cbeb40c7a9b6be29de14166940687507d172b42722408126449ce8ef61af324444b0040412641e5fcb8c76ad54932f0c57e05816e8c282b2d42499191933c088e4004b1dc4703a51aa1ee8e46e8dd77dd36948e4db0f6cf19fc8c65091e252ba67e16d20568a221c4f41a3c274860733debd7fda40da958efc676683ce2f7e8d8645740abc3ec2bd9616a6d30739853c85c4fb1db6518b98e7acb1f9c93d80c9812f5012c61416353408c8637421820eed95866457ca488339e4b419e89ffe3732a730af9781dfb36f07698856b4fe26a494edbe769135b1c0ee10bdf5da1e9390fa8523b4885d33cd6ea417da69b6a0e0a4093280a8b6c9f9040d5f35685b662ce74de45501e340fe52df453a7ce4b208a533b469363cd3089f2740e9843c9f624f3e89bfb2ca381731cd7fb70b531b03990b1e6fd4942f00800c37cc1ce2f4d1b90a327f37a5211530ecffb0fc951e584fcf64e3c856a86bf35335a3c06f9da712550cd2a422b7b4e10754104dbc361ba09e13c087c09b93afe78f53e9aa2fb738668a193245a09f01601fc411e541ddcf5b9b8fd67ca70640f28246395d64ed1d26531f56c9cd6bf839a8895758106ed0a796d4568c356be080741cc4280c05623263f31a3278acbb8ab596519c6598fa331832f3f1192a9418b2de0a332efacef20dbe8cf655eb8a3d0bd257fcb0b7aa2fa5e1c1d19e247034f2b6693ce424436175638a8a4c63ec15219579c61b9265e34918378e13d9f0709001d347bc1043e0bff081d0016ca74dab6e052ddd7f8f67f1396dfd5628884273bc5d9ebceac1d06ea271dc5ce2776b49497a1ac2dbdf71311483c97b1df240457a75b460f9a907792ba1e234bc726c939e28c841006b39775d53da6754add079034291f0e61fb4a077eed78c181a5d3c2272f602000f4f5f5cabe519c5381a795384aad95228dd101bba2816b5ff3561101db720ce260201628c5859963248cb9aec11c001dc010e10f662db770fa2f4fa140806c9753c734e88992ee0033f58e504ef22bb0cf4ff4705b1873fd1671ffc6336b8e3f5dca85f3a25ddf29d84064953117dd017bcf5ca07f715a6fce3b92438781a79bab7b93fbc1db42117f60db193b108c2c3158adaf7eaed1b3388c744fff9fc40fdf25741263390ef8d5543858c98bed7f4a32c7986a1bac4cc902cdd72fe7f60e3f45107693bc560ffc690b1a4e047aa19c3d642f7d4b7cded377ac25f37cd063d6d60af5874ead3e3c35627dab83a804ee4f93a178bf1a9122d8774565d9589e13e14851c1de81c245229490577c7bb0a41be8701dcfa4ab237db75f8930319119dc0e86252941a1924e9218fab6e332332d4b585341d4aad86591947222d709fefc195e182068b5e9f06dea443cf3f300f55a5942938204023037ada56bce2069884c5b3acb7c83253ad5949d813d61a48fc0f190791d63c461d6da173804e87be914c463d63062760f07d4c447d7cbc1eaad37224ca6fbbdd8c5f5e094a02f5db487ecc11158123f656c1882ee4bb330ba0d4477c2f2b2c89279b723d5068f7aa94ee5b24c63af9cf56960a5722c2c26967db81a59fa176116c1a87b082ad9d52ec0dc10baea83e8d394e1a1b5800f6ed6de27f69e182119f315b55b827b9f8402e67277db479fb85d9d5131348676a4fd0865178f05f776d9ba363d843a73c4b6642407ceaec9af7a2413a699cbc109ab962caa71f1686acc301f9c0bbd97c9a80388ffc88bb2b1689abbb38084d254067b07d7daa20e89ab179d4a643de7e8f5bf18aadfe704ac9868815a3a8d5cf16a43eedda62a70da373bb007aa649d81bab785772adc42f07d1097f61756c4f95df87af21b472b91c6b1485431df2b93f6d337c9104ddaf04c2913e70b45707e5125e304340e6e843e2b9f84102da97eb5aeafa157eccbf22c27abce01d7825ed649ce570cbc31ea2e38f0e14d0dd7a8ba913f945d6b7a773c30fcb807345b3182dd3f8be26d22105c23948066c55f35e3e942610496ee75514bdf414802c5d14c9a508e232811a18534cd382843c6bbb5739c226d9e026082f4093ab725d7b028e5e26f84ad81415ca0188f77fca19813a01e7b57b02d9dcd4adba24510ace75d4a7c481959ad8a28ae00940c1f97b49c583ce5589ce7301e3c6e19c615e103d165dde84f8a0a8164f8f2b18ccba73800f169181e47bdbe6d4f3667ebdc97cacc120bc64cd4b4a7811282bacd2055c112bb119b5ad0311bffb0f6844824df20ed4f16ca4c15500a27f9ce7fb62baff8caad5faf81b734a959d3c821c171d2393fa73f29bebab02dc8063fe4d3ea526b739baca5886f3241f203fd38b918cfc255f1b38b3a5829533c32109159379210b96e9e50e3f5ad877d75a583cc1af51a4227600453b65f80ee086fb547d87d6e20314d9df1d2c4060ae5da406454695c396e8ef61d84ff19222b6f116591fb057105f69c5a089555d63d41cd10866b77763b96bc9478c921b382a65e1de494aecdd0c1578fb9110b287adf351b82c395bc026fcbeb4f13c1eb5479f25439da9868f66dab96193984a6779e8c7c4dd552ce2c9cdb0986b28aee8cec412482a63fce5511d352fe851c423cc5033fa0745c3c1993ec3d6859dc339dfb5ac12f0dd4e006f9f5b150c2e873a854080d121d1a3bb98a06daf1916be40ada72855ff38cf1c51f690500aa2e3d60fd563a97e3af64ed8dc7ecb400f9f33a572e17e4abc5958cbbc4d81549757c501a1cd7c9b5e3359c73d35f5279ebb31dfab6b17599aac9f2c8b8f01fa98ba89ad7718dca3654b8ee89595923bdf23ffbc6274e3cfc23ee7802ec6297fc3c491ee47745c0c27de2b091d80a7c18f2796abda89270bb4e60b99c9b5382ed1a6d93c4ee61e3b5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x168, 0xf, 0x0, 0x0, {{0xc}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x7, 0x0, 0xc, 0x3}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x0, 0x1, 0x1, 0x100}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x4, 0x0, 0x1ff, 0x5d1c}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0xffff}}]}, {0xd4, 0x6, "4886c18090954bf58a93fbd3be7c3ebc2883aed852081b8773a14c7292e77eab5bdf35a9ef649412c88c65b0f53c347f401efe5214a1033d448bea396e5ab03dafd7d17bec810074cdb70496681eed89c2888afe75c1bdf052b203dc23dc490bc6de51d61296bb50b744a7667c1a36175ce23e77e7974f41616906d2c12505f4c213305b0774e7c0f9ee6d30d3678b179df4965d2489a93d6b5458d7027b284c15e67e37d34aa22ce43f0bb128aa78ec55e66c11142444ea3b9ce684cc91950bfc4a3b9cd5a7698562b941789e7ff1d7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0xe4, 0xb, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xfebb}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x9d, 0x6, "efc41b1b0fa09d717221881ed08ad28f3eb8433e8f99977d2c81c7c98559eb4d6b4b64ece493dfd065dc538e0166898976870664bb061860545fc747a2b8b362d59fff5c3354f13e7aad10fb3dac77fb4dd6d5fd3209c59bf015747437e6614342845359052cf0ea83b2d95ea650f1a59c4bb58490120c984df13d12e0e79b910f1e885942f716c025fcc0596fc56bc66a892fcbc6c854322e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_bpf={0x160, 0x19, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x85f6, 0x2, 0x1, 0x2, 0x1ff}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x3, 0x7, 0x5}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x3, 0x80, 0xb5, 0x18}, {0xfbc5, 0x2c, 0x2a, 0x1}, {0x2c, 0x9, 0x6, 0x8}, {0x8000, 0x4, 0xc2, 0xc}]}]}, {0xcc, 0x6, "3dc39715aaa2e24c2386007d940c0d1ba842a84805891ad2a61257b8b9d3b177aec33693a2b4d2316781a1d85e1083e56674a55367def20fd30c0b470cba7a6318debff4c07f5085c06642542ecdfd92b00ced22cdc2bd336f8c72b683af31075f6c2b82739006ee95e4e8cc30e4dec03ceaa5994ca7282ecc9cd011c552fa2687d16f37a43b5f64005e9f16ad0d15bbd907a36072ea4bd5d39847ce5523e7f3eae035a66259e4a6333d3def5f6c084872b11db4180f47c5a1343245f971e7b7b7999b68d4882abd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0xa4, 0x1a, 0x0, 0x0, {{0xb}, {0x20, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}]}, {0x5a, 0x6, "3e2a219e202ae8b1de8c18dee86cd4624bfb5cabda281a2eda6749f63380c173ec70ad8ff08aa82e9a8b66734e25f85a9d5a0797a9624669d939fc31906c53c1be2eb0995dca060a51794eed7bbf3ba591f388b3dde1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0xe0, 0x8, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}]}, {0xa1, 0x6, "603b084a582b237fa13b69e63ce4524cf0f1f578859ed54054e35cd3a221ac42bd3c3e4dc06014f4b56000055a9d08ff8ddb2fc96aa75d682a2b2146d416ad9e4759629780f3e1ebfcd57e09805730322eba86f7861c3eb460055f790d4d5678ba684c2492f47f25c2c273d5ee56afdc7af7df38b0962b287c33c760967dad304ec9d84bc9635fc457bd21cf1ee1bc03a336993fb3d6bcf9c02208c7d2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0xa4, 0x9, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x14, 0xe, 0x1, 0x5}, {0x3, 0x0, 0x6}, {0x4, 0x7, 0x4, 0x80000001}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x2a, 0x6, "09bd10f72bff96d4bde34157041ef1ba9d0b48417680272cb861372648bd1712a9b52b01e526"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x14c, 0x1, 0x0, 0x0, {{0x7}, {0xa4, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_ACTION={0x6, 0x3, 0x21}, @TCA_CT_PARMS={0x18, 0x1, {0x6, 0x10001, 0xffffffffffffffff, 0x2, 0x5}}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_PARMS={0x18, 0x1, {0x3, 0x5, 0x6, 0xfff, 0x7}}, @TCA_CT_LABELS={0x14, 0x7, "d8e082488b33eaf6fb76dc8fc2138b7f"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @empty}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}]}, {0x83, 0x6, "f6b46b2bfcb8072ef29e8d0fe3ee2790fa6293211d9f11fbecb967b3ec8bc5e6c909d17e95037ad704824f1b9b69f40137a4b90d6575ffa61d4bff7658c2f83d847cc1ea5ad50de9fc3937ee05c602f8b61b831b5f39bfeb73683f33e7cc47d7d0e906074decf3f3fdc1137b9fab45dee0be814c45d900d7bc01b79b84e45e"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0xac, 0x16, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000000, 0x5, 0x6, 0x8, 0x76d1}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}]}, {0x49, 0x6, "8d3943bbff080c3044acb9d5c334217701ca84388b597b09cdebab01cdc80563adf29041bddf0299f2c06e535137c752412de8cd79fad84ba31fa55a59adfa12b1624686bf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0xd5c, 0xa, 0x0, 0x0, {{0xb}, {0xc84, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x9, 0x1, 0x8, 0x9, 0x0, 0xfffff8f2, 0x7ff, 0x7fff, 0x400, 0x0, 0x9, 0x9, 0x5, 0xffffffff, 0x2, 0x20, 0x5, 0x6, 0x8, 0x80, 0x6, 0xfffffff8, 0x9, 0x7, 0xc, 0x200, 0xfff, 0x0, 0x3ff, 0x4, 0x6, 0x400, 0x5, 0x8, 0x2, 0x5, 0x9, 0x40, 0x8, 0x4, 0x6, 0x4b3, 0x1ff, 0x1, 0xffffffff, 0xb, 0x7, 0x8, 0xd86, 0x1, 0xc8, 0xc6, 0x3, 0x1, 0xfff, 0xfffffbff, 0x5, 0x5, 0x5, 0xd, 0xfffeffff, 0x1, 0x6, 0x100, 0xff, 0xc1, 0x5, 0xcb1, 0x4, 0x6, 0x400, 0x6, 0x53, 0xb0d5, 0xd8c, 0x8, 0x80, 0x4, 0x3, 0x1, 0x7, 0x78, 0xc5, 0x7e09, 0x6c8, 0x3c, 0xdb3, 0x2, 0x5, 0xffff, 0xe1c6, 0x6, 0xff, 0x4aa4584e, 0x3, 0x7, 0x7, 0xffff, 0x1ff, 0x2, 0x5, 0x9, 0xe, 0x9, 0x800, 0x81, 0x2, 0x1ff, 0x55661333, 0xe9b, 0x1, 0x10001, 0xc40e, 0x870, 0x47f, 0xffffffff, 0x0, 0x2f6e, 0x5, 0x200, 0x81, 0x7, 0x0, 0xea7, 0x4, 0x6, 0xffffff35, 0x80, 0x2, 0x7, 0x0, 0xc, 0x7, 0x9, 0x4, 0x7f, 0x6, 0x8, 0x4, 0x5, 0x54f, 0x4, 0x6, 0x2, 0x5, 0x3, 0x2, 0x7, 0x0, 0x8, 0x5, 0x7fff, 0x8, 0x2, 0xfffffffb, 0x0, 0xffff8cb6, 0x4, 0x9, 0xaf, 0x54bb, 0xfffffe01, 0x3, 0x2, 0x400, 0xb, 0x14000000, 0x10001, 0x4, 0x0, 0x0, 0x7f, 0x7, 0x6df, 0x8, 0x7, 0xfffffffb, 0xffffffff, 0x5, 0x0, 0x7ff, 0x4, 0x4, 0x0, 0x0, 0x5, 0x1, 0x6, 0x7, 0x0, 0x6, 0x4, 0x9, 0x7f, 0xb, 0x3, 0xb, 0x10, 0x5, 0xc5, 0x7, 0x5, 0x4, 0x7, 0x1000, 0x1, 0x8, 0xffffffff, 0x2, 0x0, 0x6, 0xfffffffd, 0x10, 0x1, 0x24dd, 0x1, 0x4, 0x7a, 0x4, 0x7, 0x0, 0x0, 0xb, 0x10000, 0x10000, 0x8000, 0x7ff, 0xd5d, 0x5, 0x7, 0x1, 0x93be, 0x3, 0x4, 0x5, 0x9, 0x101, 0x2, 0x45, 0x7fffffff, 0x1, 0xfffffffe, 0x80, 0x2, 0xfffffffd, 0xb46b, 0x88, 0xff1, 0x7, 0x9, 0x3, 0x72, 0x8000, 0x3, 0x87]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffe4d, 0x8, 0x3, 0x2, 0xb, 0x2, 0x2, 0x2, 0x0, 0x6, 0x5, 0x7, 0x7, 0x7ff, 0x7a, 0x1, 0x8000, 0x7, 0x7, 0xb2, 0x5, 0x4, 0x101, 0xffffffff, 0x1, 0xfffffff7, 0x1, 0x3, 0x4, 0x31, 0x1, 0x1, 0x3, 0xca5, 0x7, 0x404, 0x9, 0x10000, 0x9, 0xffff, 0x6, 0x8, 0xffffffff, 0x3, 0xffff1c45, 0x9, 0x2, 0x3, 0x2, 0x1, 0x9, 0x192, 0x8, 0x5, 0x9, 0x401, 0x6, 0x9, 0x7, 0x41d5000, 0xcff, 0x7, 0x9, 0x0, 0x2, 0x7, 0x3, 0x2, 0x2, 0x8001, 0x400, 0x7, 0x5, 0x0, 0x10001, 0x1cefc7af, 0x1, 0x7, 0x0, 0xdf7, 0xb24, 0x8, 0xd4, 0x2, 0xfff, 0x7, 0x7, 0x1, 0x1c78, 0x9, 0x8, 0x401, 0xe0, 0x4, 0x5, 0x8, 0x8, 0x81, 0x599, 0x9, 0x1, 0x400, 0x6, 0xd, 0x4, 0x10000, 0x8001, 0xffff, 0x7fffffff, 0x6, 0x5, 0x5, 0xfffffffc, 0x1, 0x5, 0x0, 0x4, 0x80, 0xfffffff8, 0x10, 0x3, 0x5, 0x7fff, 0x0, 0x4, 0x2, 0x40, 0x6, 0x100, 0x8, 0x1, 0x0, 0x4, 0x4, 0x6, 0x4, 0x3, 0xe088, 0xc, 0x3, 0x10, 0x8, 0x0, 0x0, 0x4, 0x1, 0xbcc000, 0x1, 0xfffffffb, 0x7, 0x7ff, 0x4, 0x9, 0x5, 0x36e, 0xffff8000, 0x3, 0x8, 0x200, 0x66, 0x3, 0x10, 0xfd, 0x6, 0xa, 0x5ac7, 0x0, 0xa8, 0xe, 0xe537, 0x5, 0x9, 0x7, 0x8e7, 0x287, 0xffff, 0x80000001, 0x6, 0x2, 0x9, 0x7, 0xc, 0x8, 0x0, 0x3, 0x9, 0x1, 0x2, 0x10000, 0x1, 0x1, 0xffffffff, 0x7, 0x2, 0x7, 0x6, 0xa442, 0x5, 0x0, 0x4e, 0x5, 0x3, 0x2, 0xd, 0x80, 0x0, 0x7fffffff, 0x6, 0x6, 0x7fffffff, 0x7, 0x8, 0x45, 0x2, 0x4, 0x9, 0x4, 0x8, 0x3, 0x200, 0x8, 0x6, 0x5a9, 0x7, 0x1, 0x0, 0x800, 0x40, 0x4, 0x7f, 0x9, 0xaf8, 0xfffffffc, 0x7d7, 0x2, 0x7, 0x8000, 0x10001, 0x8, 0xfffffff8, 0x1e36c3a8, 0x4, 0x7, 0xd2a1, 0x1, 0x6, 0x8, 0x6, 0x4479, 0x0, 0x2, 0xffffffff, 0x8, 0x1fef, 0xf7a, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x81, 0x5, 0xb, 0x4, 0x400, 0x4, 0x3, 0xc38, 0x4, 0x1, 0x8000, 0x1, 0x49c, 0x1, 0x67, 0x7, 0x2, 0x8, 0xa6, 0xffff, 0x7, 0xd7dd, 0x81, 0x15e5, 0x2, 0x3, 0x1, 0x8, 0x2, 0x0, 0x7fffffff, 0x2, 0x8, 0x4, 0x8, 0x7, 0x3, 0x80, 0xfffffced, 0x400, 0x8, 0xfffffff8, 0x101, 0x100, 0x5, 0x6, 0x5, 0x5, 0x8, 0x80, 0x0, 0x686, 0xc, 0x1, 0x7, 0x7fff, 0x8fae, 0x5, 0xffffffff, 0x2, 0x3, 0x10, 0x9, 0x0, 0x401, 0x9, 0x7, 0x0, 0x2, 0x6, 0x800, 0x42, 0x7, 0x6, 0x80, 0x5, 0x7, 0xe08, 0x6, 0x2, 0x7, 0xa, 0x9, 0x8, 0x6, 0x2, 0x7fff, 0x4, 0x5, 0x5, 0x8, 0x6, 0x6, 0x8, 0x47b, 0x7, 0xf, 0xe1c, 0x80, 0x7, 0x0, 0x0, 0x2, 0x5, 0xc0b, 0x9, 0xff, 0x1bca, 0x2, 0x2, 0x605, 0x4, 0x9, 0xb, 0xfffffffa, 0x3a, 0x2, 0xfffffffa, 0xd1f, 0xfffffffd, 0x5, 0x7fff, 0x400, 0xffff, 0x9, 0x1, 0x1, 0xff, 0x101, 0xb7f9, 0xffff, 0xfff, 0x0, 0x0, 0x4, 0x5, 0x9, 0x7, 0x2, 0xd255, 0x3f57, 0x2, 0x1, 0x1, 0x3, 0x7, 0x2, 0x2af, 0xf, 0x7, 0x115, 0xffff, 0x1, 0x9, 0xe29, 0x3, 0x6, 0x9f3, 0xbb0, 0x5, 0x8, 0x3, 0x6, 0x1, 0x7, 0x5, 0x70000000, 0x55c, 0x86, 0x10000, 0x9, 0x63a, 0x1, 0x7, 0x0, 0x6, 0x1, 0x73, 0x7fff, 0x1, 0x9, 0x7, 0x6a, 0x2, 0xfffffeff, 0x99, 0x8, 0xf1b4, 0x9, 0x2e5, 0x6, 0xffffff80, 0x5, 0x40, 0x7, 0x4, 0x400, 0x4, 0xb, 0x100, 0x6, 0xffa9, 0x100, 0x9, 0x8, 0xc998, 0x2, 0x4e000000, 0x99, 0x3, 0xfffffffb, 0x1, 0x1, 0x3, 0xc, 0x0, 0x9, 0x0, 0x9, 0xa, 0x0, 0x0, 0x8, 0x9, 0x4, 0x6, 0x10, 0xb, 0x1000, 0x6, 0x5d, 0x8, 0x2, 0x6, 0x9, 0x7f, 0x7, 0x8372, 0x6, 0x3, 0x7ff, 0x0, 0x49, 0x2, 0x6, 0xe8bf, 0x101, 0x2, 0x100, 0x10001, 0x6, 0x6, 0xa0, 0x6, 0x10000, 0x45fc]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x0, 0x8, 0x0, 0x7fff, {0x0, 0x0, 0x6, 0x2000, 0x5, 0x8}, {0x7, 0x1, 0x8, 0x8, 0x8000, 0x2}, 0x3, 0x401, 0x9}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x71}]]}, {0xad, 0x6, "dab9863e8ccce1c5c4a37376b54e4d4c3d54b6052508987c9734e9f00a38a2a9353db82f47a64e705ac3d612674f728b16acfefc8ca0fbef0eaadc9bb2472e1ff86734b9f7471f522e7cd04104e84850f0d3c93c6237f19448297f9d52914557d063694930aa1553a69a76e4c06e0a6cfd8cd203c8c2f9d81e1f388d129f9762fb923c0cd6111c4277374e308bec3618c10c40ae71e98c288977d01186d463450ae334ebeaa75d1174"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BASIC_EMATCHES={0x1040, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x103c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1038, 0x1, 0x0, 0x0, {{0x6, 0x9, 0x1000}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "bc0aa40e5e313db96e693170b43ecb3b3566f307e722dc60f74998dabc1a87b6f173ac412653ea963e9cbe0aed4b1eb9836b519556360d088cb75c929b558034e05afc49872bd56252e8689ccaed12ba5c47af455612eefd813b9c185b597cf1c25e938844ce6c943adbb2a8e8847330707d48f8cd520209f2f8240deaf4db17a9853b291c2ad4759edfe4c4fb87a3f7c901aa571516baaed6b019b1bfc4624981e262eac79c044a34a576027de3493acedaaafb4d08dc52224e88b45bc16e4c8d9670abfbf369acbaca65cf1bb1c4a0eb3ce2cbf48bbdaf605db140bfe8eab403a32d8407f642f6f06bd1cd676b28025a764ca9eae8e6f3c3641c2a103e2015602d957a2738cc5b982a540688cd941b45b3018a0fcd2155d3bf3af3534a8ac8bd45b6ea2e28823e8e0b9a6fd746b927f17cc141296219deaef8c41503e5e1dce5ae3b61330326b4cc209527ab9aa118a443ba18d0698515777c3287c0866f75ce46b23e8d770b2b620c1fc32078e9af939c713c62fe55ab2007bc786d8cf7e9e5bfcb95362109072efb90a0a51fdecc21e127e55f59e204bd452e541ebf5eb55f1974366dc214b63a77ab08bf6aa0fefcc81182e22ed1bd417bc4c930fab48b3eb623fbec21d118b4593f1cfd84410c9e1fdbc87c5f5db3dd64e0b976b527a8605a474ec8815dc17823568a5edf2078c7a33b90809a324fcc018813449fb9598d47ac646bf6289564adf144b3870e329c3591da850a6db8454087657b0dd0cf85f19c0cefd3f4eb5d6a874b978efc9367a5e7e3e966dc80555d703e81602fce88091be0d1a375defc01e060df309a21b940aef5bd7513211bf4bfa2094a945d234952184a0e23f47ea9ede7c58bc1a4dcc14d9a616ad70274fbe6dbdda72fda2240de98904d949347de11aac38c457b54375521cb442a95bf8b8d2cf62654be261d2baf1034bb35ec25e1f841307abafd0e5fcb485cc096f2d78f06623c5b635c905155514ec20c99f424ad4da32b240987aff04eee2ac410d9672a11d99cea91da48f8f250d4fc93c128dc411aadf1a90bb15d65822f337192d5164ec129a25a298e022d84e467f5430305f78ed988343842fa6d47484ae3ec624d0622d39cc80de08cceefb72782ab10a21740aebb0c67bc9097ad8255480faa463482430037952aefda2c5dcdeb262ad8a9aa628a44d5b305c9b8963943182bf09f0045fa4e4ebbd62e8ad0ab4b6ffb486f9d66d91124d362e66b64f7b4b89d413150547eea93ac7bc3e4a9660d0f6abe2197cf2156e48207faa92c438c0cf3148fa5682b2990998925f2f8f7b654b238c7973ef802e036fc19964933b21fada27eb0a64800af4ded42538722a2119ab07f4bebefffcecdb353a6f9e213566c913a448d11e4d51ce61257f658bfa17a0d49efa5bdccb9bfa852d5549241c115479b9fcf0d0b1d421f1f79396aaa1c9b9480efc0256b6cac7031fe4226e3b90c3300ab1a183e57332f1b3f60fda422085fd2472e72bba4d55deb2ba2948b626486583fe80f1653b68512f46ffb789f99092555fa0aa47225aa8a0d7b2ace743a6f776303f0d1f1391ffcf24efbe7355cdf78ae33e230e02941e19b4215ebd3d576553f6debcaad30c335db57c2613b0434d02ee4bc23d17796e2a065fec37e4dec1e5165572a72c554aa708728456c6dd34529c6226cd88656fe381413eb75f7bc835bf5614155f9810b3c8ac7dc9f06722e4054820a4e4aaf581a56fb1d89ec7858af260e30dd665d01e83a41c12501301d7fbfe24839f7e82a3dedb6e44dcd70339eaecbdbf769cfdc0d0b41b723ba5678165acc1b6ae88a7bdf102b413a22fdd1dc531cb6bcc1febff40bdb1b086759d72bd0239fee48811e460370d60b4d19386e31c04c049cc8adc0283655b43ea6a10631921bc7b01b084128e08d4db5e8cb4ef855333274532f6f74706dd27931fd51eb382814eca766453c31e7498262014c4afbef106cf73098c3c5c1fb76ecb603fb7a53873ec871b830a0d10b8238b6132e1b524ec151c2406d5024ee57f79681dcaa2dde778e0c41aacb41705d0cd48b24157028afb5e0cee46082e6be665ae934068615b7e0ec6f333e807ae137c382be3e16b6c90d930180640b88480e0f27d07df2b2e561062d2bc74eb53a90d586abe973e1c21cda2234a40b978594077296b0ac11f482652641bd6065c539061e5e5b7c69572bde0202b23cdceaa249bdcc52eb837015a5b9d61f328899a19e653cb5f8bcd45bd9149fc31250199709dd2cfe7a0cacef9e025269f86afbda4570133cb05de6d09541acd3fd28e236d78b7463c1e0a3a5517195582a7a067add17692a8f5c4308e6c642e154f0a854aa30be05a0c56d5823d32c4e282682ce2b9f1311cd090d51bce0b4a93f6b15a88db01dd38d78f84b5e3e6a3cc45f5dce5b9a71ad9c67fd74805a3c91009d50d5ba076d54f59a69905123e4d033575d13a5c7d5ffb4b6d9ecbb4431947984aeb165a73fe2108d4cacadf8ff44e35974675f757ffbefb80690d28e567033bb887fba9ba817c2fa38c155ef352019025309f0fdd3d805a692ffbef0ee1e5d67d7f3795ba168a9c618af4535fd203c295442516fcbfc3052e071fddffa984433b8b7215e4885eff0a5fe98c7cb8310e0c04c35b7a907f6e3dc89fca9430a8db2c073f0a03d2fa699e762afa56dee0e1f26b4132ba82a2083de62995d4db16091d4dda5ae3b0919d7de624eea3718eda109e1c3dbf00b093d8e1b184b09810266cc23d55c312ed97e251592e5c041f6f553e0f68506510501cb28bad3afd80e3e905b2047d29ac2880e64b9bd8c24da8200512204035c656191992914e8a5cca9441417a1422886f37e4aa5ece403a0fbbc65c494c29131d1de0eec1b4924333a500ae83c1facd9674613d27c5a97e191c75d0bdfb1193f71af198f3a4fb806d768adf224035aeebd877f6ff12e6e983e9f9b76389ab81f73d4acb0c59909a88437636a21ecbeaf16b3e79f29a7494d7fc48e3ecc47bb67b20c8021cd6bd61a9674c8becc685619ea6542b03e67a46f53ecc7924ffbb998fec4c664b258aacaf8c16f71df7d93ae9098831b707c7f39fa337243e26333c6ee33b876edad4969063813bfefda6a17b62c2c1d6bb501ecfe411294e899e18bc04eba573fb8be6ad92c2b6b6be9c731a8a71d9a502cd95214b96e72897262f70590f52afc9fe01482d7aa81e10aa321d3b9b46c556210cc4f7870b32ab2103293443b2b5995236eb6a34a16e1674f092a1c3d4d57570e839109aba55ae9bc13d7dbc76e0e0d5a35316682647834a6b3a902003d730b821064eb0e75c823b810c7a942c3a086a7f346f00442b51baa456b2081a5b00a7d621deb97d9e91cdc76b6a68676f59ada04d6ff7e29e6e40ab59f73626f57ee85d86e9f65c592a46dfcabea23329e5cc40c4746662334b8a580b1ad09fb62d394d31f3b13de3cdcaee58e0296631609c1b2f2b254d08b6752236beccb7f4170bd292a526eca68f6d04df33f29d6617642b4ac7231b2d117407b7322fe5fc42ec6de908d3f561396094b100b417ae8018c6b26f25f1cad938b3ad668dfdf62158c821e649a8672ec14e0b0eed20075d7657798734dcde5588b8e57a9d720ec9b8c19c2969ad01c336d51d552d711fc30654d14ec29f378f5ab44223b9585fa32e7dd3583888667d59a0845422b142519d82c557802afb7f1aaab8f124f2fa8a427a3afabb49905474c7b247a0c9defd43db8b228d4d3f896f543bcca7802d08d7b6bcc330a5edbff247c65b9029cbe0ff45d411b9289c9ec932a832b5915600df402abe2bd9fbdedd718555d5ecf956b7c190b82a634cbfb8cc49976a2c00a5f56407680f0211846cf0530eb0e99ea178b549ef2113a32bf0fbab235ef673d06e595a0740581ae8bb03e3f3986b1b86ff9bfa000ff1fd4a7449ae39327b2f6673b879e99354180e159796d8edecc8cab7e92ba31238a60dc04ca0ddc0c3db576c364b8ab083666c7e34bdd120017d9aa056645ee0106b9e46416f8f2ec273dd6827a06825fb365daecb1d517669124db476ab5e00569910bf76dc2f9ae817736e527a5c52c2d62c7233df0ca3ea9c4cb12dd47fac196015450769862c764f4fe58cec15ecd2ebdb5aacd1f8439870f2bc2add24e97839381b3cd7e65f676a7402059484f905aad81fd5bd4c6effa9b07013bf3b02572ba67324238d7030ed912cd9904a25b9050a871426b1fed975ae5642c40f5aad60523fc6f78925a65876ff0f9f303b8a3dfa0bbbba4d6688ec401122ddc07973a39530c61eb4934e9844c4218fbb3df3cfb838dd39d7af73dbbb71a2d39f36ac1a9d305c466390e203d4ad5a8e529fb8c80302af80a36b26eb3f72b70d6ea5dda4ea642566edb72c545a08896f38445159cc32f75213a6cd429ca42a96d669f0d46f014c319b5f6c8a7b15d65cf50677756a5eca75c94f92458ddad7e9bf2931186ee567be6c7eb2a4450e5d573e1cadec96ea626c96f73c4945a4b6cbaeb51452469facd08b50933baf708f7315bd5ff582d8af810aa7a1c907f6d75d14bff484b572d8c6e24f5979ec3abb0e7a7492ab907e357bd4574f2e317ca80c1d876542646ec2e0de421bd24d651305f4a5485d62a9f61287b2f18747ccc3115858d819072cb3fe7feebc89cb904be1099a65427106b61bf4919ca5400654d9aa1e7ab37874826493f3a019d12f791ae2a14830878d836b074d2f838c99e749bf7632e4b90ebdd2efa9eef75998dcbe4dc6b0c65fee58190f58c2a343e602896f3a41abde05e130848ec623c6452e143a3a71fefa06a8251f881837425431896f2dac7545a6ff98468d2af9b1c416629a329fad86939338de7dec5d54ab62ac375e884c22e859e18b597b19b17d452ef1a9fb620111bcfe46f462e0f0162bdd836c5660a509a4cf2bf2cf15276a7123afe7861106f951e57accdba63b1a0f2aba93e4a7f0a7e7cb985aa68f03be58cdf8e073409d1130bb2466c31e9e783237ef7cee7078af81ec71ff1d65994d51581a6e03a038dcd9f06d6f887d09df4f76e350c61bc5a53a438c258f3dd229a6af0f6313753a8cab34637d795e6013e378758011aa605e850c90bda5a6828c29177539a42ce074c90b3968862f187c66ad37c16a55f715fd0cbc5de117777565bdb752f9f9d4ab3fc8d0086a81a57928cd4ad6451f2f465d0bb5f19bfce4ace2941927f5bf87f53793036d786a6c68c1851877d77a11bc0a80f00ac24655de0aaaf098b8448f1a3a6d9848ac07cddc142b88e27e6a734d43584db37eddf6c66310d3fae1b0bf7f7f7e0ece385cffff44305ce0ffe4f67ea7ce543d7110b488614d4768708b9253047eb2d493ec23ca8a07830d42b9d039e1cc1bc7a2629f1deb47f53f62615918208c9413b8256c70aa76080ee2b9131193bc4fc6d964a7b4edb9fb760c668a0b110e9acb53c0aa8a25b43674b587e3fd6d89868f5fc6b37319e82dbded844456610cbf8234ed7355ad81705d52bb59947338e9f5e251bf546d70379d13db5cbd31f1ae48f3312ddc5f1fdc2206627e570fd3cc80123ba12e840b6e8306ccaca2b15458e5851886cbe6a20a5c0cbebe35c8173ce264c1f349271f4bd93e375869c519d9c2ae162c686779d53234865a604acefc6e7c724cebe04e560ad168611b7252e065eac132385fd24e70603767bf07b5fb39b7fa110661ee72ec8e868899a7863c408ac5cc2734a8abcfa49373ec449fc82dfe556978e97ba17e7f43cb9d3"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}, @TCA_BASIC_POLICE={0x438, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0x200, 