last executing test programs: 3.579512866s ago: executing program 0 (id=4873): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x54, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xe6ab, @remote, 0xfb}, @in6={0xa, 0x4e21, 0x8, @local, 0x9}, @in6={0xa, 0x4e20, 0xf85, @dev={0xfe, 0x80, '\x00', 0x40}, 0x5}]}, &(0x7f00000000c0)=0x10) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x54, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xe6ab, @remote, 0xfb}, @in6={0xa, 0x4e21, 0x8, @local, 0x9}, @in6={0xa, 0x4e20, 0xf85, @dev={0xfe, 0x80, '\x00', 0x40}, 0x5}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r1, 0x3}, 0x8) (async) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r1, 0x3}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x40, 0x2, 0x7, 0x4, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0xffffffff, 0x2}}) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_deladdrlabel={0x70, 0x49, 0x200, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0x18, 0x0, r3}, [@IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000380)={r0, 0x2, 0x10, 0x10000000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) sendmsg$nl_route(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x5800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@ipv6_newrule={0x5c, 0x20, 0x104, 0x70bd27, 0x25dfdbfb, {0xa, 0x10, 0x14, 0xca, 0x5, 0x0, 0x0, 0x7, 0x5}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x7}, @FRA_SRC={0x14, 0x2, @private0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) sendmsg$nl_route(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x5800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@ipv6_newrule={0x5c, 0x20, 0x104, 0x70bd27, 0x25dfdbfb, {0xa, 0x10, 0x14, 0xca, 0x5, 0x0, 0x0, 0x7, 0x5}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x7}, @FRA_SRC={0x14, 0x2, @private0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000500)={r1, 0xd18d, 0x689a}, &(0x7f0000000540)=0x10) r6 = socket$unix(0x1, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000580)={r5, 0x7fff}, 0x8) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000580)={r5, 0x7fff}, 0x8) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, r8, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040040}, 0x8000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000880)={'veth1_macvtap\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r12, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x50) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r6) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x13c, r13, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}, @IPVS_CMD_ATTR_DAEMON={0x90, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x74, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x440a0}, 0x2000001) (async) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x13c, r13, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}, @IPVS_CMD_ATTR_DAEMON={0x90, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x74, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x440a0}, 0x2000001) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000c40)={r5}, &(0x7f0000000c80)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000c40)={r5}, &(0x7f0000000c80)=0x8) r14 = socket$can_j1939(0x1d, 0x2, 0x7) listen(r14, 0xa6) (async) listen(r14, 0xa6) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r4) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000d40)={@multicast1, @broadcast}, &(0x7f0000000d80)=0xc) (async) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000d40)={@multicast1, @broadcast, 0x0}, &(0x7f0000000d80)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000011c0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0xa0, r15, 0x907, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000011c0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0xa0, r15, 0x907, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) 3.525152584s ago: executing program 1 (id=4875): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x1a, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc000) r1 = socket$inet6(0x10, 0x2, 0xfffffffd) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25020156ff", @ANYRES32=r4, @ANYBLOB="080002007f0000014e3534f7479bf4556f492f7a9faa0d131596f1e8cf5a23b32c62e0204523a8cf50bb3aaa5a174ba3f249b91b5516d1d918062b6e1025090309dfabd5d247a4b28eedfeea3b23923903b90f72bc15ccad86a4acdb297a9bf7e0b2965f1c95f1f1b1d3377cba27741224a35ac61fe5ae17019ef1b9900a84e70126d5bdef6b484983c0dbdd"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) (async) recvfrom$inet6(r1, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) (async) r5 = socket$inet6(0x10, 0x3, 0x0) (async) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x7, &(0x7f0000000640), 0x8) sendto$inet6(r5, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3.524128416s ago: executing program 3 (id=4876): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0x5, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000400)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x28}, 0x94) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbf0400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000180)={0x0, 'vlan1\x00', {}, 0x31fb}) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x3) (async, rerun: 32) setsockopt$inet6_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "b398a992143a240d", "d036788c4aaf9c6ef96dda7201d2d2a5", "1a13ecde", "0597b7f1463f0f33"}, 0x28) (rerun: 32) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) (async, rerun: 64) sendto$inet6(r4, 0x0, 0x0, 0x220080c1, &(0x7f0000000040)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c) (rerun: 64) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) (async) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) (async) sendmsg$sock(r4, &(0x7f0000001400)={&(0x7f0000000200)=@nl=@kern={0x10, 0x0, 0x0, 0x1}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000280)="dac5d661d71bee87919e23663a8af5a6fd924b0b55f100a36626c3c9a301440f53ef8a603a3b6de28ad47b2ebf852c1f7c55aecf00bf5c4c", 0x38}, {&(0x7f0000000340)="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", 0x1000}], 0x2, &(0x7f0000001380)=[@mark={{0x14, 0x1, 0x24, 0x871}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x48}, 0x4000000) 3.261013322s ago: executing program 1 (id=4879): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0xfffffff9, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) close(0xffffffffffffffff) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xea5d}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r3}, 0x38) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) (async, rerun: 64) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x9, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) (async, rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c8844}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, 0x0, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060008000000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3.26036151s ago: executing program 0 (id=4880): socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000083) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) write(0xffffffffffffffff, &(0x7f00000002c0)="2000000012005f0214f9f4070000fbe60a0000000000c5c61f33ad512e9cfc31", 0x20) 3.25661381s ago: executing program 3 (id=4882): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a00)=@newtaction={0x48, 0x1e, 0x109, 0x100, 0x0, {}, [{0x34, 0x1, [@m_ife={0x30, 0x10, 0x0, 0x0, {{0x8}, {0x4}, {0x6, 0x6, "8034"}, {0xc, 0x7, {0x92f52d05a60322be, 0xc58826ad51c40e66}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x40810) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a600000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003400038030000080080003400000000224000b"], 0x88}}, 0x4000040) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, 0x7, 0xa, 0x201, 0x0, 0x0, {0xd, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x81, 0x7, 0x1, 0x0, "9bdfd502487b990414873ea16d84dd4f66d07c010ce9baa190f0494dc3d57bb212e22d976aa3611c6df21b46e2a595d577ff1d5624e05a3e278754b1a35e993dc59738a26f3b93d5a9fededb41e019fad34faa7f873d2bbee2f4e6d14fe3696059e67355021107817431e5a49571f3339f7b0a7be9f6141d858cf57ad6"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4001}, 0x40800) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000104000000000000000003010000000000002600010000112233445566778899aa00000000000001020304050607087c385c93ed3c12666d00000c00020006000600884800000c0003"], 0x58}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000000), &(0x7f0000000040)=r8}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ec0)={{r7}, &(0x7f0000000e40), &(0x7f0000000e80)='%ps \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8, r7}, 0xc) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000001180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000ffdbdf251500000008002a00ffffffff08000300", @ANYRES32=r9], 0x24}, 0x1, 0x0, 0x0, 0x44044}, 0x24048410) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000600)={&(0x7f00000001c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r5, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x4010) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000005e0001002dbd7000fddbdb2500000000", @ANYRES32=r3, @ANYBLOB="9e5995"], 0x1c}, 0x1, 0x0, 0x0, 0xa911}, 0x0) 2.818544763s ago: executing program 3 (id=4887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40041) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x29, 0x21, &(0x7f00000002c0), 0x4) sendmsg(r2, &(0x7f0000002a00)={&(0x7f0000000580)=@nl=@unspec, 0x80, 0x0}, 0x20004004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000080)=0xf, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x140e, 0x8, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x48881}, 0x40040) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20040014) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r4, 0x1) ppoll(&(0x7f0000000140)=[{r4, 0x2400}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$kcm(0x11, 0xa, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="2000000016000d002cbd7000bedbdf252e7c00000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x20048891}, 0x8010) 2.560986434s ago: executing program 1 (id=4890): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4c004) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x17, 0x301, 0x70bd24, 0xfffffffc, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44853}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$igmp6(0xa, 0x3, 0x2) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5, 0x1, 0xff, 0x0, 0x6, 0x5}, &(0x7f0000000040)=0x20) listen(r1, 0x3) close(0x4) 2.156540174s ago: executing program 2 (id=4893): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000100180100002020782500000000cb0000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000100b703000000000040850000000c00000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xfe7, &(0x7f0000000a80)=""/4071, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=@newtaction={0x50, 0x30, 0xb, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xffffffffffffffb6, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0x4, 0x6, "5284913d689c7712195cdcc368270d536203adc8884cbdbc41a14618d37342e89876d99760d8d10f948da91bc3e460be8426e98f7163198b1d"}, {0xc, 0xa, {0x1}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) 2.139798359s ago: executing program 1 (id=4894): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110125bd7000fedbdf250500000008000300011b0000080002"], 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0000000085000000c0000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a8f5dd89315b8c8650a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a824e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de8ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e644d633d2abe9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac5a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3f0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b251fb555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578eac8bfc1037acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022d4731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181208175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329aaf116308d57e77065464eb94ba18e680c2030b4212c135a3c3bbce5e911453b9e35e5b2a0390ebeb084988880a7b07435188680ce166b8858f00876c191fd4df2c32440ddcce4410199080009ad86d35168a442cfb9d399172c436a744649c810ce30505348d6f7bc87f0c202ab626acfaf0c732a3536fd46796b1bb6a2217834db8066789735a67dc95c679d02e0eaf743911bde21ffe0b6ccda73dee5694020544392d0538a8075706b26b2680555bd5dd1b4e2f59275c02372ff99d5f1066d018016c43541c6374be429d483f513c84a7dc1aced670625a93082a9bfaa86b2aa73ada8945b088d9ec0aa549a8ec8e50060fcace5e89ee1ffc1dc0f8a87"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0xfffff1de, 0x2000000, 0x0, 0xfffffffffffffefc, &(0x7f0000000440)}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f000000aa40)={0x0, 0x0, &(0x7f000000aa00)={&(0x7f000000a740)={0x18, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa8, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xaa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}]}, @TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x820) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000002000)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000003000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000004000)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="00112233445566778899aabbccdd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000003}, 0x17) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000100)={r6, 0x40, 0x20, 0xe, 0x100}, &(0x7f0000000140)=0x18) 1.961560122s ago: executing program 2 (id=4895): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x64, 0x30, 0x1, 0x70bd25, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x200000}}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xeb756673eed151e1}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a0085000000a0000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r1, @ANYRES16=r1], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.942107672s ago: executing program 0 (id=4896): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000003f40)=[{&(0x7f0000000280)="dc", 0x1}, {&(0x7f0000003f80)="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", 0xc40}], 0x2, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) close(r3) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) connect$unix(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0xffff, 0x7478bdb0, 0x3ec33, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0xf, @value=r3, @void, @value=r3}, 0x50) r5 = socket(0x40000000015, 0x80005, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/16, 0x10}, 0x9}], 0x1, 0x10060, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000000)={[{0x2d, 'net'}]}, 0x5) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x3, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r8, &(0x7f0000000040), 0x0}, 0x20) socket$inet_smc(0x2b, 0x1, 0x0) 1.894726199s ago: executing program 2 (id=4897): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r5) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002400)={0x1150, 0x1f, 0x1, 0x70bd26, 0x25dfdbfd, "", [@nested={0x4, 0xe6}, @nested={0x136, 0xe6, 0x0, 0x1, [@generic="548e1ac223c27e0c2ce01febe36a149571832775d1f232cb043d73927535d67af8a298ebcb407ef6200380ae1e71cc86f010ee1fae89cb8e1fd2792319b56a7d6443a703bebb08778c9f6ad628dca3e95f5592f56d8a1bebacbf402a460fda529b1f7bad9e24c7cb9868c2a4a8c857a7e38ae5c9bc0d", @nested={0xbc, 0xb3, 0x0, 0x1, [@generic="5b7f225e9b08ab28721d7913cfa2ce434a55e2e145ce80d64c98a84d50b5a3ac942da4c267a452f7e61ffa67d51d120bb1fb56803c4a3da051bf328d2587089277dce348edbda6f243f09a44e4cc71114e44369c4abb6330da7f60f64c7524be194b80c3268ed1e2100f362b1729c856976556ce6e00a2b09f5a1cce65303423620d2790bcb2ba2c22f97dd13cbe39929af5", @generic="447922734bdde53bc69d8945eb466849461162253fcd0a5da69d5dbab47fff66a702a45a6b0a"]}]}, @typed={0x1004, 0xef, 0x0, 0x0, @binary="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"}]}, 0x1150}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) listen(r3, 0x8) r6 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x80000001}, &(0x7f0000000480)=0x8) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x631, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_emit_ethernet(0x50, &(0x7f0000000240)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @mcast2, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x0, @val=0x300}, "4fe846155ed9"}}}}}}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x2c, r12, 0x1, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x90) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000200)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x19, 0x12, 0x5b}, 0x2c) 1.813677989s ago: executing program 3 (id=4898): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000004c0)="478ed4", 0x3, 0x40, &(0x7f00000005c0)={0x11, 0x18, r3, 0x1, 0x6}, 0x14) (async) sendto$packet(r2, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x8100, r3, 0x1, 0x3, 0x6, @remote}, 0x14) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x108, 0x108, 0x5, [@enum64={0x3, 0x8, 0x0, 0x13, 0x1, 0x2, [{0x10, 0x4}, {0x6, 0x9, 0x7}, {0x5, 0x4, 0x5}, {0xd, 0x3, 0xffff}, {0xc, 0x80, 0x10000}, {0x2, 0x3cf, 0xa02}, {0x6, 0x8, 0x9}, {0x5, 0x6, 0xde9}]}, @float={0x9, 0x0, 0x0, 0x10, 0x14}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xd, 0x1}, {0x9, 0x4}, {0x10, 0x4}]}, @struct={0xf, 0x8, 0x0, 0x4, 0x0, 0xc, [{0x6, 0x2, 0xfffffffa}, {0x6, 0x5, 0x8}, {0xd, 0x5, 0x8}, {0x5, 0x5, 0x8}, {0x4, 0x1, 0x10001}, {0xa, 0x2}, {0x7, 0x3, 0xfffffffa}, {0x10, 0x4, 0x9}]}]}, {0x0, [0x61, 0x61, 0x3e]}}, &(0x7f0000000400)=""/100, 0x125, 0x64, 0x1, 0x1c360000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x1ff, '\x00', r3, r4, 0x3, 0x3, 0x3}, 0x50) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@typed={0x7, 0xb, 0x0, 0x0, @str='\x05\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000) 1.8107779s ago: executing program 0 (id=4899): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@deltfilter={0x7c, 0x2d, 0x300, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0xb, 0xd}, {0xe, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}, @filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0x0, 0x0, 0xffffff00, 0xff000000]}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0xb8}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @empty}]}}]}, 0x7c}}, 0x24000084) socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x400c401}, 0x44084) pipe(&(0x7f0000000200)={0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$FICLONERANGE(r7, 0x4020940d, 0x0) epoll_create1(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r9) 1.565832676s ago: executing program 2 (id=4900): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000079b560ea", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x12, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}, @jmp={0x5, 0x1, 0xd, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x78522e557d4b0e0a}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x52}, 0x94) (async) r4 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r4, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) syz_emit_ethernet(0x76, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES8=r2, @ANYRESOCT=r0, @ANYRES64=r1, @ANYRES8=r5, @ANYRESHEX=r3], 0x0) r6 = socket(0x2, 0x80805, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000280)={r10, 0x3ff}, 0x8) (async) socket$alg(0x26, 0x5, 0x0) 1.547226552s ago: executing program 3 (id=4901): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26) close(0x3) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r3, 0x215eb000) (async) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r4 = socket(0x2a, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) getpeername$packet(r4, 0x0, 0x0) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000080)={0x0, 0xf, 0x0, 0x7f}, &(0x7f00000000c0)=0x10) (async) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@newsa={0x200, 0x10, 0x100, 0x70bd2a, 0x0, {{@in6=@local, @in6=@mcast1, 0x0, 0xfffd, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x4}, {@in=@multicast1, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0xfffffffffffffffd, 0x40000000000, 0x0, 0x2dcd, 0x0, 0x2000000}, {}, {0x0, 0x4}, 0x70bd2d, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0xc8, 0x1, {{'md5\x00'}, 0x400, "03ff00004137b192fb8e5e7f447874748563bab2c89a19dd1016fe153742ae1eadb71f875a55462594512efa7aa6403aff00afa206c194ec05960e8c34b772a4c07334ff92c58543b783cb4b56919693a638b9f5f5f18a2a8b6a939ae273c1fdd6e1e79d7ed157870f83c5d28b8157b3d0fc069b64e462640bfa8ef34eaf73ab"}}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "74896af24bf8b073", "8dd58ba2ff6a993142a448095a7b0833", "54af2f65", "81ae3e5dc7eb15d1"}, 0x28) (async) close(0x3) 1.324569186s ago: executing program 2 (id=4903): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x80003, 0x0) (async) r1 = socket(0x10, 0x80003, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000002040)) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x37000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) readv(r5, &(0x7f0000002380)=[{&(0x7f0000002180)=""/117, 0x75}], 0x1) connect$unix(r4, &(0x7f0000000140)=@abs, 0x6e) unshare(0x22020400) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x6, 0x4932, 0x9, 0x41}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x6, 0x4932, 0x9, 0x41}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r7, &(0x7f0000000300), 0x0}, 0x20) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r7, &(0x7f0000000300), 0x0}, 0x20) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd26, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008044) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd26, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008044) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400000000000000000b"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r2, &(0x7f0000000000)="09b817f90f5c9417ea9bc1d439c1fcf092a1bb1c0c2ae7e63e65826e1eff77f454776298313e7298361f0b9925d5a185ab4848482768395ad7baf3ed3fccdf762736f1c0356a3d76b3d7b96a475c8056daa54e74537ef9688ca5efcaed948f46dfaa10559095fd6313ce738d733b76415291ed1bff072124", 0x78, 0x20000050, 0x0, 0x0) (async) sendto(r2, &(0x7f0000000000)="09b817f90f5c9417ea9bc1d439c1fcf092a1bb1c0c2ae7e63e65826e1eff77f454776298313e7298361f0b9925d5a185ab4848482768395ad7baf3ed3fccdf762736f1c0356a3d76b3d7b96a475c8056daa54e74537ef9688ca5efcaed948f46dfaa10559095fd6313ce738d733b76415291ed1bff072124", 0x78, 0x20000050, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r2, @ANYBLOB="330bddb178162d6f4443df468d5289f87344e0fd710df01e6175f01525578f00000000000000b4c7d6658482db7fb7ef149cff43c34678e4f7014e6c07a1090593e2dbbe48a524e0d0b9a56090e1416d06c2d09b22a0b5f1581d30359c2df37b47ed2aded5d6eef0cb3f9748a14288aeb8f9c806be574ae6b5b1e6eccf53027fd14c0997a9697e4c256655450390be67b2f499a7696beb490edd1d8a4297d629dae7f47360bff80700a3c2d1a0167a570ba045b2a43f7e95bd09684f23d4553c10086775d6fee5ffb7017ae367"], 0x0, 0x52}, 0x28) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) r10 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000240)={'vxcan0\x00'}) socket$igmp6(0xa, 0x3, 0x2) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r11, 0x100) (async) listen(r11, 0x100) 1.280485372s ago: executing program 4 (id=4904): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r3, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x14000000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x4, 0x1, 0xfffffffb, 0x1a, 0x5, 0x1, 0x7, 0x36c0}}}}]}, 0x58}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002540)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2}, {0xfff1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.092908043s ago: executing program 1 (id=4905): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x80, 0x800) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x0, 0x6, 0x12, @mcast2, @local, 0x20, 0x40, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'erspan0\x00', &(0x7f00000002c0)={'gretap0\x00', r1, 0x8010, 0x80, 0x401, 0x8001, {{0x20, 0x4, 0x3, 0x2, 0x80, 0x66, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010102, @multicast2, {[@rr={0x7, 0x7, 0xe2, [@multicast2]}, @timestamp={0x44, 0x8, 0xfd, 0x0, 0x5, [0x6]}, @timestamp={0x44, 0x28, 0x18, 0x0, 0x0, [0x2, 0x5, 0x400, 0xc, 0x9, 0xd47, 0x3, 0xffffffff, 0x4]}, @generic={0x94, 0x2}, @ssrr={0x89, 0x1b, 0x11, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @loopback, @private=0xa010102]}, @rr={0x7, 0x17, 