last executing test programs: 5.008797269s ago: executing program 1 (id=3127): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRES8], 0x31) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, 0x0}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) close(r3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000400)={&(0x7f0000000000)={0xa, 0x4e20, 0x1ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="240000000000000029000073bb3870257e9b0f04e1d61bc9003200000000000000000000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x48000) unshare(0x64000600) r6 = gettid() r7 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x13}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x40000010) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)={0x20, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}]}]}, 0x20}}, 0x0) getpeername(r8, &(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, &(0x7f0000000100)=0x80) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 3.821701855s ago: executing program 4 (id=3138): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x14, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}]}, 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300) read(r0, &(0x7f0000000080)=""/38, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x4]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008085}, 0x8814) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0xd6, 0x4, 0x76, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x7, 0x2, 0x6}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x4e8, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x170, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5d, 0x5, "c49c0c053a7d26d0230e15131c54aaa549551ff197c43489f728cda2a6aad5ec4d43e3e469663fbe384b15bdab39ef7f7f82abdd1bf5aee0808bdadd60db7a08976c59edc58198d45d35cdb046f80aee1628aed7c0d6907a31"}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, './\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&:{f\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x5c, 0x4, "d99cee35133f297232bba48fd4d4a9e5fb509adc6a535bf9e6ed2ec2e2faacaa766e2712395579d539b6c8f6c504200d67d853cb813a22a01f92f058ae3c29542eace458fa664c147a38308013547ffe616f0f9d38ace3d6"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x36, 0x5, "23a60660c09430bf51c888a713ae8ac2959b62375468d147269616368f1091c1d551483dacd33c421ba1c30ca05f2cca4bc0"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x154, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4a, 0x4, "ff1060c581aa5229a1868a2629ae5f0eac27df0d7bed07bc570a7e8a9c2c519ecdc3088e9d6f887508a3c67f4f8eaa4eb44338eb8f73dbc8b049772a6fd6a74d13fb6ed1fc33"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfa1}, @ETHTOOL_A_BITSET_MASK={0xf9, 0x5, "fa27140f8089c290e87c0b21428f4c3d47bff9a142e739ff7ffa0ba09c9c0ec7e14695a7bdd1309b5acd8d0e0ca4b36c2a5a5d06c10810deeffe83fa87993c209328ed63257904f813958ab668bd8d855b11061c6bf55eaf82a6faa6e9eabbd54b1779772abc652f28b317292831c59b650c7dafa21e264ee1a2dd15ae9b9a684646518db723215e3e3659d239f7fab5d5259a562307a97361231a68f595b6899a2bc67aec26508b8e105f74155f2ccb725f2e8049981ebf1697896e2751c16812e485f4beaca0567d4005007bfcb00146e5ca3d392e2c012647b3bf58287adadcd10289b4ad1170a5fa5ebaa712a2ac304285832e"}]}, @ETHTOOL_A_FEATURES_WANTED={0x128, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ':[[@\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff7}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ac7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x261}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0xa4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_MASK={0x8f, 