0x7, 0xfffffffd, 0xff, 0x70000000, 0x2, 0x8, 0xef8, 0xffffff2b, 0xfffffff8, 0x7, 0x7fff, 0x3a8c, 0x3, 0x4, 0x3, 0x0, 0x4, 0xd, 0x2, 0xc, 0x81, 0x5a26, 0x0, 0x7, 0x5, 0x3, 0x9, 0x2, 0x8, 0x3, 0x7, 0x90, 0x5, 0x4, 0x8, 0x0, 0x7c21, 0x9, 0x0, 0x566fbdea, 0xf1c, 0x5, 0x7, 0x9, 0xee, 0x2, 0xabdb, 0x1, 0x6, 0x34, 0x6, 0xe, 0xd6f8000, 0x6, 0xb, 0x6f, 0x1, 0xbac, 0x400, 0xfffffff7, 0x3, 0x2, 0xbf, 0xff, 0xc332, 0x10000, 0xfff, 0x2, 0xfffffffd, 0x5, 0x7000, 0x5, 0x5, 0xf3b, 0x4, 0x8, 0xff, 0x7, 0x4, 0x80000000, 0x9390, 0x45c846f7, 0x4a, 0x0, 0x4, 0x4, 0x81, 0x9, 0x40, 0xfff, 0x1, 0x6, 0x8000, 0x6, 0x4, 0x2, 0x0, 0x5, 0x2, 0x9, 0x8, 0x101, 0x8, 0x0, 0x6, 0x4, 0x5, 0x5, 0x9, 0x3, 0xffff, 0x0, 0x40, 0x1, 0x100, 0x7, 0x0, 0x9, 0x5, 0x7, 0x40, 0x100, 0xd, 0x5, 0xfc7, 0x1, 0x7, 0x6, 0xff, 0xfffffffc, 0x2, 0xfff, 0x2, 0x8, 0x100, 0x7, 0x9, 0x7fff, 0x40, 0x1, 0x0, 0x9, 0x2, 0xc, 0x6, 0x5, 0x5, 0x5, 0x6, 0x2, 0x3, 0x8, 0x1, 0x100, 0x8, 0x6, 0x6, 0x0, 0x7f, 0x1ff, 0x1a19, 0x9, 0xffffe000, 0x7, 0x1, 0x200, 0x9, 0xfffffffd, 0x2, 0x7, 0x3, 0x1, 0xaf, 0x40, 0x200, 0xd, 0x6, 0x7f, 0x3, 0x9484, 0x8, 0xfffffff7, 0x2, 0x0, 0x3, 0x800, 0x80008, 0xf, 0x9, 0x5, 0xffff8000, 0x8c32, 0x9, 0x6, 0xd, 0x101, 0x7, 0x7f, 0x10001, 0x4, 0xa303, 0x5, 0x1, 0x9, 0xffffffff, 0x2, 0x2, 0x4dd, 0xb8, 0x6, 0x2, 0xffffffd6, 0x8, 0x800, 0x4, 0x5, 0x4, 0x8, 0x8, 0x6, 0x12fb, 0x6, 0x7, 0xc000000, 0xfffff001, 0x400, 0xffff, 0x8, 0x4, 0x9, 0xfb, 0x7, 0x2a, 0x8, 0xffffffff, 0x2, 0x0, 0x3, 0xf2d8, 0x100, 0x3, 0x4, 0x6, 0x1, 0x7fffffff, 0xfffff801, 0x9, 0x840b, 0x0, 0xfffffffb, 0x5, 0xd, 0x100, 0x40]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x28b}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}]}]}}]}, 0x3d48}}, 0x24000000) socket$netlink(0x10, 0x3, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.706965201s ago: executing program 4 (id=4351): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00000002c0)=0x5f53, 0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000000240)=0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdab}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f0000000080)}, 0x20) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000340)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x5}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xd0, &(0x7f0000003e40)=""/208, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) 2.66784256s ago: executing program 1 (id=4352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3e}}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000140)={0x9d, 0xfd}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="030700006200190000000b0000000800030048"], 0x1c}}, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r4, &(0x7f0000000a00)=[{{&(0x7f00000004c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000f40)="a905000000007464000100000000000000e5c01104b61aa67bf2154694dfa033fe5312e4", 0x24}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0xc044) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000000)={0xf, 0x2, 0x6, 0x7f}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x18, 0x3c, 0x107, 0x400, 0x0, {0x4, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008800}, 0xc000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) syz_init_net_socket$llc(0x1a, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r7, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c0007800500"], 0x5c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a14a1d8c6900"}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYRESOCT=r0], 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) 2.5754895s ago: executing program 4 (id=4353): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @qdisc_kind_options=@q_codel={{0xa}, {0x2c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x4}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xfffffffc}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x1}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x9}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4085}, 0x50) r2 = socket(0x23, 0x80805, 0x0) listen(r2, 0x4) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x20}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c084}, 0xd0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96}, 0x42) accept4$tipc(r2, 0x0, 0x0, 0x0) 2.552219085s ago: executing program 1 (id=4354): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e21, 0xd, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0xfff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "b60700", "92304d7938e1be6d7bf2d307e420303c", "60157d5a", "2da272905f6fb87f"}, 0x28) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x6}, 0x4000) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000001040)) r2 = socket(0x10, 0x3, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000000c0)=""/90, &(0x7f0000000140)=0x5a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}, @TCA_GRED_PARMS={0x2b, 0x1, {0x1, 0x6, 0x37, 0x6, 0x80000001, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x0, 0x8bc, 0x6}}]}}]}, 0x170}}, 0x0) 1.158102232s ago: executing program 0 (id=4355): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) bind$tipc(r0, 0x0, 0x0) (async) close(0x4) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44008001) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) (rerun: 64) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x24, r4, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000041) (async, rerun: 64) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) (rerun: 64) getpid() (async) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r8, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000880)={0x344, r7, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x370}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffaaea}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x36}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1bde}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe0a}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb2b}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x144, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x37}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfe3f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2e}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xae32}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}]}, 0x344}, 0x1, 0x0, 0x0, 0x20000080}, 0x24008140) 1.108348475s ago: executing program 2 (id=4356): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)="1f", 0x1}], 0x1}}], 0x1, 0x3404c8d4) 1.099085311s ago: executing program 3 (id=4357): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x86) socket$inet6(0xa, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x4) socket$isdn_base(0x22, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x21, 0x2, 0x4) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESOCT, @ANYRES8], 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x4000004, &(0x7f0000000180)={0x11, 0x11, r5, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0xfffffe9a) r7 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r7, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) sendmmsg$inet6(r7, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)='y', 0x1}], 0x1}}], 0x1, 0x0) close(0xffffffffffffffff) 1.096011888s ago: executing program 1 (id=4358): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) bind$ax25(r0, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null]}, 0x48) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x80) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x3a) accept$ax25(r0, 0x0, 0x0) 985.263696ms ago: executing program 0 (id=4359): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000190000000100800e000f01"}}}]}, 0x48}}, 0x0) (async) write(r2, &(0x7f0000000500)="240000001e005f02141f00fffffffff801000000080000000000000008000902009ea5b1", 0x24) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) getpid() (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04c4de96f523043193ab103d3cb13ca6591f1c5e3cb7753600e59168048b032c32bcd0f35dc0050d19c94b8866d382dba31a63cbe2cb6cd955de8c79b79ff8fca2c0d5e54d1f44a4ee403e9c30f4a4b544a89e4a50cf61dc66c5c0fe894a476499ef38c3a936", 0xb1}], 0x1}, 0x4000040) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r10, &(0x7f0000004100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000003f40)=ANY=[@ANYBLOB="380000000102010300f7ffffff00000002000000240001800c000280050001000000000014000180080001007f0000010800020000050000"], 0x38}}, 0x0) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) (async) recvfrom(r7, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xfff3}}}, 0x24}}, 0x0) 932.317135ms ago: executing program 4 (id=4360): syz_emit_ethernet(0x3a, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x6071, 0x0, 0xe7, {[@eol]}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@random="688e1a78966f", @random="a60b5b94ec4b", @void, {@canfd={0xd, {{0x2}, 0x3, 0x1, 0x0, 0x0, "33f967a1bacaa48570244b1c0c5ada037069e695f255955f228835d2c6bfa1c50190e5f8dd46e304722a434e959183cf0c4ba5249172f81b2207c6e56b602907"}}}}, &(0x7f0000000080)={0x0, 0x1, [0x9f4, 0xe76, 0x492, 0xe95]}) 931.44791ms ago: executing program 1 (id=4361): sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x20, 0x0, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x28c, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x278, 0x1, [@m_ife={0x9c, 0xb, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x8, 0x1ff, 0x5}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x3f, 0x10000000, 0x10, 0x6}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x2e, 0x6, "ea24464decc1b2772ce0e9d802b5374a8d6638c9f5d62d73097ad328a4154dd4046c261a61dc99ee7003"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x8c, 0x0, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xc821}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xa4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}]}, {0x25, 0x6, "2333afee10ed3c43fd5155e83dc95911cc8d9efc4bece988a2422bf9bae26fd2f9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x8c, 0x5, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x4, 0x3, 0x87f7, 0x4}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0xd, 0x6, 0x3, 0x7fb}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x408, 0x6, 0x5, 0xfffffffb, 0x69e}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0xc0, 0x1a, 0x0, 0x0, {{0x7}, {0x4}, {0x95, 0x6, "8850292e248ac4bb2ecd95dd3a5619db7af347b0687f0683db3cd63dedd7f9c3a5bb3167ac124dd18979a62419a29316d507e2a0abf181e4f9d6dc416b94912a7bf866cd425975578de62756ee0750f95d36d65a7455ad211b57c0a58834d2a3f82c1047a48f1819b6518a7546d51880b75a71017c074b8911d439c5dcc5c150b0553275826241f36ff500bd0f0f78d4ac"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xc3}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x700, 0x8700, 0x5, 0x0, {{0xd, 0x4, 0x0, 0x3, 0x34, 0x64, 0x0, 0xff, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@cipso={0x86, 0x1e, 0x3, [{0x6, 0xd, "32ab7a5f4ddebff5375e97"}, {0x2, 0xb, "75702369d03062ca00"}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000001fc0)=@deltfilter={0x143c, 0x2d, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xfff3, 0x9}, {0xfff3, 0x2}, {0xfff3, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_cgroup={{0xb}, {0x13f4, 0x2, [@TCA_CGROUP_EMATCHES={0x13f0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xfa1f, 0x2, 0xd}, {0x40, 0x6, 0x2, "11e3ee8b310b"}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x901, 0x2, 0x7}, {0xff8a, 0x7, 0x1, "6ed6ca06eeb010"}}}, @TCF_EM_META={0x58, 0x1, 0x0, 0x0, {{0xe, 0x4, 0x800}, [@TCA_EM_META_RVALUE={0x24, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="b745e5", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="9e238b82c0e4", @TCF_META_TYPE_VAR="78a897a0f38dd0"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x3, 0x1}, {0xf661, 0x80, 0x2}}}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_VAR="de2e8d7fae38a7c38d16", @TCF_META_TYPE_VAR="2fae"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x93}, {0x6, 0x5}}}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x4}, {{0x0, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x6c, 0x2, 0x0, 0x0, {{0x7ff, 0x4, 0x8000}, [@TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="00d1a68aea862f", @TCF_META_TYPE_VAR="166655551963"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x9, 0x2}, {0x5, 0x2, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xc5, 0x1}, {0x9, 0x8, 0x2}}}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="8ae92193", @TCF_META_TYPE_VAR="5711b6779326e67921bf"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff6, 0xff, 0x2}, {0x20, 0x1, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6000, 0x70, 0x2}, {0x207, 0xf1, 0x2}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}, @TCA_EMATCH_TREE_LIST={0x1154, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xf4, 0x1, 0x0, 0x0, {{0x80, 0x0, 0x9}, "1ee2f3316d0d70d44754173c48117243e127b24bdeb266c7534b006218f001e34c666319c74d279d9802f689e1479f4d217c26cead8a4a7756ee9f6f5804293f56bd089d284460d62ac6396648a9b6900118c43f96983b8700d60da0cdaee11c44ecaa3cc2f385c9190b8725e4f44b87e6bd127f5e0caa0685ef59a9f1ffa9576a20f6e3fcb6b81a607f901b5e36f2fca589c99653ad095d354c90a69a1430f9ae976a82f54da38690adab7d70f7ea1aff17c116744e9695aa3a31ca11e6775028fea5556e3447ab194955ce81240f943090d5c5d2dabdacfb41a87920b0f20826839b82144ec8"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x5}, {0x400000, 0x8, 0x5, 0xffffffff}}}, @TCF_EM_IPT={0x1040, 0x1, 0x0, 0x0, {{0x4, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}]}, @TCA_EMATCH_TREE_LIST={0x15c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x7ff, 0x2, 0x79f}, {0x2, 0xa, 0xfde09d89179e38e0, "6fe9ba5695e5ecf254ef"}}}, @TCF_EM_IPT={0x13c, 0x3, 0x0, 0x0, {{0x2, 0x9, 0xff}, [@TCA_EM_IPT_MATCH_DATA={0xf1, 0x5, "aa310c76b579f2cddc17b38eb7ce0322793a531614c86966279f4779c8c91785e12ae0bb36211dafdee5f131cc7fbe0b25bca755a02e0822da6c92313c301612319ec0b442f17cdbbd8417c14ffbc5bfe9af013d9219999b4e82cc2f6a447f58d8c60a7447ab74639e91df6fe5552108b014147399faf75008db3dc4633baa42efc4520a8f0065ee6f789d93fe913a26c9ec5f28099626578c07301c0b197aba662ec0c2371351284e8818be4aa2dcb1085af45dd0f328532c7e3ea8fcb81580100bf40a28cee9c0399b8943de9116b6337087d277910e3f4e716848c737f038b35da854975a85a4deaad74980"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9c}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x495bc06c}]}, 0x143c}, 0x1, 0x0, 0x0, 0x4000804}, 0x20000008) 890.551477ms ago: executing program 2 (id=4362): syz_emit_ethernet(0x6a, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaa0008004503005cffff0000082f907800000000e8000001248062eb000000000005000110000800000086dd88a888be08000000105700000100000000000000080022eb0000000020000000020000000000000900000000080065581b00000012f65e440d0605b2294b530333e641b9f9c72e937ed80f44e2fe36efcd0600000000000000"], 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={0x24, r1, 0x200, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x4}, 0x94) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={@broadcast, @multicast2, 0x0}, &(0x7f0000000200)=0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000002aec000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) (async) accept4(r5, 0x0, 0x0, 0x0) (async) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)=ANY=[@ANYBLOB="200000001600010000000000000000000a000000f5f109cd25ca2a955e9006e6996d30b71885eadd5f1e5eedeec86242c2ec0ac66c70b6a30328e76d24e00004000000000000a55d66df62c34098c59b79355977f3e0e863b138", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00\x00\x00\x00\x00'], 0x20}}, 0x0) (async) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) readv(r6, &(0x7f0000000580)=[{&(0x7f0000000080)=""/196, 0xc4}], 0x1) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r8, 0x1, 0x0, 0x0, {{}, {0x0, 0x400b}, {0x8, 0x11, 0xffffffff}}}, 0x24}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r10, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004084}, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r11, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)={0x110, r13, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9c0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5056}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x18000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010101}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xc}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x31}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x18}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000081}, 0x4004800) 820.733103ms ago: executing program 4 (id=4363): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x114, r4, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x114}}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x5}, 0x6e) connect$unix(r0, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) 704.246635ms ago: executing program 2 (id=4364): r0 = epoll_create1(0x0) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x300, r0, &(0x7f0000000240)={0x30001010}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448dd, &(0x7f0000000240)={0x0, 0x0, "101000", 0x7f}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) (async) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x16, 0x9, 0x70bd27, 0x25dfdbfe, {0x6}, [@typed={0x8, 0xa, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x7c, 0x60, 0x0, 0x1}, {0x6}]}, 0x10) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1}, 0x0) 703.288005ms ago: executing program 1 (id=4365): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)=ANY=[@ANYBLOB="130000001900010000000000ffdbdf251d010900"], 0x24}, 0x1, 0x0, 0x0, 0x20048c04}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2008000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)={0x1e4, 0x1, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000001}, @CTA_EXPECT_MASK={0x5c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_TUPLE={0xc0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x2000c004}, 0x4008880) (rerun: 64) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "10c4e3257eaa66a5725a38cd58d26115453baa910be0"}]}]}]}]}], {0x14, 0x10}}, 0xd4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff9}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 664.828172ms ago: executing program 3 (id=4366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x2, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x17e}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0x58}}, 0x4000004) write$cgroup_devices(r1, &(0x7f0000000180)={'c', ' *:* ', 'rwm\x00'}, 0xa) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000400), r2) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0xffff0000, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x9, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x6739, 0x3}}}}]}, 