0xd6, [@empty, @loopback, @multicast2, @multicast2, @empty]}]}}}}}) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6c, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0xe, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}]}]}}}}}}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00a929b57200"/19, @ANYRES32, @ANYBLOB="c843a46d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000085, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r4}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) 1.054115421s ago: executing program 0 (id=4906): socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000083) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) write(0xffffffffffffffff, &(0x7f00000002c0)="2000000012005f0214f9f4070000fbe60a0000000000c5c61f33ad512e9cfc31", 0x20) 996.663442ms ago: executing program 4 (id=4907): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) preadv(r0, &(0x7f0000001800)=[{&(0x7f0000000080)=""/120, 0x78}, {&(0x7f0000000800)=""/4096, 0x1000}], 0x2, 0x81, 0x2) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@socket2={{0x28}, 0x2}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x4, 0x6, 0x2, 0x4, 0x6], 0x6, 0x4}, {0x1, [0x1, 0x2, 0x1, 0x1, 0x2, 0x4], 0x3, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffffffffffffff21) 941.265869ms ago: executing program 1 (id=4908): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x38, r2, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x51}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x29}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x40801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) r6 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=[{}, {}, {}]}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaef}, 0x7, 0x7}, [{0x8, 0xffbff000, 0x2, 0xffff, 0x1ff, 0xafe}, {0xe, 0x2, 0x1, 0x9, 0x4, 0xa}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x80000001, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa004, 0x8, 0x5, 0x20000a17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x5, 0x6, 0x2, 0x4, 0x3}, {0x84, 0x3, 0x8, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0x8, 0x4, 0xb904, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x13, 0x40}, {0x0, 0xd, 0x9, 0x6, 0xffffffff, 0x1}, {0x3, 0x1000, 0x1ff, 0x9, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x3, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x4, 0x7}, {0x5, 0xe4, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0xfffffffb}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x6, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0xb, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0x9d, 0x1, 0x80000000}, {0xbd, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x8, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0xffffffff, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x7}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x5, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0xf, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x200004, 0x0, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x100006, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x2}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x9, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x200, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x1, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x1, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0xe0000, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x1}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x8}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0xffffffff}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x3f, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x7, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x400, 0x0, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x40000009, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x2, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0x7, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0xa, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x700000, 0x5, 0x4}, {0xcab, 0xf, 0x4, 0xf, 0x8, 0x7}, {0x4, 0x8000, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x1ff, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x9, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x7ffc, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x4000b}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x3, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x6}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) (async) close(0x3) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800000042002902"], 0x18}}, 0x8000) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0x482, 0x4) (async, rerun: 32) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 809.690064ms ago: executing program 4 (id=4909): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r1], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x7}, 0x10}, 0x94) 539.210887ms ago: executing program 4 (id=4910): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x18, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@nested={0x4, 0xae}]}, 0x18}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x18, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@nested={0x4, 0xae}]}, 0x18}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) (async) 349.417245ms ago: executing program 4 (id=4911): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2007}, [@printk={@i, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={r2, 0xcc8c, 0x9000, 0x8, 0x5, 0xfffffffc}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x41100}, 0x94) 347.882804ms ago: executing program 3 (id=4912): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$key(0xf, 0x3, 0x2) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000640)={{'\x00', 0x3}, {0xc2af}, 0x100, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/317], 0x13d}) r3 = socket$inet6(0xa, 0x800, 0x7c) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001800ffff00000000000000000ae00000fe00c8070000000014000500fc0000000000000000000000000000000c00090008"], 0x3c}, 0x1, 0x0, 0x0, 0x2048800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYRESOCT=r0], &(0x7f0000000480)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r7, &(0x7f0000000fc0)=[{{&(0x7f0000000740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001280)=[{&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/126, 0x7e}, {&(0x7f00000010c0)=""/145, 0x91}, {&(0x7f0000001180)=""/139, 0x8b}, {&(0x7f0000001240)=""/56, 0x38}], 0x5}, 0x7f}, {{&(0x7f0000000980)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/237, 0xed}, {&(0x7f0000000b00)=""/49, 0x31}, {&(0x7f0000000b40)}, {&(0x7f0000000b80)=""/100, 0x64}], 0x4, &(0x7f0000000c40)=""/71, 0x47}, 0x7}, {{&(0x7f0000000cc0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000d40)=""/108, 0x6c}, {&(0x7f0000000dc0)=""/62, 0x3e}, {&(0x7f0000000e00)=""/32, 0x20}, {&(0x7f0000000e40)=""/148, 0x94}, {&(0x7f0000000f00)=""/61, 0x3d}], 0x5}, 0xcc}], 0x3, 0x40000180, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000180)) r10 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r10) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYRES8=r3, @ANYRES32=r11, @ANYBLOB="804082172299a2aa070dad5a7204b6e606c5ac00", @ANYRES16, @ANYRESOCT=0x0], 0x48}}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005580)=@deltfilter={0x4674, 0x2d, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x3, 0xa}, {0xa, 0xc}, {0x10, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0xb}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_basic={{0xa}, {0x462c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0xfff1}}, @TCA_BASIC_POLICE={0x424, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100}, @TCA_POLICE_RESULT={0x8, 0x5, 0x597}, @TCA_POLICE_RATE={0x404, 0x2, [0xfff, 0x2, 0x9, 0xfa, 0x9, 0x3ff, 0x1, 0x7fff, 0x5, 0x2, 0xfffffffe, 0x7, 0x2, 0x3, 0x0, 0x1ff, 0x1, 0x3, 0x9, 0xb, 0x3, 0x3, 0x10, 0x2, 0x2, 0x8000, 0xfffffffe, 0x1, 0x2, 0x3, 0x5, 0x0, 0x1, 0x7f, 0x3ff, 0xf, 0x83be, 0x7f, 0xfffffffe, 0x6, 0x4, 0x0, 0x3, 0x80000001, 0xffffffb9, 0x0, 0x9, 0x81, 0xb0, 0x10000, 0x6, 0x3, 0x0, 0x0, 0x8001, 0xffff0f58, 0xa, 0x10000, 0x9, 0x9, 0x2, 0x5, 0x9, 0x80000000, 0x4, 0x7, 0x6, 0x40, 0x9, 0x6, 0x2, 0x5, 0x1b2, 0x6, 0x1, 0x75b, 0x7, 0x4, 0xfffffffb, 0x2, 0x1, 0x2, 0x1, 0xc3, 0x9, 0x104, 0x2, 0xfffffff7, 0x7c, 0x80000000, 0x9, 0x40, 0x2, 0x9, 0x7ff, 0x4, 0x6, 0xcb80, 0x3, 0x1ff, 0xfffff048, 0x0, 0x3, 0x4, 0x7, 0x1, 0x8, 0x401, 0x7270, 0x5713, 0x8, 0x8001, 0xa, 0x9, 0xa1dc, 0x587e, 0x3, 0x9, 0x7, 0x100, 0x3, 0x6, 0x81, 0x2, 0x0, 0xffffff23, 0xfffffff7, 0x82, 0x7, 0x2, 0x9, 0xfffff7da, 0x65, 0x49b, 0x100010, 0x8, 0x8000, 0x8, 0x4, 0x400, 0xa, 0x4, 0x8, 0x4d11, 0xf9e, 0x0, 0x1, 0x1a9f, 0x7, 0x0, 0x1, 0x3, 0x856, 0x2, 0x5, 0x3, 0x3, 0x80, 0xffffffff, 0xa, 0x3, 0x37, 0x9, 0x3ff, 0x800, 0x10001, 0x1, 0x1, 0x3, 0x10, 0x8, 0x8001, 0x10, 0x2, 0xe, 0x0, 0x4, 0x10001, 0xfffffffd, 0x0, 0xfffffffb, 0x1000, 0x80000000, 0x103f257b, 0x4, 0xfffffffa, 0x72b, 0x3, 0x6, 0x3, 0x6, 0x0, 0x4, 0x5e44, 0x8, 0x8000, 0x0, 0x2, 0x73b, 0x0, 0x40, 0xa, 0x96, 0x7, 0x80, 0x8e, 0x0, 0x7, 0xfffffff7, 0x8, 0x8, 0x730, 0x2, 0x1, 0xe574, 0x5, 0x88, 0x2, 0x2, 0x1000, 0xed, 0x8, 0x1ff, 0x1b, 0x57e, 0x7, 0x6, 0x3ff, 0x101, 0xe2, 0xc3a, 0xbd6, 0x0, 0x0, 0xfffffff7, 0xd3e, 0x2, 0x9ec2, 0x1, 0x1, 0x7, 0x1, 0x40, 0x9, 0x139, 0x100, 0x3, 0xd, 0x1ff, 0x8, 0xf, 0x3, 0x1, 0x5, 0x5, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa}]}, @TCA_BASIC_EMATCHES={0x468, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x8, 0x2, 0xfff7}, {0x4, 0x5, 0x1, "8efda2149b"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xfff, 0x3, 0x2}, {0x6, 0xa, 0x40, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x414, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x108, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x3}, "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"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5, 0x7, 0x5}, {{0x1, 0x1}, {0x2, 0x1, 0x1}}}}, @TCF_EM_IPT={0x1ac, 0x2, 0x0, 0x0, {{0xfff7, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x91, 0x5, "291cd3f38e0f7764946e8c93eefb3104415ef1a4e3780dbf9eaec6cc675ba233fba43b1891602f1e2596194917232180c27b5a41ffa04627567190315c6ab1e79e52373cbd89c5a4f33f5330c36baa81d4bb01210dd04ee77ae73f732879da61761499ae63c768f189539f1ae0de42d2a542ca58cd53bb8503786c899792abb9409e1154e9c8ba0b9279cde11d"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0xd8, 0x5, "064a2bcd636f60a3cbb223a2d3099b6264ea8150f53b6b30e39b1bf67836099f9e979a9395ccb269638bde59808bcd76f824fbaed72406e82ef3accfe4959a9eac074df66a15daaf271a520583c4e8fdf636d2b42a9125df75647917b55e592387950ff5b713c87223621758c394327fe1a00cb906b2bc8e9e28e71d8b663fe9623955ee0e23ddf0adf7e0b5ac533285d945d0f55323dbd89747b16d1c4d78d63f4accc3fa911aab2b2d3baec27776b1da46194437af91efc18e85e68c38a6b78be66279610494676479e3b66867e73e53590bc7"}]}}, @TCF_EM_META={0x94, 0x3, 0x0, 0x0, {{0x1f, 0x4, 0x8000}, [@TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="05d1", @TCF_META_TYPE_VAR="b948b87648738a"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x8, 0x1}, {0x6, 0x8}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x8c}, {0xc, 0xa7, 0x1}}}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="4183f056d097f30cef"]}, @TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="8392", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="e0d16b8f2f5a15db5c"]}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="778048", @TCF_META_TYPE_VAR="c7fe21"]}, @TCA_EM_META_LVALUE={0xb, 0x2, [@TCF_META_TYPE_VAR="3f69b3", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x15, 0x1}, {0x3, 0xff, 0x1}}}]}}, @TCF_EM_CONTAINER={0x9c, 0x1, 0x0, 0x0, {{0xfffa}, "141541e90730325d87e6b37fc05c86a928e4752f716d5366e9e15b0874ed9a7bb5e1e0277b22f7b4c70c1a81b0aaba0ea0b760f3e9567c9493ec4676c37c6a36c2c671091dec0c7b223bb4d7999a7076c1e6b92760291d0b3887ba195fcd9ae2447232679b32f2e1c3d3e6913bc7d7a70b89d4dc73e012c854a0c5ac24ea1b0d16dd139f51d2ec615040903861"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xe}, {0x0, 0x1, 0x1, 0x7, 0xd, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_BASIC_POLICE={0x410, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x3, 0x400, 0x5c7e, 0x10, 0xe4, 0x6, 0x4, 0x3, 0x8, 0x1ff, 0x30, 0x7a, 0x347cdc2f, 0x3, 0x8, 0x7, 0x100, 0x7, 0x9fe, 0xff, 0xff, 0xfffffffe, 0x1ff, 0x28000000, 0x4000000, 0x7f, 0x5, 0x2, 0xfffffff7, 0x9, 0x401, 0xb869, 0x80000, 0x7, 0x80000001, 0x400, 0x2b68eced, 0xc9, 0x6, 0x529d, 0xffffffff, 0xffff8001, 0xc, 0x0, 0xffffffff, 0x3, 0xf126, 0xfffffff9, 0x5, 0xfffff141, 0x10001, 0x289, 0x5, 0x0, 0x3, 0x100, 0xb6f, 0x80, 0x4, 0x6, 0x0, 0xe, 0xfffffffb, 0x1, 0x0, 0x1, 0x8, 0x200, 0x0, 0x589a, 0x97b, 0x743, 0x9, 0x8, 0x5, 0x9, 0x0, 0x7, 0x1000, 0x5, 0x1, 0x7, 0xffff, 0xfffffffd, 0x80d, 0x6, 0x3, 0x6, 0x10000, 0x2, 0x3, 0x8, 0x2, 0xfffffff9, 0x714, 0x1, 0x5, 0x5b, 0x6, 0x13, 0xff, 0xc8000000, 0x10, 0x0, 0x401, 0x8691, 0x3, 0xffffffff, 0x8, 0x4, 0x0, 0x1ff, 0x81000000, 0xaa, 0x0, 0xd, 0x1, 0x3, 0xb71, 0xf, 0x5, 0x5, 0x7f, 0x1, 0x9, 0x5, 0x2, 0x3, 0x10, 0xfffffffe, 0x3, 0xd, 0x8, 0x3, 0x401, 0xffffa5b7, 0x4d, 0xfffffff8, 0x4, 0x2, 0x5, 0x4, 0x5, 0x0, 0x6, 0x2, 0x59, 0x3, 0x4, 0x800, 0x8, 0x8, 0xa, 0x0, 0x1, 0x5, 0x9, 0xffffffff, 0x2, 0x100, 0x7f, 0x6, 0x5, 0x8, 0x9b4, 0x0, 0x1, 0x9, 0x1000, 0x9, 0x2, 0x10, 0x209, 0x2ee, 0x0, 0x3, 0x8001, 0x2ae06725, 0xfffff7df, 0x0, 0x3494, 0x8, 0x6, 0x8000, 0x80000001, 0x5, 0x2, 0x9, 0x3, 0x5, 0x5, 0x6, 0x3f4, 0x18c6, 0x9, 0x1, 0x1000, 0xf, 0x1, 0x2, 0x10000, 0x7f, 0x8, 0x0, 0xfffffff6, 0x4545a6c9, 0xb, 0x94f, 0x3, 0x80000001, 0x1, 0x1, 0x2605, 0x9, 0x1, 0x4, 0x2, 0x0, 0x7, 0x4, 0x5, 0xffff, 0x2, 0x7ff, 0x2, 0x0, 0x2, 0x7, 0x8, 0x4, 0x8, 0x4, 0x6, 0x6, 0xffffff9f, 0x8, 0x2, 0x6, 0x4, 0x6, 0x31, 0x5, 0x0, 0xaf8, 0x3b82, 0x5, 0x3, 0xf4d, 0x3, 0x7b, 0x4, 0x8, 0x946, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}, @TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x90bd, 0x5, 0x1, 0xc, 0x7, {0x2, 0x2, 0x9, 0x7, 0x2, 0x6}, {0x3, 0x2, 0x3, 0x3, 0x9, 0xffffff00}, 0x5334, 0x1, 0xfffffff7}}]}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}, @TCA_BASIC_EMATCHES={0x480, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf21c}}, @TCA_EMATCH_TREE_LIST={0x114, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xdc, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x2}, "a2f46e06028e56173fb9834fb798a52859dee0f94d3b784ce6ebade96463395d000ebccea015279e33c85c2e264b051e200ac2ec6519f5af93021f6e1815bcaffe103ed72a7799357ad4ce548a2d3972036a8e81bf8cbd32b8e5fba90edc9fca778208778c8c804d6582dcdacd4ace77c3110731e6df3c6acd1baadb9c32a2364c2054b9231efa4c66703fcfb9d2cd9e4d17057c5676f220e08caf396b398fe1ccafeb23b2bfa7d1d7f2a5d33dd6d8798440b0c0a6257bc9b547675a2bb74c3d1be558d57d9f32eaeb1050e646"}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x4, 0x4, 0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x42}, {0x80, 0x3, 0x1}}}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x15b, 0x3, 0x7}, {0x6, 0x3, 0xd7, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a0}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0xac, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x7f}, {{0x4, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7, 0x8, 0x8}, {0x0, 0x0, 0xe}}}, @TCF_EM_CONTAINER={0x28, 0x1, 0x0, 0x0, {{0xf4a, 0x0, 0x58d}, "a6b9a9cfcbc769f9d360985fad52a9bdfa070e6a3211f5eef54e"}}, @TCF_EM_META={0x5c, 0x3, 0x0, 0x0, {{0x7, 0x4, 0x9}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xff01, 0x17, 0x1}, {0x2, 0x4}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="728c3219"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1a, 0xa, 0x2}, {0x1, 0x5, 0x2}}}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_VAR="f563717131", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="3041999f1fa2", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="aba04aebb8c1c5097c"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT]}]}}]}, @TCA_EMATCH_TREE_LIST={0xb4, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0x6}, {0x2, 0x5, 0x6}}}, @TCF_EM_META={0x88, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0x27, 0x2, [@TCF_META_TYPE_VAR="e62bc12adae3cd", @TCF_META_TYPE_VAR="0511edbaaf225d", @TCF_META_TYPE_VAR="5627fb63b8", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="43dd3fcf839b8727"]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="f456dcbe1b29586e88"]}, @TCA_EM_META_LVALUE={0x30, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="60bd25851fe17fac", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x2, 0x1}, {0xf18f}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xffff, 0x1, 0x5}, {0x8, 0x6, 0x2, 0x6, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0xe0, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xa8, 0x1, 0x0, 0x0, {{0x0, 0x0, 0x1ff}, "3b807372ec9a2e2b1f6efa0a116bf79c70e213a806397c6ee7bfc7733e205175c6eb252768d1ac1177a09dc16bff6b4b3fae3ab1d97ae4906db43b801d2284bc6c77892b830e35196bb6310680844d68efed7f97bc65b8fbacd4748955d82b7540479f54e0af9622f502bc098e7e597df8770ac61dbba16539579338e803e4be63c810e00b44ce3b3e5abcc3d29fea7bc665c43f8b6fd9460e"}}, @TCF_EM_CONTAINER={0x34, 0x1, 0x0, 0x0, {{0x43, 0x0, 0x100}, "fab995bb29b3b9093b9af7a0ec6e3eebe0529ae3faf9286c687e97a432c2cf241e84417530f210"}}]}, @TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x101, 0x1, 0xfffd}, {0x69c, 0x2, 0x8, 0x3, 0x8}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xb44, 0x3, 0x2}, {0x6, 0x4, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0xfff}, {{0x4, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xa8, 0x3, 0x0, 0x0, {{0x5081, 0x0, 0x1}, "4da499a5a485b62967b8150cf728960e7dd5b59751bf47ab8a803c4c66fae7da8a9c5deb1d848b8e8bb199ea0d521ea4fd31bc9682503eeb9a2f86853a03596807c646a4e866ca93afea3df8b020147d6a4c058b430ba676a9243bf684e1a0816e3799dac5de5589f3c7660ed9ac433fd6bc83b0be154bef2893e06490b25a57a4808c14eab1a1c10e53673acde262beb4e81deb28dac68026"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x598e}, {0x200, 0x9, 0x0, 0x1, 0x3, 0x2, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_BASIC_EMATCHES={0x11c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x118, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xec, 0x2, 0x0, 0x0, {{0x7, 0x0, 0x8b}, "5ccb5326852431f1066ec12eee7dd0fbf671070cf5bb8e4a8b103ade4415aa3c402394475a07076021311ed545ef0242ef579b92a42edb8e5cfeb9f58f366dcb04505e6e12f51449676e8f1db68e99f5ab413d0c33111cf0a0c2bec505e5ea1893affb683f1e7f9b363c97eb53e301794d29e035a4f9b9fedd22d0b5ac1c2694e2945a56af89ae369bccd4729df23244db3b674a711b29025f93a33159029773405815cb5e41999856ad7c9629a9124067dedc13ee8782c5c3c2a96b43f9f8263e8f2a36bd8bc027443d3bdb5988c2025b514b18db210c98b855628c9572"}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xfffd, 0x8, 0xb1c9}, {0x1, 0x0, 0x3}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6, 0x1, 0x1}, {0xe1, 0x5, 0x3, 0x1, 0x3, 0x3}}}]}]}, @TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7fff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x41e}}]}, @TCA_BASIC_ACT={0x3368, 0x3, [@m_police={0x324c, 0x14, 0x0, 0x0, {{0xb}, {0x3170, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd41}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x377, 0x9, 0xbd, 0x2, 0x5, 0x75600cc8, 0xdd1, 0x7, 0x3, 0x4, 0xffff, 0x80000000, 0x7, 0x8, 0xfff, 0x1000, 0x1, 0x5, 0x101, 0x0, 0x0, 0x2, 0x0, 0x7fff, 0x5, 0x54bf05ec, 0x9, 0x0, 0x0, 0xffff, 0x5, 0x3, 0x9, 0x5088, 0xfffffff8, 0x9, 0x400, 0x6, 0x5, 0x2, 0x9, 0x7fff, 0x6, 0x7, 0x8f, 0x8, 0x7, 0x8, 0x8, 0x7, 0x0, 0x8, 0x1, 0x800, 0x6, 0x5, 0x2, 0xffffffff, 0x8000, 0x2, 0x10000, 0xeb, 0x6, 0x1, 0x5, 0x3, 0x0, 0x40000, 0xf6b4, 0x81, 0x8, 0x0, 0x1, 0x4, 0x401, 0x7, 0xd, 0x7, 0x8, 0xffff581b, 0xce3, 0x200, 0x36f16e84, 0xff, 0x18a00, 0x0, 0x6, 0x1, 0xd, 0xf, 0x7, 0x4fcb, 0x5, 0x2e05, 0x8001, 0x81, 0xffff, 0x9, 0x94c, 0x7, 0x1ff, 0x4, 0x40, 0x5, 0x10001, 0x8, 0x7, 0x4, 0x3c, 0x2, 0x1, 0x81, 0xffff, 0x8001, 0x1, 0x0, 0x7, 0x200, 0x9, 0x8, 0xa9a5, 0x3, 0x0, 0x3, 0xb9, 0x4, 0x8, 0x100, 0xffffffff, 0x3, 0x3, 0x7f, 0x8, 0x4, 0x3, 0xfffffffa, 0x200, 0x9, 0x4, 0x3, 0x6, 0x24000000, 0x731, 0x81, 0x9, 0xfffffff9, 0x4, 0x6, 0x10001, 0x10000, 0x0, 0x6, 0x5, 0x8, 0xd0000000, 0x9, 0x7, 0x3, 0x81, 0x5, 0x9, 0x80000000, 0x1, 0xffff, 0x10000, 0xf5, 0x32, 0x3, 0x2, 0xfffffffb, 0x8, 0x2a8, 0x3ff, 0x6, 0xfff, 0x9, 0x4a, 0x14, 0x3ff, 0x5, 0x0, 0x3, 0x0, 0x80, 0x1, 0x5, 0xfffffff9, 0x8, 0x7, 0x8, 0x70, 0x8000, 0x3, 0x1, 0x1000, 0x200, 0x4, 0x6, 0x0, 0x0, 0xfff, 0x0, 0x10000, 0x4, 0x0, 0x5, 0xc2f, 0x3, 0x43, 0xa7, 0x6, 0x5, 0x3, 0x80, 0xb, 0x61f, 0x2, 0x1ff, 0x7, 0x39f2, 0xe, 0xfff, 0x8, 0x9, 0x43, 0x7, 0x4, 0x400, 0x5, 0x5, 0x9, 0x8, 0x1822, 0x80000001, 0x2550, 0xfffffffd, 0x0, 0x10001, 0x0, 0xe, 0x1, 0x0, 0x3, 0x2, 0x5, 0x2, 0xf, 0x0, 0x9, 0x800, 0x81, 0xeda, 0x6, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x6, 0x8, 0x195, 0x6, 0x8, 0x9, 0x0, 0x3, 0x4d7d, 0x7, 0x0, 0x10, 0x1, 0x4000000, 0x7f, 0x4, 0xfffffffe, 0x0, 0xc1, 0x4d, 0x4, 0x8a6, 0x3fe217e6, 0x80000000, 0xfe4, 0x2000, 0x4, 0x19f, 0x2, 0x7, 0x9, 0x3a, 0x8, 0x9, 0x39f, 0x8, 0x4, 0x7, 0xffffffff, 0x0, 0x80000001, 0xc, 0x1, 0x0, 0xfffffff7, 0x101, 0x7fff, 0x6, 0x6ce, 0x5, 0x3, 0xf, 0x4, 0x1000, 0xfffff000, 0x8, 0x2, 0x40, 0x8, 0x4, 0x1, 0x5, 0x6b, 0x7f08e173, 0x1, 0x98e6, 0xce1e, 0x1ff, 0x8, 0x10001, 0xffffff80, 0x0, 0xffff, 0x8, 0x8, 0xc220000, 0xfff, 0x4, 0xb, 0x0, 0x6, 0x2, 0x5, 0x7, 0x10, 0x3, 0x62, 0x80000001, 0x1, 0x3, 0x418, 0x4, 0xd05b, 0xfffffffb, 0xe, 0x2575615d, 0x2, 0x6, 0x81, 0x1, 0x5, 0x101, 0xff, 0xd, 0x2, 0x10001, 0x7, 0x1, 0x7, 0x5, 0xd6, 0x2, 0x6, 0xff, 0xffff, 0x91486c8, 0x0, 0x6, 0x5175, 0x4, 0x7, 0x0, 0x8, 0x7, 0x8, 0x4, 0x9, 0xf, 0x0, 0x2, 0x5, 0x800, 0x10001, 0x2, 0x873, 0x3, 0x2, 0x0, 0x3ff, 0x6c, 0x5, 0x59ca, 0x1, 0xcb, 0x8001, 0x4, 0x800, 0x1200000, 0x4, 0x7, 0x100, 0x7, 0x1, 0x89ac, 0x7fffffff, 0x9, 0x4, 0x2, 0x7fffffff, 0x12, 0xa5ab, 0x5, 0x9, 0x5, 0x9, 0x100, 0x7, 0x7, 0x9, 0x0, 0x7, 0x9, 0x0, 0x80000000, 0xb, 0xca, 0x6, 0x4, 0x3, 0x7, 0x6, 0x7f, 0x3ff, 0xf, 0x7, 0x5, 0x8001, 0x4, 0x3, 0x8, 0xab5b, 0x365, 0x100, 0x5, 0x0, 0x81, 0x2, 0xae30, 0x1000, 0x1, 0x6, 0x5, 0x4, 0x93dc, 0x7, 0x0, 0x3, 0xfffffffe, 0x3, 0x0, 0x4, 0x2, 0x57, 0x7, 0x8, 0x4, 0x7f, 0x4, 0x5, 0x0, 0x2, 0x4, 0xceb, 0x3, 0x2, 0x1ff, 0x74, 0x0, 0x5, 0x0, 0x9, 0x4, 0x4f, 0x2, 0x4568, 0x5, 0x3, 0xfffffffd, 0x7fffffff, 0x8, 0x200, 0x3aec979a, 0x2, 0x3, 0x4, 0x8001, 0x5, 0x2, 0xa35, 0xc3d, 0x2, 0x4, 0x400, 0x7, 0xffffffbd]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb, 0x5, 0x5894, 0x80, 0xc318, 0x4, 0x8, 0x1, 0x80, 0x4, 0x10000, 0x9, 0x9, 0x51e349f4, 0x8, 0x4, 0x6, 0x200, 0x5, 0x7, 0x7, 0x4, 0x6, 0xaf09, 0x8001, 0x5, 0x2, 0x2, 0xff, 0x2, 0x3, 0x9, 0x24da, 0x400, 0x4, 0xf, 0xd63, 0x5d, 0x800, 0x5, 0x2, 0x8001, 0x0, 0x7, 0x0, 0x2, 0x8, 0x80, 0x2023, 0x6, 0xfffffffd, 0x5, 0x6, 0x54ad, 0x401, 0x6, 0x0, 0x401, 0x8, 0x10000, 0x8000, 0x1ea6, 0x0, 0x80, 0x6, 0x0, 0x1, 0x1, 0x4, 0x1, 0x89, 0x3, 0x5, 0x2, 0x7, 0xf, 0x1, 0x7, 0x4, 0xc, 0x7, 0xffff, 0x0, 0x3, 0x20000000, 0x1, 0x3, 0x7, 0xd1, 0x3, 0x8, 0x28c, 0x54, 0xf, 0x10, 0x0, 0xffffffff, 0x7f, 0xfffffeff, 0x5, 0x3, 0x7, 0x80000001, 0x10001, 0x8, 0x6, 0x267, 0x8, 0x86bd, 0x8, 0x2, 0x58, 0x19, 0xfffffff7, 0x7, 0x41f, 0x8, 0x1, 0x10000, 0x6, 0x9, 0x7d, 0x0, 0x6, 0x5, 0x101, 0x7, 0x7, 0x81, 0x6, 0x6, 0x10001, 0x80, 0x5, 0x2, 0x2, 0xe5b, 0x8, 0x0, 0x1ff, 0x92, 0x8203, 0xfffffff8, 0x9, 0xd, 0xca5, 0x2, 0x4, 0x73, 0x69d, 0x0, 0x3, 0x8, 0x6, 0x4, 0x8, 0x1, 0x7, 0x6, 0xfffffffb, 0xfff, 0xfffff630, 0xfffffff9, 0xffffffff, 0x53, 0x80000001, 0x5, 0x2c, 0x5, 0x2, 0x0, 0x0, 0xffff, 0x0, 0xe9, 0x5, 0x8, 0x0, 0x7, 0x7, 0x6, 0x1, 0x3, 0xfffffffc, 0x727, 0xaa8, 0x1, 0xffffff60, 0x763a, 0x40, 0x9, 0x0, 0x32, 0x0, 0x1ff, 0x1, 0x10000, 0x3, 0x3, 0xff, 0x7fffffff, 0x2, 0x4, 0x5, 0x7, 0xe92b, 0x101, 0x6, 0xf6, 0x8, 0x4, 0x9, 0x401, 0x4, 0x9, 0x81, 0xffff6dce, 0x3ff, 0x3, 0xfffffffa, 0x6, 0x4, 0xc1, 0x8001, 0x112, 0x540, 0x8, 0x43, 0x4, 0x4, 0x5, 0x6, 0x9, 0x8, 0x6063, 0x5, 0x6, 0x3, 0x1, 0xa9f6, 0x200, 0x7, 0x7, 0xc55, 0x2, 0x0, 0x9, 0x4, 0x3, 0x2, 0x3, 0x8000, 0x4, 0x9, 0x7, 0x4266]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x190}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0xa, 0x80000000, 0x7, {0x10, 0x0, 0x9, 0x9, 0x3, 0x4}, {0x3, 0x1, 0xf, 0xc, 0x63, 0x8}, 0x2, 0xab, 0xd}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x801a}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4800000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x3, 0x9, 0x5, 0x4, 0x8baa, 0xfff, 0x0, 0x8, 0x40, 0x10000, 0x8001, 0xbc7, 0x2, 0x3, 0x3, 0x0, 0x1, 0x7fffffff, 0x80000001, 0x9, 0x9, 0x5, 0x0, 0x1, 0x5, 0x9ac, 0x7, 0x26c5, 0x1, 0x1400972f, 0x4, 0x3, 0x2, 0x600, 0x30d2, 0x6, 0xe65, 0x58, 0x7, 0xe72d, 0x3, 0x2, 0x80000000, 0x4, 0x8, 0x7fff, 0x5, 0x1, 0x2, 0x4, 0x61, 0x7, 0x8, 0xee, 0x6, 0xfffffff7, 0x5, 0x11a1e7d1, 0x3, 0x7, 0x2, 0x80, 0xb1, 0xb31, 0x5, 0x0, 0xd4b, 0x9, 0x9, 0x2, 0x0, 0x6, 0xfffffffc, 0x3, 0x9, 0x9, 0x9, 0x5, 0x8, 0x0, 0x1, 0x5, 0xb70d, 0x3, 0x40, 0xf9, 0x78c6e848, 0x1, 0xe8f, 0xe7, 0x3, 0x401, 0x8f, 0xfffffffd, 0x3, 0x7, 0x9, 0xf, 0x2, 0x7, 