0x5, "94784cbb47c66989e7c668c634e70bb12a074155b536e129c6a2c5f75d1f303834af5267ee63498c4685a962312ba680a1a1057310ba55a82893d7d4ea396987ca788b456835065a8733417fa88b0129c3265c26b6cf986194c54fcbe30ca88e3fe17f933edd3cd41077510a70d6552763558cb0ef5122cfc3b5ba5ffe2c8cb5dd11c98c12196f2369a1bf"}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x4e8}, 0x1, 0x0, 0x0, 0x84}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40500003000000079101000000000001e5000000000000095000000000000000cffde7e7667fb315b501487aaf3b574f5d6800496e697807b9ab73be713e70fba18fb6af8103169a1bcc7f6658bf32ccacdedd6bfa99c75f3d610bb9aa358eb09c76c"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) syz_init_net_socket$x25(0x9, 0x5, 0x0) 3.293587445s ago: executing program 1 (id=3145): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='].@@\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r0}, 0x4) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888be08"], 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [0x0, 0x0, 0xff000000], [], 'batadv0\x00', 'wg1\x00', {0xff}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d4], 0x4, 0x7c, 0x2}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) 3.256328158s ago: executing program 4 (id=3148): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000003}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x7c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x16, 0x13, &(0x7f0000000740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @exit, @ldst={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000340)='GPL\x00', 0x0, 0xc6, &(0x7f0000000800)=""/198, 0x41100, 0x52, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x4, 0x9, 0x2b3f}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f00000004c0)=[r3, r3, r1, r3, r3, r3, r3, r2], &(0x7f0000000580)=[{0x5, 0x2, 0x10, 0x5}, {0x3, 0x3, 0x10, 0x4}, {0x4, 0x2, 0x4, 0x2}, {0x2, 0x2, 0x4, 0x7}], 0x10, 0xf8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r5}, 0x20) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @empty}}}], 0x20}, 0x844) accept(r0, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f0000000200)=0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r6) sendmsg$NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000003b80)={0x14, r7, 0x309, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) 3.14964721s ago: executing program 1 (id=3149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a1401, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a1401, 0x0) close(r2) (async) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$igmp6(0xa, 0x3, 0x2) (async) socket$igmp6(0xa, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r3) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000fddbdf250100000008000b00", @ANYRES32=0x0, @ANYBLOB="7c898a79bc1c7e41261338c4e616fec447a5a07de6a75a2caa906f891c497430183f6cebdad1a3886425a80bde75728babf82ca5c0927d37ab58365a8d4067d11fcb66e28f0f53736b0cb95b8c7557156ce7e04681d1b36145577d81bad4ab65a0ccf10e9b"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081780000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103b00000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afc0513466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea01d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a07f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a126a1bdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0d5d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f10bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d00b07862c4fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52c094016406cdd32abf77fea373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515dca8811922929e08538fab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f57cbc05cd897f40693ec427ea71578130cde48de3b4dda0c7b615b57ccd4f8ac729a80f891d91a89d967948b9d95b1f22480ab48969e86b854a8c17f3e264ce11f9f63552364e759eec94572f2f7b0e2f293573d0b80709815f4344f908c00"/2646], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000002e00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d1f5c2b93bc3", @empty, @empty, @loopback, 