0x78}}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x7f}, 0x50) ioctl$AUTOFS_IOC_PROTOSUBVER(r8, 0x80049367, &(0x7f0000000780)) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r10, 0x8, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff27, 0x0, 0x0}, 0x19) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f0000000800)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc}, @exit, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0xffffffffffffffff, 0x1}]}, &(0x7f0000000840)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48}, 0x94) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f0000000000)={r13, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r12, 0x107, 0x2, &(0x7f00000003c0)={r13, 0x1, 0x4, @remote}, 0x10) r14 = socket(0x400000000010, 0x3, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r16, {0xe, 0x4}, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x3ff, 0x7, 0x6, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)={0x24c, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r13}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x24c}, 0x1, 0x0, 0x0, 0x800}, 0x4000014) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x50}, 0x0) 543.4374ms ago: executing program 4 (id=4367): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="bcf178d7604ba92736facc0543ed8eef0a202ecbaf6f098c16ba479259064ea21bec5d9c5fd338daee30eced07c5acf6581c7006d8f7e4e856be891da5b4d100fb868f771d02b6ba74a975a20e0c94e2a8e0b3eec6caa245babadab272c4f557a24e5c05c131c14d19a7c9129cbe033c493831513e9a41e981c8c7c78ec05ed502d8b238115bb6bc6c78e6a11adb3eafb477e7c00600c5ac8a75ed175b3538e39976a8a2be537f0a48f9f27b819c1686b72520bd4b6ad7376da4fa00891e14e18adf16caf5ac15df969566e2aa921d35a2f1c6be8ff9502e909d191d18858d7a1b7722c0cfbe6b9079152031c6d66aad300ca5ccc340a97de5879d8cb9ef94cb6dca842a57ec029db3ca3debfceb84f82a24ed5ee2664fc4c90d76ca3dd1eed8", 0x120}, {&(0x7f0000000080)="edc2c2bb8a29eb64ce6044b0af8a64d88cdb8a0eb838e701950aa27a39b5e5dd8c497cc0df547d37863cf41284b05eb6c5cda9371186558b60cfa36a74a1fde51f83797844a241dd0c88d02b988b33c6b4201a22d94f8cb97a93055d091678d699cb8e85a131ff2cc509f5542cc41790b3d98388afb000912e53bedd4af58bedf17c8fa5649979b809d7779f9c8fc783d903d6fb3279e67bd8eb9d950185ac598c1330d745c019a924a6829afcb856ce71bfbe855d20f8ec65aeb437695be308df645967e478201f80234c9271c986f31447fbbdef1de8bc14c4d6494f6464fda215db9660adafb77dd71a91df4ecffa", 0xf0}], 0x2}, 0x811) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="bcf178d7604ba92736facc0543ed8eef0a202ecbaf6f098c16ba479259064ea21bec5d9c5fd338daee30eced07c5acf6581c7006d8f7e4e856be891da5b4d100fb868f771d02b6ba74a975a20e0c94e2a8e0b3eec6caa245babadab272c4f557a24e5c05c131c14d19a7c9129cbe033c493831513e9a41e981c8c7c78ec05ed502d8b238115bb6bc6c78e6a11adb3eafb477e7c00600c5ac8a75ed175b3538e39976a8a2be537f0a48f9f27b819c1686b72520bd4b6ad7376da4fa00891e14e18adf16caf5ac15df969566e2aa921d35a2f1c6be8ff9502e909d191d18858d7a1b7722c0cfbe6b9079152031c6d66aad300ca5ccc340a97de5879d8cb9ef94cb6dca842a57ec029db3ca3debfceb84f82a24ed5ee2664fc4c90d76ca3dd1eed8", 0x120}, {&(0x7f0000000080)="edc2c2bb8a29eb64ce6044b0af8a64d88cdb8a0eb838e701950aa27a39b5e5dd8c497cc0df547d37863cf41284b05eb6c5cda9371186558b60cfa36a74a1fde51f83797844a241dd0c88d02b988b33c6b4201a22d94f8cb97a93055d091678d699cb8e85a131ff2cc509f5542cc41790b3d98388afb000912e53bedd4af58bedf17c8fa5649979b809d7779f9c8fc783d903d6fb3279e67bd8eb9d950185ac598c1330d745c019a924a6829afcb856ce71bfbe855d20f8ec65aeb437695be308df645967e478201f80234c9271c986f31447fbbdef1de8bc14c4d6494f6464fda215db9660adafb77dd71a91df4ecffa", 0xf0}], 0x2}, 0x811) 351.936079ms ago: executing program 4 (id=4368): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)={0x44, r3, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xf7fffffe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20000804) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="64000000020605000000000000000000000049001400078008000800000000000800064000000000050001001b00000004000500020000000500040000000000090002009c5b7a310000000015000300686173683a6970"], 0x64}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x14}}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4840) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)={0x6fc, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0x682, 0x91, "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"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x6fc}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r8, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x808}, 0x14814) 322.539053ms ago: executing program 0 (id=4369): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x36, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) r2 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x52}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'erspan0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x20, 0x7, 0x400, 0x8, {{0x15, 0x4, 0x2, 0x20, 0x54, 0x66, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @local, {[@generic={0x88, 0xe, "3540794c7eace1c67085ea23"}, @lsrr={0x83, 0x1b, 0xb3, [@dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010101, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x14}]}, @ssrr={0x89, 0x17, 0x58, [@broadcast, @broadcast, @loopback, @private=0xa010100, @local]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@deltclass={0x48, 0x29, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xffe0, 0xa}, {0xfff2, 0xfff2}, {0xfff3, 0xc}}, [@tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4) 230.923259ms ago: executing program 3 (id=4370): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xfff) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @loopback}}, [0x7, 0x2, 0x925, 0xffffffff00000001, 0xc42, 0x200, 0x6e1, 0x2090c5d2, 0xffffffffffff77ae, 0x2, 0x4, 0x7, 0x100000001, 0x2, 0x9]}, &(0x7f00000000c0)=0x100) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 116.170148ms ago: executing program 0 (id=4371): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r1, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x5c, 0x433547ab64d46445, 0xb, 0x16, 0x48, 0x4, 0x18, 0x6c]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008075}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x1b4, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff37}]}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4046, @private0}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010101}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'nicvf0\x00'}}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0e70}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4bb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x778f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdeb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 0s ago: executing program 0 (id=4372): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fddbdf25010041000c00050025000000000000000c0002000000000000000000100007800c"], 0x3c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r8 = socket(0x3, 0x6, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x1000009}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f00000046c0)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x40000000, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) r11 = accept4(r10, 0x0, 0x0, 0x0) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r11) sendmsg$TIPC_NL_PUBL_GET(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0xfc, r12, 0x4, 0x70bd26, 0x25dfdc01, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x15}, 0x0) r13 = socket(0x15, 0x5, 0x0) getsockopt(r13, 0x200000000114, 0x271f, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb4, r4, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xde}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48890}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf251800000008000300", @ANYRES32=r14, @ANYBLOB="400030803c0001800800010000000000300003800cf5040002"], 0x5c}}, 0x20000000) kernel console output (not intermixed with test programs): n left with an inconsistent configuration, please check. [ 283.129555][T14933] netlink: 'syz.1.2561': attribute type 1 has an invalid length. [ 283.147211][T14933] netlink: 'syz.1.2561': attribute type 1 has an invalid length. [ 283.196018][T14944] netlink: 'syz.4.2563': attribute type 21 has an invalid length. [ 283.224007][T14933] 8021q: adding VLAN 0 to HW filter on device bond1 [ 283.232371][T14944] __nla_validate_parse: 23 callbacks suppressed [ 283.232382][T14944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2563'. [ 283.326868][T14950] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2564'. [ 283.396918][T14950] bond4: entered promiscuous mode [ 283.405184][T14950] bond4: entered allmulticast mode [ 283.413820][T14950] 8021q: adding VLAN 0 to HW filter on device bond4 [ 283.616814][T14970] netlink: 'syz.4.2572': attribute type 33 has an invalid length. [ 283.873562][T14993] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2581'. [ 283.883328][T14993] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 283.915152][T14993] netlink: 'syz.2.2581': attribute type 1 has an invalid length. [ 283.920350][T14997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2579'. [ 284.134149][T15006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2584'. [ 284.329312][T15021] netlink: 'syz.4.2587': attribute type 1 has an invalid length. [ 284.363866][T15021] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2587'. [ 284.375564][T15021] nbd: illegal input index 1048576 [ 284.421622][T15021] netlink: 'syz.4.2587': attribute type 1 has an invalid length. [ 284.534892][T15021] 8021q: adding VLAN 0 to HW filter on device bond5 [ 284.546256][T15024] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2587'. [ 284.550971][T15021] bond4: (slave bond5): making interface the new active one [ 284.565571][T15021] bond4: (slave bond5): Enslaving as an active interface with an up link [ 284.576220][T15024] bond4: entered promiscuous mode [ 284.583152][T15024] bond5: entered promiscuous mode [ 284.602034][T15024] bond4: entered allmulticast mode [ 284.627444][T15024] bond5: entered allmulticast mode [ 284.635754][T15024] 8021q: adding VLAN 0 to HW filter on device bond4 [ 284.710980][T15043] openvswitch: netlink: IPv6 tunnel dst address is zero [ 284.794467][T15051] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2598'. [ 284.897056][T15058] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2600'. [ 285.037005][T15065] syzkaller1: entered promiscuous mode [ 285.051981][T15065] syzkaller1: entered allmulticast mode [ 285.061925][T15064] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 285.404989][T15098] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2610'. [ 285.508662][T15098] netlink: 'syz.1.2610': attribute type 1 has an invalid length. [ 285.847961][T15117] TCP: TCP_TX_DELAY enabled [ 286.442452][T15137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.650121][ T55] block nbd0: Possible stuck request ffff888028607000: control (read@0,4096B). Runtime 60 seconds [ 286.908554][T15167] sctp_setsockopt_maxseg: 55 callbacks suppressed [ 286.908573][T15167] sctp: [Deprecated]: syz.4.2631 (pid 15167) Use of int in maxseg socket option. [ 286.908573][T15167] Use struct sctp_assoc_value instead [ 287.144057][T15180] syzkaller0: entered promiscuous mode [ 287.154607][T15180] syzkaller0: entered allmulticast mode [ 287.275814][T15196] netlink: 'syz.2.2641': attribute type 10 has an invalid length. [ 287.540304][T15190] infiniband syz1: set active [ 287.545098][T15190] infiniband syz1: added bond0 [ 287.631985][T15190] RDS/IB: syz1: added [ 287.636242][T15190] smc: adding ib device syz1 with port count 1 [ 287.642591][T15190] smc: ib device syz1 port 1 has pnetid [ 288.353319][T15232] __nla_validate_parse: 4 callbacks suppressed [ 288.353336][T15232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2648'. [ 288.358401][T15231] netlink: 'syz.0.2649': attribute type 11 has an invalid length. [ 288.383017][T15228] lo speed is unknown, defaulting to 1000 [ 288.392040][T15231] netlink: 'syz.0.2649': attribute type 11 has an invalid length. [ 288.418766][T15231] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2649'. [ 288.428484][T15236] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2650'. [ 288.437439][T15236] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2650'. [ 288.468942][T15241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2649'. [ 288.520488][T15240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2648'. [ 288.610966][T15245] veth0: entered promiscuous mode [ 288.661677][T15245] veth0: left promiscuous mode [ 288.953905][T15252] sit1: entered promiscuous mode [ 288.960326][T15252] sit1: entered allmulticast mode [ 289.116515][T15257] lo speed is unknown, defaulting to 1000 [ 289.128000][T15263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2655'. [ 289.488913][T15273] netlink: 'syz.0.2658': attribute type 1 has an invalid length. [ 289.539789][T15273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2658'. [ 289.594167][T15273] bond5: (slave gretap3): making interface the new active one [ 289.613433][T15273] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 289.688160][T15277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2658'. [ 289.720045][T15277] 8021q: adding VLAN 0 to HW filter on device bond5 [ 289.818799][T15228] syzkaller0 speed is unknown, defaulting to 1000 [ 289.913099][T15286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2662'. [ 290.274302][T15257] syzkaller0 speed is unknown, defaulting to 1000 [ 291.130382][T15342] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 291.421692][T15352] pim6reg1: entered promiscuous mode [ 291.468366][T15352] pim6reg1: entered allmulticast mode [ 292.213867][T14621] nci: nci_ntf_packet: unknown ntf opcode 0x206 [ 292.506187][T15398] sctp_setsockopt_maxburst: 23 callbacks suppressed [ 292.506207][T15398] sctp: [Deprecated]: syz.3.2694 (pid 15398) Use of int in max_burst socket option deprecated. [ 292.506207][T15398] Use struct sctp_assoc_value instead [ 292.710760][T15410] syzkaller0: entered promiscuous mode [ 292.716261][T15410] syzkaller0: entered allmulticast mode [ 293.071518][T15425] netlink: 'syz.4.2701': attribute type 21 has an invalid length. [ 293.114651][T15425] netlink: 'syz.4.2701': attribute type 4 has an invalid length. [ 293.134533][T15425] netlink: 'syz.4.2701': attribute type 5 has an invalid length. [ 293.190445][T15421] netlink: 'syz.0.2699': attribute type 16 has an invalid length. [ 293.219120][T15421] netlink: 'syz.0.2699': attribute type 17 has an invalid length. [ 293.268415][T15421] bond0: left allmulticast mode [ 293.280523][T15421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.311316][T15438] tipc: Enabled bearer , priority 0 [ 293.780873][T15471] can: request_module (can-proto-0) failed. [ 293.962660][T15492] __nla_validate_parse: 8 callbacks suppressed [ 293.962682][T15492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2720'. [ 294.094704][T15500] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 294.139633][T15504] 8021q: VLANs not supported on ip6_vti0 [ 294.329930][T15517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2725'. [ 294.351722][T15512] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2726'. [ 294.804132][T15555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2738'. [ 294.815113][ T5878] Bluetooth: hci4: command 0x0406 tx timeout [ 294.871701][T15557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2738'. [ 294.885342][T15559] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2739'. [ 294.906010][T15559] vlan2: entered allmulticast mode [ 294.911457][T15559] syz_tun: entered allmulticast mode [ 294.916730][T15560] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2736'. [ 294.990790][T15561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2739'. [ 295.002621][T15561] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2739'. [ 295.273992][T15563] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 295.546625][T15582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2747'. [ 295.637105][T14627] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 296.453431][T15600] openvswitch: netlink: Unknown nsh attribute 0 [ 296.499238][T15603] IPv6: sit1: Disabled Multicast RS [ 296.508544][T15600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.515136][T15603] sit1: entered allmulticast mode [ 296.598928][T15604] netlink: 'syz.0.2754': attribute type 1 has an invalid length. [ 296.618826][T15604] netlink: 'syz.0.2754': attribute type 2 has an invalid length. [ 296.655886][T15603] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 296.923859][T15641] netlink: 'syz.1.2765': attribute type 1 has an invalid length. [ 296.951284][T15641] netlink: 'syz.1.2765': attribute type 1 has an invalid length. [ 296.970241][T15641] netlink: 'syz.1.2765': attribute type 1 has an invalid length. [ 297.780037][T15700] IPVS: length: 200 != 8 [ 297.913745][T15708] netlink: 'syz.2.2792': attribute type 11 has an invalid length. [ 297.938123][T15708] netlink: 'syz.2.2792': attribute type 11 has an invalid length. [ 298.139461][T15720] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 298.540498][T15741] C: renamed from team_slave_0 [ 298.587652][T15741] validate_nla: 66 callbacks suppressed [ 298.587672][T15741] netlink: 'syz.4.2802': attribute type 1 has an invalid length. [ 298.618015][T15741] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 299.237374][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.253194][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.261582][ T5878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.271243][ T5878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.280918][ T5878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.321481][T15771] bond0: entered promiscuous mode [ 299.339382][T15756] lo speed is unknown, defaulting to 1000 [ 299.445492][T14617] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.464714][T15777] __nla_validate_parse: 22 callbacks suppressed [ 299.464733][T15777] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2812'. [ 299.479054][T14617] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.632877][T14617] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.651555][T14617] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.693692][T15782] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2814'. [ 299.782092][T14617] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.799153][T14617] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.851063][T15766] lo speed is unknown, defaulting to 1000 [ 299.922092][T14617] netdevsim netdevsim0 »»»»»» (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.945810][T14617] netdevsim netdevsim0 »»»»»» (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.063075][T15793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2818'. [ 300.260499][ T5957] hid-generic 0005:16C0:5505.0001: item fetching failed at offset 0/1 [ 300.278678][ T5957] hid-generic 0005:16C0:5505.0001: probe with driver hid-generic failed with error -22 [ 300.333267][T15805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2823'. [ 300.354635][T15805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2823'. [ 300.451765][T14617] tipc: Resetting bearer [ 300.521121][T15809] netlink: 'syz.4.2823': attribute type 1 has an invalid length. [ 300.762349][T15825] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2825'. [ 300.844265][T15828] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2825'. [ 300.864390][T15829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2827'. [ 300.878996][T15829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2827'. [ 300.990650][T14617] bond5 (unregistering): (slave gretap3): Releasing backup interface [ 301.009486][T14617] tipc: Disabling bearer [ 301.368260][ T5879] Bluetooth: hci3: command tx timeout [ 301.429094][T14617] bond0 (unregistering): Released all slaves [ 301.517254][T14617] bond1 (unregistering): Released all slaves [ 301.530890][T14617] bond2 (unregistering): Released all slaves [ 301.545255][T14617] bond3 (unregistering): Released all slaves [ 301.636963][T14617] bond4 (unregistering): Released all slaves [ 301.722069][T14617] bond5 (unregistering): Released all slaves [ 301.735328][T14617] bond6 (unregistering): Released all slaves [ 301.760973][T15756] syzkaller0 speed is unknown, defaulting to 1000 [ 301.782923][T15825] gretap0: entered promiscuous mode [ 301.792715][T15828] 0ªî{X¹¦: renamed from gretap0 [ 301.830238][T15828] 0ªî{X¹¦: left promiscuous mode [ 301.835303][T15828] 0ªî{X¹¦: entered allmulticast mode [ 