0x1, 0x15, 0x80000000, 0x8, 0x6, 0xa, 0x2, 0x48, 0x8000000, 0x0, 0x81f, 0x6, 0x3ff, 0x3, 0x7, 0x3, 0x9, 0x9, 0x6, 0x1, 0x5, 0x349, 0xc, 0x7, 0x25, 0x0, 0x1, 0xa2d8, 0xfffffffe, 0xebd8, 0xfffffc00, 0x81, 0xfffff001, 0x3, 0x1, 0x0, 0x0, 0x8, 0x5, 0x40, 0x0, 0x8, 0x5, 0x401, 0x6, 0x6, 0x1, 0x80000001, 0x0, 0xffff, 0x73, 0x7, 0x9, 0x1000, 0x4, 0x4, 0x6, 0x1, 0x3, 0x3, 0x9, 0x7, 0x9, 0xfffffffa, 0x1000, 0x6, 0x8, 0x7fffffff, 0xc, 0xa0000000, 0x2, 0xffff, 0x5, 0x7, 0x1, 0x9c, 0x88, 0x3, 0x8, 0x9, 0x4, 0x2, 0x2, 0x8, 0x80000000, 0x0, 0x8, 0x401, 0x93, 0x5, 0x3, 0x3, 0x6, 0xffffffff, 0x9, 0xb0, 0x2, 0x1, 0x8b88, 0x2, 0xc, 0x50, 0xc0c, 0x3, 0xfffffff6, 0x3, 0x4, 0x0, 0x7f, 0x5, 0x3, 0x7d9, 0x9, 0x1, 0x2, 0x8, 0x7f, 0x4, 0x0, 0x800, 0x9, 0x9, 0x3, 0xd4a, 0x40, 0x8, 0x2, 0x3, 0x9, 0x8000, 0x2, 0x4, 0x8, 0x5, 0x8, 0x5, 0xfffffff9, 0xffff, 0x10000, 0x8, 0x9, 0x1006, 0x90, 0xc3, 0x2, 0x2, 0x6, 0x8, 0xffff5b57, 0x800, 0x8997, 0x6, 0x1, 0xc, 0x2]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x5, 0x3, 0x6d, 0x5, 0xfffffff8, 0xc, 0xfffffffb, 0x8, 0x7, 0x6, 0x6, 0x9, 0x0, 0x11e, 0xffff, 0x6, 0xdf, 0x1, 0x1, 0x0, 0x6, 0x4, 0x81, 0x1, 0x7fff, 0x1, 0x1510, 0x3, 0x8, 0xffff, 0xfff, 0x2, 0x8, 0x3, 0xfffffffd, 0x9, 0x4, 0x8, 0x5, 0x5, 0x9, 0x9, 0x7, 0x6, 0x6, 0xbb, 0xc, 0xfffffffc, 0x6, 0x9, 0x6, 0x61, 0x0, 0xc, 0xffffffb9, 0x2, 0xb, 0x8, 0x9, 0x400, 0x5, 0x7ff, 0x8000, 0x4, 0x0, 0x0, 0x9, 0x80, 0x4, 0x3d, 0x9, 0x1, 0x101, 0x4, 0x7f, 0x8, 0x5, 0x200, 0x50, 0xff, 0xb38, 0x1, 0x40, 0xfffffffa, 0x81, 0xfffff08b, 0x40, 0x1, 0xff, 0x7, 0x3, 0x4, 0xd9, 0x4, 0xfffffffb, 0x1, 0x3, 0x2d38, 0x0, 0x2f, 0x5ff, 0x3126e50d, 0x7, 0xff, 0x0, 0x5, 0x7, 0x4, 0x780, 0x28, 0xe8a4, 0xffffff46, 0x36, 0x23, 0x3fd0, 0x8000, 0x50000000, 0x6, 0x278, 0x3a, 0x1d2, 0x1, 0x1, 0x100, 0x8, 0xaf, 0x8, 0x3, 0x6, 0x2, 0x3, 0x3, 0x2, 0x1, 0x8, 0xc, 0x4, 0x8, 0x219, 0x8, 0x6, 0x4, 0x1, 0x6, 0x5f, 0x5a, 0xfffffffd, 0xffffffff, 0x1, 0x7ff, 0xb, 0x6, 0xd574, 0x4, 0x1, 0x901, 0xe2f, 0x2, 0xfffffff9, 0x3, 0x3, 0xb4ff, 0x48e6, 0x4, 0x3, 0x9, 0x7, 0x6, 0x5, 0x5, 0x8, 0xa, 0x4, 0x100, 0x2, 0x7, 0x1, 0x80000001, 0x8, 0x400, 0xf92, 0x7, 0xd, 0x9, 0x1, 0x7, 0x6, 0x1, 0x9ede, 0x3, 0x6, 0x7fff, 0x1, 0xe00, 0x9, 0x6, 0xc549, 0x10, 0x800, 0xacb, 0x623, 0x3, 0x9, 0x2, 0xa, 0xd, 0x9, 0x0, 0x8000, 0x4, 0x8, 0x4, 0x4, 0x10000, 0x2, 0x9, 0x5, 0x2, 0x4e7, 0xf58, 0x8d0, 0x100, 0x1, 0x2, 0xac42, 0x2, 0x0, 0x2, 0x3a2d, 0x5, 0x3, 0x8000, 0x3, 0x3, 0x4000, 0x3, 0x1, 0x8, 0x6, 0x2, 0xffff, 0xfffffff8, 0xfffffffb, 0x9, 0x4, 0xdf, 0x0, 0x9, 0x4, 0x66, 0x8, 0x0, 0xb, 0x9, 0x400]}, @TCA_POLICE_RATE={0x404, 0x2, [0xf7, 0x5, 0x1, 0x3, 0xffffff80, 0x17, 0x5, 0x0, 0x9, 0xa, 0x4, 0x9, 0x7, 0x80000001, 0x0, 0xca5b, 0x414a, 0x4, 0x9, 0x6, 0x0, 0x3, 0x52a40cb3, 0x67, 0x4, 0x7, 0xf04b, 0xb8a, 0x1, 0xa1c0, 0x5, 0x6, 0x1, 0x4, 0x8, 0xfffffff8, 0xffffffff, 0x0, 0x4, 0x5c65, 0x3, 0x6, 0x8, 0x3, 0x2, 0x3, 0x6, 0xd6, 0x7, 0x9, 0x5, 0x81, 0x6, 0x4e, 0x8, 0x5, 0x1ff, 0x9, 0x9, 0x7, 0x9, 0x7, 0xe, 0x9, 0x4, 0x8, 0x1000, 0x7fff, 0xfffffffd, 0x2, 0x8, 0x401, 0x9, 0x0, 0x3, 0x6, 0x0, 0x0, 0x8, 0xb, 0x0, 0x5, 0x8, 0xfffffff9, 0xf3, 0x9, 0x4, 0x8, 0x6, 0x4, 0x3, 0x4, 0xe69, 0x1000, 0x3, 0x800, 0x2251, 0x8, 0x8db, 0x100, 0x6, 0x40, 0x8001, 0x1, 0x3ba, 0x8c99, 0x7fff, 0x80000000, 0xe5, 0x6, 0x439400e8, 0x2, 0x4, 0x6, 0x8001, 0xfffffa12, 0x2, 0xfffffffa, 0x1, 0x6, 0x4, 0x400, 0xe96c, 0x7fffffff, 0x2, 0x4, 0x0, 0xf89, 0xe, 0x8, 0x1000, 0xd0, 0x7, 0xf42, 0x8000, 0xfffffff5, 0x7, 0x5, 0x3, 0xff, 0xbc, 0x1, 0x3, 0x258, 0x8, 0x7fffffff, 0x2, 0x5, 0x3, 0xb, 0x9, 0xfffff157, 0x5, 0x8, 0x4, 0x0, 0x3bc, 0x6, 0x0, 0x3, 0x4, 0xd, 0x50, 0xda, 0x1, 0xfc000000, 0x6635, 0x8, 0x2, 0x50d35079, 0x2, 0x6, 0x2, 0x101, 0x8, 0x1, 0x3, 0x3, 0x6, 0x1ff, 0x5, 0x0, 0xfdca, 0x10000, 0x1, 0x6, 0x9852, 0x130, 0x5, 0x8, 0x9, 0x0, 0x4, 0x81, 0xe4ff, 0x9c1, 0x1, 0x10, 0x80000000, 0x3, 0x9, 0xffffffff, 0x1, 0x3, 0x6000000, 0x3288, 0x9, 0x1, 0x4, 0x4, 0x2, 0x2f9, 0x0, 0x7, 0x5, 0x6, 0x8, 0x80, 0x6, 0xfffeffff, 0x1, 0xeff7, 0xffff8000, 0x6, 0x7fffffff, 0xc, 0x2, 0x9, 0x0, 0x8, 0x7, 0x200, 0x6, 0xffff, 0x4, 0x7, 0x8, 0x9, 0x40, 0x3, 0x0, 0x2, 0x8, 0x6, 0x7, 0x1, 0x9, 0x101, 0x1, 0xae3a, 0x8, 0x0, 0x2, 0x9128, 0x10000, 0xfffffffb]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x401}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x51b}, @TCA_POLICE_TBF={0x3c, 0x1, {0x61a7, 0x7, 0x7, 0xfffffffe, 0xe000000, {0x7, 0x2, 0x5, 0x1ff, 0x29, 0x3ff}, {0x9d, 0x0, 0x9, 0x4, 0x10, 0x32}, 0xdc82}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x2, 0x8, 0xd, 0x77ce, 0x6, 0x6, 0x1, 0x200, 0x4, 0x5, 0x7ff, 0x4, 0x4, 0x1, 0x1ff, 0x7, 0x10000, 0x12, 0x2, 0xffff2b53, 0x128e, 0x2, 0x1, 0x4, 0x401, 0xd, 0x8, 0x6, 0xc6, 0x401, 0x1, 0x80000000, 0x3, 0x1f9, 0x73, 0x4, 0xff, 0xa1, 0x6, 0x7fff, 0x5, 0x8, 0x6, 0x3, 0x5, 0x5, 0xfff, 0x1, 0xfffffffd, 0x1, 0x3, 0xffffff05, 0x8, 0x4, 0x2c4f, 0x24, 0x7, 0x0, 0x81, 0xbb6, 0x6, 0x40, 0x2, 0x3, 0x2, 0xfffffffc, 0x4, 0xec0, 0xa63, 0x0, 0x7, 0x2, 0x5599, 0x800, 0x4, 0x74, 0x8, 0xba3e, 0x1, 0x1ff, 0x10000, 0x5f4, 0xffff, 0x0, 0x5, 0x1, 0x400, 0x3, 0x3, 0x8, 0x9, 0x9be3, 0xffffffff, 0x91, 0x43ed, 0x40, 0x3, 0x7fff, 0x7fffffff, 0x8, 0x6, 0x0, 0x3d28, 0x80, 0x7ff, 0x9, 0x2, 0xfcb, 0x9, 0x9, 0xf, 0x4, 0xe, 0x0, 0x8, 0x10, 0x7, 0x200, 0x200, 0x7f, 0x3, 0x1000000, 0x62, 0xff, 0x7, 0x1e, 0x5, 0x6, 0x5, 0x5, 0x2, 0x8, 0x2, 0x2, 0x7, 0x3bbd0, 0x200, 0x4, 0x0, 0x20, 0x8, 0xa0000, 0x400, 0x7, 0x0, 0x3, 0x3be41a3c, 0x1000, 0x8b, 0xc0, 0x9, 0x9e, 0x1000, 0x1ff, 0xb8d, 0x8, 0x1, 0x8001, 0x7fff, 0x2, 0x0, 0x6627, 0x1, 0x8, 0x3, 0xd66, 0xfffffff5, 0xfff, 0x9, 0x4, 0xfff, 0x40000000, 0x3, 0x7, 0xc, 0x3, 0x0, 0x2, 0x3, 0x80000001, 0x809, 0x1ff, 0xb1bb, 0x2, 0xd36e, 0x9, 0xffffff02, 0x0, 0x5, 0x1, 0x3, 0x7f, 0x4, 0x10001, 0x9, 0x0, 0xdd02, 0x3, 0x0, 0x5, 0x4, 0x5, 0xe90, 0xe, 0x2, 0x3, 0xc84a, 0x40, 0x5, 0x3, 0x3, 0x0, 0xe1d6, 0xf, 0x1, 0xc5, 0x10000, 0x7, 0x80, 0xb733, 0x1, 0x1, 0x9, 0x0, 0x2, 0x5, 0x400, 0x8, 0xffff1f6a, 0x6, 0x7, 0x8, 0xba85, 0x2, 0x6, 0x3ff, 0x5, 0x400, 0x5, 0x9, 0x3ff, 0x6, 0xcf6, 0x5, 0xd, 0x1, 0xc8, 0x929, 0x5, 0x97, 0x2344, 0xfff, 0x1, 0x6, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x833b}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x9, 0x7f, 0x59a, 0x1, 0x5, 0x88e, 0x1000, 0x6, 0x4, 0x2, 0xfffffffb, 0x1c1, 0x2, 0x7, 0x885e, 0x8, 0x9, 0x7f, 0x1, 0x6, 0xc, 0x1, 0x30, 0x6, 0x7fff, 0x2, 0x5, 0x795, 0x1, 0xffffffc0, 0x800, 0x2, 0x7, 0xfffffff9, 0x0, 0x80000000, 0x5, 0x8, 0x6, 0x1, 0xffff7fff, 0x1000, 0x9, 0x35dd, 0x1, 0x6, 0xc44f, 0x1d96, 0x1, 0xfff, 0xbb, 0x6, 0x8ce, 0x2, 0x4, 0xfb50, 0x6, 0x800, 0x3, 0xa, 0x3, 0xfffffffa, 0x2, 0x5, 0x30, 0x12000, 0x70f8, 0x401, 0xffffffff, 0x3, 0x3, 0xd, 0x1000, 0x6, 0x7f, 0x7, 0xff, 0x0, 0xf5, 0xc25a, 0x8, 0x7fffffff, 0x80000001, 0x5, 0x0, 0xfffffffa, 0x7, 0x7fff, 0x7fff, 0x9, 0x4, 0x5, 0xfffffffa, 0x5, 0x9, 0x9, 0x0, 0x6, 0x8, 0x0, 0x8000, 0xa0, 0xdf, 0x3, 0x3, 0xfff, 0x7ff, 0xf, 0x3, 0x3ff, 0x7f, 0x9, 0xa3, 0x1, 0x5, 0x40, 0x7, 0x80000001, 0x8000000, 0x4, 0x3, 0x10001, 0x9, 0x100, 0x3, 0x10, 0xd2e, 0x98fe, 0xfffffe01, 0x6, 0x0, 0x4, 0xc00000, 0x94, 0x4, 0xd, 0xff, 0x8, 0x1, 0xe88, 0x9, 0xc, 0x2, 0x3, 0x800, 0x8, 0x1000, 0x1424, 0x200, 0x9, 0xfb3c, 0x5, 0xf5, 0xa25000, 0x9, 0xdda, 0x800, 0x401, 0x5, 0x401, 0x9, 0x2, 0x1ff, 0x0, 0x7, 0x9, 0x2eac68af, 0x6, 0x80000000, 0x2, 0x2, 0x4, 0x7ff, 0x6, 0x1f6, 0x4, 0x200, 0x7d53, 0x5, 0x0, 0xffffffc0, 0x8, 0x80, 0x8000, 0x7fffffff, 0x3, 0x2, 0x0, 0x2, 0x7, 0x0, 0xfffffff0, 0x0, 0x5, 0x6, 0x5, 0x0, 0x81, 0x1000, 0x0, 0x80000001, 0x0, 0xffffff63, 0x80, 0x4, 0x418, 0x8, 0x10001, 0xe, 0xc5, 0x8, 0x401, 0x6, 0x10, 0x9, 0x6, 0x8, 0x9, 0x1000, 0x752f, 0x7ff, 0x1, 0x8, 0xb, 0xffffffff, 0x10001, 0x9, 0x3, 0x5, 0x2fa, 0x0, 0x5, 0x7fffffff, 0x3c03, 0x10, 0x66, 0x45f, 0x3150, 0x8, 0x3, 0x9, 0x3a70c46f, 0x8, 0xffff7fff, 0x7f, 0x295, 0xa2, 0x8, 0x0, 0x5, 0x1, 0x786e, 0x8, 0x3, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x370}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x278e}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x5, 0x3, 0x3, 0x80, 0x400, 0x64, 0xb2, 0x7, 0x92, 0xfffffffe, 0x2, 0x6, 0x300, 0xc9e7, 0x3, 0xf, 0x9, 0x6, 0x2, 0x4, 0x3, 0x3, 0x2, 0xfffffff3, 0x0, 0x4, 0x7, 0x6200000, 0x3, 0x6, 0x2, 0xc4f, 0xf, 0x2e9e, 0x800, 0xffff, 0x92f, 0x5, 0x10, 0x5, 0x627, 0x0, 0x800, 0x3, 0x5, 0x0, 0x6, 0xe, 0x1, 0x10, 0x2, 0x3ff, 0x7fff, 0x3a, 0xffffff81, 0xfc, 0x100, 0x65b, 0x180000, 0x1, 0x10000, 0x7, 0x175, 0x0, 0x5, 0x6df4, 0x8, 0x57, 0x3, 0x9, 0x5, 0x7fff, 0xb, 0x2, 0x985, 0x35f, 0x9, 0xfffffff9, 0xf, 0x4, 0xfffffff8, 0x3d, 0x1163, 0x40, 0x6, 0x72, 0x4, 0x2, 0x10, 0x4, 0x1ff, 0x7, 0x214e, 0xe, 0xfffffffa, 0xfffffff9, 0x6, 0x8e2, 0xcc32, 0x1, 0x6, 0x5, 0x9, 0xdf41, 0x4, 0x5, 0x1, 0x5, 0x0, 0xb, 0x9, 0x5, 0x426, 0x8, 0x9, 0x5, 0x0, 0x6, 0x3, 0x598, 0x5, 0x9, 0x7ff, 0x36, 0x9, 0x3ff, 0xfffffffc, 0x6, 0xa, 0xab5b, 0xc, 0x80, 0x200, 0x7, 0x1ff, 0x7, 0x9, 0x6ae3, 0x9, 0x7, 0x200, 0x7, 0x8, 0x2a, 0x2, 0x8, 0x1, 0x7, 0xfffffffa, 0x4, 0x7, 0x7, 0x5, 0x6, 0xfffffffb, 0x2, 0xffff, 0xb, 0x3, 0x5, 0x9, 0x3, 0x2, 0x0, 0x6, 0x6, 0x10, 0x9, 0xa, 0x5, 0x8, 0x8000, 0x2, 0x9, 0x4, 0x323c70a0, 0xcc, 0x6, 0x9, 0x8001, 0x4, 0x6448, 0x85, 0x10, 0x4, 0x2, 0xfffffff4, 0x7, 0x101, 0x7, 0x9, 0x4, 0x8000, 0x800, 0x0, 0x200, 0x0, 0x81, 0x80, 0x3, 0x52, 0x9, 0xc6, 0x8, 0x3, 0x2, 0x81, 0x4, 0xffffffff, 0x7fffffff, 0x6, 0x7f, 0x6, 0x4000, 0xff, 0x6, 0x1, 0x5, 0x2, 0x3, 0x6, 0x5, 0x10000, 0xbf11, 0x8, 0x1, 0x8, 0x0, 0x9, 0xd9, 0xcb8f, 0x80, 0x7, 0x10, 0x7, 0x0, 0x6, 0x5, 0x8a37, 0x0, 0xd33, 0x6, 0x9, 0x400, 0x9172, 0x7, 0x7fffffff, 0x8, 0x0, 0xf37e, 0x400, 0x6, 0x2, 0x4, 0xdafe]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x95}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x3, 0x3b13, 0x2, 0x10001, 0x800, 0x2, 0x5, 0x1, 0x8, 0x7, 0x101, 0x1000, 0xfff, 0x8, 0x4b8, 0x8, 0x9, 0x6, 0x6, 0x5, 0x101, 0xfffffd8d, 0x200, 0x7, 0x24, 0x1, 0x80000001, 0x5, 0x8, 0x5, 0xd5a9, 0x8000, 0x3, 0x6ca, 0x8001, 0x604, 0x8000, 0x3, 0x5600000, 0x3, 0xa, 0x9, 0x8001, 0xe40, 0x6, 0x3, 0x5, 0xffff, 0x0, 0x1, 0x5, 0x7, 0x7, 0x80000001, 0x2, 0x7, 0x0, 0x1, 0x7fffffff, 0xa2, 0x4db, 0x10fbf6bf, 0x1, 0x7, 0x7ff, 0x0, 0x1c1, 0x1f57d4f7, 0x3, 0x4, 0x4, 0x9, 0x46, 0x0, 0x1, 0x3, 0x0, 0x2, 0x4, 0x8, 0x6, 0x3ff, 0x40c7, 0xfffffffe, 0x5, 0x5, 0x4, 0x7ff, 0x80, 0x2, 0x3, 0xb, 0x3, 0x7, 0x3, 0x7, 0x0, 0xffff8000, 0xffffffff, 0xfffffff7, 0x80000000, 0xa, 0x5, 0xe, 0xffffffff, 0xff, 0x1, 0x3, 0x6, 0x4, 0xfffffc01, 0x8, 0x9, 0xffff8e4c, 0x7f, 0xedb, 0x57, 0x8, 0xc, 0x4, 0x0, 0xffffffcb, 0x5, 0x2, 0x9, 0x6, 0x7, 0x4, 0x2, 0x4, 0xfffffff8, 0x4a4, 0x3d06, 0x2, 0x9, 0x89b0, 0xffff, 0x7, 0x7, 0x3, 0x2b7b, 0x4, 0x4, 0x4, 0x7, 0x3, 0x200, 0x4, 0x4, 0x80000000, 0x5, 0x8, 0x1, 0x1, 0x80, 0x6, 0x10001, 0xfffffff4, 0x7, 0xd934, 0x46, 0x8, 0x14f, 0x329, 0x5, 0x7, 0x488df06c, 0x5, 0x4, 0x81, 0x5, 0x80000001, 0x4, 0x1, 0x3, 0x8, 0x2, 0x7, 0x1, 0x2, 0x6, 0x1000, 0xfffffffb, 0x3, 0x84, 0xfffffffd, 0xfffffffc, 0x7f, 0x5, 0x3ff, 0x100, 0x95, 0x4, 0x2, 0x0, 0x4, 0x4, 0x10000, 0xc, 0x1, 0x2, 0x3, 0x44, 0x73c, 0x7fffffff, 0x6, 0x100, 0xbd, 0x16473e65, 0x1, 0xda3b, 0x5, 0x9, 0x8d, 0x0, 0xfff, 0x4c, 0x2, 0x1, 0x7ff, 0x861, 0x1, 0x777, 0x6, 0x4, 0x8, 0x7f, 0xa, 0x4, 0x2, 0x3, 0x3, 0x400000, 0xffffff81, 0x7, 0x81, 0xa4, 0x9, 0x1, 0x3, 0x8000000, 0x3, 0x10000, 0x7, 0x8, 0x101, 0x7, 0x8, 0x4, 0x68c, 0x0, 0xd, 0x4, 0x1, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x449}], [@TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0x9, 0x8, 0x9, 0x7, 0x405, 0x7, 0x6, 0xcc, 0x814, 0x81, 0x1000, 0xb0, 0x401, 0xffff, 0x4, 0x7f, 0xa, 0x8, 0x7b, 0x2, 0x9, 0x7, 0x10, 0x3, 0x3, 0x18, 0x6, 0x6800, 0xff, 0x7, 0xffffffff, 0x5, 0x1, 0x9, 0x2, 0x9, 0x2, 0x2, 0xe, 0x6, 0x1, 0x4, 0xeb1, 0x5, 0xb, 0xda2e, 0x9c, 0x916, 0x0, 0xffffff56, 0x7, 0x40, 0x1, 0x0, 0xfe0000, 0x1, 0xfa87, 0x10, 0x0, 0x8, 0x2, 0x9, 0x6, 0x0, 0x10000000, 0x1, 0x4, 0x3, 0x9, 0x101, 0x4ab, 0xbb, 0x2, 0x1, 0xc4a, 0x7, 0x2, 0x7, 0x6, 0x5, 0x4, 0x80000001, 0xf, 0x2, 0x9, 0x9, 0x1, 0x8, 0x5, 0x2, 0x9, 0x7, 0x80000000, 0xa6, 0x140000, 0x2, 0x7fffffff, 0x6, 0x1, 0x9, 0x7, 0x8, 0x4, 0x8e1, 0x1, 0x7c, 0x1, 0x10, 0x7, 0x7f, 0x7, 0xee, 0xff, 0xfffffff1, 0x5, 0xc0e7, 0x48384f90, 0x4, 0x0, 0x40, 0x8, 0x7, 0x5, 0x1, 0x6, 0x4ff, 0x3, 0x906, 0x9, 0x0, 0x6, 0x7, 0x7, 0x0, 0xe73c, 0x6e2c, 0x400, 0x0, 0x1000, 0x8, 0x100, 0x5, 0x81, 0x3, 0xffff38ea, 0x9, 0x4, 0x1d4, 0x101, 0x4, 0x4, 0x3, 0x5b87, 0x81, 0x82, 0x0, 0x3, 0x9e, 0x9f, 0x4, 0x0, 0x7, 0x9, 0x3ff, 0x5, 0x7, 0x1ff, 0x9, 0x8, 0x4, 0x5, 0x5, 0x9, 0x200, 0xfffffffc, 0xb6, 0xfff, 0xb6, 0x4, 0x100, 0x1, 0x1, 0x4, 0x1ff, 0x61f, 0xc4, 0xb, 0x2, 0xb, 0x9, 0x8, 0x1, 0x53, 0x800, 0x6b, 0xb8, 0xfffffe00, 0x8001, 0x0, 0x76, 0x7ff, 0xffffff01, 0x1, 0xfceb, 0x401a, 0x0, 0x0, 0x0, 0x7, 0x8, 0x6, 0x646b, 0x8, 0x1, 0x4406, 0x4, 0xffffffff, 0x1, 0x40, 0x1, 0x1, 0xfffffff8, 0x2, 0x38, 0x10, 0x5, 0x8000, 0x5, 0x7f, 0xcb2, 0x4, 0xfc5, 0x2, 0x8, 0x8, 0x847, 0xe, 0x4, 0x2, 0x53cae41f, 0x10ec, 0x7cfd, 0x7, 0x10, 0x7, 0x9, 0x6, 0xfffffffc, 0x25, 0x36, 0x0, 0xb, 0x8, 0x5, 0xd]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x100, 0x3, 0x6, 0xb8e1, 0x9, 0x9, 0x0, 0x3, 0x1ff, 0x3ff, 0x3, 0x6, 0x4, 0xa, 0x4, 0x2, 0x8, 0x7, 0x3, 0xbdfd, 0x401000, 0x2, 0x2, 0x80000000, 0x9, 0x1, 0x7, 0xb, 0x7, 0x7, 0x4, 0x4, 0x0, 0xe41, 0x80000001, 0x8001, 0x67e9, 0x80000001, 0x6, 0x3b4, 0x10001, 0x7, 0x8, 0xf, 0xc97, 0x800, 0x8000, 0x8, 0x348c, 0x6, 0x2, 0x8, 0x4, 0x3, 0x9, 0x4af, 0xe, 0x7, 0x8, 0xe, 0xd66a, 0x5, 0x5, 0x1, 0x2, 0x8000, 0x0, 0x1, 0x2, 0x1, 0x7, 0x196c, 0x0, 0x2, 0xf, 0x0, 0x6, 0x6, 0x9, 0x9, 0xcbb1, 0x6747, 0x1, 0x3ff, 0xd4, 0x0, 0x4, 0x9a, 0x5, 0xfffffffb, 0x1, 0x68, 0x7, 0x8, 0x5f4, 0xb, 0x8000, 0x9, 0x1ff, 0x7, 0x4be, 0x7f, 0x9, 0x610, 0x81, 0x0, 0x2, 0x3, 0x401, 0x8, 0x40, 0x3, 0x6, 0x3ff, 0xc5a, 0x3, 0x9, 0xfff, 0x40000, 0x10000, 0x2, 0x3, 0xffff136d, 0x4, 0xc35f, 0x7, 0x9, 0x35, 0x1, 0x3, 0x22d, 0x9f9, 0xeb, 0x3, 0x1, 0x0, 0x81, 0xb, 0x6, 0x1c4, 0x2, 0x2, 0x89, 0x1, 0x6, 0x6, 0x4, 0xd45, 0x1, 0x30, 0x1, 0x0, 0xd81b, 0x7, 0x6, 0x7, 0x8, 0x0, 0x47f7, 0x3, 0x80, 0xdf8, 0x9, 0x2, 0xc2, 0x6, 0x8, 0x9, 0x10000, 0x1, 0x200007, 0x5, 0x1, 0x9, 0x3, 0x1, 0x24f7, 0x7, 0x1800000, 0x401, 0x4, 0xa, 0x7, 0x2, 0x7, 0x5, 0x346, 0x60, 0x5f, 0xfff, 0x3, 0x4, 0x9, 0x0, 0x10001, 0x6, 0x7, 0xb3, 0x6, 0x5, 0x4, 0x1, 0xfffffffb, 0x9, 0x4, 0x8, 0xe9, 0x0, 0xb, 0x4, 0x100, 0x2, 0xffff0000, 0xd8, 0x1, 0x400, 0x7, 0x4, 0x1000, 0x7, 0x43e1, 0xe, 0xffff, 0x2, 0x9, 0x8, 0x8, 0x80, 0x6, 0x8, 0x2, 0x4, 0x0, 0xd, 0x43, 0x1, 0x1, 0x80000001, 0xea9, 0x5, 0x4, 0x7, 0x7, 0xfc, 0x7f, 0x47e3, 0x9, 0x1, 0x9, 0x6, 0x3ff, 0x7f, 0x266, 0xfffffffa, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1ff}], [], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x100}]]}, {0xb4, 0x6, "d5868d92e83ebdebec6a06e4de0cc1d1708d9a093df9f75f13a786fef39ad1a0ba7f53ab7ca95591bbb28707099773d618fdfaa7d5535f53e503674e5ecf9e7f8c5aa1af75edb6654dd304322461749a19fcc55ee4792a02a31030ab565856b42e40e4167870b1a7e1110ee683daa7bca2bedbd6f8a0c31786a9efe291de63f8e1137094dcc50d370af6163267a32a098f0aab3acd5ec82dff80a32fa801d5ce4ae48cee5534ab5d8a86a312b0855275"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_gact={0x118, 0x1c, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x15ee, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x108d, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x2, 0x7, 0xfffffff7, 0xc892}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1410}}]}, {0xad, 0x6, "3d2cb0f403dca0ae7d11af3a623aa7c9862bb8719d1538ba226913cc828fd0c0414baee05c88a22c8ee1731482851ad14c26d4102a1749a3e043bc07d5a1dbe7929be5942919a097ce61606962fd9a9971aa020dc0f50f4995c1c0183581597727915b982a776cfb8fef2448a6236d663f42a721662a57d2373cf56988acfb92d39413f0bfe4baccb3e273a14ec04ac018fd50738361af31fcc14b8f7fca2716ffef4e788a84f99819"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x4674}, 0x1, 0x0, 0x0, 0x40050}, 0x4804) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080)="9d96914067bf7a3be5510b29b4105063f34b32429eef3c72b4c002496c9b12df6146088387e103fd4e6cd6aee95d", 0x2e, 0x1, &(0x7f00000000c0)={0x11, 0x7, r12, 0x1, 0x8, 0x6, @remote}, 0x14) 336.60364ms ago: executing program 2 (id=4913): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x28000600) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYRES64=0x0], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x850) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa2000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x92f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x20044884) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x1) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000180)='`', 0x1}], 0x1}}], 0x1, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r10, 0x411, 0x70bd2a, 0x25dfdc01, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000780)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="08480000004100057644051e28bd4b1459b962c4010100ff7f3e7c37150a771eaffda72eab7503000140060006000800000010009d06000000007fb0b9f7e0a04bb6663dc55ce936512f60377f4b5100"/92], 0x48}, 0x1, 0x0, 0x0, 0x404c0d1}, 0x4004004) 263.489884ms ago: executing program 4 (id=4914): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'ip_vti0\x00', 0x2000}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000040)={'pim6reg1\x00', {0x2, 0x0, @broadcast}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x80) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000380)={r5, &(0x7f0000000200)='pim6reg1\x00', 0x4000, &(0x7f0000000280)={@align=0x100000000, {0x2, 0x8, 0x8, 0x2cf}}, 0x5, &(0x7f0000000300), &(0x7f0000000340)=0x80000000}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r9) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0x1, 0xb}, {0x3, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x800}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040800}, 0x400c000) r11 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc(0x0, r11) r12 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r12, &(0x7f00000002c0)="05", 0x1, 0x8050, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0xf13a1bd02859acfa) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000214010028bd7000fedbdf2505005400fce70000080001"], 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x80d0) 0s ago: executing program 0 (id=4915): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) unshare(0x26020480) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r2}, 0xc) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x7, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) (async) syz_emit_ethernet(0x6e, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001f00", 0x38, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7, '\x00', {0x6, 0x6, "9543fa", 0x49df, 0x2f, 0x1, @mcast2, @mcast1, [], "3d331ba48dcca761"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000002080)) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x2, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000080)={{0x0, 0x8000000000000001, 0x1, 0x10002, 0x4fae, 0x682, 0x1, 0x0, 0x9, 0x3, 0x5, 0x3, 0x100, 0x1, 0x2}}) (async) r5 = socket$kcm(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001080)={{r4, 0x8, 0x1000000000, 0xffffffff80000001, 0x9, 0xffffffffeafb8a66, 0x800, 0x9, 0x3, 0x7, 0x100, 0x100, 0xfffffffffffffff8, 0x7, 0x4}}) kernel console output (not intermixed with test programs): 17][T16246] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x31 [ 674.117756][T16823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.238378][T21832] syzkaller0: entered promiscuous mode [ 674.250644][T21832] syzkaller0: entered allmulticast mode [ 674.514280][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 675.155967][T16823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.556457][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 676.206440][T16821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.604210][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 676.834520][T13131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.868779][T21826] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 676.901996][T21824] netlink: 'syz.4.3525': attribute type 1 has an invalid length. [ 676.951178][T21824] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3525'. [ 677.000151][T21823] netlink: 'syz.4.3525': attribute type 1 has an invalid length. [ 677.023407][T21823] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3525'. [ 677.234718][T16825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.285744][T21896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3532'. [ 677.408677][T21907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3534'. [ 678.442137][T21935] netlink: 'syz.4.3539': attribute type 29 has an invalid length. [ 678.684331][ C1] net_ratelimit: 1 callbacks suppressed [ 678.684350][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 679.051719][T21917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.070796][T21917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.362798][T21917] mac80211_hwsim hwsim55 wlan0: left promiscuous mode [ 679.376635][T21917] mac80211_hwsim hwsim55 wlan0: left allmulticast mode [ 679.401866][T21923] geneve2: entered promiscuous mode [ 679.474542][ T7848] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.514683][ T7848] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.525187][ T7848] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.550018][ T7848] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.645468][T21953] xt_hashlimit: size too large, truncated to 1048576 [ 679.683656][T21961] xt_CT: You must specify a L4 protocol and not use inversions on it [ 679.707094][T21962] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3545'. [ 679.716161][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 679.762907][T21966] xt_cgroup: invalid path, errno=-2 [ 679.778505][T21967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3547'. [ 679.791245][T21966] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20002 [ 679.814407][T21968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3545'. [ 679.878067][T21968] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 680.011320][T21983] x_tables: duplicate underflow at hook 2 [ 680.209158][T21992] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 680.221845][T21994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3554'. [ 680.231810][T21994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3554'. [ 680.435398][T22010] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 680.453192][T22005] syzkaller0: entered promiscuous mode [ 680.459608][T22010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.466603][T22005] syzkaller0: entered allmulticast mode [ 680.516889][T22011] tipc: Enabled bearer , priority 0 [ 680.552598][T22018] tipc: Enabling of bearer rejected, already enabled [ 680.700263][T22029] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3560'. [ 680.754289][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 681.218536][T22001] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 681.225743][T22001] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 681.251802][T22003] tipc: Resetting bearer [ 681.295748][T22003] tipc: Disabling bearer [ 681.506291][T22057] sit0: entered promiscuous mode [ 681.524927][T22057] netlink: 'syz.1.3567': attribute type 1 has an invalid length. [ 681.643263][T22060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.795435][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 681.980711][T22082] __nla_validate_parse: 4 callbacks suppressed [ 681.980728][T22082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3572'. [ 682.130394][T22088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3575'. [ 682.171997][T22089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3575'. [ 682.681815][T22098] geneve2: entered promiscuous mode [ 682.834252][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 683.481548][T22135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3586'. [ 683.515358][T22135] netlink: 'syz.3.3586': attribute type 30 has an invalid length. [ 683.533965][T22142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3586'. [ 683.551464][T22141] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3588'. [ 683.555263][T22142] netlink: 'syz.3.3586': attribute type 30 has an invalid length. [ 683.568980][ T7851] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.579202][ T7851] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.635239][ T7848] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.647061][ T7848] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 683.767137][T22147] syzkaller1: entered promiscuous mode [ 683.781284][T22147] syzkaller1: entered allmulticast mode [ 683.793731][T22147] : renamed from bond_slave_0 [ 683.794081][T22151] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3590'. [ 683.849729][T22153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3591'. [ 683.860956][T22155] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3592'. [ 