0x2, 0xffffffff}}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 0x6, 0xb, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0xb4e44995cf4cc780, 0x5400faa9f5c6f977, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x8, 0xf, 0x6, 0x8, 0x100, 'dummy0\x00', 'macvtap0\x00', {0xeddc69e01a7ac061}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@remote, @multicast2, 0xffffff00, 0x0, 0x4, 0xb, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x1ff, 0x1, 0xc, 0x68d9, 0xfff, 0x5, 'nicvf0\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x220}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @empty, @rand_addr=0x64010102, @private, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x440) socket$can_bcm(0x1d, 0x2, 0x2) (async) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r7, &(0x7f0000000140)={0x1d, r8}, 0x10) (async) connect$can_bcm(r7, &(0x7f0000000140)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="05000000300800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="050000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) close(0x4) r9 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r9}, 0x8) close(0x4) 3.148488029s ago: executing program 3 (id=3150): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x6001, 0x110}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x36}}]}}}]}, 0x3c}}, 0x84000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r3, r4, 0x0, 0x800) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x1000}) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000001000010400000000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="1b2e010001a001001c0012800900010069706970000000000c00028008000300e000000208001c00", @ANYRES32=r5, @ANYBLOB="140049000400000000000000000000000000000073a2b094296e3f6ad1becc3dc859af04f10e4750082c79c4d21c1c507083289681e7b785b85f008a59349c0000030000000000000000b56488e917ec50fd7c9bc9667fa62363428fd7"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) 3.130968228s ago: executing program 4 (id=3151): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0x100) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r4, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8840}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, 0x0, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x14, 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x1}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newtaction={0x1dd0, 0x30, 0x1, 0x0, 0x0, {}, [{0x1dbc, 0x1, [@m_pedit={0x1db8, 0x1d, 0x0, 0x0, {{0xa}, {0x1cec, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x3, 0xa, 0xffffffffffffffff, 0x7ff, 0xfffffff8}, 0xc, 0x1, [{0x6, 0x80000001, 0x7ff, 0x0, 0x5, 0x1}, {0x9, 0xffff, 0x10000, 0x8, 0xffff, 0xb}, {0x2, 0x1ff, 0x7, 0xfff, 0x67, 0xffffffd0}, {0x0, 0x7fff, 0x1, 0xffffffff, 0x0, 0x9}, {0x80, 0x9, 0x7, 0x1, 0x9, 0x1}, {0xffffffff, 0x6, 0x7470, 0x3, 0x7ff}]}, [{0xd, 0xffff, 0x0, 0x10001, 0x1, 0xffffffff}, {0x1, 0x8001, 0x8001, 0x9, 0x666a3f1a, 0x1b8b}, {0xffff0001, 0x6, 0xa11b, 0x8, 0xf, 0x1}, {0x6, 0x5, 0xc, 0x64d9, 0x1, 0x8001}, {0x62c, 0x4, 0x1, 0x8, 0x80, 0x27}, {0x10, 0x6, 0x4, 0x8, 0x6b4a, 0x2}, {0x7f, 0x27d, 0x9, 0x535, 0x7, 0x80}, {0x0, 0x4, 0x7f, 0x0, 0xd, 0x1000}, {0x4, 0x10000, 0xf1, 