301.864737][T15828] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 301.913836][T14617] tipc: Disabling bearer [ 301.999230][T14617] tipc: Left network mode [ 302.535360][T15766] syzkaller0 speed is unknown, defaulting to 1000 [ 302.819607][T15866] ieee802154 phy0 wpan0: encryption failed: -22 [ 302.903370][T15869] openvswitch: netlink: IPv4 tun info is not correct [ 303.048545][T15877] tipc: Enabled bearer , priority 0 [ 303.062107][T15877] syzkaller0: entered promiscuous mode [ 303.077803][T15877] syzkaller0: entered allmulticast mode [ 303.112414][T15877] tipc: Resetting bearer [ 303.185173][T15875] tipc: Resetting bearer [ 303.249893][T15875] tipc: Disabling bearer [ 303.379145][T15887] tipc: Enabled bearer , priority 0 [ 303.393924][T15887] syzkaller0: entered promiscuous mode [ 303.424894][T15887] syzkaller0: entered allmulticast mode [ 303.448067][ T5879] Bluetooth: hci3: command tx timeout [ 303.487296][T15905] netlink: 'syz.1.2848': attribute type 10 has an invalid length. [ 303.564312][T15911] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 303.643946][T15911] tipc: Resetting bearer [ 303.656112][T15916] netlink: 'syz.3.2851': attribute type 1 has an invalid length. [ 303.678366][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2851'. [ 303.716714][T15916] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 303.896390][T15916] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 304.151004][T15886] tipc: Resetting bearer [ 304.225912][T15886] tipc: Disabling bearer [ 304.362409][T15766] chnl_net:caif_netlink_parms(): no params data found [ 304.778476][T14617] hsr_slave_0: left promiscuous mode [ 304.802341][T14617] hsr_slave_1: left promiscuous mode [ 304.846371][T14617] veth1_macvtap: left promiscuous mode [ 304.852331][T14617] veth0_macvtap: left promiscuous mode [ 304.859328][T14617] veth1_vlan: left promiscuous mode [ 304.871516][T14617] veth0_vlan: left promiscuous mode [ 305.262387][T14617] pim6reg527 (unregistering): left allmulticast mode [ 305.386090][T15986] __nla_validate_parse: 5 callbacks suppressed [ 305.386108][T15986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2867'. [ 305.532514][ T5879] Bluetooth: hci3: command tx timeout [ 305.563468][T14617] vlan1 (unregistering): left allmulticast mode [ 305.573304][T14617] veth0_vlan (unregistering): left allmulticast mode [ 305.850016][ T8733] smc: removing ib device syz! [ 306.223421][T15984] tipc: Enabled bearer , priority 0 [ 306.247237][T15991] syzkaller0: entered promiscuous mode [ 306.257823][T15991] syzkaller0: entered allmulticast mode [ 306.293194][T15999] tipc: Resetting bearer [ 306.368879][T15766] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.382656][T15766] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.408426][T15766] bridge_slave_0: entered allmulticast mode [ 306.454198][T15766] bridge_slave_0: entered promiscuous mode [ 306.485117][T15999] tipc: Resetting bearer [ 306.562642][T15999] tipc: Disabling bearer [ 306.590548][T15766] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.616298][T15766] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.632303][T15766] bridge_slave_1: entered allmulticast mode [ 306.749040][T15766] bridge_slave_1: entered promiscuous mode [ 306.758976][T16025] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2875'. [ 306.932716][T16034] netlink: 'syz.1.2875': attribute type 13 has an invalid length. [ 307.142016][T16034] tipc: Resetting bearer [ 307.171359][T16040] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2877'. [ 307.207824][T16034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.335017][T15766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.420303][T15766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.607677][ T5879] Bluetooth: hci3: command tx timeout [ 307.765397][T16065] netlink: 'syz.1.2884': attribute type 29 has an invalid length. [ 307.788682][T16065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2884'. [ 307.838905][T16065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2884'. [ 307.853890][T15766] team0: Port device team_slave_0 added [ 307.880943][T15766] team0: Port device team_slave_1 added [ 308.011542][T16078] netlink: 'syz.4.2888': attribute type 1 has an invalid length. [ 308.026541][T16078] netlink: 'syz.4.2888': attribute type 2 has an invalid length. [ 308.050980][T16070] tipc: Enabled bearer , priority 0 [ 308.073087][T16072] syzkaller0: entered promiscuous mode [ 308.087140][T16082] netlink: 'syz.1.2889': attribute type 1 has an invalid length. [ 308.101281][T16072] syzkaller0: entered allmulticast mode [ 308.123551][T15766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.169906][T15766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.199448][T15766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.255146][T15766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.276008][T15766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.358498][T15766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.385039][T16072] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 308.449059][T16091] tipc: Resetting bearer [ 308.576056][T16069] tipc: Resetting bearer [ 308.614342][T16069] tipc: Disabling bearer [ 308.642068][T14617] IPVS: stop unused estimator thread 0... [ 308.660460][T15766] hsr_slave_0: entered promiscuous mode [ 308.667075][T15766] hsr_slave_1: entered promiscuous mode [ 308.685818][T15766] debugfs: 'hsr0' already exists in 'hsr' [ 308.693975][T15766] Cannot create hsr debugfs directory [ 309.069175][T16122] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2899'. [ 309.470699][T16140] netlink: 'syz.3.2903': attribute type 1 has an invalid length. [ 309.488745][T16140] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2903'. [ 309.508953][T16140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2903'. [ 309.871740][T16158] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2908'. [ 309.963549][T16160] netlink: 'syz.1.2909': attribute type 1 has an invalid length. [ 310.037453][T15766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 310.065141][T15766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 310.081375][T15766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 310.097213][T15766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 310.254371][T16182] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2914'. [ 310.278755][T16182] hsr_slave_0: left promiscuous mode [ 310.388835][T16188] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.2916'. [ 310.440696][T15766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.481846][T15766] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.511089][T14622] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.518280][T14622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.536322][T16193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2918'. [ 310.560200][T14622] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.567370][T14622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.577428][T16195] netlink: 'syz.2.2917': attribute type 1 has an invalid length. [ 310.612460][T16195] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2917'. [ 310.634527][T16195] netlink: 'syz.2.2917': attribute type 1 has an invalid length. [ 310.722304][T16201] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 310.794864][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2920'. [ 310.836252][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2920'. [ 310.979920][T16218] ipvlan4: entered promiscuous mode [ 311.166154][T15766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.270495][T16227] syzkaller0: entered promiscuous mode [ 311.276068][T16227] syzkaller0: entered allmulticast mode [ 311.305872][T16231] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2928'. [ 311.426189][T16239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2930'. [ 312.736484][T16231] veth7: entered allmulticast mode [ 312.816723][T16250] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2931'. [ 312.841346][T16250] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2931'. [ 312.879930][T15766] veth0_vlan: entered promiscuous mode [ 312.888566][T16250] netlink: 'syz.3.2931': attribute type 5 has an invalid length. [ 312.897282][T15766] veth1_vlan: entered promiscuous mode [ 312.938248][T16250] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2931'. [ 312.987211][T15766] veth0_macvtap: entered promiscuous mode [ 313.042982][T15766] veth1_macvtap: entered promiscuous mode [ 313.120708][T16270] netlink: 'syz.2.2935': attribute type 7 has an invalid length. [ 313.143262][T16270] netlink: 'syz.2.2935': attribute type 8 has an invalid length. [ 313.173169][T15766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.222375][T15766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.268686][ T8733] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.328881][ T8733] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.383995][ T8733] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.402411][ T8733] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.556824][T14617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.591018][T14617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.815994][ T8733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.861595][ T8733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.885391][T16296] ipvlan2: entered promiscuous mode [ 314.469325][T16331] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 314.892931][ T5878] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 314.912367][ T5878] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 314.921467][ T5878] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 314.934877][ T5878] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 314.943309][ T5878] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 315.256756][T16359] lo speed is unknown, defaulting to 1000 [ 315.301933][T16387] netlink: ct family unspecified [ 315.319238][T16387] openvswitch: netlink: Actions may not be safe on all matching packets [ 315.741040][T16415] openvswitch: netlink: Missing key (keys=40, expected=100) [ 315.781296][T16417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.832064][T16417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.866946][T16417] bond2: (slave gretap1): Releasing active interface [ 315.886642][T16408] syzkaller1: entered promiscuous mode [ 315.892368][T16408] syzkaller1: entered allmulticast mode [ 316.314803][T16431] __nla_validate_parse: 10 callbacks suppressed [ 316.314822][T16431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2982'. [ 316.358169][T16431] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2982'. [ 316.372939][T16433] netlink: 'syz.1.2982': attribute type 1 has an invalid length. [ 316.524890][T16441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2982'. [ 316.644318][T16449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2986'. [ 316.658355][T16451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2986'. [ 316.692332][T16431] 8021q: adding VLAN 0 to HW filter on device bond3 [ 316.702034][T16431] bond2: (slave bond3): making interface the new active one [ 316.710799][T16431] bond2: (slave bond3): Enslaving as an active interface with an up link [ 316.729637][ T55] block nbd0: Possible stuck request ffff888028607000: control (read@0,4096B). Runtime 90 seconds [ 316.742999][T16441] bond2: entered promiscuous mode [ 316.748497][T16441] bond3: entered promiscuous mode [ 316.753751][T16441] bond2: entered allmulticast mode [ 316.759690][T16441] bond3: entered allmulticast mode [ 316.765855][T16441] 8021q: adding VLAN 0 to HW filter on device bond2 [ 316.934957][T16467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2989'. [ 316.945977][T16472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2989'. [ 316.961270][T16472] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2989'. [ 316.962123][T16440] syzkaller0: entered promiscuous mode [ 316.971701][T16472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2989'. [ 316.977258][T16440] syzkaller0: entered allmulticast mode [ 317.048254][ T5879] Bluetooth: hci5: command tx timeout [ 317.112719][T16476] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2990'. [ 317.371918][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 317.383677][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.392788][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.453112][T16481] openvswitch: netlink: Key type 35 is out of range max 32 [ 318.465273][T16476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.476530][T16476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.487970][T16476] bond0 (unregistering): Released all slaves [ 318.784414][T16359] chnl_net:caif_netlink_parms(): no params data found [ 319.127610][ T5879] Bluetooth: hci5: command 0x041b tx timeout [ 319.176791][T16359] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.185748][T16359] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.196839][T16359] bridge_slave_0: entered allmulticast mode [ 319.204679][T16359] bridge_slave_0: entered promiscuous mode [ 319.220148][T16359] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.227542][T16359] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.234766][T16359] bridge_slave_1: entered allmulticast mode [ 319.243303][T16359] bridge_slave_1: entered promiscuous mode [ 319.269215][T16518] tap0: tun_chr_ioctl cmd 1074025676 [ 319.275728][T16518] tap0: owner set to 0 [ 319.351734][T16359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.365583][T16359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.430982][T16359] team0: Port device team_slave_0 added [ 319.444615][T16359] team0: Port device team_slave_1 added [ 319.488242][T16359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.495640][T16359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.522929][T16359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.566245][T16359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.574071][T16359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.601835][T16359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.711754][T16359] hsr_slave_0: entered promiscuous mode [ 319.718557][T16359] hsr_slave_1: entered promiscuous mode [ 319.724645][T16359] debugfs: 'hsr0' already exists in 'hsr' [ 319.731161][T16359] Cannot create hsr debugfs directory [ 320.215014][T16359] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 320.293528][T16359] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 320.343755][T16558] tipc: Started in network mode [ 320.353694][T16558] tipc: Node identity , cluster identity 4711 [ 320.360341][T16558] tipc: Failed to set node id, please configure manually [ 320.367409][T16558] tipc: Enabling of bearer rejected, failed to enable media [ 320.384359][T16359] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 320.416998][T16359] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 320.673198][T16589] netlink: 'syz.2.3019': attribute type 21 has an invalid length. [ 320.764766][T16564] bond4 (unregistering): Released all slaves [ 320.982894][T16359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.091883][T16359] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.193696][T14620] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.200896][T14620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.213662][ T5878] Bluetooth: hci5: command 0x041b tx timeout [ 321.259961][T14620] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.267155][T14620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.379855][T16618] __nla_validate_parse: 39 callbacks suppressed [ 321.379874][T16618] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3029'. [ 321.414516][T16620] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3030'. [ 321.440837][T16623] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3029'. [ 321.478677][T16624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3031'. [ 321.624143][T16633] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3033'. [ 321.659475][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3032'. [ 321.832635][T16359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.989270][T16660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3039'. [ 322.004578][T16662] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3040'. [ 322.021061][T16662] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3040'. [ 322.030450][T16662] netlink: 'syz.3.3040': attribute type 6 has an invalid length. [ 322.040789][T16662] netlink: 'syz.3.3040': attribute type 5 has an invalid length. [ 322.049267][T16662] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3040'. [ 322.445925][T16683] IPVS: length: 8 != 1152 [ 322.512250][T16359] veth0_vlan: entered promiscuous mode [ 322.549346][T16359] veth1_vlan: entered promiscuous mode [ 322.617171][T16359] veth0_macvtap: entered promiscuous mode [ 322.652676][T16359] veth1_macvtap: entered promiscuous mode [ 322.700517][T16359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.736052][T16359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.764111][T14622] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.791775][T16698] tipc: Started in network mode [ 322.809671][T16698] tipc: Node identity 06f834ba7de7, cluster identity 4711 [ 322.818385][T16698] tipc: Enabled bearer , priority 0 [ 322.846875][T14622] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.869055][T14622] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.908772][T16698] syzkaller0: entered promiscuous mode [ 322.914280][T16698] syzkaller0: entered allmulticast mode [ 322.922451][T14622] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.974090][T16698] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 323.073716][T16698] tipc: Resetting bearer [ 323.112285][T16710] mac80211_hwsim hwsim7 ÿ: renamed from wlan1 (while UP) [ 323.150875][T16697] tipc: Resetting bearer [ 323.180380][T16697] tipc: Disabling bearer [ 323.200394][T14622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.215470][T14622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.251489][T16720] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 323.297819][ T5878] Bluetooth: hci5: command 0x041b tx timeout [ 323.314140][T14620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.386680][T14620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.660338][T16743] netlink: 'syz.0.3059': attribute type 1 has an invalid length. [ 323.953759][ T5935] hid-generic 0005:16C0:5505.0002: item fetching failed at offset 0/1 [ 323.965848][ T5935] hid-generic 0005:16C0:5505.0002: probe with driver hid-generic failed with error -22 [ 323.980297][T16756] netlink: 'syz.3.3065': attribute type 1 has an invalid length. [ 324.060753][T16761] netlink: 'syz.0.3067': attribute type 1 has an invalid length. [ 324.451940][ T5879] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 324.462364][ T5879] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 324.470740][ T5879] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 324.481801][ T5879] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 324.491619][ T5879] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 324.709099][T16779] lo speed is unknown, defaulting to 1000 [ 325.034741][T16800] 8021q: adding VLAN 0 to HW filter on device bond4 [ 325.126171][T16803] 8021q: adding VLAN 0 to HW filter on device bond4 [ 325.134535][T16803] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 325.146080][T16803] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 325.165257][T16815] netlink: 'syz.3.3078': attribute type 2 has an invalid length. [ 325.367724][ T5879] Bluetooth: hci5: command 0x041b tx timeout [ 325.395843][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.447933][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.478510][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.487297][T14616] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.800732][T16844] netlink: 'syz.0.3088': attribute type 3 has an invalid length. [ 326.077848][T16862] netlink: 'syz.4.3093': attribute type 5 has an invalid length. [ 326.190291][T16779] chnl_net:caif_netlink_parms(): no params data found [ 326.351131][T16872] netlink: 'syz.1.3096': attribute type 11 has an invalid length. [ 326.397057][T16881] netlink: 'syz.4.3098': attribute type 1 has an invalid length. [ 326.570273][ T5879] Bluetooth: hci0: command tx timeout [ 326.604987][T16779] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.613237][T16779] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.639913][T16779] bridge_slave_0: entered allmulticast mode [ 326.648676][T16779] bridge_slave_0: entered promiscuous mode [ 