683.874233][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 683.953636][T22160] netlink: 'syz.1.3593': attribute type 2 has an invalid length. [ 684.001358][T22160] : entered promiscuous mode [ 684.055356][T22167] lo speed is unknown, defaulting to 1000 [ 684.064326][T22167] lo speed is unknown, defaulting to 1000 [ 684.103307][T22169] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 684.133906][T22169] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 684.165710][T22169] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 684.230108][T22169] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 684.637303][T22180] ip_tables: iptables: counters copy to user failed while replacing table [ 684.680144][T22183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3600'. [ 684.690730][T22180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 684.914283][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 685.138676][T22195] tipc: Started in network mode [ 685.144090][T22195] tipc: Node identity 20010000000000000000000000000001, cluster identity 4711 [ 685.177122][T22195] tipc: Enabling of bearer rejected, failed to enable media [ 685.219169][T22210] tipc: Enabling of bearer rejected, failed to enable media [ 685.647369][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.954276][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 686.033678][T22268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 686.282604][T22277] lo speed is unknown, defaulting to 1000 [ 686.291239][T22277] lo speed is unknown, defaulting to 1000 [ 686.361985][T22280] bridge_slave_1: left allmulticast mode [ 686.380124][T22280] bridge_slave_1: left promiscuous mode [ 686.387228][T22280] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.399467][T22280] bridge_slave_0: left allmulticast mode [ 686.406769][T22280] bridge_slave_0: left promiscuous mode [ 686.413590][T22280] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.605076][T22284] ip_tables: iptables: counters copy to user failed while replacing table [ 686.762081][T22295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.776199][T22294] netlink: 'syz.1.3625': attribute type 1 has an invalid length. [ 686.858390][T22306] IPVS: set_ctl: invalid protocol: 29 172.30.0.3:20002 [ 686.880189][T22295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.951967][T22301] batadv_slave_0: entered promiscuous mode [ 686.994186][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 687.002019][T22300] batadv_slave_0: left promiscuous mode [ 687.060494][T22292] lo speed is unknown, defaulting to 1000 [ 687.091784][T22292] lo speed is unknown, defaulting to 1000 [ 687.153670][T22314] __nla_validate_parse: 8 callbacks suppressed [ 687.161383][T22314] netlink: 198796 bytes leftover after parsing attributes in process `syz.4.3629'. [ 687.172265][T22314] netlink: 'syz.4.3629': attribute type 2 has an invalid length. [ 687.220758][T22316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3631'. [ 687.282133][T22321] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3632'. [ 687.295551][T22321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3632'. [ 687.304675][T22321] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3632'. [ 687.313658][T22321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3632'. [ 687.343152][T22328] syzkaller0: entered promiscuous mode [ 687.349124][T22328] syzkaller0: entered allmulticast mode [ 687.358521][T22327] tipc: Started in network mode [ 687.366410][T22327] tipc: Node identity b6aa7509fae1, cluster identity 4711 [ 687.373763][T22327] tipc: Enabled bearer , priority 0 [ 687.441583][T22329] tipc: Resetting bearer [ 687.486786][T22325] tipc: Resetting bearer [ 687.546445][T16241] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x31 [ 687.557883][T22325] tipc: Disabling bearer [ 687.579736][T22331] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 687.985572][T22370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3641'. [ 688.034200][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 688.442954][T22400] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 688.622445][T22410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3652'. [ 688.714533][T22416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3655'. [ 688.841250][T22421] syzkaller0: entered promiscuous mode [ 688.847129][T22421] syzkaller0: entered allmulticast mode [ 689.074192][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 690.114261][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 690.456722][T22333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 690.668874][T22433] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3658'. [ 690.843546][T22428] syzkaller0: entered promiscuous mode [ 690.873417][T22428] syzkaller0: entered allmulticast mode [ 691.028000][T22463] geneve1: Caught tx_queue_len zero misconfig [ 691.154635][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 691.766486][ T7843] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x31 [ 691.827524][T22489] bond2: entered promiscuous mode [ 691.894077][T22499] x_tables: duplicate underflow at hook 1 [ 692.111735][T22512] netlink: 'syz.0.3677': attribute type 1 has an invalid length. [ 692.194287][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 693.244236][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 694.274210][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 694.644800][T22482] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 694.846783][T22538] __nla_validate_parse: 6 callbacks suppressed [ 694.846799][T22538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3681'. [ 694.874817][T22534] netlink: 'syz.4.3682': attribute type 6 has an invalid length. [ 694.904447][T22541] syzkaller0: entered promiscuous mode [ 694.947092][T22541] syzkaller0: entered allmulticast mode [ 695.026000][T22548] tipc: Enabled bearer , priority 0 [ 695.066606][T22541] tipc: Enabling of bearer rejected, already enabled [ 695.123953][T22556] syzkaller0: entered promiscuous mode [ 695.177498][T22556] syzkaller0: entered allmulticast mode [ 695.236410][T22549] tipc: Resetting bearer [ 695.242721][T22553] lo speed is unknown, defaulting to 1000 [ 695.290599][T22536] tipc: Resetting bearer [ 695.314263][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 695.370471][T22536] tipc: Disabling bearer [ 695.397415][T22553] lo speed is unknown, defaulting to 1000 [ 695.403689][T22586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3691'. [ 695.592371][T22599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3692'. [ 695.678962][T22586] hsr_slave_1 (unregistering): left promiscuous mode [ 696.364175][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 696.570197][T22642] netlink: 'syz.1.3703': attribute type 1 has an invalid length. [ 696.600797][T22642] 8021q: adding VLAN 0 to HW filter on device bond2 [ 696.640598][T22642] bond2: (slave veth5): Enslaving as an active interface with a down link [ 696.655849][T22642] sit0: left promiscuous mode [ 696.716184][T22642] batadv_slave_0: left allmulticast mode [ 696.722497][T22642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.759936][T22653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3703'. [ 696.825194][T22658] netlink: 'syz.1.3703': attribute type 1 has an invalid length. [ 696.848282][T22658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3703'. [ 696.918553][T22649] bond1: entered promiscuous mode [ 696.923737][T22649] bond1: entered allmulticast mode [ 696.957560][T22663] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 696.970583][T22651] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 696.997125][T22666] netlink: 'syz.2.3708': attribute type 30 has an invalid length. [ 697.012856][T22651] bond2: (slave batadv1): making interface the new active one [ 697.030940][T22651] batadv1: entered promiscuous mode [ 697.053230][T22651] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 697.077687][T22677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3708'. [ 697.153972][T22653] bond2: (slave veth7): Enslaving as an active interface with a down link [ 697.166912][T16243] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 697.247962][T22655] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 697.257971][T22655] bond2: (slave veth5): making interface the new active one [ 697.265417][T22655] batadv1: left promiscuous mode [ 697.272013][T22655] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 697.333629][T22663] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3706'. [ 697.346028][T22663] tc_dump_action: action bad kind [ 697.358464][T22687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3711'. [ 697.394336][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 697.576517][ T145] bond2: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 697.619768][T22697] netlink: 'syz.4.3715': attribute type 1 has an invalid length. [ 697.649218][T22693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3713'. [ 697.766731][T22703] IPv6: NLM_F_CREATE should be specified when creating new route [ 698.176362][T22718] bridge2: entered promiscuous mode [ 698.181973][T22718] bridge2: entered allmulticast mode [ 698.198477][T22730] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3722'. [ 698.203478][T22718] team0: Port device bridge2 added [ 698.241120][T22730] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001 [ 698.342678][T22736] bond0: (slave team0): Releasing backup interface [ 698.356030][T22736] bridge_slave_0: left allmulticast mode [ 698.363835][T22736] bridge_slave_0: left promiscuous mode [ 698.371314][T22736] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.387930][T22736] bridge_slave_1: left allmulticast mode [ 698.404480][T22736] bridge_slave_1: left promiscuous mode [ 698.426264][T22736] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.434531][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 698.447406][T22736] bond0: (slave bond_slave_0): Releasing backup interface [ 698.462616][T22736] bond0: (slave bond_slave_1): Releasing backup interface [ 698.484193][T22736] team0: Port device team_slave_0 removed [ 698.507482][T22736] team0: Port device team_slave_1 removed [ 698.535184][T22736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.550801][T22736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.568823][T22736] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 699.391213][T22777] Bluetooth: MGMT ver 1.23 [ 699.484194][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 699.616348][T22785] ip_tables: iptables: counters copy to user failed while replacing table [ 699.625919][T22785] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 699.633908][T22785] xt_TCPMSS: Only works on TCP SYN packets [ 700.251044][T22815] netlink: 'syz.0.3746': attribute type 63 has an invalid length. [ 700.262529][T22815] netlink: 'syz.0.3746': attribute type 63 has an invalid length. [ 700.303454][T22818] netlink: 'syz.1.3745': attribute type 2 has an invalid length. [ 700.331284][T22818] netlink: 'syz.1.3745': attribute type 2 has an invalid length. [ 700.514209][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 700.559666][T22829] __nla_validate_parse: 8 callbacks suppressed [ 700.559683][T22829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3750'. [ 700.630777][T22832] tap0: tun_chr_ioctl cmd 1074025677 [ 700.637616][T22829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3750'. [ 700.651404][T22832] tap0: linktype set to 805 [ 700.672653][T22822] atomic_op ffff88802c7611e0 conn xmit_atomic 0000000000000000 [ 700.689139][T22822] netlink: 'syz.3.3748': attribute type 2 has an invalid length. [ 700.697998][T22801] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 700.706352][T22822] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3748'. [ 700.719676][T22801] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 700.727799][T22822] netlink: 'syz.3.3748': attribute type 2 has an invalid length. [ 700.744772][T22822] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3748'. [ 701.109364][T22848] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 701.238877][T22848] bond3: entered promiscuous mode [ 701.261824][T22848] 8021q: adding VLAN 0 to HW filter on device bond3 [ 701.334814][T22853] syzkaller0: entered promiscuous mode [ 701.347729][T22853] syzkaller0: entered allmulticast mode [ 701.479096][T22862] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3758'. [ 701.489928][T22866] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3758'. [ 701.564285][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 701.631983][T22876] syzkaller0: entered promiscuous mode [ 701.694560][T22876] syzkaller0: entered allmulticast mode [ 701.921020][T22897] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3763'. [ 701.938278][T22886] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3762'. [ 702.051828][T22905] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3765'. [ 702.088631][T22905] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3765'. [ 702.187759][T22909] netlink: 'syz.1.3766': attribute type 10 has an invalid length. [ 702.507679][T22926] vlan2: entered allmulticast mode [ 702.517888][T22926] bond0: entered allmulticast mode [ 702.523057][T22926] bond_slave_0: entered allmulticast mode [ 702.529440][T22926] bond_slave_1: entered allmulticast mode [ 702.594294][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 702.686643][T22931] syzkaller0: entered promiscuous mode [ 702.699486][T22931] syzkaller0: entered allmulticast mode [ 703.077490][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 703.355753][T22956] batadv0: entered promiscuous mode [ 703.362197][T22956] macvtap1: entered promiscuous mode [ 703.368241][T22956] macvtap1: entered allmulticast mode [ 703.373641][T22956] batadv0: entered allmulticast mode [ 703.380753][T22956] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 703.388552][T22956] batadv0: left allmulticast mode [ 703.393759][T22956] batadv0: left promiscuous mode [ 703.634325][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 704.684289][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 705.208306][T22911] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 705.680171][T22999] __nla_validate_parse: 3 callbacks suppressed [ 705.680188][T22999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3790'. [ 705.724294][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 705.741651][T23004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3790'. [ 706.088373][T23015] netlink: 'syz.1.3793': attribute type 1 has an invalid length. [ 706.756500][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 707.804200][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 707.879609][T22997] tipc: Enabling of bearer rejected, failed to enable media [ 707.890309][T22999] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.898066][T22999] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.006747][T23024] netlink: ct family unspecified [ 708.018826][T23024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.100245][T23027] team0: Port device syz_tun added [ 708.198002][T23031] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3797'. [ 708.239567][T23031] netlink: 239 bytes leftover after parsing attributes in process `syz.3.3797'. [ 708.252767][T23035] Cannot find del_set index 2 as target [ 708.287260][T23031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3797'. [ 708.423541][T23047] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3799'. [ 708.460241][T23049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3801'. [ 708.482412][T23055] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.3803'. [ 708.666696][T23063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3804'. [ 708.844267][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 709.383729][ T7843] IPVS: starting estimator thread 0... [ 709.484213][T23094] IPVS: using max 31 ests per chain, 74400 per kthread [ 709.661320][T23111] geneve1: entered promiscuous mode [ 710.175885][T23123] veth1_to_batadv: Caught tx_queue_len zero misconfig [ 710.185626][T23123] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3815'. [ 712.189175][T23079] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 712.644634][T23133] __nla_validate_parse: 2 callbacks suppressed [ 712.644651][T23133] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3818'. [ 712.718526][T23151] netlink: 564 bytes leftover after parsing attributes in process `syz.2.3822'. [ 713.043372][T23157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3825'. [ 713.399071][T23161] syzkaller1: entered promiscuous mode [ 713.412571][T23161] syzkaller1: entered allmulticast mode [ 713.613083][T23170] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3829'. [ 713.672031][T23176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3832'. [ 713.682619][T23176] netlink: 'syz.2.3832': attribute type 1 has an invalid length. [ 713.832000][T23176] bond2: entered promiscuous mode [ 713.849085][T23176] 8021q: adding VLAN 0 to HW filter on device bond2 [ 713.911067][T23183] 8021q: adding VLAN 0 to HW filter on device bond2 [ 713.941837][T23183] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 713.971817][T23183] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 713.989027][T23183] bond2: (slave gre1): making interface the new active one [ 713.997546][T23183] gre1: entered promiscuous mode [ 714.006475][T23183] bond2: (slave gre1): Enslaving as an active interface with an up link [ 714.379313][T23205] netlink: 170676 bytes leftover after parsing attributes in process `syz.3.3839'. [ 714.398789][T23205] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 714.452054][T23205] openvswitch: netlink: Message has 512 unknown bytes. [ 714.654543][T23220] netlink: zone id is out of range [ 714.681653][T23222] netlink: 564 bytes leftover after parsing attributes in process `syz.1.3842'. [ 714.712614][T23220] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3843'. [ 714.923213][T23236] netlink: 'syz.0.3846': attribute type 11 has an invalid length. [ 715.125640][T23249] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3849'. [ 715.134968][T23249] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3849'. [ 715.303443][T23260] tipc: Resetting bearer [ 715.323859][T23260] tipc: Resetting bearer [ 715.463007][T23266] netlink: 'syz.3.3855': attribute type 7 has an invalid length. [ 715.493692][T23266] netlink: 'syz.3.3855': attribute type 3 has an invalid length. [ 716.197251][T23303] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 716.235742][T23294] gtp0: entered promiscuous mode [ 716.246144][T23294] gtp0: entered allmulticast mode [ 716.264458][T23294] team0: Device gtp0 is of different type [ 716.728313][T23316] netlink: Failed to add k\ helper -22 [ 716.734390][T23316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 716.862656][T23320] netlink: 'syz.4.3865': attribute type 1 has an invalid length. [ 718.638489][T23320] bond5: entered promiscuous mode [ 718.644082][T23320] 8021q: adding VLAN 0 to HW filter on device bond5 [ 718.679534][T23322] 8021q: adding VLAN 0 to HW filter on device bond5 [ 718.696218][T23322] bond5: (slave ipip0): The slave device specified does not support setting the MAC address [ 718.707989][T23322] bond5: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 718.731772][T23322] bond5: (slave ipip0): making interface the new active one [ 718.740184][T23322] ipip0: entered promiscuous mode [ 718.747109][T23322] bond5: (slave ipip0): Enslaving as an active interface with an up link [ 719.354668][T23352] __nla_validate_parse: 5 callbacks suppressed [ 719.354687][T23352] netlink: 564 bytes leftover after parsing attributes in process `syz.1.3871'. [ 719.555339][T23358] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 719.958416][T23368] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 719.974436][T23369] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 720.164926][T23373] Bluetooth: MGMT ver 1.23 [ 720.175668][T23372] syzkaller0: entered promiscuous mode [ 720.186942][T23372] syzkaller0: entered allmulticast mode [ 720.264033][T23372] netlink: 632 bytes leftover after parsing attributes in process `syz.2.3878'. [ 720.505844][T23393] netlink: 'syz.4.3884': attribute type 3 has an invalid length. [ 720.526562][T23397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3885'. [ 720.542904][T23393] netlink: 'syz.4.3884': attribute type 1 has an invalid length. [ 720.563615][T23393] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3884'. [ 720.589296][T23399] netlink: 'syz.4.3884': attribute type 1 has an invalid length. [ 720.596160][T23393] NCSI netlink: No device for ifindex 0 [ 720.713841][T23399] bond6: entered promiscuous mode [ 720.720914][T23399] 8021q: adding VLAN 0 to HW filter on device bond6 [ 720.745326][T23412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3886'. [ 720.765830][T23407] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 720.792764][T23393] 8021q: adding VLAN 0 to HW filter on device bond6 [ 720.805740][T23393] bond6: (slave ipip1): The slave device specified does not support setting the MAC address [ 720.816177][T23393] bond6: (slave ipip1): Setting fail_over_mac to active for active-backup mode [ 720.857482][T23393] bond6: (slave ipip1): making interface the new active one [ 720.877413][T23393] ipip1: entered promiscuous mode [ 720.887107][T23393] bond6: (slave ipip1): Enslaving as an active interface with an up link [ 721.076940][T23422] pim6reg: entered allmulticast mode [ 721.105735][T23427] pim6reg: left allmulticast mode [ 721.208293][T23427] netlink: 'syz.2.3890': attribute type 1 has an invalid length. [ 721.231279][T23425] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3891'. [ 721.259073][T23427] netlink: 'syz.2.3890': attribute type 3 has an invalid length. [ 721.291919][T23427] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3890'. [ 721.446094][T23448] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3895'. [ 721.776561][T23464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3900'. [ 721.779964][T23459] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3896'. [ 721.815694][T23459] NCSI netlink: No device for ifindex 0 [ 721.927154][T23472] netlink: 'syz.2.3901': attribute type 7 has an invalid length. [ 721.964281][T23472] netlink: 'syz.2.3901': attribute type 8 has an invalid length. [ 722.133526][T23477] netlink: 'syz.1.3902': attribute type 11 has an invalid length. [ 722.158260][T23480] lo speed is unknown, defaulting to 1000 [ 722.177286][T23480] lo speed is unknown, defaulting to 1000 [ 722.455475][T23487] veth9: entered allmulticast mode [ 722.579086][T23489] syzkaller0: entered promiscuous mode [ 722.615250][T23489] syzkaller0: entered allmulticast mode [ 722.799991][T23501] netlink: 'syz.4.3908': attribute type 1 has an invalid length. [ 722.943768][T23480] netlink: 'syz.3.3904': attribute type 61 has an invalid length. [ 725.808179][T23501] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 725.982511][T23528] netlink: 'syz.2.3911': attribute type 15 has an invalid length. [ 726.142285][T23528] netlink: 'syz.2.3911': attribute type 15 has an invalid length. [ 726.154269][ T145] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 726.165846][ T145] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 726.194598][ T7851] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 726.210452][ T7851] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 726.541936][T23559] netlink: NAT attribute has 1 unknown bytes [ 726.560688][T23559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.630926][T23538] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 726.633531][ T7851] IPVS: starting estimator thread 0... [ 726.744199][T23563] IPVS: using max 34 ests per chain, 81600 per kthread [ 726.782901][T23565] __nla_validate_parse: 5 callbacks suppressed [ 726.782919][T23565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3920'. [ 727.187248][T23586] nbd: must specify at least one socket [ 727.232838][T23588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3923'. [ 727.339312][T23593] syzkaller0: entered promiscuous mode [ 727.358199][T23593] syzkaller0: entered allmulticast mode [ 727.433892][T23604] netlink: 564 bytes leftover after parsing attributes in process `syz.1.3929'. [ 727.541390][T23606] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3931'. [ 727.569662][T23609] netlink: 'syz.3.3932': attribute type 13 has an invalid length. [ 727.578550][T23609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3932'. [ 727.588128][T23609] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 727.942639][ T29] audit: type=1800 audit(1787874564.217:13): pid=23611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3933" name="memory.events" dev="tmpfs" ino=1121 res=0 errno=0 [ 