0xc6a7, 0x2, 0x2}, {0x80000000, 0x3, 0x1, 0x280c, 0x9, 0x8}, {0x5, 0x4, 0x2, 0xdb, 0x3, 0xfff}, {0x0, 0x5, 0x401, 0x58, 0x9f, 0x2}, {0x800, 0x9, 0x400, 0x5, 0x16, 0x9}, {0x6f6, 0xfffffbff, 0x50, 0x4, 0x5, 0x401}, {0xfffffa0e, 0x0, 0xfff, 0x1, 0x9, 0xfff}, {0x7fffffff, 0x7, 0x2, 0x1, 0x0, 0x6}, {0x1, 0x0, 0xffffffff, 0xfffffff7, 0x6, 0x8}, {0x800, 0xfffffffb, 0x81, 0x1ff, 0x5, 0x30}, {0x80000000, 0x0, 0x4, 0x3, 0x7, 0x4}, {0x5, 0xc293, 0x4, 0x6, 0x4, 0x5}, {0x7f, 0x1, 0x1, 0x6, 0xfff, 0x2}, {0x4, 0x8, 0x8, 0x6, 0x73, 0x1200}, {0x1, 0x81, 0x7, 0x4, 0x3, 0x6}, {0x1ff, 0x1, 0x2, 0x80000001, 0x258bb52c, 0x7}, {0x1750, 0x7fff, 0x7, 0x8, 0x7, 0x5}, {0x0, 0x9a, 0x7, 0x9, 0x8, 0x621a}, {0x10000, 0x0, 0x3, 0xf, 0x2, 0x1ff}, {0x7f, 0x6, 0x5, 0x6, 0xfffffff7, 0x1}, {0x8, 0x3, 0x7f, 0x1, 0x7fffffff, 0x80000000}, {0x49120e44, 0x9, 0x3, 0x5, 0x9, 0x8}, {0x3, 0x6, 0x9, 0x4, 0x9, 0x1}, {0x1, 0x6, 0x1, 0x292, 0x4, 0x8000}, {0x3, 0x7, 0x77, 0x5, 0x6, 0x9}, {0x5, 0xffffffc0, 0x1, 0xfffffffe, 0x5, 0xfffffff8}, {0x5, 0x1, 0x4d05ec3c, 0x7, 0x400, 0x9}, {0x7f, 0x8, 0x0, 0xc, 0xb3, 0x1}, {0x179000, 0x9, 0x4, 0x7f, 0x2, 0x8001}, {0x7, 0x200, 0xbc78, 0x3, 0x0, 0x10}, {0xd02e, 0x401, 0x6, 0x4a, 0x47a}, {0xb7, 0x101, 0x40000, 0x1ff, 0x7, 0x8}, {0x4, 0xfffffc00, 0xb28, 0x7, 0x7, 0x6}, {0xffff18f1, 0x2, 0x0, 0x9, 0x10, 0x4}, {0x3da, 0x9, 0x101, 0x6, 0x6, 0x7}, {0xffffffff, 0x9, 0xa, 0x3, 0x3, 0x10}, {0x4, 0x10000, 0xda8c00, 0x4, 0x80, 0xddbf}, {0x4, 0x6, 0xa, 0xc7, 0x100, 0x2}, {0x0, 0x7, 0x8, 0xc206, 0x3, 0x8}, {0x0, 0x8, 0x7, 0x165, 0x6, 0x9}, {0x8, 0xcf5, 0x10, 0xc, 0x4, 0x93ae}, {0xa, 0x10, 0x4, 0x8, 0x8, 0x9}, {0x10000, 0x6, 0x7, 0x9, 0x7fff, 0x4}, {0x0, 0x4, 0xe7, 0x3, 0xffffff5b, 0x6}, {0xffffffde, 0x9, 0x4, 0x6, 0x5}, {0x200, 0xf1b, 0x5, 0x298, 0xc1f, 0x8}, {0x1, 0x5, 0x1, 0x100, 0x4, 0x1}, {0x8000, 0xc, 0x6, 0x8000, 0x100, 0x8000}, {0x10, 0x2, 0x7, 0x3, 0x5, 0x1000}, {0x3, 0x6, 0x6, 0xc0000, 0x7fffffff, 0x3}, {0x7, 0x8, 0x1, 0x7ff, 0xa392, 0x3}, {0x5, 0x1, 0x8, 0x8001, 0x8}, {0x9, 0x0, 0xf08, 0x6, 0x3, 0x9}, {0x6, 0x0, 0x3, 0x3, 0x7, 0x2}, {0x6, 0x410, 0x6, 0xd4e00000, 0x10001, 0xe8fa}, {0x1, 0xfffffffb, 0xfffffffc, 0x1, 0x2, 0x8001}, {0xfffffffb, 0x7, 0x6, 0x0, 0xe5c5, 0x4}, {0x5, 0x0, 0xffff, 0x0, 0x7, 0xdfa}, {0x101, 0x1, 0x3, 0x3, 0xe, 0x8}, {0x0, 0x4, 0x7210, 0x9, 0x0, 0x5}, {0x263, 0x2, 0x5, 0x7, 0x8, 0x2}, {0x1, 0x1, 0xc550, 0xd4, 0x7, 0x6}, {0x2, 0x57, 0x1b, 0x5dca, 0x101}, {0x852, 0x7fff, 0x6, 0x0, 0x2}, {0x5, 0x80000000, 0xfffffffd, 0x6, 0x8, 0xfffffffa}, {0x9f3, 0x291, 0x8000, 0x4b658542, 0x88b3, 0x1}, {0x2, 0x0, 0x7, 0xb5a, 0x0, 0x6}, {0x7, 0x2, 0x6192, 0xfffffff7, 0x4, 0xc6}, {0x6, 0x8f93, 0x2, 0x4, 0xa3, 0x56}, {0x89ac, 0x6, 0x83d, 0xfffffff4, 0x9, 0x5}, {0x5, 0x12f, 0x5, 0x7fff, 0x7, 0x2}, {0x10, 0xfffffffd, 0x0, 0x4, 0x8, 0x7}, {0x1ff, 0x5, 0xf9, 0x255, 0x4, 0x2}, {0x8, 0x7, 0xab4, 0xa, 0x0, 0x5}, {0x7, 0x4, 0x81, 0x80000001, 0xfff, 0x101}, {0x3, 0x6e28, 0x33a, 0x3, 0x2d1a, 0x800}, {0x59e, 0x9, 0x3, 0x8, 0x3, 0x6}, {0x80, 0x1, 0xbe, 0x2, 0x1, 0x5}, {0x7, 0x3, 0xffff0001, 0x9, 0xfffffffb, 0x4e5}, {0xffffff7a, 0xd5, 0x9, 0x8, 0x80000001, 0xd2a}, {0x10a0000, 0x7, 0x1992, 0x4, 0x1}, {0x7, 0x5, 0xea, 0x4, 0x2b, 0x2}, {0x40000, 0x7, 0x8, 0x5, 0x3, 0x7fff}, {0x220, 0x5, 0x0, 0x6, 0x8, 0x9}, {0x8, 0x5, 0x7, 0x0, 0x3ff, 0xeafe}, {0xff, 0x7fff, 0x953, 0x55, 0xff, 0x40}, {0x0, 0x5, 0x4, 0x6, 0x8, 0x2}, {0xcf4, 0x4, 0x5, 0x3, 0x6, 0xacd}, {0x8001, 0x6, 0x10000, 0xfffffff8, 0x4, 0x10000}, {0x1, 0x7, 0x40, 0x8001, 0x7, 0x1cb0}, {0x9, 0x101, 0x4, 0xffffffff, 0x2, 0x7}, {0x7, 0x0, 0x3, 0x3, 0x468b, 0xffff}, {0x401, 0x8, 0x5, 0x8, 0x2, 0x9}, {0x22, 0x0, 0x1, 0x9, 0x482a, 0xa}, {0x8, 0x0, 0xfffffff7, 0xd, 