326.657764][T16779] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.664981][T16779] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.672310][T16779] bridge_slave_1: entered allmulticast mode [ 326.683775][T16779] bridge_slave_1: entered promiscuous mode [ 326.721459][T16887] __nla_validate_parse: 27 callbacks suppressed [ 326.721477][T16887] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3100'. [ 326.744799][T16887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3100'. [ 326.754153][T16779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.757407][T16779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.855632][T16779] team0: Port device team_slave_0 added [ 326.869400][T16779] team0: Port device team_slave_1 added [ 326.944943][T16894] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}zë' [ 326.956276][T16894] CPU: 0 UID: 0 PID: 16894 Comm: syz.3.3103 Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 326.956300][T16894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.956321][T16894] Call Trace: [ 326.956326][T16894] [ 326.956331][T16894] dump_stack_lvl+0x189/0x250 [ 326.956351][T16894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.956363][T16894] ? __pfx__printk+0x10/0x10 [ 326.956381][T16894] ? kernfs_path_from_node+0x2f/0x290 [ 326.956394][T16894] ? kernfs_path_from_node+0x250/0x290 [ 326.956403][T16894] ? kernfs_path_from_node+0x2f/0x290 [ 326.956415][T16894] sysfs_warn_dup+0x8e/0xa0 [ 326.956426][T16894] sysfs_do_create_link_sd+0xc0/0x110 [ 326.956438][T16894] device_add_class_symlinks+0x1cf/0x240 [ 326.956450][T16894] device_add+0x475/0xb50 [ 326.956462][T16894] wiphy_register+0x1ba6/0x28d0 [ 326.956486][T16894] ? __pfx_wiphy_register+0x10/0x10 [ 326.956498][T16894] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 326.956513][T16894] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 326.956531][T16894] ieee80211_register_hw+0x3425/0x4080 [ 326.956551][T16894] ? ieee80211_register_hw+0x1451/0x4080 [ 326.956566][T16894] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 326.956578][T16894] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 326.956594][T16894] ? __hrtimer_setup+0x187/0x210 [ 326.956603][T16894] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 326.956628][T16894] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 326.956659][T16894] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 326.956670][T16894] ? trace_kmalloc+0x1f/0xd0 [ 326.956682][T16894] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 326.956695][T16894] ? kstrndup+0xbf/0x160 [ 326.956711][T16894] hwsim_new_radio_nl+0xea4/0x1b10 [ 326.956724][T16894] ? __pfx___nla_validate_parse+0x10/0x10 [ 326.956746][T16894] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 326.956765][T16894] ? __nla_parse+0x40/0x60 [ 326.956788][T16894] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 326.956806][T16894] genl_family_rcv_msg_doit+0x215/0x300 [ 326.956821][T16894] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 326.956839][T16894] ? bpf_lsm_capable+0x9/0x20 [ 326.956853][T16894] ? security_capable+0x7e/0x2e0 [ 326.956870][T16894] genl_rcv_msg+0x60e/0x790 [ 326.956885][T16894] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.956894][T16894] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 326.956914][T16894] netlink_rcv_skb+0x208/0x470 [ 326.956926][T16894] ? __lock_acquire+0xab9/0xd20 [ 326.956939][T16894] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.956951][T16894] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 326.956975][T16894] ? down_read+0x1ad/0x2e0 [ 326.956990][T16894] genl_rcv+0x28/0x40 [ 326.956999][T16894] netlink_unicast+0x82c/0x9e0 [ 326.957016][T16894] ? __pfx_netlink_unicast+0x10/0x10 [ 326.957035][T16894] ? netlink_sendmsg+0x642/0xb30 [ 326.957047][T16894] ? skb_put+0x11b/0x210 [ 326.957058][T16894] netlink_sendmsg+0x805/0xb30 [ 326.957078][T16894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.957093][T16894] ? aa_sock_msg_perm+0xf1/0x1d0 [ 326.957110][T16894] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 326.957120][T16894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.957134][T16894] __sock_sendmsg+0x219/0x270 [ 326.957148][T16894] ____sys_sendmsg+0x505/0x830 [ 326.957161][T16894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.957176][T16894] ? import_iovec+0x74/0xa0 [ 326.957190][T16894] ___sys_sendmsg+0x21f/0x2a0 [ 326.957201][T16894] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.957233][T16894] ? __fget_files+0x2a/0x420 [ 326.957241][T16894] ? __fget_files+0x3a0/0x420 [ 326.957262][T16894] __x64_sys_sendmsg+0x19b/0x260 [ 326.957281][T16894] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 326.957308][T16894] ? rcu_is_watching+0x15/0xb0 [ 326.957331][T16894] ? do_syscall_64+0xbe/0x3b0 [ 326.957355][T16894] do_syscall_64+0xfa/0x3b0 [ 326.957368][T16894] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.957381][T16894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.957391][T16894] ? clear_bhb_loop+0x60/0xb0 [ 326.957403][T16894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.957412][T16894] RIP: 0033:0x7f0f5078ebe9 [ 326.957422][T16894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.957430][T16894] RSP: 002b:00007f0f51519038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.957442][T16894] RAX: ffffffffffffffda RBX: 00007f0f509b5fa0 RCX: 00007f0f5078ebe9 [ 326.957449][T16894] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 326.957454][T16894] RBP: 00007f0f50811e19 R08: 0000000000000000 R09: 0000000000000000 [ 326.957462][T16894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.957472][T16894] R13: 00007f0f509b6038 R14: 00007f0f509b5fa0 R15: 00007ffe5fa38708 [ 326.957501][T16894] [ 327.463585][T16902] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3105'. [ 327.533974][T16779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.541087][T16779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.568535][T16779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.605844][T16779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.627007][T16779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.653526][T16779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.776226][T16779] hsr_slave_0: entered promiscuous mode [ 327.784640][T16779] hsr_slave_1: entered promiscuous mode [ 327.793158][T16779] debugfs: 'hsr0' already exists in 'hsr' [ 327.799435][T16779] Cannot create hsr debugfs directory [ 327.880500][T16915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3111'. [ 327.892198][T16915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3111'. [ 327.929735][T16919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3111'. [ 327.941726][T16919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3111'. [ 328.186550][T16779] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 328.272088][T16939] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3116'. [ 328.304567][T16939] validate_nla: 1 callbacks suppressed [ 328.304586][T16939] netlink: 'syz.1.3116': attribute type 1 has an invalid length. [ 328.320077][T16939] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3116'. [ 328.322657][T16779] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 328.340146][T16944] netlink: zone id is out of range [ 328.340161][T16944] netlink: zone id is out of range [ 328.340171][T16944] netlink: zone id is out of range [ 328.340179][T16944] netlink: zone id is out of range [ 328.340188][T16944] netlink: zone id is out of range [ 328.340195][T16944] netlink: zone id is out of range [ 328.340204][T16944] netlink: zone id is out of range [ 328.340214][T16944] netlink: zone id is out of range [ 328.340222][T16944] netlink: zone id is out of range [ 328.340231][T16944] netlink: zone id is out of range [ 328.406052][T16943] sit0: entered promiscuous mode [ 328.411615][T16943] netlink: 'syz.3.3118': attribute type 1 has an invalid length. [ 328.420704][T16943] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3118'. [ 328.458880][T16779] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 328.542823][T16950] tipc: Enabling of bearer rejected, media not registered [ 328.562720][T16779] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 328.580306][T16952] tipc: Enabled bearer , priority 0 [ 328.592546][T16950] tipc: Enabling of bearer rejected, media not registered [ 328.626401][T16951] tipc: Resetting bearer [ 328.641717][T16949] tipc: Disabling bearer [ 328.649465][ T5879] Bluetooth: hci0: command tx timeout [ 328.786169][T16779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 328.798993][T16779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 328.816598][T16779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 328.850972][T16779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 329.055675][T16779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.098808][T16779] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.180500][T14619] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.187717][T14619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.238232][T14619] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.245430][T14619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.822152][T17026] gre2: entered promiscuous mode [ 329.827141][T17026] gre2: entered allmulticast mode [ 329.859054][T17028] Bluetooth: MGMT ver 1.23 [ 330.024988][T16779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.196641][T16779] veth0_vlan: entered promiscuous mode [ 330.220307][T16779] veth1_vlan: entered promiscuous mode [ 330.331035][T16779] veth0_macvtap: entered promiscuous mode [ 330.343926][T17058] netlink: 'syz.3.3147': attribute type 6 has an invalid length. [ 330.348576][T16779] veth1_macvtap: entered promiscuous mode [ 330.373299][T17058] netlink: 'syz.3.3147': attribute type 6 has an invalid length. [ 330.415162][T16779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.449568][T16779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.474268][ T8733] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.500010][ T8733] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.527163][ T8733] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.555442][ T8733] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.715701][T17082] syzkaller1: entered promiscuous mode [ 330.721888][T17082] syzkaller1: entered allmulticast mode [ 330.729851][ T5879] Bluetooth: hci0: command tx timeout [ 330.753047][T17085] bond5: entered promiscuous mode [ 330.758428][T17085] bond5: entered allmulticast mode [ 330.763895][T17085] 8021q: adding VLAN 0 to HW filter on device bond5 [ 331.236107][ T8733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.266469][ T8733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.345229][ T8733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.364576][ T8733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.373218][T17102] bridge_slave_0: left allmulticast mode [ 331.383271][T17102] bridge_slave_0: left promiscuous mode [ 331.391575][T17102] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.409954][T17102] bridge_slave_1: left allmulticast mode [ 331.415713][T17102] bridge_slave_1: left promiscuous mode [ 331.421746][T17102] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.442504][T17102] team0: Port device team_slave_0 removed [ 331.453732][T17102] team0: Port device team_slave_1 removed [ 331.462090][T17102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.472268][T17102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.482094][T17102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.490297][T17102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.702545][T17118] netlink: 'syz.0.3163': attribute type 1 has an invalid length. [ 332.000989][T17127] __nla_validate_parse: 7 callbacks suppressed [ 332.001007][T17127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3167'. [ 332.190630][T17134] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3170'. [ 332.306446][T17138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3171'. [ 332.488620][T17151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3174'. [ 332.643696][ T5878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 332.654052][ T5878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 332.662017][T17161] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3175'. [ 332.684670][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 332.693872][T17161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3175'. [ 332.699615][T17165] netlink: 'syz.4.3178': attribute type 1 has an invalid length. [ 332.744474][T17165] netlink: 'syz.4.3178': attribute type 1 has an invalid length. [ 332.752716][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 332.767916][ T10] IPVS: starting estimator thread 0... [ 332.773628][ T5878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.807931][ T5878] Bluetooth: hci0: command tx timeout [ 332.859857][T17169] IPVS: using max 40 ests per chain, 96000 per kthread [ 333.102952][T17160] lo speed is unknown, defaulting to 1000 [ 333.150708][T17183] netlink: 'syz.1.3183': attribute type 10 has an invalid length. [ 333.158728][T17183] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3183'. [ 333.252953][T17189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3184'. [ 333.314483][T17195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3184'. [ 333.542348][T17201] netlink: 159784 bytes leftover after parsing attributes in process `syz.0.3188'. [ 333.616928][T17206] netlink: 'syz.4.3189': attribute type 9 has an invalid length. [ 333.916900][T17214] netlink: 'syz.4.3193': attribute type 2 has an invalid length. [ 333.924897][T17214] netlink: 'syz.4.3193': attribute type 1 has an invalid length. [ 334.075491][T17230] vlan0: entered promiscuous mode [ 334.100289][T17230] team0: Port device vlan0 added [ 334.464305][T17160] chnl_net:caif_netlink_parms(): no params data found [ 334.673947][T17160] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.690662][T17160] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.704306][T17160] bridge_slave_0: entered allmulticast mode [ 334.712187][T17160] bridge_slave_0: entered promiscuous mode [ 334.721203][T17262] tipc: Started in network mode [ 334.726079][T17262] tipc: Node identity 7f000001, cluster identity 4711 [ 334.736656][T17262] net_ratelimit: 18 callbacks suppressed [ 334.736672][T17262] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 334.752986][T17262] tipc: Enabled bearer , priority 10 [ 334.774467][T17262] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 334.785360][T17262] tipc: Enabled bearer , priority 10 [ 334.795189][T17160] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.809161][ T5879] Bluetooth: hci1: command tx timeout [ 334.832005][T17160] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.863223][T17160] bridge_slave_1: entered allmulticast mode [ 334.869797][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 334.870116][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 334.903450][T17160] bridge_slave_1: entered promiscuous mode [ 335.007809][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 335.015222][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 335.086682][T17160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.109708][T17160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.147827][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 335.155008][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 335.185642][T17276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.234322][T17276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.285506][T17160] team0: Port device team_slave_0 added [ 335.296037][T17160] team0: Port device team_slave_1 added [ 335.306722][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 335.306885][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 335.371101][T17283] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 335.540384][T17160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.557674][T17160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.589557][T17160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.620636][T17160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.646614][T17160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.703795][T17160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.735949][T17296] netlink: 'syz.0.3227': attribute type 37 has an invalid length. [ 335.867693][ T6075] tipc: Node number set to 2130706433 [ 335.985685][T17160] hsr_slave_0: entered promiscuous mode [ 336.014769][T17160] hsr_slave_1: entered promiscuous mode [ 336.032112][T17160] debugfs: 'hsr0' already exists in 'hsr' [ 336.059322][T17160] Cannot create hsr debugfs directory [ 336.523502][T17160] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.675945][T17160] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.770876][T17160] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.876542][T17160] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.899399][ T5879] Bluetooth: hci1: command tx timeout [ 337.217535][T14617] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.412338][T17160] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 337.480339][T17160] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 337.566752][T17160] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 337.646570][T17388] 8021q: VLANs not supported on wg0 [ 337.669752][T17160] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 337.746008][T17394] sit1: entered promiscuous mode [ 337.837809][T17394] sit1: entered allmulticast mode [ 337.879986][T17403] netlink: 'syz.1.3260': attribute type 1 has an invalid length. [ 337.990824][T17403] 8021q: adding VLAN 0 to HW filter on device bond6 [ 338.056057][T17409] bond6: (slave veth9): Enslaving as an active interface with a down link [ 338.137368][T17399] bond6: (slave veth0_to_bond): making interface the new active one [ 338.148046][T17399] veth0_to_bond: entered promiscuous mode [ 338.155073][T17399] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 338.184282][T17403] bond6: (slave veth11): Enslaving as an active interface with a down link [ 338.201472][T17420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.213581][T17420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.364197][T17433] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.525280][T17439] __nla_validate_parse: 7 callbacks suppressed [ 338.525297][T17439] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3270'. [ 338.553564][T17160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.605862][T17160] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.619391][T17448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3272'. [ 338.675540][T14617] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.683026][T14617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.724233][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.731481][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.967984][ T5879] Bluetooth: hci1: command tx timeout [ 339.270624][T17160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.288926][T17480] tipc: Enabled bearer , priority 0 [ 339.303332][T17480] syzkaller0: entered promiscuous mode [ 339.311165][T17480] syzkaller0: entered allmulticast mode [ 339.356871][T17480] tipc: Resetting bearer [ 339.373791][T17480] netlink: 356 bytes leftover after parsing attributes in process `syz.0.3280'. [ 339.421500][T17479] tipc: Resetting bearer [ 339.454167][T17479] tipc: Disabling bearer [ 339.504942][T17160] veth0_vlan: entered promiscuous mode [ 339.572890][T17160] veth1_vlan: entered promiscuous mode [ 339.596436][T17492] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3284'. [ 339.619622][T17492] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3284'. [ 339.631519][T17493] netlink: 'syz.2.3283': attribute type 2 has an invalid length. [ 339.696250][T17160] veth0_macvtap: entered promiscuous mode [ 339.698938][T17496] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3283'. [ 339.711032][T17160] veth1_macvtap: entered promiscuous mode [ 339.765980][T17160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.816796][T17160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.846143][T17502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3289'. [ 339.863201][T14622] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.870544][T17502] netlink: 'syz.1.3289': attribute type 11 has an invalid length. [ 339.885823][T14622] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.900827][T17505] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 339.927818][ C0] net_ratelimit: 50 callbacks suppressed [ 