728.093473][T23633] macvtap1: entered promiscuous mode [ 728.113045][T23633] bridge0: entered promiscuous mode [ 728.146630][T23632] macvtap2: entered promiscuous mode [ 728.289193][T23641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3942'. [ 728.308225][T23639] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 728.330841][T23639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3941'. [ 728.853085][T23676] gre2: entered allmulticast mode [ 729.031967][T23683] netlink: 564 bytes leftover after parsing attributes in process `syz.3.3951'. [ 729.047551][T23684] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 729.073289][T23684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3952'. [ 729.121003][T23684] unsupported nla_type 216 [ 729.346917][T23692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3954'. [ 729.403618][T23689] bond7: entered promiscuous mode [ 729.548050][T23698] netlink: 'syz.0.3956': attribute type 1 has an invalid length. [ 729.591017][T23698] bond4: entered promiscuous mode [ 729.608262][T23698] 8021q: adding VLAN 0 to HW filter on device bond4 [ 729.721609][T23704] 8021q: adding VLAN 0 to HW filter on device bond5 [ 729.757109][T23704] bond4: (slave bond5): making interface the new active one [ 729.784635][T23704] bond5: entered promiscuous mode [ 729.809540][T23704] bond4: (slave bond5): Enslaving as an active interface with an up link [ 729.968058][T23715] openvswitch: netlink: Duplicate or invalid key (type 0). [ 730.076141][T23718] openvswitch: netlink: Duplicate or invalid key (type 0). [ 730.873701][T23773] --map-set only usable from mangle table [ 730.985893][T23781] netlink: 'syz.2.3974': attribute type 1 has an invalid length. [ 731.532012][T23800] xt_hashlimit: max too large, truncated to 1048576 [ 731.805712][T23813] __nla_validate_parse: 7 callbacks suppressed [ 731.805730][T23813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3980'. [ 731.832287][T23810] macvlan0: entered promiscuous mode [ 731.846492][T23810] netlink: 'syz.0.3982': attribute type 1 has an invalid length. [ 731.869607][T23810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3982'. [ 732.560008][T23850] netlink: 564 bytes leftover after parsing attributes in process `syz.3.3990'. [ 732.705536][T23855] netlink: 'syz.0.3991': attribute type 1 has an invalid length. [ 732.732457][T23855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3991'. [ 732.946209][T23869] syzkaller0: entered promiscuous mode [ 732.966107][T23869] syzkaller0: entered allmulticast mode [ 733.177051][T23877] tipc: Enabled bearer , priority 0 [ 733.308855][T23877] tipc: Resetting bearer [ 733.314742][T20630] Bluetooth: hci3: command 0x0405 tx timeout [ 733.748262][T23876] tipc: Resetting bearer [ 733.802538][T18759] Bluetooth: hci4: command 0x0406 tx timeout [ 733.837739][T23876] tipc: Disabling bearer [ 733.921580][T23908] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4001'. [ 734.292228][T23930] Bluetooth: hci0: invalid length 0, exp 2 for type 4 [ 734.327226][T23932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4009'. [ 734.338648][T23932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4009'. [ 734.351933][T23933] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4009'. [ 734.488699][T23945] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 734.671922][T23956] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4016'. [ 734.682817][T23952] syz.1.4015: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 734.701336][T23952] CPU: 1 UID: 0 PID: 23952 Comm: syz.1.4015 Not tainted syzkaller #0 PREEMPT(full) [ 734.701365][T23952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 734.701377][T23952] Call Trace: [ 734.701385][T23952] [ 734.701394][T23952] dump_stack_lvl+0xe8/0x150 [ 734.701429][T23952] warn_alloc+0x24c/0x270 [ 734.701462][T23952] ? __pfx_warn_alloc+0x10/0x10 [ 734.701486][T23952] ? xskq_create+0x56/0x220 [ 734.701605][T23952] ? xsk_setsockopt+0x52a/0x960 [ 734.701663][T23952] ? do_syscall_64+0x166/0x520 [ 734.701687][T23952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.701723][T23952] __vmalloc_node_range_noprof+0x12c/0x1730 [ 734.701776][T23952] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 734.701802][T23952] ? __kmalloc_cache_noprof+0x331/0x660 [ 734.701826][T23952] ? __kmalloc_cache_noprof+0x152/0x660 [ 734.701851][T23952] ? xskq_create+0x56/0x220 [ 734.701875][T23952] xskq_create+0x148/0x220 [ 734.701896][T23952] ? xsk_init_queue+0x8a/0xe0 [ 734.701918][T23952] xsk_init_queue+0x8a/0xe0 [ 734.701941][T23952] xsk_setsockopt+0x52a/0x960 [ 734.701982][T23952] ? __pfx_xsk_setsockopt+0x10/0x10 [ 734.702014][T23952] ? __pfx_aa_sk_perm+0x10/0x10 [ 734.702064][T23952] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 734.702085][T23952] ? __pfx_xsk_setsockopt+0x10/0x10 [ 734.702118][T23952] do_sock_setsockopt+0x17c/0x1b0 [ 734.702154][T23952] __x64_sys_setsockopt+0x13d/0x1b0 [ 734.702187][T23952] do_syscall_64+0x166/0x520 [ 734.702207][T23952] ? trace_irq_disable+0x3b/0x140 [ 734.702232][T23952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.702251][T23952] ? clear_bhb_loop+0x70/0xc0 [ 734.702275][T23952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.702296][T23952] RIP: 0033:0x7f6cd6d9e159 [ 734.702315][T23952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.702333][T23952] RSP: 002b:00007f6cd7c1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 734.702355][T23952] RAX: ffffffffffffffda RBX: 00007f6cd7025fa0 RCX: 00007f6cd6d9e159 [ 734.702371][T23952] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 734.702384][T23952] RBP: 00007f6cd6e35024 R08: 0000000000000004 R09: 0000000000000000 [ 734.702397][T23952] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.702411][T23952] R13: 00007f6cd7026038 R14: 00007f6cd7025fa0 R15: 00007ffff58d67c8 [ 734.702445][T23952] [ 734.702470][T23952] Mem-Info: [ 734.890270][T23962] netlink: 564 bytes leftover after parsing attributes in process `syz.3.4017'. [ 734.894779][T23952] active_anon:7021 inactive_anon:0 isolated_anon:0 [ 734.894779][T23952] active_file:0 inactive_file:43613 isolated_file:0 [ 734.894779][T23952] unevictable:0 dirty:144 writeback:0 [ 734.894779][T23952] slab_reclaimable:12109 slab_unreclaimable:123986 [ 734.894779][T23952] mapped:29682 shmem:653 pagetables:1647 [ 734.894779][T23952] sec_pagetables:0 bounce:0 [ 734.894779][T23952] kernel_misc_reclaimable:0 [ 734.894779][T23952] free:1276530 free_pcp:19803 free_cma:0 [ 735.005733][T23952] Node 0 active_anon:28084kB inactive_anon:0kB active_file:0kB inactive_file:174248kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121828kB dirty:572kB writeback:0kB shmem:2612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18416kB pagetables:6440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 735.039721][T23952] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 735.116827][T23952] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 735.193659][T23952] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 735.205640][T23952] Node 0 DMA32 free:1149052kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27984kB inactive_anon:0kB active_file:0kB inactive_file:174248kB unevictable:0kB writepending:572kB zspages:0kB present:3129332kB managed:2547832kB mlocked:0kB bounce:0kB free_pcp:77860kB local_pcp:35720kB free_cma:0kB [ 735.276784][T23952] lowmem_reserve[]: 0 0 0 0 0 [ 735.294164][T23952] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 735.325120][T23952] lowmem_reserve[]: 0 0 0 0 0 [ 735.329895][T23952] Node 1 Normal free:3943604kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 735.366697][T23952] lowmem_reserve[]: 0 0 0 0 0 [ 735.373856][T23952] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 735.406919][T23952] Node 0 DMA32: 2680*4kB (UM) 676*8kB (UM) 380*16kB (UME) 191*32kB (UME) 151*64kB (UME) 61*128kB (UM) 31*256kB (UM) 14*512kB (UME) 8*1024kB (UME) 2*2048kB (M) 263*4096kB (UM) = 1150432kB [ 735.444130][T23952] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 735.494189][T23952] Node 1 Normal: 1*4kB (U) 4*8kB (UM) 15*16kB (UM) 5*32kB (UM) 6*64kB (UM) 5*128kB (UM) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3943604kB [ 735.538433][T23952] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 735.587268][T23952] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 735.616271][T23952] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 735.626205][T23952] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 735.635919][T23952] 44262 total pagecache pages [ 735.640753][T23952] 0 pages in swap cache [ 735.645961][T23952] Free swap = 124996kB [ 735.650199][T23952] Total swap = 124996kB [ 735.654662][T23952] 2097051 pages RAM [ 735.659091][T23952] 0 pages HighMem/MovableOnly [ 735.663870][T23952] 428414 pages reserved [ 735.670708][T23952] 0 pages cma reserved [ 735.925217][T23994] netlink: 'syz.2.4024': attribute type 30 has an invalid length. [ 735.956306][T23995] netlink: 'syz.1.4025': attribute type 1 has an invalid length. [ 735.986726][T23995] netlink: 'syz.1.4025': attribute type 1 has an invalid length. [ 736.037161][T23995] erspan0: entered promiscuous mode [ 736.128277][T23878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 736.743109][T24050] xt_ecn: cannot match TCP bits for non-tcp packets [ 736.764902][T24053] tipc: Enabled bearer , priority 0 [ 736.802770][T24057] C: renamed from veth1_to_team (while UP) [ 736.848716][T24057] netlink: 'syz.3.4040': attribute type 2 has an invalid length. [ 736.901734][T24057] __nla_validate_parse: 10 callbacks suppressed [ 736.901752][T24057] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4040'. [ 736.952888][T24073] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4039'. [ 736.982423][T24057] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 737.227152][T24051] tipc: Disabling bearer [ 737.233590][ T7848] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x31 [ 737.709418][T24118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4047'. [ 737.873954][T24125] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4049'. [ 738.545253][T24131] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4050'. [ 738.556465][T24131] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 738.645397][T24133] syzkaller1: entered promiscuous mode [ 738.651067][T24133] syzkaller1: entered allmulticast mode [ 738.762187][T24137] netlink: 'syz.1.4053': attribute type 1 has an invalid length. [ 738.770040][T24137] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4053'. [ 738.914233][T18759] Bluetooth: hci0: command 0x0406 tx timeout [ 739.134438][ T7843] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.158292][ T7843] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.167827][ T7843] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.177873][ T7843] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.149714][T24081] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 740.336235][T24170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4060'. [ 740.362490][T24170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4060'. [ 740.372944][T24173] tipc: New replicast peer: 255.255.255.255 [ 740.381099][T24173] tipc: Enabled bearer , priority 10 [ 740.391986][T24175] netlink: 'syz.3.4061': attribute type 1 has an invalid length. [ 740.444300][T24178] SET target dimension over the limit! [ 740.452317][T24175] bond3: entered promiscuous mode [ 740.463470][T24175] 8021q: adding VLAN 0 to HW filter on device bond3 [ 740.489064][T24182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4061'. [ 740.510133][T24175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4061'. [ 740.551520][T24175] bond3: entered allmulticast mode [ 741.117378][T24233] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 741.320617][ T1043] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x31 [ 741.494476][T20375] tipc: Node number set to 536936449 [ 741.560410][T24255] netlink: 'syz.4.4076': attribute type 30 has an invalid length. [ 741.693681][T24260] netlink: 'syz.2.4078': attribute type 32 has an invalid length. [ 741.861562][T24284] Cannot find set identified by id 0 to match [ 741.884412][T24233] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 741.913737][T24285] lo speed is unknown, defaulting to 1000 [ 741.938997][T24285] lo speed is unknown, defaulting to 1000 [ 744.217439][T24239] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 744.229672][T24261] __nla_validate_parse: 7 callbacks suppressed [ 744.229690][T24261] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4078'. [ 744.245593][T24261] NCSI netlink: No device for ifindex 0 [ 744.433358][T24314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4089'. [ 744.457127][T24321] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4089'. [ 744.527959][T24315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4087'. [ 744.609090][T24328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4092'. [ 744.655426][ T5747] syzkaller0 selects TX queue 2, but real number of TX queues is 2 [ 747.088104][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.483354][T24213] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x31 [ 747.577337][T24373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4102'. [ 747.628678][T24373] syzkaller0: entered promiscuous mode [ 747.651463][T24373] syzkaller0: entered allmulticast mode [ 747.783571][T24384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4105'. [ 747.793749][T24384] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4105'. [ 747.808335][T24384] netlink: 'syz.3.4105': attribute type 2 has an invalid length. [ 747.816455][T24384] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4105'. [ 747.835374][T24384] : entered promiscuous mode [ 749.833344][T24388] Set syz0 is full, maxelem 65536 reached [ 750.344381][T24356] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 750.555311][T24397] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4108'. [ 750.612404][T24397] netlink: 'syz.4.4108': attribute type 2 has an invalid length. [ 750.626634][T24397] netlink: 'syz.4.4108': attribute type 11 has an invalid length. [ 750.647377][T24397] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4108'. [ 750.688946][T24405] syzkaller0: entered promiscuous mode [ 750.709438][T24405] syzkaller0: entered allmulticast mode [ 750.725668][T24405] tipc: Enabled bearer , priority 0 [ 750.797790][T24405] tipc: Resetting bearer [ 750.811206][T24404] tipc: Resetting bearer [ 750.854395][T24426] netlink: 'syz.4.4113': attribute type 30 has an invalid length. [ 750.866122][T24404] tipc: Disabling bearer [ 750.934791][T24420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4113'. [ 751.265995][T24440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4115'. [ 751.302043][T24442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4116'. [ 751.402481][T24442] 8021q: adding VLAN 0 to HW filter on device bond9 [ 751.430192][T24450] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 751.477266][ T5615] Bluetooth: hci3: link tx timeout [ 751.483573][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 751.500141][ T5615] Bluetooth: hci3: link tx timeout [ 751.505616][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 751.676444][T24454] bridge0: port 1(veth1_to_bridge) entered blocking state [ 751.728571][T24454] bridge0: port 1(veth1_to_bridge) entered disabled state [ 751.791160][T24454] veth1_to_bridge: entered allmulticast mode [ 751.820681][T24467] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4120'. [ 751.836540][T24454] veth1_to_bridge: entered promiscuous mode [ 751.861104][T24467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 752.077099][T24479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 752.113520][T24479] sctp: [Deprecated]: syz.4.4123 (pid 24479) Use of int in max_burst socket option. [ 752.113520][T24479] Use struct sctp_assoc_value instead [ 752.160616][T24483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4124'. [ 752.213343][T24483] netlink: 580 bytes leftover after parsing attributes in process `syz.3.4124'. [ 752.255121][T24483] netlink: 'syz.3.4124': attribute type 10 has an invalid length. [ 752.291431][T24483] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.299142][T24483] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.309143][T24490] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4126'. [ 752.344400][T24487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4124'. [ 752.373916][T24483] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.381159][T24483] bridge0: port 2(bridge_slave_1) entered listening state [ 752.388701][T24483] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.395909][T24483] bridge0: port 1(bridge_slave_0) entered listening state [ 752.430357][T24483] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 752.532342][T24494] bond3: entered promiscuous mode [ 752.550714][T24494] 8021q: adding VLAN 0 to HW filter on device bond3 [ 752.618110][T24494] 8021q: adding VLAN 0 to HW filter on device bond3 [ 752.655855][T24494] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 752.720830][T24494] bond3: (slave sit1): Error -95 calling set_mac_address [ 752.775110][T24511] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 752.821898][T24511] bond3: (slave sit1): Error -95 calling set_mac_address [ 753.122056][T24527] bond10: Unable to set down delay as MII monitoring is disabled [ 753.253215][T24527] bond10 (unregistering): Released all slaves [ 753.391505][T24552] netlink: 'syz.2.4136': attribute type 1 has an invalid length. [ 753.554814][ T5615] Bluetooth: hci3: command 0x0405 tx timeout [ 753.668333][T24559] gretap1: entered allmulticast mode [ 753.700331][T24559] bond3: (slave gretap1): making interface the new active one [ 753.713750][T24559] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 753.729554][T24537] syzkaller0: entered promiscuous mode [ 753.770710][T24537] syzkaller0: entered allmulticast mode [ 753.788924][T24566] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.093437][T24581] netlink: 'syz.3.4141': attribute type 1 has an invalid length. [ 754.159645][T24585] veth3: entered allmulticast mode [ 754.179975][T24597] netlink: 'syz.2.4145': attribute type 1 has an invalid length. [ 754.202524][T24597] 8021q: adding VLAN 0 to HW filter on device bond4 [ 754.330609][T24598] bond4: (slave veth3): Enslaving as an active interface with a down link [ 754.346617][T24601] batman_adv: batadv0: Adding interface: ip6gretap0 [ 754.353305][T24601] batman_adv: batadv0: The MTU of interface ip6gretap0 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.380289][T24601] batman_adv: batadv0: Not using interface ip6gretap0 (retrying later): interface not active [ 754.759463][T24637] ip_tables: iptables: counters copy to user failed while replacing table [ 754.776507][T24636] ip_tables: iptables: counters copy to user failed while replacing table [ 756.402363][T24679] __nla_validate_parse: 13 callbacks suppressed [ 756.402381][T24679] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4161'. [ 756.418960][T24679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4161'. [ 756.523778][T24683] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4162'. [ 757.540990][T24686] syzkaller0: entered promiscuous mode [ 757.560232][T24686] syzkaller0: entered allmulticast mode [ 757.614825][T24699] syzkaller0: entered promiscuous mode [ 757.630221][T24699] syzkaller0: entered allmulticast mode [ 757.697821][T24708] sctp_setsockopt_maxseg: 55 callbacks suppressed [ 757.697837][T24708] sctp: [Deprecated]: syz.4.4163 (pid 24708) Use of int in maxseg socket option. [ 757.697837][T24708] Use struct sctp_assoc_value instead [ 757.715663][T24709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4166'. [ 759.700998][T24706] batman_adv: batadv0: Adding interface: gretap1 [ 759.707670][T24706] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.733424][T24706] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 759.744059][T24705] hsr0: entered allmulticast mode [ 759.749237][T24705] hsr_slave_0: entered allmulticast mode [ 759.758143][T24705] hsr0: left allmulticast mode [ 759.768601][T24705] hsr_slave_0: left allmulticast mode [ 759.778116][T24698] tipc: Enabled bearer , priority 0 [ 759.787008][T24699] tipc: Enabling of bearer rejected, already enabled [ 759.807294][T24709] hsr_slave_0: left promiscuous mode [ 759.849385][T24710] tipc: Resetting bearer [ 759.881691][T24697] tipc: Resetting bearer [ 759.964990][T24697] tipc: Disabling bearer [ 759.978903][T24722] netlink: 'syz.1.4169': attribute type 16 has an invalid length. [ 760.348527][T24738] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4173'. [ 760.620586][T24746] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.644550][T24752] netlink: 'syz.3.4175': attribute type 16 has an invalid length. [ 760.671183][T24752] netlink: 'syz.3.4175': attribute type 17 has an invalid length. [ 760.713676][T24757] netlink: NAT attribute has 1 unknown bytes [ 760.722864][T24755] netlink: 'syz.0.4177': attribute type 1 has an invalid length. [ 760.733799][T24754] netlink: 'syz.0.4177': attribute type 1 has an invalid length. [ 760.736236][T24757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.809854][T24752] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.817185][T24752] bridge0: port 2(bridge_slave_1) entered listening state [ 760.835186][T24759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4178'. [ 760.881483][T24752] mac80211_hwsim hwsim47 wlan0: left promiscuous mode [ 760.889851][T24752] mac80211_hwsim hwsim47 wlan0: left allmulticast mode [ 760.908161][T24752] bond1: left allmulticast mode [ 760.915681][T24752] A link change request failed with some changes committed already. Interface syzkallerB may have been left with an inconsistent configuration, please check. [ 760.944535][T16243] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.951818][T16243] bridge0: port 1(bridge_slave_0) entered listening state [ 760.964607][T24756] syzkaller0: entered promiscuous mode [ 760.974164][T24756] syzkaller0: entered allmulticast mode [ 761.240940][T24770] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 761.250492][T24770] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 761.267336][T24770] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 761.473412][T24772] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.480770][T24772] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.534934][T24797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4185'. [ 761.633260][T24772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.859452][T24808] netlink: 284 bytes leftover after parsing attributes in process `syz.4.4187'. [ 761.896768][T24814] smbdirect: ib_dev[syz2] removed [ 761.910266][T24780] wlan0: mtu less than device minimum [ 761.922906][T16822] lo speed is unknown, defaulting to 1000 [ 761.929222][T24206] netdevsim netdevsim3 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 761.943445][T24206] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.952039][T16822] syz0: Port: 1 Link DOWN [ 762.014342][ T76] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.024032][ T76] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.036563][ T76] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.045890][ T76] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.060286][ T76] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.069550][ T76] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.095940][T24826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4189'. [ 762.149186][T24830] netlink: 'syz.2.4190': attribute type 12 has an invalid length. [ 762.226506][T24832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4190'. [ 764.509067][T24795] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 764.758650][T24875] syzkaller0: entered promiscuous mode [ 764.775623][T24875] syzkaller0: entered allmulticast mode [ 764.803009][T24878] syzkaller0: entered promiscuous mode [ 764.817254][T24878] syzkaller0: entered allmulticast mode [ 765.077285][T24903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4200'. [ 765.100615][T24910] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4202'. [ 765.107825][T24903] block nbd5: Unsupported socket: should be TCP or UNIX. [ 765.111736][T24910] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4202'. [ 765.136493][T24908] ipvlan2: entered promiscuous mode [ 765.143571][T24908] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 765.259136][T24914] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode [ 765.266676][T24914] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 765.275092][T24914] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 765.308683][T24921] netlink: 'syz.1.4206': attribute type 10 has an invalid length. [ 