0x1, 0xfffffc01}, {0x7, 0x73, 0x7, 0x1200, 0x8, 0x291c}, {0x9, 0x9, 0x3, 0x7, 0x6b5, 0x8}, {0x1b03497b, 0x9, 0x9, 0x2, 0x3, 0x6}, {0x7, 0x2, 0x0, 0x10, 0x3, 0x33}, {0x70000000, 0x7, 0x7, 0x5, 0x6, 0xb1}, {0x7fff, 0x8, 0x1, 0x401, 0x7, 0x6}, {0xfffffffa, 0x5, 0x80000000, 0x6, 0xffff, 0x8}, {0x0, 0x9, 0x7f7f, 0xb66, 0xc, 0xbb}, {0x1, 0x4, 0x80000001, 0x7, 0x10001}, {0x0, 0xb2b1, 0x5, 0x6, 0x8, 0x5}, {0x8, 0x3, 0x9, 0xf7d, 0x80, 0x7}, {0xab3, 0x80, 0x3ff, 0x9, 0x9, 0xd3}, {0x4, 0xffffff01, 0x9, 0x1461, 0x5, 0x9}, {0x800, 0x1, 0x8, 0x0, 0x7, 0x2}, {0xffffffff, 0x8c, 0x200, 0x9, 0x2b80, 0x1}, {0x5, 0x6dbe, 0x7, 0x7, 0x9cd, 0xe}, {0x3ef5, 0x2513, 0x1, 0x2, 0x1, 0x2}, {0x9, 0x400, 0x0, 0x1, 0x1, 0x80}, {0x27, 0x4, 0x180000, 0x1, 0x7, 0x7}, {0x4, 0x4be, 0x9, 0x9, 0xff, 0x9}, {0x400, 0x5, 0x6b, 0x4, 0x0, 0xfffffaa2}, {0x9, 0x0, 0x9e1, 0x3, 0x2400000, 0x6}, {0x5, 0x2, 0x9, 0x1, 0x7, 0xa}, {0x2, 0x1, 0x7, 0x3ff, 0x7, 0x7}, {0xfffffffd, 0x81, 0x60000000, 0x9, 0x10000, 0x4}], [{0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0xea083e456c5e09cc, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3}, {0x6}, {0x2}, {0x1, 0x1}, {0x2}, {}, {0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0xc5317bbb2d40fe2c}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x2a193ca4844e6ec8, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x2}, {0x1, 0x2}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2}, {0x1, 0x9094b5062ab803a}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x1}, {0x2}, {0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xee, 0xf5, 0x1, 0x5, 0xffffffff}, 0x49, 0x8, [{0xffff, 0x6, 0x2, 0x5, 0x5, 0x2}]}, [{0x3, 0x319f, 0x7, 0x3, 0x9, 0x2}, {0x7f, 0x0, 0x8, 0xfffffff3}, {0x6, 0x7fffffff, 0x9, 0x5, 0x3ff, 0x20000}, {0x8, 0x9, 0x1b, 0x9, 0xbc, 0xfffff5ca}, {0x7ff, 0x0, 0x1, 0x5, 0x1, 0x8}, {0x240000, 0x60000, 0x5, 0x6, 0x3, 0x9}, {0x0, 0x10, 0x2, 0x8, 0xff, 0x7}, {0x6, 0xd7, 0x0, 0xffffffff, 0x2}, {0x4, 0x2, 0x7, 0x7, 0x4, 0x2}, {0x4, 0x10000, 0x80000000, 0xb82, 0x6552, 0xcb}, {0x6, 0x6, 0xa, 0x6, 0x8, 0xff}, {0x2, 0x9, 0x0, 0xfffffffb, 0x2}, {0x5, 0x2, 0x7, 0x89, 0xfffff30b, 0x4}, {0xffffe7aa, 0x162f, 0x2, 0x81, 0x0, 0x2}, {0x10001, 0xfffffff0, 0x7fff, 0x7, 0x9, 0x1ff}, {0xe0, 0x8, 0x600, 0x9, 0x2, 0x9375}, {0x9994, 0x5, 0x6, 0xe, 0x6, 0x1000}, {0xfff, 0x37e, 0x2, 0x4, 0x7, 0x7}, {0x8001, 0x6c, 0xfffffffa, 0x0, 0x3, 0x4}, {0x4, 0x3a41, 0x6, 0xa, 0x6, 0x4}, {0x6, 0x84ef, 0x3ff, 0x9, 0x6, 0xffffffe7}, {0x7fff, 0x100, 0xffff, 0x7, 0x0, 0x8}, {0x9f5a, 0x0, 0x1197, 0x3, 0x1, 0xff}, {0xfffffa49, 0x2b3, 0x9, 0x9, 0xf, 0x80}, {0x6, 0x4, 0x1ff, 0x8000, 0x800, 0x8}, {0x6, 0x8, 0x81, 0xbf, 0x2, 0x7ff}, {0x2, 0x2, 0x8, 0x7fffffff, 0x7}, {0x6, 0x81, 0x0, 0x1467, 0x7f, 0xfe5}, {0x1, 0x81, 0x3, 0xc, 0x80000001, 0x6436}, {0x5, 0x8, 0x3, 0xffff, 0xfffffff8, 0xd27a}, {0xe8e, 0x4, 0x1, 0xd13, 0x2, 0x6}, {0x9, 0xfffff801, 0x0, 0x6, 0x1, 0x6}, {0x1000, 0x4, 0x5, 0x2, 0x5, 0x4}, {0x9, 0x8, 0x8, 0x5, 0x7, 0xfff}, {0x8001, 0x1494af41, 0x0, 0xd68, 0x7384, 0x56}, {0x6, 0x10001, 0x6, 0x0, 0xd275, 0xffffffff}, {0x3, 0x5, 0x48b, 0x5, 0x10001}, {0x6, 0x3, 0x2c21, 0x8, 0x4ba0, 0x10}, {0x1000, 0x8, 0x3, 0x1, 0xcae, 0x10001}, {0xfff, 0x80000000, 0x8, 0x10001, 0x4, 0x3}, {0x5, 0x3, 0x8, 0xd9d, 0x5, 0x1}, {0xfffffff9, 0x4, 0x2, 0x7fffffff, 0x6, 0x80000000}, {0xc0b8, 0xff, 0x7, 0x2, 0x1, 0xe}, {0x80000000, 0x5, 0x7d049272, 0x81, 0x8001, 0x1}, {0x4, 0xf, 0xb, 0x0, 0xb, 0x7f}, {0x0, 0x3ff, 0x1000, 0x4, 0x2, 0x6}, {0x7, 0x10, 0x8, 0x2, 0x10, 0xfffffffa}, {0x9, 0xc, 0x6fb, 0x6, 0x33, 0x5}, {0x0, 0xe9, 0xa, 0x0, 0x1, 0x5}, {0xe, 0x8, 0x3a, 0xffffff7f, 0x7, 0x8}, {0x6, 0x800, 0x1, 0x8, 0x75c, 0x2}, {0x2, 0xfffffff7, 