339.927836][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 339.930001][T14622] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.933714][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 339.966227][T17502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3289'. [ 339.977786][T14622] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.988668][T17504] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 340.000610][T17502] netlink: 'syz.1.3289': attribute type 11 has an invalid length. [ 340.177136][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.215299][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.278320][T17519] netlink: 'syz.4.3292': attribute type 1 has an invalid length. [ 340.299002][T17519] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3292'. [ 340.326001][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.348608][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.594985][T17531] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3295'. [ 340.768821][T17536] erspan0: entered promiscuous mode [ 340.774065][T17536] erspan0: entered allmulticast mode [ 340.816623][T17542] netlink: 'syz.2.3299': attribute type 3 has an invalid length. [ 340.978154][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 340.985330][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 341.049405][ T5879] Bluetooth: hci1: command tx timeout [ 341.300563][T17571] netlink: 'syz.3.3308': attribute type 4 has an invalid length. [ 341.616692][ T6075] IPVS: starting estimator thread 0... [ 341.661772][T17589] netlink: 'syz.0.3314': attribute type 1 has an invalid length. [ 341.707765][T17590] IPVS: using max 27 ests per chain, 64800 per kthread [ 341.772031][ T6075] IPVS: starting estimator thread 0... [ 341.779259][T17598] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 341.897676][T17599] IPVS: using max 30 ests per chain, 72000 per kthread [ 342.007697][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 342.014908][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 342.117174][T17605] netlink: 'syz.3.3321': attribute type 11 has an invalid length. [ 342.770058][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.815483][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.825199][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.838833][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.848700][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 342.900813][T17654] netlink: 'syz.2.3331': attribute type 6 has an invalid length. [ 342.955249][T17653] lo speed is unknown, defaulting to 1000 [ 343.048168][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 343.055354][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 343.086586][T17659] netlink: 'syz.0.3333': attribute type 1 has an invalid length. [ 343.129943][T17659] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.191698][T17659] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.199171][T17659] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 343.211516][T17659] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 343.271948][T17663] veth3: entered promiscuous mode [ 343.286811][T17667] nbd: illegal input index -8454144 [ 343.301466][T17663] bond1: (slave veth3): Enslaving as an active interface with a down link [ 343.364023][T17665] vlan2: entered allmulticast mode [ 343.380538][T17665] bond1: entered allmulticast mode [ 343.423621][T17668] tipc: Enabling of bearer rejected, media not registered [ 343.431876][T17650] lo speed is unknown, defaulting to 1000 [ 343.666860][T17675] __nla_validate_parse: 13 callbacks suppressed [ 343.666877][T17675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3336'. [ 343.703205][T17675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3336'. [ 343.914304][T17689] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3341'. [ 344.087815][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 344.435536][T17713] netlink: 'syz.3.3349': attribute type 16 has an invalid length. [ 344.550645][T17720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3349'. [ 344.704102][T17713] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 344.891304][ T5878] Bluetooth: hci2: command tx timeout [ 345.128145][ C0] net_ratelimit: 3 callbacks suppressed [ 345.128163][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 345.140885][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 345.318221][T17737] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3355'. [ 345.331467][T17737] gretap0: entered promiscuous mode [ 345.351956][T17737] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3355'. [ 345.371823][T17737] 0ªî{X¹¦: renamed from gretap0 [ 345.406042][T17737] 0ªî{X¹¦: left promiscuous mode [ 345.411831][T17737] 0ªî{X¹¦: entered allmulticast mode [ 345.420044][T17737] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 345.460935][T17650] chnl_net:caif_netlink_parms(): no params data found [ 345.565797][T17745] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3358'. [ 345.597259][T17747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3358'. [ 345.769930][T17759] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 345.809151][T17765] validate_nla: 1 callbacks suppressed [ 345.809170][T17765] netlink: 'syz.2.3363': attribute type 2 has an invalid length. [ 345.842210][T17650] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.849704][T17650] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.856950][T17650] bridge_slave_0: entered allmulticast mode [ 345.877260][T17650] bridge_slave_0: entered promiscuous mode [ 345.908324][T17650] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.929301][T17650] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.936989][T17650] bridge_slave_1: entered allmulticast mode [ 345.948491][T17650] bridge_slave_1: entered promiscuous mode [ 346.023792][T17764] syzkaller0: entered promiscuous mode [ 346.029599][T17764] syzkaller0: entered allmulticast mode [ 346.168393][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 346.175731][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 346.819990][ T55] block nbd0: Possible stuck request ffff888028607000: control (read@0,4096B). Runtime 120 seconds [ 346.967783][ T5878] Bluetooth: hci2: command tx timeout [ 347.208346][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 347.215525][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 347.527948][T17650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.537325][T17778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3367'. [ 347.621161][T17650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.855380][T17796] ip6erspan0: entered promiscuous mode [ 347.902497][T17801] ip6tnl1: entered promiscuous mode [ 347.963497][T17650] team0: Port device team_slave_0 added [ 347.986751][T17650] team0: Port device team_slave_1 added [ 348.070523][T17650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.077859][T17650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.121669][T17650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.143483][T17650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.166469][T17650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.220775][T17650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.247876][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 348.255117][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 348.334656][T17650] hsr_slave_0: entered promiscuous mode [ 348.342327][T17650] hsr_slave_1: entered promiscuous mode [ 348.349102][T17650] debugfs: 'hsr0' already exists in 'hsr' [ 348.354973][T17650] Cannot create hsr debugfs directory [ 348.476633][T17822] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20004 [ 348.690610][T17830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3378'. [ 348.715112][T17827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3378'. [ 348.943223][T17841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.948365][T17650] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.969303][T17841] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 348.993318][T17650] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.016515][T17650] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 349.048601][ T5878] Bluetooth: hci2: command tx timeout [ 349.107068][T17650] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.127188][T17650] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.142854][T17650] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 349.215084][T17650] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.232857][T17650] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.245761][T17650] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 349.309871][T14616] veth0_to_bond: left promiscuous mode [ 349.365565][T17650] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.385026][T17650] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.402408][T17650] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 349.432116][T17860] syz_tun: entered promiscuous mode [ 349.437361][T17860] syz_tun: entered allmulticast mode [ 349.468261][T17870] sctp: [Deprecated]: syz.4.3390 (pid 17870) Use of int in maxseg socket option. [ 349.468261][T17870] Use struct sctp_assoc_value instead [ 349.789559][T17877] veth0: entered promiscuous mode [ 349.796335][T17877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3392'. [ 349.819933][T17650] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 349.989173][T17889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3396'. [ 349.999031][T17888] netlink: 'syz.3.3397': attribute type 1 has an invalid length. [ 350.015695][T17889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3396'. [ 350.033049][T17650] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 350.090867][T17888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 350.115330][T17650] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 350.138682][T17650] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 350.223337][T17895] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 350.255591][T17888] vlan2: entered allmulticast mode [ 350.264807][T17888] veth1: entered allmulticast mode [ 350.309612][T17888] veth1: entered promiscuous mode [ 350.327899][ C0] net_ratelimit: 2 callbacks suppressed [ 350.327918][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 350.333146][T17888] veth1: left promiscuous mode [ 350.333704][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 350.353810][T17888] bond1: (slave vlan2): making interface the new active one [ 350.362787][T17888] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 350.381917][T17888] veth1: entered promiscuous mode [ 350.388363][T17888] vlan2: entered promiscuous mode [ 350.394288][T17888] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 350.437325][T17906] pimreg: entered allmulticast mode [ 350.583802][T17922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.681954][T17650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.719179][T17934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3405'. [ 350.751017][T17650] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.774075][T17939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3405'. [ 350.831287][T17942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3407'. [ 350.852868][T17942] xfrm1: entered promiscuous mode [ 350.859207][T17942] xfrm1: entered allmulticast mode [ 350.866698][T14618] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.873885][T14618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.887530][T14618] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.894754][T14618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.128490][ T5878] Bluetooth: hci2: command tx timeout [ 351.368244][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 351.375395][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 351.408402][T17972] netlink: 'syz.3.3416': attribute type 2 has an invalid length. [ 351.449518][T17972] pim6reg1: entered promiscuous mode [ 351.454887][T17972] pim6reg1: entered allmulticast mode [ 351.555991][T17976] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 351.583788][T17976] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 351.594646][T17976] gretap0: entered promiscuous mode [ 351.602663][T17976] gretap0: entered allmulticast mode [ 351.712692][T17650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.840160][T17650] veth0_vlan: entered promiscuous mode [ 351.864357][T17650] veth1_vlan: entered promiscuous mode [ 351.926273][T17650] veth0_macvtap: entered promiscuous mode [ 351.944383][T17650] veth1_macvtap: entered promiscuous mode [ 351.996300][T17650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.053089][T17650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.122786][T14622] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.147332][T14622] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.161708][T14622] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.183617][T18012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.215290][T14622] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.371754][T14621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.391598][T14621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.407720][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 352.414913][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 352.453416][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.468717][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.582654][T18032] bridge0: port 3(batadv1) entered blocking state [ 352.591497][T18032] bridge0: port 3(batadv1) entered disabled state [ 352.599377][T18032] batadv1: entered allmulticast mode [ 352.606732][T18032] batadv1: entered promiscuous mode [ 352.732944][T18041] openvswitch: netlink: IPv6 tunnel dst address is zero [ 352.906159][T18049] tipc: Enabled bearer , priority 0 [ 352.918326][T18049] syzkaller0: entered promiscuous mode [ 352.923824][T18049] syzkaller0: entered allmulticast mode [ 352.940101][T18049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3434'. [ 352.951177][T18049] team0: No ports can be present during mode change [ 352.965661][T18047] tipc: Resetting bearer [ 353.038903][T18047] tipc: Disabling bearer [ 353.117453][ T8733] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 353.127192][ T8733] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 353.448080][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 353.455250][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 353.564722][T18089] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3447'. [ 353.714674][T18096] pimreg: entered allmulticast mode [ 353.746677][T18100] netlink: 'syz.3.3448': attribute type 11 has an invalid length. [ 353.769630][T18102] __nla_validate_parse: 2 callbacks suppressed [ 353.769647][T18102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3452'. [ 353.901508][T18108] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 353.909503][T18108] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3452'. [ 353.935581][T18108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3452'. [ 354.125039][T18119] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3456'. [ 354.157030][T18127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3457'. [ 354.164817][T18119] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3456'. [ 354.224854][T18132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3457'. [ 354.253392][T18119] gretap0: entered promiscuous mode [ 354.262315][T18119] gretap0: left promiscuous mode [ 354.390216][T18135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3460'. [ 354.588187][T18151] IPVS: set_ctl: invalid protocol: 59 172.20.20.24:20003 [ 354.644502][T18157] sctp: [Deprecated]: syz.2.3468 (pid 18157) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.644502][T18157] Use struct sctp_sack_info instead [ 354.864734][T18168] netlink: 'syz.0.3473': attribute type 10 has an invalid length. [ 354.886747][T18167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3473'. [ 355.452985][T18203] bond0: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 355.528017][ C0] net_ratelimit: 4 callbacks suppressed [ 355.528035][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 355.535270][T18207] netlink: 'syz.3.3482': attribute type 1 has an invalid length. [ 355.540756][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 355.715353][T18219] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3486'. [ 355.883223][T18232] team0: Device vti0 is of different type [ 355.961665][T18240] netlink: 'syz.0.3493': attribute type 5 has an invalid length. [ 356.003965][T18229] macvtap1: entered promiscuous mode [ 356.009986][T18229] vlan0: entered promiscuous mode [ 356.020953][T18229] macvtap1: entered allmulticast mode [ 356.026941][T18229] vlan0: entered allmulticast mode [ 356.032215][T18229] veth0_vlan: entered allmulticast mode [ 356.056861][T18240] geneve2: entered promiscuous mode [ 356.062422][T18240] geneve2: entered allmulticast mode [ 356.140320][T14618] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 356.163877][T14618] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 356.184324][T14618] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 356.400087][T18261] pim6reg1: entered promiscuous mode [ 356.413535][T18261] pim6reg1: entered allmulticast mode [ 356.567732][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 356.574922][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 356.823993][T18288] gretap1: entered promiscuous mode [ 357.315613][T18334] netlink: 'syz.4.3513': attribute type 5 has an invalid length. [ 357.496372][T18342] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20001 [ 357.506902][T18344] netlink: 'syz.1.3518': attribute type 8 has an invalid length. [ 357.607974][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 357.615130][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 357.684093][T18355] netlink: 'syz.1.3522': attribute type 1 has an invalid length. [ 357.707196][T18353] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 357.728969][T18353] tipc: Enabled bearer , priority 10 [ 357.748157][T18355] netlink: 'syz.1.3522': attribute type 1 has an invalid length. [ 358.176740][T18391] netlink: 'syz.1.3532': attribute type 4 has an invalid length. [ 358.210757][T18391] netlink: 'syz.1.3532': attribute type 4 has an invalid length. [ 358.588709][T18414] veth0_to_bridge: entered promiscuous mode [ 358.599219][T18412] veth0_to_bridge: left promiscuous mode [ 358.647726][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 358.654935][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 358.837280][T18427] __nla_validate_parse: 28 callbacks suppressed [ 358.837298][T18427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3541'. [ 358.857976][ T6075] tipc: Node number set to 2065642682 [ 358.896513][T18418] "syz.2.3539" (18418) uses obsolete ecb(arc4) skcipher [ 359.057634][T18438] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3543'. [ 359.110448][T18438] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3543'. [ 359.545886][T18470] netlink: zone id is out of range [ 359.561285][T18470] netlink: zone id is out of range [ 359.592017][T18471] lo speed is unknown, defaulting to 1000 [ 360.469079][T18501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3561'. [ 360.494683][T18498] IPv6: sit1: Disabled Multicast RS [ 360.519697][T18502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3561'. [ 360.530393][T18498] sit1: entered allmulticast mode [ 360.543076][T18505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3561'. [ 360.572708][T18506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3562'. [ 360.727624][ C0] net_ratelimit: 25 callbacks suppressed [ 360.727642][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 360.740474][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 361.042470][T18530] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3570'. [ 361.050976][T18529] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3569'. [ 361.169264][T18542] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3571'. [ 361.243517][T18543] netlink: 'syz.3.3572': attribute type 10 has an invalid length. [ 361.359525][T18543] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 361.564430][T18561] tipc: Started in network mode [ 361.582356][T18561] tipc: Node identity , cluster identity 4711 [ 361.591412][T18561] tipc: Failed to set node id, please configure manually [ 361.604749][T18561] tipc: Enabling of bearer rejected, failed to enable media [ 361.691970][T14621] vlan2: left promiscuous mode [ 361.768037][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 