765.317720][T24916] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 765.334631][T24916] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 765.346568][T24921] netlink: 'syz.1.4206': attribute type 10 has an invalid length. [ 765.506176][T24932] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4207'. [ 765.542994][T24932] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4207'. [ 765.563663][T24933] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4207'. [ 765.765749][ T7802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.776145][ T7802] syzkaller0: tun_net_xmit 76 [ 765.815854][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.825544][T20380] syzkaller0: tun_net_xmit 76 [ 765.830766][ T7802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.840290][ T7802] syzkaller0: tun_net_xmit 48 [ 765.849015][T24947] syzkaller0: create flow: hash 2157197685 index 1 [ 765.892881][T24939] syzkaller0: delete flow: hash 2157197685 index 1 [ 765.941489][T24943] syzkaller0: entered promiscuous mode [ 765.950441][T24943] syzkaller0: entered allmulticast mode [ 766.159247][T24960] netlink: 'syz.1.4214': attribute type 2 has an invalid length. [ 766.169902][T24960] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20000 [ 766.590809][T24988] vlan2: entered allmulticast mode [ 766.596131][T24988] bond0: entered allmulticast mode [ 766.601343][T24988] bond_slave_0: entered allmulticast mode [ 766.608624][T24988] bond_slave_1: entered allmulticast mode [ 766.617144][T24988] team0: entered allmulticast mode [ 766.622588][T24988] team_slave_0: entered allmulticast mode [ 766.629775][T24988] team_slave_1: entered allmulticast mode [ 766.669769][T24989] __nla_validate_parse: 6 callbacks suppressed [ 766.669787][T24989] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4220'. [ 766.965678][T25007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4226'. [ 767.020972][T25005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4224'. [ 767.050715][T25005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4224'. [ 767.257470][T25027] xt_CT: No such helper "netbios-ns" [ 767.278686][T25008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.306315][T25008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.337280][T25008] tipc: Resetting bearer [ 767.343140][T25008] tipc: Resetting bearer [ 767.402579][T25008] veth1_vlan: left promiscuous mode [ 767.640724][T25018] veth1_to_bridge: left allmulticast mode [ 767.648390][T25018] veth1_to_bridge: left promiscuous mode [ 767.667947][T25018] bridge0: port 1(veth1_to_bridge) entered disabled state [ 767.730799][T25018] bridge0 (unregistering): left promiscuous mode [ 767.852909][T25031] syzkaller0: entered promiscuous mode [ 767.863387][T25031] syzkaller0: entered allmulticast mode [ 767.913301][T25041] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 767.930262][T25041] bond5 (unregistering): Released all slaves [ 767.988677][T25063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4233'. [ 768.072879][T25067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4233'. [ 768.104524][T24211] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.128852][T24211] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.151788][T25076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4232'. [ 768.156418][T25063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.342977][T25081] macsec2: entered promiscuous mode [ 768.411984][T25084] syzkaller0: entered promiscuous mode [ 768.440326][T25093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4237'. [ 768.442599][T25084] syzkaller0: entered allmulticast mode [ 768.569319][T25101] netlink: 'syz.4.4237': attribute type 5 has an invalid length. [ 768.589729][T25101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4237'. [ 768.601594][T25103] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4240'. [ 768.631159][T25103] hsr_slave_1 (unregistering): left promiscuous mode [ 768.648926][T25106] netlink: 'syz.4.4237': attribute type 5 has an invalid length. [ 768.679567][T25092] wg2 speed is unknown, defaulting to 1000 [ 768.685150][ T76] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.700664][ T76] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.710456][ T76] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.719983][ T76] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.728710][ T76] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.737438][ T76] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.749258][T25092] wg2 speed is unknown, defaulting to 1000 [ 768.778214][T25092] wg2 speed is unknown, defaulting to 1000 [ 768.817967][T25092] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 768.856757][T25092] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 768.911214][T25092] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 769.010874][T25092] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 769.120546][T25092] wg2 speed is unknown, defaulting to 1000 [ 769.132436][T25092] wg2 speed is unknown, defaulting to 1000 [ 769.141614][T25092] wg2 speed is unknown, defaulting to 1000 [ 769.149809][T25092] wg2 speed is unknown, defaulting to 1000 [ 769.166496][T25092] wg2 speed is unknown, defaulting to 1000 [ 769.185177][T25092] wg2 speed is unknown, defaulting to 1000 [ 769.205232][T25092] wg2 speed is unknown, defaulting to 1000 [ 769.225549][T25092] wg2 speed is unknown, defaulting to 1000 [ 769.376431][T25135] vlan2: entered promiscuous mode [ 769.400999][T25135] gretap0: entered promiscuous mode [ 769.503004][T25144] netlink: 'syz.2.4246': attribute type 13 has an invalid length. [ 769.525114][T25144] netlink: 'syz.2.4246': attribute type 12 has an invalid length. [ 769.546323][T25139] --map-set only usable from mangle table [ 769.738552][T25161] sctp: [Deprecated]: syz.4.4250 (pid 25161) Use of int in maxseg socket option. [ 769.738552][T25161] Use struct sctp_assoc_value instead [ 770.668488][T25194] tipc: Enabling of bearer rejected, already enabled [ 770.679214][T25192] netlink: 'syz.3.4260': attribute type 10 has an invalid length. [ 770.689704][T25192] 8021q: adding VLAN 0 to HW filter on device team0 [ 770.707906][T25192] bond0: (slave team0): Enslaving as an active interface with an up link [ 770.723799][T25193] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 770.852610][T25201] Cannot find set identified by id 65534 to match [ 771.076604][T25211] syzkaller0: entered promiscuous mode [ 771.085654][T25211] syzkaller0: entered allmulticast mode [ 773.616093][T25250] __nla_validate_parse: 11 callbacks suppressed [ 773.616111][T25250] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4273'. [ 773.654207][T25250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4273'. [ 773.711588][T25259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4276'. [ 773.781082][T25261] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4275'. [ 773.833347][T25270] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4277'. [ 773.853546][T25271] netlink: 'syz.3.4277': attribute type 2 has an invalid length. [ 773.879179][T25270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4277'. [ 773.940380][T25271] : entered promiscuous mode [ 773.990942][T25272] block nbd5: server does not support multiple connections per device. [ 774.048635][T25285] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4279'. [ 774.058399][T25272] block nbd5: shutting down sockets [ 774.080091][T25289] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4279'. [ 774.100618][T25286] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4279'. [ 774.109829][T25284] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4278'. [ 774.119946][T25289] batman_adv: batadv0: Adding interface: macsec2 [ 774.127362][T25289] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 774.167346][T25289] batman_adv: batadv0: Not using interface macsec2 (retrying later): interface not active [ 774.186244][T25279] netlink: 'syz.2.4278': attribute type 1 has an invalid length. [ 774.321225][T25279] 8021q: adding VLAN 0 to HW filter on device bond5 [ 774.329305][T25306] ieee802154 phy0 wpan0: encryption failed: -22 [ 774.360186][T25280] 8021q: adding VLAN 0 to HW filter on device bond5 [ 774.391026][T25280] bond5: (slave nlmon0): The slave device specified does not support setting the MAC address [ 774.405792][T25280] bond5: (slave nlmon0): Error -95 calling set_mac_address [ 774.424052][T25284] bond5: (slave nlmon0): The slave device specified does not support setting the MAC address [ 774.436185][T25284] bond5: (slave nlmon0): Error -95 calling set_mac_address [ 774.612505][T25326] netlink: 'syz.2.4286': attribute type 4 has an invalid length. [ 775.421382][T25347] sctp: [Deprecated]: syz.4.4292 (pid 25347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 775.421382][T25347] Use struct sctp_sack_info instead [ 775.438570][T25348] sctp: [Deprecated]: syz.4.4292 (pid 25348) Use of struct sctp_assoc_value in delayed_ack socket option. [ 775.438570][T25348] Use struct sctp_sack_info instead [ 775.541437][T25348] TC_ACT_REPEAT abuse ? [ 775.770107][T25357] netlink: 'syz.1.4295': attribute type 1 has an invalid length. [ 775.794717][T25357] netlink: 'syz.1.4295': attribute type 2 has an invalid length. [ 776.164985][T25383] veth0_to_bond: entered promiscuous mode [ 776.203659][T25383] veth0_to_bond: entered allmulticast mode [ 776.346341][T25412] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 776.406444][T25415] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 776.568512][T25422] ip6tnl0: Caught tx_queue_len zero misconfig [ 776.722641][T25439] netlink: 'syz.3.4313': attribute type 4 has an invalid length. [ 776.739417][T25440] netlink: 'syz.3.4313': attribute type 4 has an invalid length. [ 777.179225][T25458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.213634][T25458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.298696][T25458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.340400][T25458] veth1_vlan: left promiscuous mode [ 777.365510][T25458] veth0_vlan: left promiscuous mode [ 777.372446][T25458] veth0_vlan: entered promiscuous mode [ 777.387444][T25458] veth1_vlan: entered promiscuous mode [ 777.398582][T25458] veth1_macvtap: left promiscuous mode [ 777.407317][T25458] veth0_macvtap: left promiscuous mode [ 777.413851][T25458] veth0_macvtap: entered promiscuous mode [ 777.420732][T25458] veth1_macvtap: entered promiscuous mode [ 777.430744][T25458] 8021q: adding VLAN 0 to HW filter on device  [ 777.445456][T25458] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 777.465525][T25458] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 777.486029][T25458] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 777.509749][T25458] 8021q: adding VLAN 0 to HW filter on device bond1 [ 777.537057][T25458] 8021q: adding VLAN 0 to HW filter on device bond2 [ 777.544539][T25458] A link change request failed with some changes committed already. Interface syzkallerB may have been left with an inconsistent configuration, please check. [ 777.560843][T16821] lo speed is unknown, defaulting to 1000 [ 777.569526][T16821] syz0: Port: 1 Link ACTIVE [ 777.579933][ T7802] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.587220][ T7802] bridge0: port 1(bridge_slave_0) entered listening state [ 777.597659][ T7802] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.604904][ T7802] bridge0: port 2(bridge_slave_1) entered listening state [ 777.786628][ T7802] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.876988][T25491] IPv6: NLM_F_CREATE should be specified when creating new route [ 777.880255][T16237] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.914619][T16237] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.943037][T25470] syzkaller0: entered promiscuous mode [ 777.948423][T25491] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 777.949383][T25470] syzkaller0: entered allmulticast mode [ 777.978651][T16237] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 6081 - 0 [ 778.138451][T25510] netlink: 'syz.2.4324': attribute type 5 has an invalid length. [ 778.163909][T25510] netlink: 'syz.2.4324': attribute type 9 has an invalid length. [ 778.355306][T25513] lo speed is unknown, defaulting to 1000 [ 778.385800][T25513] wg2 speed is unknown, defaulting to 1000 [ 778.500616][T25528] team1: entered promiscuous mode [ 778.509433][T25528] team1: entered allmulticast mode [ 778.516605][T25528] 8021q: adding VLAN 0 to HW filter on device team1 [ 778.642185][T25533] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 778.753699][T25544] __nla_validate_parse: 14 callbacks suppressed [ 778.753717][T25544] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4335'. [ 778.815378][T25548] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4336'. [ 778.825226][T25547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4336'. [ 778.919552][T25552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4337'. [ 778.986523][T25548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 779.024417][T25557] netlink: 'syz.1.4338': attribute type 1 has an invalid length. [ 779.032672][T25553] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4337'. [ 779.072110][T25549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 779.085228][T25557] gretap1: entered allmulticast mode [ 779.095837][T25557] bond4: (slave gretap1): making interface the new active one [ 779.105283][T25557] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 779.113345][T25561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4339'. [ 779.140179][T25554] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4337'. [ 779.651785][T25583] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4344'. [ 779.777950][T25587] netlink: 'syz.3.4346': attribute type 4 has an invalid length. [ 779.787910][T20379] lo speed is unknown, defaulting to 1000 [ 779.793690][T20379] syz0: Port: 1 Link DOWN [ 779.799342][T25587] netlink: 'syz.3.4346': attribute type 4 has an invalid length. [ 779.807514][T25593] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4345'. [ 779.810667][T20379] lo speed is unknown, defaulting to 1000 [ 779.831270][T20379] syz0: Port: 1 Link ACTIVE [ 779.916171][T25596] pim6reg: entered allmulticast mode [ 779.931955][T25596] pim6reg: left allmulticast mode [ 780.002000][T25601] netlink: 'syz.0.4350': attribute type 3 has an invalid length. [ 780.631777][T25642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4363'. [ 780.641464][T25643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 780.883168][T25655] hsr_slave_1 (unregistering): left promiscuous mode [ 781.352830][T25678] pim6reg: entered allmulticast mode [ 781.360700][T25678] pim6reg: left allmulticast mode [ 781.510249][T25688] Cannot find add_set index 4 as target [ 781.651542][T25697] syzkaller0: entered promiscuous mode [ 781.657837][T25697] syzkaller0: entered allmulticast mode [ 781.738104][T25702] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 781.749351][T25702] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 781.985016][T25720] ip_tables: iptables: counters copy to user failed while replacing table [ 782.207105][T25736] block nbd5: Unsupported socket: should be TCP or UNIX. [ 782.912337][T25752] syzkaller0: entered promiscuous mode [ 782.957954][T25752] syzkaller0: entered allmulticast mode [ 784.426224][T25808] netlink: 'syz.1.4406': attribute type 2 has an invalid length. [ 784.636396][T25811] openvswitch: netlink: Key 18 has unexpected len 0 expected 2 [ 786.130159][T25786] syzkaller0: entered promiscuous mode [ 786.137008][T25786] syzkaller0: entered allmulticast mode [ 786.152831][T25808] : entered promiscuous mode [ 786.479507][T25824] __nla_validate_parse: 9 callbacks suppressed [ 786.479526][T25824] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4409'. [ 786.516769][T25824] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4409'. [ 786.533692][T25824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4409'. [ 786.958228][T25865] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4419'. [ 787.080414][T25881] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 787.680149][T25893] x_tables: duplicate underflow at hook 2 [ 788.132986][T25907] netlink: 'syz.2.4428': attribute type 5 has an invalid length. [ 788.188936][T25907] netlink: 'syz.2.4428': attribute type 5 has an invalid length. [ 788.234676][T25915] ip_tables: iptables: counters copy to user failed while replacing table [ 788.305920][T25915] netlink: 'syz.0.4431': attribute type 12 has an invalid length. [ 788.329114][T25916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4431'. [ 788.340466][T25907] netlink: 'syz.2.4428': attribute type 5 has an invalid length. [ 788.352283][T25915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4431'. [ 788.362432][T25907] netlink: 'syz.2.4428': attribute type 5 has an invalid length. [ 788.375214][T25907] netlink: 'syz.2.4428': attribute type 5 has an invalid length. [ 788.389525][T25907] netlink: 'syz.2.4428': attribute type 5 has an invalid length. [ 788.419024][T25907] netlink: 'syz.2.4428': attribute type 5 has an invalid length. [ 788.456904][T25907] netlink: 'syz.2.4428': attribute type 5 has an invalid length. [ 788.880729][T25940] Cannot find del_set index 1 as target [ 788.959561][T25946] : entered promiscuous mode [ 788.964993][T25945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4440'. [ 789.008481][T25945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4440'. [ 789.078602][T25945] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 789.199387][T25960] block nbd5: Unsupported socket: should be TCP or UNIX. [ 789.348151][T25967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4446'. [ 789.382034][T25975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4446'. [ 790.417792][T26041] bridge_slave_0: Caught tx_queue_len zero misconfig [ 790.466080][T26041] sch_tbf: peakrate 3 is lower than or equals to rate 134217911 ! [ 790.861588][T26068] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 790.868911][T26068] IPv6: NLM_F_CREATE should be set when creating new route [ 790.876205][T26068] IPv6: NLM_F_CREATE should be set when creating new route [ 790.883451][T26068] IPv6: NLM_F_CREATE should be set when creating new route [ 790.943193][T26070] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 791.355323][T16246] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 791.384979][T16246] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.422348][T16246] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 791.454600][T16246] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.473422][T26093] geneve1: entered promiscuous mode [ 791.481376][T26093] validate_nla: 58 callbacks suppressed [ 791.481391][T26093] netlink: 'syz.2.4473': attribute type 13 has an invalid length. [ 791.495564][ T76] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 791.511705][T26094] __nla_validate_parse: 1 callbacks suppressed [ 791.511722][T26094] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4474'. [ 791.523791][ T76] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.549489][ T76] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 791.560826][ T76] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.617641][T26099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4475'. [ 791.766097][T26104] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4476'. [ 791.864005][T16237] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x31 [ 792.047792][T26120] syzkaller0: entered promiscuous mode [ 792.053931][T26120] syzkaller0: entered allmulticast mode [ 792.815026][T26137] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4483'. [ 793.160281][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 793.167684][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 794.759158][T26109] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 795.139855][T26154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4489'. [ 795.275022][T26158] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4490'. [ 795.356521][T26158] xt_hl: Unknown Hop Limit match mode: 4 [ 795.502644][T26163] syzkaller0: entered promiscuous mode [ 795.511067][T26163] syzkaller0: entered allmulticast mode [ 795.623889][T26185] netlink: zone id is out of range [ 795.633627][T26185] netlink: zone id is out of range [ 795.639608][T26185] netlink: zone id is out of range [ 795.644999][T26185] netlink: zone id is out of range [ 795.650326][T26185] netlink: zone id is out of range [ 795.676288][ T7843] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x31 [ 798.282159][ T7802] erspan0: left allmulticast mode [ 798.287472][ T7802] erspan0: left promiscuous mode [ 798.292732][ T7802] bridge0: port 1(erspan0) entered disabled state [ 798.310032][ T7802] dvmrp0: left allmulticast mode [ 798.494794][T26180] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 798.686125][T26212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4500'. [ 798.699915][ T7802] bond10 (unregistering): (slave geneve4): Releasing active interface [ 798.746210][T26219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4503'. [ 798.788785][T26219] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4503'. [ 798.798780][ T7802] bond4 (unregistering): (slave geneve2): Releasing active interface [ 798.821104][T26219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4503'. [ 798.854016][T26227] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4503'. [ 798.864402][T26217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4501'. [ 798.935741][T26235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4503'. [ 798.942523][T26240] netlink: 'syz.4.4506': attribute type 1 has an invalid length. [ 799.047337][ T7802] bond13 (unregistering): (slave bridge4): Releasing backup interface [ 799.086513][T26287] netlink: 'syz.4.4506': attribute type 1 has an invalid length. [ 799.119896][ T7802] bond1 (unregistering): Released all slaves [ 799.149550][ T7802] bond2 (unregistering): Released all slaves [ 799.169971][T26293] netlink: 'syz.2.4507': attribute type 1 has an invalid length. [ 799.181686][ T7802] bond3 (unregistering): (slave veth3): Releasing active interface [ 799.197037][ T7802] batadv1: entered promiscuous mode [ 799.213850][ T7802] bond3 (unregistering): (slave batadv1): Releasing active interface [ 799.238754][ T7802] bond3 (unregistering): Released all slaves [ 799.275896][ T7802] bond4 (unregistering): Released all slaves [ 799.289526][T26300] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4509'. [ 799.302988][T26300] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4509'. [ 799.304743][ T7802] bond5 (unregistering): Released all slaves [ 799.316121][T26300] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4509'. [ 799.357067][ T7802] bond6 (unregistering): Released all slaves [ 799.381051][ T7802] bond7 (unregistering): Released all slaves [ 799.399613][ T7802] bond8 (unregistering): Released all slaves [ 799.414018][ T7802] bond9 (unregistering): Released all slaves [ 799.441334][ T7802] bond10 (unregistering): Released all slaves [ 799.459698][ T7802] bond11 (unregistering): Released all slaves [ 799.474033][ T7802] bond12 (unregistering): Released all slaves [ 799.508395][ T7802] bond13 (unregistering): Released all slaves [ 799.525002][ T7802] bond14 (unregistering): Released all slaves [ 799.542056][ T7802] bond15 (unregistering): Released all slaves [ 799.560549][ T7802] bond16 (unregistering): Released all slaves [ 799.584760][ T7802] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 799.594543][ T7802] bond0 (unregistering): Released all slaves [ 799.609607][T26212] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 799.832333][T26293] 8021q: adding VLAN 0 to HW filter on device bond6 [ 799.866638][T26296] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 799.910936][ T7802] ovs-s!!: left promiscuous mode [ 800.025559][T26315] nbd5: detected capacity change from 0 to 127 [ 800.252441][ T7802] : left promiscuous mode [ 800.305304][ T5615] block nbd5: Receive control failed (result -104) [ 802.957753][ T7802] tipc: Disabling bearer [ 802.965017][ T7802] tipc: Left network mode [ 803.186249][T26354] block nbd0: reconnected socket [ 803.194686][T26354] nbd: socks must be embedded in a SOCK_ITEM attr [ 803.239267][ T5615] block nbd0: Receive control failed (result -32) [ 803.347470][T26366] netlink: 'syz.0.4521': attribute type 4 has an invalid length. [ 803.399262][ T25] block nbd5: Connection timed out, retrying (0/1 alive) [ 803.413576][ T25] block nbd5: Connection timed out, retrying (0/1 alive) [ 803.421447][ T25] block nbd5: Connection timed out, retrying (0/1 alive) [ 803.429553][ T1652] block nbd5: Dead connection, failed to find a fallback [ 803.440478][ T1652] block nbd5: shutting down sockets [ 803.447145][ T25] block nbd5: Connection timed out, retrying (0/1 alive) [ 