0x6, 0x80, 0x1000}, {0x7, 0x3b, 0xfff, 0x8000, 0x0, 0xfff}, {0x1, 0x2, 0x8, 0x7, 0x2, 0x8}, {0x40, 0x400, 0xe, 0x8, 0x3ff, 0x7f}, {0x46, 0xc, 0x7, 0x9, 0x3, 0x1ff}, {0xd, 0x2, 0xd48, 0xe, 0xf, 0x6}, {0x4, 0x10001, 0xfff, 0x40, 0xc6, 0xfffffff2}, {0x5, 0xb, 0x400, 0x9, 0x5, 0x5}, {0x8, 0x4, 0x7, 0x4, 0x1000, 0x4}, {0x7, 0x8, 0x8, 0xaf46, 0x1, 0x1}, {0x81, 0x9, 0x0, 0x9, 0x12f, 0x3}, {0x3, 0x8, 0x8, 0x9, 0x3, 0x7}, {0x2, 0xfffffffd, 0x80, 0x7, 0x7, 0x4}, {0xff, 0x9, 0xa, 0x80, 0x7, 0x6}, {0x6, 0x59b, 0x10001, 0x5, 0x0, 0x28000}, {0x3, 0x3, 0x3, 0x5, 0x0, 0x9}, {0x0, 0x2, 0x6, 0x62c2b2b9, 0x1}, {0x3, 0xcbd, 0x2, 0xffffff29, 0x6, 0x3}, {0x4cb, 0x21, 0x8, 0x3, 0x9, 0x81}, {0x2a70, 0x1, 0x4, 0x2, 0x10000, 0x2}, {0x20f, 0x1, 0x28, 0x2, 0x8, 0x9}, {0x5, 0x1, 0x3, 0x2, 0x0, 0x7}, {0x10000, 0x1, 0x3ff, 0x3, 0x5, 0x3}, {0x1, 0xadb, 0x800, 0x401, 0xff, 0xffffffff}, {0x8, 0x330, 0x0, 0x1, 0x7, 0x10000}, {0x2f, 0xa4, 0xb0e, 0x80000000, 0xb, 0x1}, {0xffffffff, 0x5, 0x0, 0x6, 0x86, 0x9}, {0x9, 0x4, 0x7fffffff, 0xb236, 0xfff, 0xffff}, {0x80000000, 0x5, 0x3590, 0x1cf, 0x7, 0xc11}, {0x8, 0xfffffff9, 0x401, 0x6, 0xffff44b1, 0x9}, {0x60e3, 0x6, 0x2, 0x0, 0x1, 0x6}, {0x4, 0x6, 0x9, 0xfffffff8, 0x3, 0x401}, {0x2, 0x771b, 0x570c, 0x40, 0x6, 0x81}, {0x7f, 0xc8, 0x3, 0x7, 0xf, 0xd5}, {0x7ff, 0x9, 0x4, 0x10000, 0x7ff, 0x2}, {0x3ff, 0x7, 0x5, 0x5, 0x8, 0x8}, {0x8, 0x0, 0x5, 0x3, 0x9, 0x8}, {0x5, 0xf, 0x4, 0x7, 0x0, 0x1}, {0xffff, 0x1, 0x2, 0x3, 0x6, 0x7}, {0xfffffffe, 0x4, 0x4, 0x6, 0x0, 0x1000}, {0x1, 0x2, 0x3254f782, 0xce, 0x2b26, 0x7}, {0x0, 0xe, 0x7ff, 0x6, 0x5, 0x5}, {0x8000, 0x9, 0x3c8530c2, 0x2, 0x6, 0x2}, {0x7fff, 0x47, 0x7, 0xffffff7f, 0x5, 0x8af3}, {0x3, 0xfffffff9, 0x100, 0x401, 0x0, 0x40}, {0x7, 0x8, 0x8, 0x20e, 0x3, 0x5}, {0x6, 0x0, 0x0, 0x9, 0x7, 0xcf9}, {0x3d, 0x4, 0x1, 0xfae, 0x3c, 0x4}, {0x1, 0x2, 0x80000001, 0x9b, 0x3}, {0x84c, 0x0, 0x40, 0x7, 0x8, 0x2}, {0x1, 0x10, 0x5, 0x3, 0x2, 0x3}, {0x7, 0x7, 0xa, 0x80000001, 0xc0e, 0x6}, {0x4d0, 0x7, 0x952, 0xf07, 0x800, 0x265}, {0xb9, 0x8, 0x8, 0x6, 0x4, 0x4}, {0xd2, 0x7, 0x7ff, 0x4, 0xe7e6, 0x400}, {0x2, 0x10001, 0x5, 0x8, 0x7, 0x40}, {0x2, 0x10001, 0x8, 0x9, 0x3ff, 0x9}, {0x2f, 0x4, 0x9, 0xfffffffa, 0x10001, 0x4}, {0x9, 0x4, 0x1, 0x0, 0x2, 0x6131}, {0x1, 0x2, 0x7ff, 0x6, 0xa11, 0x8000}, {0x3, 0x10, 0x1, 0x8, 0x7}, {0x3, 0xfffffffe, 0x5, 0x9, 0x9, 0xfffffffd}, {0x6c01, 0x479, 0x80000000, 0x2, 0x8001, 0x1}, {0xfffffffb, 0xec, 0x508, 0x8000, 0x7}, {0xffffffff, 0x7, 0x2, 0x6, 0x5, 0x10000}, {0x9, 0x4, 0xe15e, 0xfffffff8, 0x5, 0xfffffffd}, {0xfffffff8, 0x3, 0x49a, 0x80000000, 0x1, 0x4}, {0x1, 0x7, 0xf, 0x3, 0xfffffffc, 0x5}, {0x8001, 0x9, 0x55, 0x0, 0x3, 0x9}, {0x800, 0x8, 0x0, 0x7, 0xff, 0xd1a7}, {0x8001, 0xf, 0x3, 0x3, 0x8, 0x6}, {0x5, 0x100, 0x0, 0x1, 0x1ff, 0xffffffff}, {0x1, 0x7, 0x10, 0xf, 0xad24, 0xf}, {0x100, 0xf, 0x9, 0x0, 0x8, 0x8}, {0x1, 0x7ff, 0x8001, 0x40, 0x1, 0x6}, {0x3, 0x10001, 0x5, 0x8, 0x0, 0x3}, {0x6, 0x4, 0x7fff, 0x6, 0x5, 0x3}], [{0x1}, {0x4}, {0x1, 0x1}, {0x1}, {}, {0x4}, {0x3}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x6}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0xa0669812a5f07e8e, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x4}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4e131f108ec7c59f, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x4}, {0x2}, {0x4}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x1}, {0x1}, {0x5}, {}, {0x3}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x6911706dd79dd2fd, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x0, 0x1}], 0x1}}]}, {0xa4, 