361.775234][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 362.062151][T18580] netlink: 'syz.3.3582': attribute type 4 has an invalid length. [ 362.090560][T18584] netlink: 'syz.4.3583': attribute type 1 has an invalid length. [ 362.499956][T18607] netlink: 'syz.1.3590': attribute type 10 has an invalid length. [ 362.565190][T18607] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 362.808287][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 362.815447][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 362.981459][T18648] lo speed is unknown, defaulting to 1000 [ 363.858043][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 363.865227][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 363.902130][T18701] __nla_validate_parse: 7 callbacks suppressed [ 363.902157][T18701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3619'. [ 364.137124][T18715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3623'. [ 364.137760][T18713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3624'. [ 364.226372][T18718] netlink: 'syz.4.3624': attribute type 6 has an invalid length. [ 364.575270][T18724] netlink: 'syz.0.3626': attribute type 33 has an invalid length. [ 364.888263][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 364.895496][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 365.171983][T18736] netlink: 'syz.1.3631': attribute type 1 has an invalid length. [ 365.198442][T18736] netlink: 'syz.1.3631': attribute type 1 has an invalid length. [ 365.486308][T18752] netlink: 'syz.3.3637': attribute type 2 has an invalid length. [ 365.558618][T18759] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3636'. [ 365.625109][T18759] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 365.656907][T18763] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3640'. [ 365.750972][T18771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3642'. [ 365.933404][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 365.940618][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 366.132134][T18784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3645'. [ 366.160388][T18784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3645'. [ 366.210929][T18784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3645'. [ 366.265197][T18784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3645'. [ 366.342950][T18793] netlink: 'syz.3.3649': attribute type 15 has an invalid length. [ 366.426145][T14619] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 366.453540][T14619] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 366.497612][T14616] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 366.530634][T14616] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 366.597348][T18808] openvswitch: netlink: Flow key attr not present in new flow. [ 366.656220][T14618] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.684169][T14618] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.695299][T14618] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.878568][T18817] nbd1: detected capacity change from 0 to 127 [ 366.967653][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 366.974872][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 367.028392][ T5878] block nbd1: Receive control failed (result -104) [ 367.076101][T18836] netlink: 'syz.2.3662': attribute type 11 has an invalid length. [ 367.688572][T18863] netlink: 'syz.1.3671': attribute type 10 has an invalid length. [ 367.762901][T18863] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 367.995079][T18880] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.008160][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 368.015342][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 368.040477][T18880] team0: Cannot enslave team device to itself [ 368.471967][T18911] netlink: 'syz.4.3685': attribute type 2 has an invalid length. [ 369.047637][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 369.054820][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 369.082198][T18933] tipc: Enabled bearer , priority 0 [ 369.101103][T18935] syzkaller1: entered promiscuous mode [ 369.106605][T18935] syzkaller1: entered allmulticast mode [ 369.233197][T18933] tipc: Disabling bearer [ 369.297304][T18942] syzkaller1: entered promiscuous mode [ 369.340062][T18942] syzkaller1: entered allmulticast mode [ 369.554307][T18949] __nla_validate_parse: 12 callbacks suppressed [ 369.554323][T18949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3698'. [ 369.573411][T18949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3698'. [ 370.079790][T18967] netlink: 'syz.0.3703': attribute type 2 has an invalid length. [ 370.088476][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 370.181556][T18973] veth0: entered promiscuous mode [ 370.196619][T18974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3705'. [ 370.539645][T18974] bond1: (slave vlan2): Releasing active interface [ 370.690658][T18998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3711'. [ 370.722191][T18996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3710'. [ 370.779572][T18994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.795708][T19006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3712'. [ 371.129232][ C0] net_ratelimit: 1 callbacks suppressed [ 371.129250][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 371.140583][T19020] netlink: 'syz.1.3718': attribute type 4 has an invalid length. [ 371.142107][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 371.264646][T19034] tipc: Enabling of bearer rejected, failed to enable media [ 371.329037][T19038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3723'. [ 371.370800][T19036] tipc: Started in network mode [ 371.375700][T19036] tipc: Node identity 3e6df174529c, cluster identity 4711 [ 371.424113][T19036] tipc: Enabled bearer , priority 0 [ 371.556265][T19052] netlink: 'syz.0.3726': attribute type 8 has an invalid length. [ 371.576770][T19053] netlink: 'syz.0.3726': attribute type 8 has an invalid length. [ 371.620071][T19047] syzkaller0: entered promiscuous mode [ 371.625953][T19047] syzkaller0: entered allmulticast mode [ 371.638262][T19047] tipc: Resetting bearer [ 371.787823][T19035] tipc: Resetting bearer [ 371.794705][T19068] netlink: 'syz.4.3729': attribute type 4 has an invalid length. [ 371.844758][T19068] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3729'. [ 371.887906][T19071] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3732'. [ 372.171058][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 372.178320][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 372.498192][ T9] tipc: Node number set to 1827795316 [ 373.209479][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 373.216645][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 373.282048][T19035] tipc: Disabling bearer [ 373.311178][T19068] `: renamed from bond0 (while UP) [ 373.324905][T19081] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 373.326729][T19084] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 374.163297][T19135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3750'. [ 374.248085][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 374.255283][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 374.602779][ T9] hid-generic 0005:16C0:5505.0003: item fetching failed at offset 0/1 [ 374.625268][ T9] hid-generic 0005:16C0:5505.0003: probe with driver hid-generic failed with error -22 [ 374.646906][T19168] __nla_validate_parse: 1 callbacks suppressed [ 374.646923][T19168] netlink: 191164 bytes leftover after parsing attributes in process `syz.3.3761'. [ 374.698743][T19170] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 374.788865][T19172] netlink: 'syz.3.3763': attribute type 1 has an invalid length. [ 374.796858][T19172] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3763'. [ 375.191191][T19195] netlink: 'syz.1.3774': attribute type 1 has an invalid length. [ 375.204178][T19195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3774'. [ 375.278217][T19201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3775'. [ 375.287751][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 375.357948][T19199] tipc: Enabled bearer , priority 0 [ 375.366425][T19206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3776'. [ 375.468233][T19197] tipc: Disabling bearer [ 375.586334][T19218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3780'. [ 375.673339][T19220] syzkaller1: entered promiscuous mode [ 375.679672][T19220] syzkaller1: entered allmulticast mode [ 375.903334][T19223] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 376.042053][T19239] netlink: 'syz.4.3786': attribute type 4 has an invalid length. [ 376.085004][T19240] netlink: 1044 bytes leftover after parsing attributes in process `syz.2.3785'. [ 376.328101][ C0] net_ratelimit: 1 callbacks suppressed [ 376.328119][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 376.340860][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 376.383839][T19262] netlink: 'syz.2.3793': attribute type 23 has an invalid length. [ 376.392332][T19262] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3793'. [ 376.429965][T19263] netlink: 'syz.3.3792': attribute type 1 has an invalid length. [ 376.787337][T19280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3798'. [ 376.813319][T19280] : renamed from bridge_slave_0 (while UP) [ 376.849453][T19284] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 376.880878][T19282] erspan0: left allmulticast mode [ 376.892817][ T55] block nbd0: Possible stuck request ffff888028607000: control (read@0,4096B). Runtime 150 seconds [ 377.083074][T19298] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 377.099543][T19298] veth0_to_bond: entered allmulticast mode [ 377.200249][T19300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3804'. [ 377.367770][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 377.374935][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 378.020005][ T30] audit: type=1804 audit(1755470800.937:2): pid=19352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3821" name="/newroot/190/cgroup.controllers" dev="tmpfs" ino=983 res=1 errno=0 [ 378.071570][ T30] audit: type=1800 audit(1755470800.947:3): pid=19352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3821" name="cgroup.controllers" dev="tmpfs" ino=983 res=0 errno=0 [ 378.117163][T19354] syzkaller0: refused to change device tx_queue_len [ 378.287364][T19362] rdma_rxe: rxe_newlink: failed to add bond0 [ 378.408251][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 378.415384][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 378.466087][T19374] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 378.819417][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.835792][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.842375][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.093581][T19405] tipc: Enabled bearer , priority 0 [ 379.124260][T19405] syzkaller0: entered promiscuous mode [ 379.137051][T19405] syzkaller0: entered allmulticast mode [ 379.201074][T19405] tipc: Resetting bearer [ 379.260723][T19405] tipc: Resetting bearer [ 379.344691][T19405] tipc: Disabling bearer [ 379.454424][T19424] netlink: 'syz.2.3847': attribute type 11 has an invalid length. [ 379.463381][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 379.463566][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 379.495413][T19435] netlink: 'syz.4.3848': attribute type 1 has an invalid length. [ 379.736387][ T30] audit: type=1800 audit(1755470802.657:4): pid=19430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3848" name="memory.events" dev="tmpfs" ino=931 res=0 errno=0 [ 379.888873][T19449] netlink: 'syz.4.3853': attribute type 21 has an invalid length. [ 379.907107][T19449] netlink: 'syz.4.3853': attribute type 22 has an invalid length. [ 379.916041][T19449] netlink: 'syz.4.3853': attribute type 23 has an invalid length. [ 379.924123][T19449] netlink: 'syz.4.3853': attribute type 25 has an invalid length. [ 379.932803][T19449] netlink: 'syz.4.3853': attribute type 26 has an invalid length. [ 379.944740][T19449] __nla_validate_parse: 68 callbacks suppressed [ 379.944756][T19449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3853'. [ 379.950511][T19453] netlink: 'syz.3.3855': attribute type 1 has an invalid length. [ 379.968440][T19453] netlink: 'syz.3.3855': attribute type 4 has an invalid length. [ 379.976236][T19453] netlink: 9422 bytes leftover after parsing attributes in process `syz.3.3855'. [ 380.150816][T19463] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.163625][T19463] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.279260][T19463] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.292423][T19463] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.374897][T19463] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.387382][T19463] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.536274][T19477] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3862'. [ 380.545956][T19463] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.557262][T19463] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.785432][T14622] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.815499][T14622] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.837004][T14622] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.845293][T14622] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.864473][T19485] netlink: 4450 bytes leftover after parsing attributes in process `syz.0.3863'. [ 380.963795][ T49] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.989651][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.049659][T14618] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.068923][T14618] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.154422][T19505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3869'. [ 381.226430][T19508] ip6erspan0: entered promiscuous mode [ 381.332928][T19518] netlink: 'syz.3.3875': attribute type 1 has an invalid length. [ 381.360401][T19518] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3875'. [ 381.466681][T19530] netlink: 'syz.2.3877': attribute type 4 has an invalid length. [ 381.475418][T19530] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3877'. [ 381.502234][T19530] `: renamed from bond0 (while UP) [ 381.537878][ C0] net_ratelimit: 2 callbacks suppressed [ 381.537899][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 381.544802][T19531] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3876'. [ 381.550755][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 381.607171][T19530] tipc: Enabled bearer , priority 0 [ 381.647081][T19530] tipc: Resetting bearer [ 381.671033][T19529] tipc: Disabling bearer [ 381.778078][T19539] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 382.133074][T19566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3888'. [ 382.240917][T19580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3885'. [ 382.375414][T19566] netlink: 'syz.4.3888': attribute type 12 has an invalid length. [ 382.427253][T19573] lo speed is unknown, defaulting to 1000 [ 382.567931][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 382.575222][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 382.733911][T19599] openvswitch: netlink: Flow key attr not present in new flow. [ 382.869856][T19606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.607631][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 383.614851][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 384.898462][T19679] team0: Device ip6gre1 is of different type [ 385.000367][T19688] __nla_validate_parse: 10 callbacks suppressed [ 385.000385][T19688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3918'. [ 385.467377][T19714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 385.538855][T19720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3926'. [ 385.551858][T19720] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 385.720804][T19731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3933'. [ 385.768053][T19731] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3933'. [ 385.780791][T19731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3933'. [ 385.791908][T19737] validate_nla: 3 callbacks suppressed [ 385.791924][T19737] netlink: 'syz.1.3935': attribute type 25 has an invalid length. [ 385.834817][T19738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3935'. [ 385.845040][T19738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3935'. [ 385.879321][T19738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3935'. [ 385.911385][T19737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3935'. [ 385.930727][T19737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3935'. [ 386.642047][T19801] unsupported nlmsg_type 40 [ 386.665918][T19807] netlink: 'syz.2.3955': attribute type 21 has an invalid length. [ 386.678022][T19804] dvmrp0: entered allmulticast mode [ 386.697995][T19808] netlink: 'syz.2.3955': attribute type 21 has an invalid length. [ 386.703433][T19805] dvmrp0: left allmulticast mode [ 386.719684][T19801] netlink: 'syz.2.3955': attribute type 1 has an invalid length. [ 386.757074][T19801] nbd: couldn't find device at index 1048576 [ 386.768641][T19812] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 386.775866][T19812] IPv6: NLM_F_CREATE should be set when creating new route [ 387.717032][T19865] tipc: Enabled bearer , priority 0 [ 387.725144][T19864] syzkaller0: entered promiscuous mode [ 387.730781][T19864] syzkaller0: entered allmulticast mode [ 387.741773][T19864] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 387.761624][T19865] tipc: Resetting bearer [ 387.819250][T19863] tipc: Resetting bearer [ 387.881672][T19863] tipc: Disabling bearer [ 388.209187][T19887] netlink: 'syz.2.3981': attribute type 1 has an invalid length. [ 388.322740][T19898] netlink: 'syz.3.3983': attribute type 4 has an invalid length. [ 388.378099][T19898] netlink: 'syz.3.3983': attribute type 4 has an invalid length. [ 388.447385][T19898] openvswitch: netlink: Message has -1 unknown bytes. [ 388.720940][T19931] sctp: [Deprecated]: syz.4.3992 (pid 19931) Use of int in max_burst socket option. [ 388.720940][T19931] Use struct sctp_assoc_value instead [ 389.056835][T19952] gretap0: entered promiscuous mode [ 389.584410][T19979] sctp: [Deprecated]: syz.4.4005 (pid 19979) Use of int in max_burst socket option deprecated. [ 389.584410][T19979] Use struct sctp_assoc_value instead [ 389.626435][T19979] sctp: [Deprecated]: syz.4.4005 (pid 19979) Use of struct sctp_assoc_value in delayed_ack socket option. [ 389.626435][T19979] Use struct sctp_sack_info instead [ 390.044322][T20012] netlink: zone id is out of range [ 390.295720][T20025] __nla_validate_parse: 19 callbacks suppressed [ 390.295739][T20025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4023'. [ 390.390573][T20036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4022'. [ 390.475627][T20042] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4027'. [ 390.486504][T20039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.506636][T20042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4027'. [ 390.573302][T20039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.708570][T20047] tipc: Started in network mode [ 390.721831][T20047] tipc: Node identity 4ae65e0beefb, cluster identity 4711 [ 390.744797][T20047] tipc: Enabled bearer , priority 0 [ 390.764638][T20051] syzkaller0: entered promiscuous mode [ 390.777937][T20051] syzkaller0: entered allmulticast mode [ 390.866774][T20060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4033'. [ 390.892429][T20062] netlink: 'syz.0.4032': attribute type 10 has an invalid length. [ 390.904027][T20047] tipc: Resetting bearer [ 390.920513][T20046] tipc: Resetting bearer [ 390.943722][T20063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4032'. [ 390.979601][T20065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4034'. [ 391.005292][T20046] tipc: Disabling bearer [ 391.645118][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888058238800: rx timeout, send abort [ 391.750408][T20071] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 391.781515][T20071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4035'. [ 392.127309][T20102] tipc: Trying to set illegal importance in message [ 392.154767][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888058238800: abort rx timeout. Force session deactivation [ 392.719946][T20120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4051'. [ 392.733468][T20120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4051'. [ 