803.457104][ T1652] blk_print_req_error: 27 callbacks suppressed [ 803.457119][ T1652] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 803.471767][T26371] netlink: 'syz.0.4521': attribute type 4 has an invalid length. [ 803.476919][ T1652] buffer_io_error: 27 callbacks suppressed [ 803.476933][ T1652] Buffer I/O error on dev nbd5, logical block 1, async page read [ 803.497281][ T1652] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 803.506943][ T1652] Buffer I/O error on dev nbd5, logical block 0, async page read [ 803.515223][ T1652] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 803.524823][ T1652] Buffer I/O error on dev nbd5, logical block 3, async page read [ 803.532663][ T1652] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 803.542354][ T1652] Buffer I/O error on dev nbd5, logical block 2, async page read [ 803.552189][ T1652] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 803.562113][ T1652] Buffer I/O error on dev nbd5, logical block 0, async page read [ 803.570112][ T1652] Buffer I/O error on dev nbd5, logical block 1, async page read [ 803.578044][ T1652] Buffer I/O error on dev nbd5, logical block 2, async page read [ 803.586102][ T1652] Buffer I/O error on dev nbd5, logical block 3, async page read [ 803.594302][ T1652] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 803.603810][ T1652] Buffer I/O error on dev nbd5, logical block 0, async page read [ 803.611714][ T1652] Buffer I/O error on dev nbd5, logical block 1, async page read [ 803.619736][ T1652] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 803.629686][ T1652] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 803.639715][ T1652] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 803.649467][ T1652] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 803.660574][T17247] ldm_validate_partition_table(): Disk read failed. [ 803.674820][T17247] Dev nbd5: unable to read RDB block 0 [ 803.683728][T26363] bond12: option arp_validate: invalid value (8192) [ 803.691057][T17247] nbd5: unable to read partition table [ 803.705871][T26363] bond12 (unregistering): Released all slaves [ 803.765265][T17247] ldm_validate_partition_table(): Disk read failed. [ 803.806704][T17247] Dev nbd5: unable to read RDB block 0 [ 803.848578][T17247] nbd5: unable to read partition table [ 804.189982][T26385] __nla_validate_parse: 35 callbacks suppressed [ 804.190002][T26385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4525'. [ 804.485256][ T7802] hsr_slave_0: left promiscuous mode [ 804.503844][ T7802] hsr_slave_1: left promiscuous mode [ 804.514200][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 804.699760][ T7800] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x31 [ 805.108481][T16237] tipc: Subscription rejected, illegal request [ 805.388389][T26417] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4532'. [ 805.405328][T26422] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4532'. [ 805.519469][T26430] netlink: 'syz.2.4534': attribute type 23 has an invalid length. [ 805.527968][T26430] netlink: 'syz.2.4534': attribute type 21 has an invalid length. [ 805.537139][T26430] IPv6: NLM_F_CREATE should be specified when creating new route [ 805.554225][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 805.693394][T26435] xt_hashlimit: size too large, truncated to 1048576 [ 805.745792][T26436] xt_hashlimit: size too large, truncated to 1048576 [ 805.775539][T26438] xt_hashlimit: size too large, truncated to 1048576 [ 805.871809][ T7802] IPVS: stop unused estimator thread 0... [ 806.381749][T26457] IPVS: length: 70 != 8 [ 806.387263][T26457] IPVS: length: 70 != 8 [ 806.391590][T26457] IPVS: length: 70 != 8 [ 806.396184][T26457] IPVS: length: 70 != 8 [ 806.400483][T26457] IPVS: length: 70 != 8 [ 806.405233][T26457] IPVS: length: 70 != 8 [ 806.409443][T26457] IPVS: length: 70 != 8 [ 806.413689][T26457] IPVS: length: 70 != 8 [ 806.419271][T26457] IPVS: length: 70 != 8 [ 806.423588][T26457] IPVS: length: 70 != 8 [ 806.428012][T26457] IPVS: length: 70 != 8 [ 806.432274][T26457] IPVS: length: 70 != 8 [ 806.437120][T26457] IPVS: length: 70 != 8 [ 806.441321][T26457] IPVS: length: 70 != 8 [ 806.446131][T26457] IPVS: length: 70 != 8 [ 806.450339][T26457] IPVS: length: 70 != 8 [ 806.454568][T26457] IPVS: length: 70 != 8 [ 806.458741][T26457] IPVS: length: 70 != 8 [ 806.462917][T26457] IPVS: length: 70 != 8 [ 806.467183][T26457] IPVS: length: 70 != 8 [ 806.471368][T26457] IPVS: length: 70 != 8 [ 806.475637][T26457] IPVS: length: 70 != 8 [ 806.479822][T26457] IPVS: length: 70 != 8 [ 806.483974][T26457] IPVS: length: 70 != 8 [ 806.488388][T26457] IPVS: length: 70 != 8 [ 806.492588][T26457] IPVS: length: 70 != 8 [ 806.496815][T26457] IPVS: length: 70 != 8 [ 806.500986][T26457] IPVS: length: 70 != 8 [ 806.505206][T26457] IPVS: length: 70 != 8 [ 806.509374][T26457] IPVS: length: 70 != 8 [ 806.513530][T26457] IPVS: length: 70 != 8 [ 806.518026][T26457] IPVS: length: 70 != 8 [ 806.522218][T26457] IPVS: length: 70 != 8 [ 806.526496][T26457] IPVS: length: 70 != 8 [ 806.530680][T26457] IPVS: length: 70 != 8 [ 806.534945][T26457] IPVS: length: 70 != 8 [ 806.539121][T26457] IPVS: length: 70 != 8 [ 806.543271][T26457] IPVS: length: 70 != 8 [ 806.547491][T26457] IPVS: length: 70 != 8 [ 806.551680][T26457] IPVS: length: 70 != 8 [ 806.555990][T26457] IPVS: length: 70 != 8 [ 806.560195][T26457] IPVS: length: 70 != 8 [ 806.564483][T26457] IPVS: length: 70 != 8 [ 806.568687][T26457] IPVS: length: 70 != 8 [ 806.572869][T26457] IPVS: length: 70 != 8 [ 806.577103][T26457] IPVS: length: 70 != 8 [ 806.581274][T26457] IPVS: length: 70 != 8 [ 806.585473][T26457] IPVS: length: 70 != 8 [ 806.589640][T26457] IPVS: length: 70 != 8 [ 806.593795][T26457] IPVS: length: 70 != 8 [ 806.598498][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 806.631618][T26457] IPVS: length: 70 != 8 [ 806.636122][T26457] IPVS: length: 70 != 8 [ 806.640323][T26457] IPVS: length: 70 != 8 [ 806.644593][T26457] IPVS: length: 70 != 8 [ 806.648777][T26457] IPVS: length: 70 != 8 [ 806.652938][T26457] IPVS: length: 70 != 8 [ 806.657207][T26457] IPVS: length: 70 != 8 [ 806.661382][T26457] IPVS: length: 70 != 8 [ 806.665606][T26457] IPVS: length: 70 != 8 [ 806.669772][T26457] IPVS: length: 70 != 8 [ 806.673922][T26457] IPVS: length: 70 != 8 [ 806.692865][T26457] IPVS: length: 70 != 8 [ 806.697274][T26457] IPVS: length: 70 != 8 [ 806.701451][T26457] IPVS: length: 70 != 8 [ 806.705685][T26457] IPVS: length: 70 != 8 [ 807.578638][T26398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 807.641604][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 807.754886][T26466] tipc: Enabling of bearer rejected, failed to enable media [ 807.827258][T26471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4545'. [ 807.851710][T26473] netlink: 564 bytes leftover after parsing attributes in process `syz.3.4542'. [ 808.177397][T26485] netlink: 'syz.1.4548': attribute type 1 has an invalid length. [ 808.203196][T26490] netlink: 'syz.0.4550': attribute type 1 has an invalid length. [ 808.259758][T26485] bond5: entered promiscuous mode [ 808.265322][T26485] 8021q: adding VLAN 0 to HW filter on device bond5 [ 808.330407][T26490] 8021q: adding VLAN 0 to HW filter on device bond6 [ 808.374911][T26499] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4551'. [ 808.496671][T26494] bond6: (slave gretap1): making interface the new active one [ 808.514529][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.521851][ C0] bridge0: topology change detected, propagating [ 808.528282][T26494] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 808.528561][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.544137][ C0] bridge0: topology change detected, propagating [ 808.554007][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.605344][T26496] bond6 (unregistering): (slave gretap1): Releasing active interface [ 808.627702][T26496] bond6 (unregistering): Released all slaves [ 808.654689][T26512] netlink: 'syz.1.4553': attribute type 1 has an invalid length. [ 808.673763][T26499] bond0 (unregistering): (slave 30): Releasing backup interface [ 808.682067][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 808.720095][T26499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 808.733063][T26499] bond0 (unregistering): Released all slaves [ 808.833105][T26512] bond7: entered promiscuous mode [ 808.839463][T26512] 8021q: adding VLAN 0 to HW filter on device bond7 [ 808.867295][T26515] 8021q: adding VLAN 0 to HW filter on device bond7 [ 808.875184][T26515] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 808.886415][T26515] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 808.900030][T26515] bond7: (slave ip6gre1): making interface the new active one [ 808.910533][T26515] ip6gre1: entered promiscuous mode [ 808.919047][T26515] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 809.059105][T26533] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 809.179206][T26537] Cannot find add_set index 0 as target [ 809.425439][T26548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4561'. [ 809.589039][T26557] bridge0: port 3(vlan2) entered blocking state [ 809.604421][T26557] bridge0: port 3(vlan2) entered disabled state [ 809.619415][T26557] vlan2: entered allmulticast mode [ 809.629521][T26557] geneve0: entered allmulticast mode [ 809.659027][T26557] vlan2: entered promiscuous mode [ 809.671829][T26557] geneve0: entered promiscuous mode [ 809.714136][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 809.921015][T26573] netlink: 564 bytes leftover after parsing attributes in process `syz.3.4565'. [ 810.019233][T26578] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.083403][T26577] lo speed is unknown, defaulting to 1000 [ 810.144947][T26577] wg2 speed is unknown, defaulting to 1000 [ 810.754411][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 810.940386][T26605] batman_adv: batadv0: Adding interface: vlan3 [ 810.946750][T26605] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.981314][T26605] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 811.043506][T26610] netlink: 'syz.4.4575': attribute type 30 has an invalid length. [ 811.108884][T26613] syzkaller0: entered promiscuous mode [ 811.124152][T26613] syzkaller0: entered allmulticast mode [ 811.253115][T26617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4576'. [ 811.775111][T26627] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4578'. [ 811.804451][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 811.944390][T26638] sctp: [Deprecated]: syz.2.4581 (pid 26638) Use of struct sctp_assoc_value in delayed_ack socket option. [ 811.944390][T26638] Use struct sctp_sack_info instead [ 811.984411][T26638] sctp: [Deprecated]: syz.2.4581 (pid 26638) Use of struct sctp_assoc_value in delayed_ack socket option. [ 811.984411][T26638] Use struct sctp_sack_info instead [ 812.025720][T26648] sctp: [Deprecated]: syz.2.4581 (pid 26648) Use of struct sctp_assoc_value in delayed_ack socket option. [ 812.025720][T26648] Use struct sctp_sack_info instead [ 812.043272][T26649] sctp: [Deprecated]: syz.2.4581 (pid 26649) Use of struct sctp_assoc_value in delayed_ack socket option. [ 812.043272][T26649] Use struct sctp_sack_info instead [ 812.066740][T26630] xt_hashlimit: size too large, truncated to 1048576 [ 812.409310][T26630] xt_hashlimit: size too large, truncated to 1048576 [ 812.842989][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 813.046209][T26670] sctp: [Deprecated]: syz.0.4584 (pid 26670) Use of int in max_burst socket option deprecated. [ 813.046209][T26670] Use struct sctp_assoc_value instead [ 813.878993][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 814.914128][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 815.187268][T16241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.210085][T16241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.253314][T26699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4591'. [ 815.263134][T26700] netlink: 564 bytes leftover after parsing attributes in process `syz.4.4589'. [ 815.410584][T26708] netlink: 'syz.1.4592': attribute type 4 has an invalid length. [ 815.572990][T26717] netlink: 'syz.1.4594': attribute type 1 has an invalid length. [ 815.632108][T26717] bond8: (slave geneve3): making interface the new active one [ 815.641394][T26717] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 815.652601][T26717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4594'. [ 815.656559][T16237] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 815.695629][T16237] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 815.733953][T26717] 8021q: adding VLAN 0 to HW filter on device bond8 [ 815.754435][T16241] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 815.781694][T16241] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 815.834351][T26727] netlink: 'syz.1.4596': attribute type 7 has an invalid length. [ 815.842963][T26727] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4596'. [ 815.853016][T26727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4596'. [ 815.954297][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 816.103134][T26735] netlink: 'syz.2.4599': attribute type 1 has an invalid length. [ 816.126153][T26735] netlink: 'syz.2.4599': attribute type 15 has an invalid length. [ 816.161888][T26740] netlink: 712 bytes leftover after parsing attributes in process `syz.0.4598'. [ 816.192664][T26740] netlink: 5504 bytes leftover after parsing attributes in process `syz.0.4598'. [ 816.252627][T26740] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4598'. [ 816.719355][T26762] tipc: Enabling of bearer rejected, failed to enable media [ 816.993911][T26781] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4609'. [ 817.003021][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 817.039225][T26784] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4610'. [ 817.250592][T26795] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode [ 817.337220][T26806] bond0: Unable to set up delay as MII monitoring is disabled [ 817.938283][T26833] 8021q: VLANs not supported on ip6gre0 [ 818.034258][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 818.053171][T26843] openvswitch: netlink: Tunnel attr 15368 out of range max 16 [ 818.409121][T26867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 819.079376][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 819.265378][T26890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 819.309948][T26894] ip_tables: iptables: counters copy to user failed while replacing table [ 819.355505][T26899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 819.939274][T26932] netlink: 'syz.1.4643': attribute type 8 has an invalid length. [ 820.046102][T26938] syzkaller0: entered promiscuous mode [ 820.092645][T26938] syzkaller0: entered allmulticast mode [ 820.114163][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 820.352861][T26954] __nla_validate_parse: 8 callbacks suppressed [ 820.352878][T26954] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4650'. [ 820.478203][T26954] ipvlan0: entered promiscuous mode [ 820.516753][T26954] ipvlan0: left promiscuous mode [ 820.870898][T26976] syzkaller0: entered promiscuous mode [ 820.883334][T26976] syzkaller0: entered allmulticast mode [ 820.917778][T26976] 0: reclassify loop, rule prio 0, protocol 700 [ 820.930586][T24202] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x31 [ 821.154157][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 821.175517][T26992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4657'. [ 821.273742][T26998] netlink: 'syz.0.4658': attribute type 1 has an invalid length. [ 821.317408][T26998] 8021q: adding VLAN 0 to HW filter on device bond6 [ 821.341000][T26998] bond6: (slave syz_tun): Enslaving as a backup interface with an up link [ 821.387666][T27004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4661'. [ 821.422807][T27012] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4660'. [ 821.435192][ T7800] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 821.489492][T27012] netlink: 'syz.3.4660': attribute type 1 has an invalid length. [ 821.502231][T27012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4660'. [ 821.574828][T27016] pimreg: entered allmulticast mode [ 821.583221][T27016] pimreg: left allmulticast mode [ 821.627184][T16241] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 822.194272][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 823.244447][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 823.807812][T26978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 824.029119][T27052] netlink: 'syz.1.4670': attribute type 1 has an invalid length. [ 824.072795][T27059] netlink: 564 bytes leftover after parsing attributes in process `syz.3.4668'. [ 824.127039][T27063] bond9: (slave gretap2): making interface the new active one [ 824.149064][T27063] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 824.180377][T27052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4670'. [ 824.205416][T27066] netlink: 'syz.2.4672': attribute type 3 has an invalid length. [ 824.217289][T27052] 8021q: adding VLAN 0 to HW filter on device bond9 [ 824.225756][T27066] netlink: 'syz.2.4672': attribute type 4 has an invalid length. [ 824.258159][T27066] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4672'. [ 824.274467][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 824.379644][T27070] xt_CT: No such helper "snmp_trap" [ 824.421319][T27067] xt_CT: No such helper "snmp_trap" [ 824.458776][T27077] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 824.464794][T27075] netlink: 'syz.1.4673': attribute type 1 has an invalid length. [ 824.513852][T27075] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4673'. [ 824.532560][T27080] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 824.564173][T24202] bond6: (slave syz_tun): link status up again after 0 ms [ 824.683266][T27084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4677'. [ 824.702610][T27084] siw: device registration error -23 [ 824.739700][T27084] sch_fq: defrate 3 ignored. [ 824.777448][T27086] lo speed is unknown, defaulting to 1000 [ 824.787665][T27084] netlink: 'syz.1.4677': attribute type 210 has an invalid length. [ 824.816248][T27086] wg2 speed is unknown, defaulting to 1000 [ 824.850713][T27091] netlink: 'syz.4.4680': attribute type 8 has an invalid length. [ 825.053502][ T7800] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x31 [ 825.224354][T20379] wg2 speed is unknown, defaulting to 1000 [ 825.237134][T24202] net_ratelimit: 5 callbacks suppressed [ 825.237153][T24202] bond6: (slave syz_tun): failed to get link speed/duplex [ 825.314496][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 825.364698][T24213] bond6: (slave syz_tun): failed to get link speed/duplex [ 825.475753][T24202] bond6: (slave syz_tun): failed to get link speed/duplex [ 825.594312][T24202] bond6: (slave syz_tun): failed to get link speed/duplex [ 825.704395][T16237] bond6: (slave syz_tun): failed to get link speed/duplex [ 825.824524][T16237] bond6: (slave syz_tun): failed to get link speed/duplex [ 825.934236][T16237] bond6: (slave syz_tun): failed to get link speed/duplex [ 826.044217][T16237] bond6: (slave syz_tun): failed to get link speed/duplex [ 826.154236][T24202] bond6: (slave syz_tun): failed to get link speed/duplex [ 827.926825][T27096] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 828.445296][T27145] __nla_validate_parse: 2 callbacks suppressed [ 828.445314][T27145] netlink: 564 bytes leftover after parsing attributes in process `syz.0.4690'. [ 828.487431][T27148] netlink: 'syz.3.4691': attribute type 9 has an invalid length. [ 828.558869][T27148] netlink: 'syz.3.4691': attribute type 6 has an invalid length. [ 829.122521][T27175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4697'. [ 829.179886][T27175] bridge: RTM_NEWNEIGH with invalid ether address [ 829.195226][T27177] netlink: 'syz.3.4695': attribute type 1 has an invalid length. [ 829.221682][T27180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4697'. [ 829.279015][T27180] bridge: RTM_NEWNEIGH with invalid ether address [ 829.306636][T27185] block nbd6: Unsupported socket: should be TCP or UNIX. [ 829.353180][T27177] 8021q: adding VLAN 0 to HW filter on device bond7 [ 829.478883][T27172] bond7: (slave ip6gretap0): making interface the new active one [ 829.557246][T27172] bond7: (slave ip6gretap0): Enslaving as an active interface with an up link [ 829.924384][T27197] 8021q: adding VLAN 0 to HW filter on device bond7 [ 829.963951][T27203] xt_TCPMSS: Only works on TCP SYN packets [ 829.975802][T27201] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 830.098856][T27208] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4705'. [ 830.304318][ T7845] net_ratelimit: 36 callbacks suppressed [ 830.304336][ T7845] bond6: (slave syz_tun): link status up again after 0 ms [ 830.345055][ T7845] bond6: (slave syz_tun): failed to get link speed/duplex [ 830.452113][T27222] syzkaller0: entered promiscuous mode [ 830.469659][T27222] syzkaller0: entered allmulticast mode [ 830.500231][T27222] tipc: Enabled bearer , priority 0 [ 830.514266][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 830.540838][T27222] tipc: Resetting bearer [ 830.560518][T27221] tipc: Resetting bearer [ 830.592415][T27221] tipc: Disabling bearer [ 830.625332][ T7800] bond6: (slave syz_tun): failed to get link speed/duplex [ 830.660787][T27227] netlink: 564 bytes leftover after parsing attributes in process `syz.0.4710'. [ 830.734329][T24210] bond6: (slave syz_tun): failed to get link speed/duplex [ 830.892111][T27239] syzkaller1: entered promiscuous mode [ 830.898391][T27239] syzkaller1: entered allmulticast mode [ 830.985052][ T7800] bond6: (slave syz_tun): failed to get link speed/duplex [ 831.080368][T27243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4717'. [ 831.104566][ T7845] bond6: (slave syz_tun): failed to get link speed/duplex [ 831.235179][ T7845] bond6: (slave syz_tun): failed to get link speed/duplex [ 831.263352][T27256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4722'. [ 831.285802][T27256] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4722'. [ 831.354690][ T7800] bond6: (slave syz_tun): failed to get link speed/duplex [ 831.461743][T27265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4724'. [ 831.486779][T16237] bond6: (slave syz_tun): failed to get link speed/duplex [ 831.507809][T27267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4725'. [ 831.597611][T27267] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 831.659333][T27267] bond8 (unregistering): Released all slaves [ 831.800190][T27288] Bluetooth: hci0: unsupported parameter 5135 [ 831.807133][T27288] Bluetooth: hci0: unsupported parameter 8192 [ 831.813337][T27288] Bluetooth: hci0: unsupported parameter 5135 [ 831.823901][T27288] Bluetooth: hci0: unsupported parameter 8192 [ 831.830849][T27287] Bluetooth: hci0: unsupported parameter 5135 [ 831.837629][T27287] Bluetooth: hci0: unsupported parameter 8192 [ 831.845764][T27287] Bluetooth: hci0: unsupported parameter 5135 [ 831.852274][T27287] Bluetooth: hci0: unsupported parameter 8192 [ 831.865670][T27280] syz_tun: entered promiscuous mode [ 831.881390][T27280] gretap0: entered promiscuous mode [ 831.896295][T27280] debugfs: 'hsr0' already exists in 'hsr' [ 831.902750][T27280] Cannot create hsr debugfs directory [ 831.988068][T27294] sctp: [Deprecated]: syz.2.4731 (pid 27294) Use of struct sctp_assoc_value in delayed_ack socket option. [ 831.988068][T27294] Use struct sctp_sack_info instead [ 832.905682][T27350] tc_dump_action: action bad kind [ 832.958252][T27354] tc_dump_action: action bad kind [ 833.040024][T27360] x_tables: unsorted underflow at hook 2 [ 833.491638][T27379] __nla_validate_parse: 13 callbacks suppressed [ 833.491657][T27379] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4749'. [ 834.278051][T27402] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4754'. [ 834.459324][T27411] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4757'. [ 834.614007][T27411] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4757'. [ 834.626497][T27419] xt_hashlimit: size too large, truncated to 1048576 [ 835.021273][T27441] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4764'. [ 835.280706][T27449] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4763'. [ 835.324909][T24213] IPVS: starting estimator thread 0... [ 835.386257][T24210] net_ratelimit: 37 callbacks suppressed [ 835.386274][T24210] bond6: (slave syz_tun): failed to get link speed/duplex [ 835.424221][T27467] IPVS: using max 35 ests per chain, 84000 per kthread [ 835.577182][ T7800] bond6: (slave syz_tun): failed to get link speed/duplex [ 835.592279][T27480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4773'. [ 