0x6, "7a401ce3728db9765c2302910bf2ec2943d8610fcbbc68f8e27945f8c363320f9c4e0e2f0d1521e32a2ed1d3232f41bdda4ab4f27eeb2fc83e62cc3cb7541627365dc9ea68ade35410010620f1105e7f6c5bd125d1f0b9eaeae2a1535854787a3d3e5b706e0ce9b4cd9eabb84d5c3112137568638fede5efebf49c5900bbe7071dff8d3c224f7456f8100d6422a36af0e3d3a7ca2687769e910d64f3a4f52e37"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x1dd0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000001f3f847b0000006200000000e500009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x9}, 0x94) 3.09927471s ago: executing program 2 (id=3152): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x400000}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000002000000e0000001000000000000000000000000e00000010000000000000000000000004e24000000000000020000100000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000f9ffff3f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000325b6b3fcac1d56300"/101], 0xb8}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000000c0), 0x4) socketpair(0x10, 0x2, 0x6, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$l2tp(r3, &(0x7f0000000200)={0x2, 0x0, @remote, 0x4}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x9, @dev, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{}, {@remote}, {@dev}, {@rand_addr, 0x3}, {@multicast2}, {@loopback, 0x5}, {@local, 0x4}, {@multicast1, 0x6}]}]}}}}}}}, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000001000000000000000000000851000000100000095000000000000008510000002000000850000001f000000950000000000000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) unshare(0x6020400) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000c00)='sit0\x00', 0x10) bind$xdp(r5, &(0x7f0000000d40)={0x2c, 0x3, 0x0, 0x2f}, 0x10) sendto$inet6(r2, 0x0, 0xffffffffffffff37, 0x4008044, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback, 0x401}, 0x1c) 2.941210042s ago: executing program 3 (id=3153): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) readv(r0, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000b40)=""/193, 0xc1}, {0x0}], 0x5) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_newaddrlabel={0x88, 0x48, 0x200, 0x70bd2a, 0x25dfdbfb, {0xa, 0x0, 0x38, 0x0, r3, 0x1}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x9}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24004884}, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.940176773s ago: executing program 2 (id=3155): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b"], 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(0x3) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 64) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040408}, 0x40040) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000fefaffff002000000000000020fe2cbd08000abdaa0f000000000000a7082f51efc66af43719c1e27bb9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="180300004000000000000000ff00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b5020000140000008500000083d581953f7930d95500000055090100200000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000200)={0x3, 0xd27, 0x1000, &(0x7f0000000940)=""/4096}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f0000000580)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r8, 0x2f, 0xee, 0x9a, 0x40b47, 0x0, @private2, @private1, 0x80, 0x80, 0x0, 0x2}}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e00000000fcffff048000000600000008040000", @ANYRES32=r7, @ANYBLOB="0400"/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="0400000003000000040000000700"/28], 0x50) 2.869097258s ago: executing program 2 (id=3157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x12, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x80}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc32, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0xb, &(0x7f0000001e00)=""/4086}, 