392.962388][T20132] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 393.034330][T20135] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 393.052501][T20137] netlink: 'syz.4.4058': attribute type 12 has an invalid length. [ 393.060545][T20137] netlink: 'syz.4.4058': attribute type 29 has an invalid length. [ 393.356142][T20152] 8021q: VLANs not supported on wg1 [ 393.743048][T20175] netlink: 'syz.1.4069': attribute type 1 has an invalid length. [ 393.779965][T20180] netlink: 'syz.0.4071': attribute type 1 has an invalid length. [ 393.820162][T20180] bond2 (unregistering): Released all slaves [ 393.991622][T20192] netlink: 'syz.0.4075': attribute type 1 has an invalid length. [ 394.161220][T20200] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 394.413363][ T5878] Bluetooth: hci2: command tx timeout [ 394.429878][T20217] veth1_macvtap: left promiscuous mode [ 394.655728][T20232] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 394.777891][T20235] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 394.805988][T20240] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 394.845049][T20241] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 394.938711][T20241] nbd4: detected capacity change from 0 to 127 [ 395.054783][T20241] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 395.262722][T20252] netlink: 'syz.2.4094': attribute type 29 has an invalid length. [ 395.298516][ T5878] block nbd4: Receive control failed (result -104) [ 395.436085][T20266] unknown channel width for channel at 909000KHz? [ 395.443815][T20266] unknown channel width for channel at 909000KHz? [ 395.455905][T20266] unknown channel width for channel at 909000KHz? [ 395.703346][T20284] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 395.720246][T20287] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 395.773729][T20288] __nla_validate_parse: 20 callbacks suppressed [ 395.773746][T20288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4107'. [ 395.808051][T20293] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4108'. [ 395.833384][T20294] netlink: 'syz.0.4107': attribute type 1 has an invalid length. [ 395.881986][T20294] netlink: 'syz.0.4107': attribute type 2 has an invalid length. [ 395.882347][T20300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4106'. [ 395.938711][T20288] netlink: 'syz.0.4107': attribute type 1 has an invalid length. [ 395.946478][T20288] netlink: 'syz.0.4107': attribute type 2 has an invalid length. [ 396.059241][T20295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4106'. [ 396.068494][T20295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4106'. [ 396.178944][T20308] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4110'. [ 396.188495][T20308] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4110'. [ 396.330927][T20316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4113'. [ 396.749060][T20335] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4117'. [ 396.846383][T20343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4121'. [ 397.477699][ T1076] block nbd1: Possible stuck request ffff888025880000: control (read@0,1024B). Runtime 30 seconds [ 397.488468][ T1076] block nbd1: Possible stuck request ffff8880258801c0: control (read@1024,1024B). Runtime 30 seconds [ 397.499770][ T1076] block nbd1: Possible stuck request ffff888025880380: control (read@2048,1024B). Runtime 30 seconds [ 397.510729][ T1076] block nbd1: Possible stuck request ffff888025880540: control (read@3072,1024B). Runtime 30 seconds [ 397.594722][T20386] tipc: Enabled bearer , priority 10 [ 397.602287][T20386] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 397.852201][T20402] sctp: [Deprecated]: syz.1.4137 (pid 20402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 397.852201][T20402] Use struct sctp_sack_info instead [ 398.276367][T20427] netlink: 'syz.4.4144': attribute type 17 has an invalid length. [ 399.560725][T20403] vlan2: entered allmulticast mode [ 399.566218][T20403] mac80211_hwsim hwsim39 wlan0: entered allmulticast mode [ 399.845120][T20442] netlink: 'syz.2.4150': attribute type 23 has an invalid length. [ 400.235982][T20455] netlink: 'syz.2.4154': attribute type 10 has an invalid length. [ 400.529080][T20445] vlan0 (unregistering): left allmulticast mode [ 400.535801][T20445] veth0_vlan (unregistering): left allmulticast mode [ 400.543224][T20445] vlan0 (unregistering): left promiscuous mode [ 401.055600][T20455] syz_tun: entered promiscuous mode [ 401.093272][T20455] `: (slave syz_tun): Enslaving as an active interface with an up link [ 401.145948][T20469] __nla_validate_parse: 69 callbacks suppressed [ 401.146219][T20469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4158'. [ 401.208080][T20469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4158'. [ 401.393497][T20489] netlink: 'syz.0.4163': attribute type 1 has an invalid length. [ 401.531136][T20493] bond2: (slave gretap1): making interface the new active one [ 401.563464][T20493] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 401.724444][T20514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4170'. [ 402.057065][T20532] netlink: 'syz.2.4173': attribute type 4 has an invalid length. [ 402.066533][T20533] netlink: 'syz.2.4173': attribute type 4 has an invalid length. [ 402.245775][T20546] netlink: 'syz.3.4177': attribute type 32 has an invalid length. [ 402.254348][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4177'. [ 402.272018][T20546] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 402.667130][T20570] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4185'. [ 402.706086][T20570] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4185'. [ 402.733055][T20570] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4185'. [ 402.757056][T20570] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4185'. [ 402.767240][T20579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4189'. [ 402.776791][T20570] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4185'. [ 402.792677][T20579] netlink: 'syz.0.4189': attribute type 15 has an invalid length. [ 403.094310][T20596] openvswitch: netlink: Flow key attribute not present in set flow. [ 404.050698][T20639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.212358][T20650] netlink: 'syz.2.4208': attribute type 7 has an invalid length. [ 404.251289][T20650] netlink: 'syz.2.4208': attribute type 8 has an invalid length. [ 404.586398][T20660] netlink: 'syz.0.4211': attribute type 7 has an invalid length. [ 404.594641][T20660] netlink: 'syz.0.4211': attribute type 8 has an invalid length. [ 404.676281][T20662] Bluetooth: MGMT ver 1.23 [ 404.692059][T20662] netlink: 'syz.0.4212': attribute type 4 has an invalid length. [ 405.571469][T20697] openvswitch: netlink: Unknown key attributes 2 [ 406.141770][T20727] veth0: entered promiscuous mode [ 406.176411][T20727] __nla_validate_parse: 38 callbacks suppressed [ 406.176429][T20727] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4236'. [ 406.221116][T20726] veth0: left promiscuous mode [ 407.016543][ T55] block nbd0: Possible stuck request ffff888028607000: control (read@0,4096B). Runtime 180 seconds [ 407.282890][T14616] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.305057][T14616] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.322622][T14616] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 407.332744][T14616] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 407.374211][T14616] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.385218][T14616] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.395259][T14616] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 407.404754][T14616] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 407.425785][T14616] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.435779][T14616] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.444956][T14616] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 407.454110][T14616] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 407.463796][T20777] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 407.502646][T20782] xt_policy: too many policy elements [ 407.844097][T20799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4251'. [ 407.844508][T20801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4252'. [ 407.963555][T20806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4254'. [ 407.973842][T20806] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4254'. [ 407.986612][T20806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4254'. [ 407.996054][T20806] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4254'. [ 408.318945][T20816] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.499306][T20816] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.579202][T20823] netlink: 165 bytes leftover after parsing attributes in process `syz.3.4260'. [ 408.655333][T20816] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 408.674471][T20816] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.779207][T20816] bond0: (slave netdevsim0): Releasing backup interface [ 408.793161][T20816] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.823835][T20836] validate_nla: 2 callbacks suppressed [ 408.823854][T20836] netlink: 'syz.2.4265': attribute type 4 has an invalid length. [ 408.994522][ T8733] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.055398][T14621] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.103946][ T8733] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.163310][T14621] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.461034][T20872] netlink: 'syz.4.4276': attribute type 11 has an invalid length. [ 409.482667][T20876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4277'. [ 409.487806][T20872] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4276'. [ 409.759131][T20890] : entered promiscuous mode [ 410.326998][T20924] openvswitch: netlink: Message has 239 unknown bytes. [ 410.334105][T20924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.409733][T20924] lo speed is unknown, defaulting to 1000 [ 410.798169][T20937] netlink: 'syz.0.4293': attribute type 2 has an invalid length. [ 410.972327][T20919] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 410.994830][T20948] netlink: 'syz.0.4298': attribute type 2 has an invalid length. [ 411.054554][T20950] tipc: Enabled bearer , priority 0 [ 411.071141][T20950] syzkaller0: entered promiscuous mode [ 411.077087][T20950] syzkaller0: entered allmulticast mode [ 411.355934][T20956] tipc: Resetting bearer [ 411.485903][T20949] tipc: Resetting bearer [ 411.516389][T20949] tipc: Disabling bearer [ 411.712843][T20973] netlink: 'syz.3.4305': attribute type 1 has an invalid length. [ 411.726427][T20973] __nla_validate_parse: 6 callbacks suppressed [ 411.726445][T20973] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4305'. [ 411.751880][T20973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4305'. [ 412.044252][T20983] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 412.237258][T20998] IPVS: Error joining to the multicast group [ 412.248228][ T5879] Bluetooth: hci0: command 0x0c20 tx timeout [ 412.317354][T21002] netlink: 'syz.1.4314': attribute type 1 has an invalid length. [ 412.327790][T21002] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4314'. [ 412.339850][T21002] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20000 [ 412.349251][T21002] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002 [ 412.625342][T21021] bridge3: entered allmulticast mode [ 413.049134][ T5879] Bluetooth: hci2: command 0x0405 tx timeout [ 413.108745][T21058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4330'. [ 413.234334][T21069] netlink: 'syz.3.4333': attribute type 10 has an invalid length. [ 413.284961][T21069] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.317418][T21069] bridge_slave_1: left allmulticast mode [ 413.344089][T21069] bridge_slave_1: left promiscuous mode [ 413.360488][T21069] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.400105][T21069] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 413.850990][T21112] tipc: Enabled bearer , priority 0 [ 414.019580][T21112] syzkaller0: entered promiscuous mode [ 414.035394][T21112] syzkaller0: entered allmulticast mode [ 414.045492][T21112] tipc: Resetting bearer [ 414.074904][T21116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 414.101789][T21077] IPv6: NLM_F_CREATE should be specified when creating new route [ 414.117441][T21119] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4342'. [ 414.140174][T21110] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4342'. [ 414.199788][T21116] tipc: Resetting bearer [ 414.898947][T20766] tipc: Node number set to 2753388043 [ 416.064863][T21116] tipc: Disabling bearer [ 416.074128][T21130] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 416.647206][T21198] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 416.703406][T21200] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4366'. [ 416.762660][T21200] veth0_to_bridge: entered promiscuous mode [ 416.975044][T21199] veth0_to_bridge: left promiscuous mode [ 416.984486][T21213] netlink: 'syz.4.4368': attribute type 5 has an invalid length. [ 417.341763][T21232] nbd: socks must be embedded in a SOCK_ITEM attr [ 417.430954][T21232] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4372'. [ 417.449378][T21193] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 417.483948][ T5232] udevd[5232]: worker [6104] /devices/virtual/block/nbd0 timeout; kill it [ 417.503295][ T5232] udevd[5232]: seq 15886 '/devices/virtual/block/nbd0' killed [ 417.883855][T21264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.651326][ T5879] Bluetooth: hci0: command 0x0c20 tx timeout [ 424.903413][T14621] vlan0: left promiscuous mode [ 424.908367][T14621] bridge0: left promiscuous mode [ 424.914705][T14621] bridge5: port 1(vlan0) entered disabled state [ 424.925936][T14621] tipc: Resetting bearer [ 425.182981][T14621] tipc: Disabling bearer [ 425.233433][T14621] dvmrp0 (unregistering): left allmulticast mode [ 425.529434][ T55] block nbd4: Possible stuck request ffff888025965080: control (read@0,1024B). Runtime 30 seconds [ 425.540870][ T55] block nbd4: Possible stuck request ffff888025965240: control (read@1024,1024B). Runtime 30 seconds [ 425.551910][ T55] block nbd4: Possible stuck request ffff888025965400: control (read@2048,1024B). Runtime 30 seconds [ 425.562915][ T55] block nbd4: Possible stuck request ffff8880259655c0: control (read@3072,1024B). Runtime 30 seconds [ 425.629544][T14618] smc: removing ib device syz1 [ 425.634817][T14621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.648922][T14621] bond0 (unregistering): Released all slaves [ 425.753031][T14621] bond1 (unregistering): Released all slaves [ 425.852788][T14621] bond2 (unregistering): (slave bond3): Releasing backup interface [ 425.860908][T14621] bond3 (unregistering): left promiscuous mode [ 425.867087][T14621] bond3 (unregistering): left allmulticast mode [ 425.874661][T14621] bond2 (unregistering): Released all slaves [ 425.974570][T14621] bond3 (unregistering): Released all slaves [ 426.084110][T14621] bond4 (unregistering): Released all slaves [ 426.181668][T14621] bond5 (unregistering): Released all slaves [ 426.281475][T14621] bond6 (unregistering): (slave veth9): Releasing active interface [ 426.289515][T14621] veth0_to_bond: entered promiscuous mode [ 426.300393][T14621] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 426.312011][T14621] bond6 (unregistering): (slave veth11): Releasing active interface [ 426.322425][T14621] bond6 (unregistering): Released all slaves [ 426.335011][T14621] bond7 (unregistering): Released all slaves [ 427.781056][T14621] tipc: Disabling bearer [ 427.793292][T14621] tipc: Left network mode [ 428.089893][ T1076] block nbd1: Possible stuck request ffff888025880000: control (read@0,1024B). Runtime 60 seconds [ 428.100757][ T1076] block nbd1: Possible stuck request ffff8880258801c0: control (read@1024,1024B). Runtime 60 seconds [ 428.111726][ T1076] block nbd1: Possible stuck request ffff888025880380: control (read@2048,1024B). Runtime 60 seconds [ 428.123291][ T1076] block nbd1: Possible stuck request ffff888025880540: control (read@3072,1024B). Runtime 60 seconds [ 428.201315][T14621] hsr_slave_0: left promiscuous mode [ 428.207170][T14621] hsr_slave_1: left promiscuous mode [ 428.222921][T14621] veth0_macvtap: left promiscuous mode [ 428.334008][T14622] Oops: general protection fault, probably for non-canonical address 0xffff110153f2f300: 0000 [#1] SMP KASAN PTI [ 428.345937][T14622] KASAN: maybe wild-memory-access in range [0xfff8a80a9f979800-0xfff8a80a9f979807] [ 428.355232][T14622] CPU: 1 UID: 0 PID: 14622 Comm: kworker/u8:32 Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 428.367537][T14622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 428.377600][T14622] Workqueue: kvfree_rcu_reclaim kfree_rcu_work [ 428.383796][T14622] RIP: 0010:percpu_ref_get_many+0xa3/0x140 [ 428.389589][T14622] Code: bf 71 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 e4 4d f7 ff 49 8b 07 a8 03 75 62 <65> 4c 01 30 e8 d4 97 4d 09 85 c0 74 3a e8 6b 96 7a ff 84 c0 75 31 [ 428.409183][T14622] RSP: 0018:ffffc9000513f7c8 EFLAGS: 00010246 [ 428.415235][T14622] RAX: ffff88802e213300 RBX: ffffffff822bc679 RCX: 5ad12138658b0300 [ 428.423185][T14622] RDX: 0000000000000000 RSI: ffffffff8be333e0 RDI: ffffffff8be333a0 [ 428.431139][T14622] RBP: 0000000000000060 R08: 0000000000000000 R09: ffffffff822bc679 [ 428.439095][T14622] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: dffffc0000000000 [ 428.447048][T14622] R13: ffff8880b873b540 R14: 0000000000000001 R15: ffff88802e213280 [ 428.455001][T14622] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 428.463909][T14622] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 428.470493][T14622] CR2: 00005555877885c8 CR3: 000000000df36000 CR4: 00000000003526f0 [ 428.478463][T14622] Call Trace: [ 428.481735][T14622] [ 428.484652][T14622] refill_obj_stock+0x254/0x850 [ 428.489493][T14622] ? refill_obj_stock+0x116/0x850 [ 428.494516][T14622] __memcg_slab_free_hook+0x127/0x3d0 [ 428.499890][T14622] kmem_cache_free_bulk+0x46e/0x520 [ 428.505081][T14622] ? kvfree_rcu_bulk+0xe5/0x1f0 [ 428.509921][T14622] ? kvfree_rcu_bulk+0x6d/0x1f0 [ 428.514757][T14622] kvfree_rcu_bulk+0xe5/0x1f0 [ 428.519422][T14622] kfree_rcu_work+0xed/0x170 [ 428.523999][T14622] ? process_scheduled_works+0x9ef/0x17b0 [ 428.529698][T14622] ? process_scheduled_works+0x9ef/0x17b0 [ 428.535404][T14622] process_scheduled_works+0xade/0x17b0 [ 428.540946][T14622] ? __pfx_process_scheduled_works+0x10/0x10 [ 428.546909][T14622] worker_thread+0x8a0/0xda0 [ 428.551488][T14622] kthread+0x70e/0x8a0 [ 428.555538][T14622] ? __pfx_worker_thread+0x10/0x10 [ 428.560640][T14622] ? __pfx_kthread+0x10/0x10 [ 428.565227][T14622] ? _raw_spin_unlock_irq+0x23/0x50 [ 428.570423][T14622] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.575613][T14622] ? __pfx_kthread+0x10/0x10 [ 428.580190][T14622] ret_from_fork+0x3f9/0x770 [ 428.584768][T14622] ? __pfx_ret_from_fork+0x10/0x10 [ 428.589862][T14622] ? __switch_to_asm+0x39/0x70 [ 428.594611][T14622] ? __switch_to_asm+0x33/0x70 [ 428.599359][T14622] ? __pfx_kthread+0x10/0x10 [ 428.603929][T14622] ret_from_fork_asm+0x1a/0x30 [ 428.608682][T14622] [ 428.611696][T14622] Modules linked in: [ 428.616739][T14622] ---[ end trace 0000000000000000 ]--- [ 428.622272][T14622] RIP: 0010:percpu_ref_get_many+0xa3/0x140 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 428.628122][T14622] Code: bf 71 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 e4 4d f7 ff 49 8b 07 a8 03 75 62 <65> 4c 01 30 e8 d4 97 4d 09 85 c0 74 3a e8 6b 96 7a ff 84 c0 75 31 [ 428.648723][T14622] RSP: 0018:ffffc9000513f7c8 EFLAGS: 00010246 [ 428.654810][T14622] RAX: ffff88802e213300 RBX: ffffffff822bc679 RCX: 5ad12138658b0300 [ 428.662954][T14622] RDX: 0000000000000000 RSI: ffffffff8be333e0 RDI: ffffffff8be333a0 [ 428.670973][T14622] RBP: 0000000000000060 R08: 0000000000000000 R09: ffffffff822bc679 [ 428.679544][T14622] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: dffffc0000000000 [ 428.688095][T14622] R13: ffff8880b873b540 R14: 0000000000000001 R15: ffff88802e213280 [ 428.696081][T14622] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 428.705037][T14622] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 428.712420][T14622] CR2: 00005555877885c8 CR3: 000000000df36000 CR4: 00000000003526f0 [ 428.720475][T14622] Kernel panic - not syncing: Fatal exception [ 428.726797][T14622] Kernel Offset: disabled [ 428.731103][T14622] Rebooting in 86400 seconds..