835.612495][T27478] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4772'. [ 835.663336][T27483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4773'. [ 835.734697][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 835.745602][T27490] netlink: 'syz.2.4774': attribute type 8 has an invalid length. [ 835.753265][T24202] bond6: (slave syz_tun): failed to get link speed/duplex [ 835.876548][T16237] bond6: (slave syz_tun): failed to get link speed/duplex [ 836.094486][T24202] bond6: (slave syz_tun): failed to get link speed/duplex [ 836.155121][T27517] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4779'. [ 836.254791][T16241] bond6: (slave syz_tun): failed to get link speed/duplex [ 836.374868][ T7800] bond6: (slave syz_tun): failed to get link speed/duplex [ 836.529276][ T7800] bond6: (slave syz_tun): failed to get link speed/duplex [ 836.654267][ T7800] bond6: (slave syz_tun): failed to get link speed/duplex [ 836.711667][T27546] veth1_to_team: entered promiscuous mode [ 836.767019][T27546] hsr1: entered promiscuous mode [ 836.773427][T27540] syzkaller1: entered promiscuous mode [ 836.793281][T27540] syzkaller1: entered allmulticast mode [ 836.818677][T27556] netlink: 'syz.2.4791': attribute type 4 has an invalid length. [ 837.743354][T27586] *A^m: renamed from lo (while UP) [ 838.242697][T27613] netlink: 'syz.2.4805': attribute type 15 has an invalid length. [ 838.242697][T27614] netlink: 'syz.2.4805': attribute type 15 has an invalid length. [ 838.263122][T27614] netlink: 'syz.2.4805': attribute type 15 has an invalid length. [ 838.265238][T27613] netlink: 'syz.2.4805': attribute type 15 has an invalid length. [ 838.911565][T27653] netlink: 'syz.4.4814': attribute type 11 has an invalid length. [ 838.942383][T27653] __nla_validate_parse: 11 callbacks suppressed [ 838.942403][T27653] netlink: 4312 bytes leftover after parsing attributes in process `syz.4.4814'. [ 838.960683][T27650] netlink: 'syz.0.4813': attribute type 21 has an invalid length. [ 838.978609][T27650] IPv6: NLM_F_CREATE should be specified when creating new route [ 839.011268][T27650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4813'. [ 839.278455][T27671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4819'. [ 839.315740][T27671] veth1_to_team: entered promiscuous mode [ 839.321657][T27670] netlink: 564 bytes leftover after parsing attributes in process `syz.2.4818'. [ 839.332385][T27671] gretap0: entered promiscuous mode [ 839.342694][T27671] debugfs: 'hsr1' already exists in 'hsr' [ 839.373349][T27671] Cannot create hsr debugfs directory [ 839.381826][T27671] hsr1: entered promiscuous mode [ 839.687452][T27697] netlink: 564 bytes leftover after parsing attributes in process `syz.4.4823'. [ 839.786632][T27701] x_tables: duplicate underflow at hook 1 [ 839.907322][T27704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4827'. [ 840.395800][T16241] net_ratelimit: 36 callbacks suppressed [ 840.395821][T16241] bond6: (slave syz_tun): failed to get link speed/duplex [ 840.574178][T24213] bond6: (slave syz_tun): failed to get link speed/duplex [ 840.694181][T16241] bond6: (slave syz_tun): failed to get link speed/duplex [ 840.817295][T24210] bond6: (slave syz_tun): failed to get link speed/duplex [ 840.914124][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 840.964568][T24210] bond6: (slave syz_tun): failed to get link speed/duplex [ 840.998206][T27720] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4831'. [ 841.112903][T27720] veth13: entered allmulticast mode [ 841.216422][T16241] bond6: (slave syz_tun): failed to get link speed/duplex [ 841.283301][T27732] *A^m speed is unknown, defaulting to 1000 [ 841.301777][T24202] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 841.319181][T27732] wg2 speed is unknown, defaulting to 1000 [ 841.370021][T27754] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4840'. [ 841.387770][T27754] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4840'. [ 841.444276][T24210] bond6: (slave syz_tun): failed to get link speed/duplex [ 841.554775][T16237] bond6: (slave syz_tun): failed to get link speed/duplex [ 841.674410][T24213] bond6: (slave syz_tun): failed to get link speed/duplex [ 842.531786][T27762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4842'. [ 842.547248][T27762] macvtap0: entered allmulticast mode [ 842.552745][T27762] ip6gretap0: entered allmulticast mode [ 842.560290][T27762] ip6gretap0: left allmulticast mode [ 843.726765][T27771] netlink: 'syz.0.4845': attribute type 13 has an invalid length. [ 844.188190][T27740] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 844.203857][T27759] netlink: 'syz.1.4841': attribute type 23 has an invalid length. [ 844.241718][T27758] netlink: 'syz.1.4841': attribute type 23 has an invalid length. [ 844.342767][T27781] __nla_validate_parse: 2 callbacks suppressed [ 844.342786][T27781] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4849'. [ 844.405949][T27790] netlink: 'syz.3.4850': attribute type 28 has an invalid length. [ 844.419260][T27790] netlink: 'syz.3.4850': attribute type 3 has an invalid length. [ 844.427560][T27790] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4850'. [ 844.469441][T24202] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x31 [ 844.705595][T27807] netlink: 712 bytes leftover after parsing attributes in process `syz.3.4853'. [ 845.485047][T16241] net_ratelimit: 39 callbacks suppressed [ 845.485070][T16241] bond6: (slave syz_tun): failed to get link speed/duplex [ 845.614373][ T7845] bond6: (slave syz_tun): failed to get link speed/duplex [ 845.724280][T24210] bond6: (slave syz_tun): failed to get link speed/duplex [ 845.834284][T24210] bond6: (slave syz_tun): failed to get link speed/duplex [ 845.954263][T16241] bond6: (slave syz_tun): failed to get link speed/duplex [ 846.064204][T16241] bond6: (slave syz_tun): failed to get link speed/duplex [ 846.124183][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 846.174222][T16241] bond6: (slave syz_tun): failed to get link speed/duplex [ 846.284916][T16237] bond6: (slave syz_tun): failed to get link speed/duplex [ 846.404407][T16237] bond6: (slave syz_tun): failed to get link speed/duplex [ 847.330921][T27782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 847.606240][T24210] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 847.883748][T27856] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 847.933001][T27856] IPv6: NLM_F_CREATE should be specified when creating new route [ 848.029253][T27864] netlink: 'syz.1.4868': attribute type 9 has an invalid length. [ 848.043771][T27864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4868'. [ 848.326071][T27871] netlink: 'syz.3.4870': attribute type 10 has an invalid length. [ 848.341559][T27871] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 848.350380][T27871] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 848.368347][T27871] netlink: 'syz.3.4870': attribute type 10 has an invalid length. [ 848.381153][T27871] netlink: 'syz.3.4870': attribute type 10 has an invalid length. [ 848.392927][T27871] netlink: 'syz.3.4870': attribute type 10 has an invalid length. [ 848.969677][T27877] validate_nla: 29 callbacks suppressed [ 848.969689][T27877] netlink: 'syz.4.4871': attribute type 1 has an invalid length. [ 848.987241][T27877] netlink: 'syz.4.4871': attribute type 10 has an invalid length. [ 848.997424][T27877] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4871'. [ 849.006913][T27877] dummy0: entered promiscuous mode [ 849.474286][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 850.420327][T27828] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 850.595976][ T7845] net_ratelimit: 40 callbacks suppressed [ 850.595996][ T7845] bond6: (slave syz_tun): failed to get link speed/duplex [ 850.610226][T27892] netlink: 'syz.1.4875': attribute type 2 has an invalid length. [ 850.620662][T27892] netlink: 'syz.1.4875': attribute type 1 has an invalid length. [ 850.659852][T27892] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4875'. [ 850.746220][T24210] bond6: (slave syz_tun): failed to get link speed/duplex [ 850.864359][T16241] bond6: (slave syz_tun): failed to get link speed/duplex [ 850.934240][T27925] netlink: 'syz.3.4882': attribute type 7 has an invalid length. [ 850.955432][T27925] netlink: 'syz.3.4882': attribute type 8 has an invalid length. [ 851.000078][T24213] bond6: (slave syz_tun): failed to get link speed/duplex [ 851.012111][T27930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4879'. [ 851.071272][T27933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4883'. [ 851.087785][T27935] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4884'. [ 851.106684][T27933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4883'. [ 851.138849][T27938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4883'. [ 851.159956][T24210] bond6: (slave syz_tun): failed to get link speed/duplex [ 851.162450][T27938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4883'. [ 851.284406][T24210] bond6: (slave syz_tun): failed to get link speed/duplex [ 851.314123][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 851.436788][T24202] bond6: (slave syz_tun): failed to get link speed/duplex [ 851.584706][ T7845] bond6: (slave syz_tun): failed to get link speed/duplex [ 851.906625][T24210] bond6: (slave syz_tun): failed to get link speed/duplex [ 851.979655][T27967] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4893'. [ 852.016907][T27967] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4893'. [ 852.968369][T28010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4904'. [ 853.387263][T28031] mac80211_hwsim hwsim68 wlan1: entered promiscuous mode [ 853.413661][T28031] mac80211_hwsim hwsim68 wlan1: left promiscuous mode [ 854.153619][T28048] [ 854.155992][T28048] ====================================================== [ 854.163009][T28048] WARNING: possible circular locking dependency detected [ 854.170050][T28048] syzkaller #0 Not tainted [ 854.174461][T28048] ------------------------------------------------------ [ 854.181474][T28048] syz.2.4913/28048 is trying to acquire lock: [ 854.187528][T28048] ffffffff8ec8c680 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x6a/0x620 [ 854.197369][T28048] [ 854.197369][T28048] but task is already holding lock: [ 854.204723][T28048] ffffffff903e1b40 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 854.215355][T28048] [ 854.215355][T28048] which lock already depends on the new lock. [ 854.215355][T28048] [ 854.225751][T28048] [ 854.225751][T28048] the existing dependency chain (in reverse order) is: [ 854.234756][T28048] [ 854.234756][T28048] -> #8 (uevent_sock_mutex){+.+.}-{4:4}: [ 854.242577][T28048] __mutex_lock+0x19d/0x1550 [ 854.247692][T28048] kobject_uevent_net_broadcast+0x27e/0x560 [ 854.254111][T28048] kobject_uevent_env+0x566/0x9e0 [ 854.259655][T28048] device_add+0x544/0xb80 [ 854.264602][T28048] device_create+0x269/0x300 [ 854.269714][T28048] msr_device_create+0x33/0x50 [ 854.275011][T28048] cpuhp_invoke_callback+0x434/0x810 [ 854.280834][T28048] cpuhp_thread_fun+0x362/0x780 [ 854.286198][T28048] smpboot_thread_fn+0x565/0xa70 [ 854.291670][T28048] kthread+0x38b/0x480 [ 854.296252][T28048] ret_from_fork+0x514/0xb70 [ 854.301377][T28048] ret_from_fork_asm+0x1a/0x30 [ 854.306658][T28048] [ 854.306658][T28048] -> #7 (cpuhp_state-up){+.+.}-{0:0}: [ 854.314211][T28048] cpuhp_thread_fun+0x127/0x780 [ 854.319584][T28048] smpboot_thread_fn+0x565/0xa70 [ 854.325040][T28048] kthread+0x38b/0x480 [ 854.329628][T28048] ret_from_fork+0x514/0xb70 [ 854.334731][T28048] ret_from_fork_asm+0x1a/0x30 [ 854.340019][T28048] [ 854.340019][T28048] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 854.347745][T28048] cpus_read_lock+0x42/0x160 [ 854.352851][T28048] static_key_slow_inc+0x12/0x30 [ 854.358333][T28048] nbd_genl_reconfigure+0x1301/0x1e80 [ 854.364302][T28048] genl_family_rcv_msg_doit+0x233/0x340 [ 854.370372][T28048] genl_rcv_msg+0x614/0x7a0 [ 854.375391][T28048] netlink_rcv_skb+0x226/0x4a0 [ 854.380661][T28048] genl_rcv+0x28/0x40 [ 854.385159][T28048] netlink_unicast+0x7bd/0x940 [ 854.390438][T28048] netlink_sendmsg+0x813/0xb40 [ 854.395710][T28048] sock_sendmsg_nosec+0x13a/0x180 [ 854.401255][T28048] ____sys_sendmsg+0x54e/0x850 [ 854.406540][T28048] ___sys_sendmsg+0x2a5/0x360 [ 854.411737][T28048] __x64_sys_sendmsg+0x1b1/0x290 [ 854.417196][T28048] do_syscall_64+0x166/0x520 [ 854.422304][T28048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.428709][T28048] [ 854.428709][T28048] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 854.436349][T28048] __mutex_lock+0x19d/0x1550 [ 854.441458][T28048] nbd_queue_rq+0x373/0x1150 [ 854.446572][T28048] blk_mq_dispatch_rq_list+0x499/0x1990 [ 854.452721][T28048] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 854.459599][T28048] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 854.466091][T28048] blk_mq_run_work_fn+0x16c/0x300 [ 854.471663][T28048] process_scheduled_works+0xa88/0x14c0 [ 854.477720][T28048] worker_thread+0xa47/0xfb0 [ 854.482823][T28048] kthread+0x38b/0x480 [ 854.487406][T28048] ret_from_fork+0x514/0xb70 [ 854.492521][T28048] ret_from_fork_asm+0x1a/0x30 [ 854.497801][T28048] [ 854.497801][T28048] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 854.505007][T28048] __mutex_lock+0x19d/0x1550 [ 854.510122][T28048] nbd_queue_rq+0xc1/0x1150 [ 854.515145][T28048] blk_mq_dispatch_rq_list+0x499/0x1990 [ 854.521212][T28048] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 854.528057][T28048] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 854.534544][T28048] blk_mq_run_work_fn+0x16c/0x300 [ 854.540078][T28048] process_scheduled_works+0xa88/0x14c0 [ 854.546134][T28048] worker_thread+0xa47/0xfb0 [ 854.551236][T28048] kthread+0x38b/0x480 [ 854.555824][T28048] ret_from_fork+0x514/0xb70 [ 854.560932][T28048] ret_from_fork_asm+0x1a/0x30 [ 854.566216][T28048] [ 854.566216][T28048] -> #3 (set->srcu){.+.+}-{0:0}: [ 854.573349][T28048] __synchronize_srcu+0xc9/0x2f0 [ 854.578822][T28048] elevator_switch+0x1e8/0x7b0 [ 854.584176][T28048] elevator_change+0x2fa/0x480 [ 854.589460][T28048] elevator_set_default+0x375/0x440 [ 854.595177][T28048] blk_register_queue+0x3f3/0x4e0 [ 854.600798][T28048] __add_disk+0x6cb/0xe30 [ 854.605638][T28048] add_disk_fwnode+0x100/0x3a0 [ 854.610915][T28048] nbd_dev_add+0x733/0xb60 [ 854.615845][T28048] nbd_init+0x15f/0x1e0 [ 854.620623][T28048] do_one_initcall+0x250/0x870 [ 854.625900][T28048] do_initcall_level+0x10a/0x1a0 [ 854.631370][T28048] do_initcalls+0x59/0xa0 [ 854.636210][T28048] kernel_init_freeable+0x29d/0x3e0 [ 854.641917][T28048] kernel_init+0x22/0x1d0 [ 854.646763][T28048] ret_from_fork+0x514/0xb70 [ 854.651868][T28048] ret_from_fork_asm+0x1a/0x30 [ 854.657148][T28048] [ 854.657148][T28048] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 854.664962][T28048] __mutex_lock+0x19d/0x1550 [ 854.670071][T28048] elevator_change+0x1af/0x480 [ 854.675350][T28048] elevator_set_none+0xb5/0x140 [ 854.680718][T28048] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 854.687040][T28048] nbd_start_device+0x189/0xb30 [ 854.692405][T28048] nbd_genl_connect+0x1597/0x1c10 [ 854.697944][T28048] genl_family_rcv_msg_doit+0x233/0x340 [ 854.704006][T28048] genl_rcv_msg+0x614/0x7a0 [ 854.709025][T28048] netlink_rcv_skb+0x226/0x4a0 [ 854.714298][T28048] genl_rcv+0x28/0x40 [ 854.718793][T28048] netlink_unicast+0x7bd/0x940 [ 854.724071][T28048] netlink_sendmsg+0x813/0xb40 [ 854.729344][T28048] sock_sendmsg_nosec+0x13a/0x180 [ 854.734877][T28048] ____sys_sendmsg+0x54e/0x850 [ 854.740158][T28048] ___sys_sendmsg+0x2a5/0x360 [ 854.745356][T28048] __x64_sys_sendmsg+0x1b1/0x290 [ 854.750809][T28048] do_syscall_64+0x166/0x520 [ 854.755913][T28048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.762323][T28048] [ 854.762323][T28048] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 854.770921][T28048] blk_alloc_queue+0x544/0x690 [ 854.776204][T28048] __blk_mq_alloc_disk+0x194/0x390 [ 854.781821][T28048] nbd_dev_add+0x494/0xb60 [ 854.786753][T28048] nbd_init+0x15f/0x1e0 [ 854.791423][T28048] do_one_initcall+0x250/0x870 [ 854.796703][T28048] do_initcall_level+0x10a/0x1a0 [ 854.802149][T28048] do_initcalls+0x59/0xa0 [ 854.806990][T28048] kernel_init_freeable+0x29d/0x3e0 [ 854.812702][T28048] kernel_init+0x22/0x1d0 [ 854.817546][T28048] ret_from_fork+0x514/0xb70 [ 854.822648][T28048] ret_from_fork_asm+0x1a/0x30 [ 854.827928][T28048] [ 854.827928][T28048] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 854.835134][T28048] __lock_acquire+0x1520/0x2cf0 [ 854.840507][T28048] lock_acquire+0x106/0x350 [ 854.845528][T28048] fs_reclaim_acquire+0x71/0x100 [ 854.850978][T28048] kmem_cache_alloc_node_noprof+0x6a/0x620 [ 854.857295][T28048] __alloc_skb+0x1db/0x7a0 [ 854.862225][T28048] alloc_uevent_skb+0x7d/0x230 [ 854.867508][T28048] kobject_uevent_net_broadcast+0x2fa/0x560 [ 854.873914][T28048] kobject_uevent_env+0x566/0x9e0 [ 854.879456][T28048] kobject_rename+0x400/0x500 [ 854.884647][T28048] device_rename+0x15d/0x210 [ 854.889753][T28048] cfg802154_switch_netns+0x1e6/0x410 [ 854.895745][T28048] nl802154_wpan_phy_netns+0x13e/0x3d0 [ 854.901738][T28048] genl_family_rcv_msg_doit+0x233/0x340 [ 854.907797][T28048] genl_rcv_msg+0x614/0x7a0 [ 854.912814][T28048] netlink_rcv_skb+0x226/0x4a0 [ 854.918084][T28048] genl_rcv+0x28/0x40 [ 854.922587][T28048] netlink_unicast+0x7bd/0x940 [ 854.927867][T28048] netlink_sendmsg+0x813/0xb40 [ 854.933138][T28048] sock_sendmsg_nosec+0x13a/0x180 [ 854.938675][T28048] ____sys_sendmsg+0x54e/0x850 [ 854.943963][T28048] ___sys_sendmsg+0x2a5/0x360 [ 854.949178][T28048] __x64_sys_sendmsg+0x1b1/0x290 [ 854.954636][T28048] do_syscall_64+0x166/0x520 [ 854.959744][T28048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.966153][T28048] [ 854.966153][T28048] other info that might help us debug this: [ 854.966153][T28048] [ 854.976379][T28048] Chain exists of: [ 854.976379][T28048] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 854.976379][T28048] [ 854.989069][T28048] Possible unsafe locking scenario: [ 854.989069][T28048] [ 854.996509][T28048] CPU0 CPU1 [ 855.001866][T28048] ---- ---- [ 855.007221][T28048] lock(uevent_sock_mutex); [ 855.011805][T28048] lock(cpuhp_state-up); [ 855.018646][T28048] lock(uevent_sock_mutex); [ 855.025745][T28048] lock(fs_reclaim); [ 855.029719][T28048] [ 855.029719][T28048] *** DEADLOCK *** [ 855.029719][T28048] [ 855.037850][T28048] locks held by syz.2.4913/28048: 4, last CPU#1: [ 855.044170][T28048] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 855.052356][T28048] #1: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 855.061316][T28048] #2: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: nl802154_pre_doit+0xbc/0x9c0 [ 855.070646][T28048] #3: ffffffff903e1b40 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 855.081616][T28048] [ 855.081616][T28048] stack backtrace: [ 855.087497][T28048] CPU: 1 UID: 0 PID: 28048 Comm: syz.2.4913 Not tainted syzkaller #0 PREEMPT(full) [ 855.087518][T28048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 855.087529][T28048] Call Trace: [ 855.087536][T28048] [ 855.087544][T28048] dump_stack_lvl+0xe8/0x150 [ 855.087570][T28048] print_circular_bug+0x2e1/0x300 [ 855.087590][T28048] check_noncircular+0x12e/0x150 [ 855.087610][T28048] __lock_acquire+0x1520/0x2cf0 [ 855.087642][T28048] ? irqentry_exit+0x218/0x910 [ 855.087663][T28048] ? kmem_cache_alloc_node_noprof+0x6a/0x620 [ 855.087682][T28048] lock_acquire+0x106/0x350 [ 855.087705][T28048] ? kmem_cache_alloc_node_noprof+0x6a/0x620 [ 855.087726][T28048] ? napi_skb_cache_get+0x16c/0x7e0 [ 855.087752][T28048] fs_reclaim_acquire+0x71/0x100 [ 855.087772][T28048] ? kmem_cache_alloc_node_noprof+0x6a/0x620 [ 855.087790][T28048] kmem_cache_alloc_node_noprof+0x6a/0x620 [ 855.087809][T28048] ? preempt_schedule_common+0x7f/0xd0 [ 855.087826][T28048] ? __alloc_skb+0x18d/0x7a0 [ 855.087847][T28048] ? preempt_schedule_thunk+0x16/0x40 [ 855.087864][T28048] ? __alloc_skb+0x1db/0x7a0 [ 855.087884][T28048] ? __alloc_skb+0x1db/0x7a0 [ 855.087907][T28048] __alloc_skb+0x1db/0x7a0 [ 855.087931][T28048] alloc_uevent_skb+0x7d/0x230 [ 855.087957][T28048] kobject_uevent_net_broadcast+0x2fa/0x560 [ 855.087984][T28048] kobject_uevent_env+0x566/0x9e0 [ 855.088011][T28048] kobject_rename+0x400/0x500 [ 855.088034][T28048] ? __pfx_kobject_rename+0x10/0x10 [ 855.088057][T28048] ? sysfs_rename_link_ns+0x178/0x1b0 [ 855.088128][T28048] device_rename+0x15d/0x210 [ 855.088160][T28048] cfg802154_switch_netns+0x1e6/0x410 [ 855.088187][T28048] nl802154_wpan_phy_netns+0x13e/0x3d0 [ 855.088207][T28048] genl_family_rcv_msg_doit+0x233/0x340 [ 855.088232][T28048] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 855.088258][T28048] ? bpf_lsm_capable+0x9/0x20 [ 855.088279][T28048] ? security_capable+0x7e/0x2c0 [ 855.088373][T28048] genl_rcv_msg+0x614/0x7a0 [ 855.088397][T28048] ? __pfx_genl_rcv_msg+0x10/0x10 [ 855.088417][T28048] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 855.088433][T28048] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 855.088450][T28048] ? __pfx_nl802154_post_doit+0x10/0x10 [ 855.088473][T28048] netlink_rcv_skb+0x226/0x4a0 [ 855.088489][T28048] ? __pfx_genl_rcv_msg+0x10/0x10 [ 855.088510][T28048] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 855.088531][T28048] ? down_read+0x2be/0x330 [ 855.088553][T28048] genl_rcv+0x28/0x40 [ 855.088572][T28048] netlink_unicast+0x7bd/0x940 [ 855.088600][T28048] netlink_sendmsg+0x813/0xb40 [ 855.088621][T28048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 855.088639][T28048] ? aa_sock_msg_perm+0xf6/0x1c0 [ 855.088668][T28048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 855.088684][T28048] sock_sendmsg_nosec+0x13a/0x180 [ 855.088705][T28048] ____sys_sendmsg+0x54e/0x850 [ 855.088731][T28048] ? __pfx_____sys_sendmsg+0x10/0x10 [ 855.088759][T28048] ? import_iovec+0x73/0xa0 [ 855.088779][T28048] ___sys_sendmsg+0x2a5/0x360 [ 855.088806][T28048] ? __pfx____sys_sendmsg+0x10/0x10 [ 855.088831][T28048] ? futex_wait+0x2a2/0x390 [ 855.088865][T28048] ? __pfx_do_futex+0x10/0x10 [ 855.088884][T28048] __x64_sys_sendmsg+0x1b1/0x290 [ 855.088910][T28048] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 855.088943][T28048] do_syscall_64+0x166/0x520 [ 855.088962][T28048] ? trace_irq_disable+0x3b/0x140 [ 855.088984][T28048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.089001][T28048] ? clear_bhb_loop+0x70/0xc0 [ 855.089021][T28048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.089037][T28048] RIP: 0033:0x7f420df9e159 [ 855.089055][T28048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.089071][T28048] RSP: 002b:00007f420edac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 855.089090][T28048] RAX: ffffffffffffffda RBX: 00007f420e225fa0 RCX: 00007f420df9e159 [ 855.089103][T28048] RDX: 0000000000040000 RSI: 0000200000000380 RDI: 000000000000000d [ 855.089115][T28048] RBP: 00007f420e035024 R08: 0000000000000000 R09: 0000000000000000 [ 855.089127][T28048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.089138][T28048] R13: 00007f420e226038 R14: 00007f420e225fa0 R15: 00007fffc73e60a8 [ 855.089164][T28048] [ 855.664363][T24210] net_ratelimit: 20 callbacks suppressed [ 855.664399][T24210] bond6: (slave syz_tun): failed to get link speed/duplex [ 855.784165][T24202] bond6: (slave syz_tun): failed to get link speed/duplex [ 855.894233][T24202] bond6: (slave syz_tun): failed to get link speed/duplex [ 856.004362][T24202] bond6: (slave syz_tun): failed to get link speed/duplex [ 856.115230][T24213] bond6: (slave syz_tun): failed to get link speed/duplex [ 856.224334][T24202] bond6: (slave syz_tun): failed to get link speed/duplex [ 856.334268][T24210] bond6: (slave syz_tun): failed to get link speed/duplex [ 856.444155][T24213] bond6: (slave syz_tun): failed to get link speed/duplex [ 856.514452][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 856.554180][T24210] bond6: (slave syz_tun): failed to get link speed/duplex [ 860.674281][ C1] net_ratelimit: 39 callbacks suppressed [ 860.674304][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 860.687073][T16241] bond6: (slave syz_tun): failed to get link speed/duplex [ 860.804176][ T7845] bond6: (slave syz_tun): failed to get link speed/duplex [ 860.914236][T24210] bond6: (slave syz_tun): failed to get link speed/duplex [ 861.024157][T16241] bond6: (slave syz_tun): failed to get link speed/duplex [ 861.134204][T24210] bond6: (slave syz_tun): failed to get link speed/duplex [ 861.244148][T24202] bond6: (slave syz_tun): failed to get link speed/duplex [ 861.364314][T24202] bond6: (slave syz_tun): failed to get link speed/duplex [ 861.474196][T24210] bond6: (slave syz_tun): failed to get link speed/duplex [ 861.584177][T24210] bond6: (slave syz_tun): failed to get link speed/duplex