0x90) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000240)="112efc61dfb89b674a9c6721decbc84cd6c0ff31d5531af9", 0x18, 0x8010, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x12, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x80}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc32, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0xb, &(0x7f0000001e00)=""/4086}, 0x90) (async) accept4(r2, 0x0, 0x0, 0x0) (async) sendto$inet6(r4, &(0x7f0000000240)="112efc61dfb89b674a9c6721decbc84cd6c0ff31d5531af9", 0x18, 0x8010, 0x0, 0x0) (async) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) 2.793183877s ago: executing program 1 (id=3158): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0xffffff1f, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}}, 0x20}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 2.762343533s ago: executing program 0 (id=3159): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x7300, 0x4) (async) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x7300, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x4000, @loopback}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000e80), 0x4) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000e80), 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x2}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r2, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r2], 0x40c}}, 0x0) 2.672818356s ago: executing program 1 (id=3160): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x1}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xfdef) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x20000a00) r4 = socket(0x10, 0x3, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000040)=0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000140), 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0xfffffff7, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1.993188759s ago: executing program 3 (id=3161): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'veth0_to_hsr\x00', {}, 0x10}) syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x40, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x1000006, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@srh={0x2f, 0x0, 0x4, 0x0, 0x3, 0x28, 0x2}], "31d86558da0ab17c"}}}}}}}, 0x0) 1.851723935s ago: executing program 2 (id=3162): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffed0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000040000100fcff0700040000000100000004004880300001802c00108014000d80100090800c00588008007300", @ANYRES32=0x0, @ANYBLOB="14000800000093b0b9a0fab1946d000000000000080002"], 0x50}, 0x1, 0x0, 0x0, 0x4000805}, 0x2004c094) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0), 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000480)={'gre0\x00', 0x0, 0x27, 0x7800, 0xf611, 0x80000001, {{0x23, 0x4, 0x0, 0x3d, 0x8c, 0x66, 0x0, 0x9, 0x2f, 0x0, @multicast2, @remote, {[@timestamp_prespec={0x44, 0xc, 0x2b, 0x3, 0x6, [{@broadcast, 0xff}]}, @end, @timestamp_addr={0x44, 0x14, 0x9d, 0x1, 0x3, [{@broadcast, 0x6}, {@loopback, 0xfffffffe}]}, @generic={0x7, 0xa, "e0a1d77546c55e19"}, @lsrr={0x83, 0x13, 0xd6, [@dev={0xac, 0x14, 0x14, 0x2c}, @broadcast, @dev={0xac, 0x14, 0x14, 0x2f}, @broadcast]}, @noop, @timestamp_addr={0x44, 0x1c, 0x1f, 0x1, 0xb, [{@local, 0x6}, {@remote, 0xc}, {@local, 0x2}]}, @timestamp={0x44, 0x1c, 0x74, 0x0, 0x0, [0x2, 0xffffffff, 0x315e, 0xfffffeff, 0x4, 0x908]}, @noop]}}}}}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in=@multicast2, @in=@rand_addr=0x64010101, 0x4e22, 0x4, 0x4e22, 0x0, 0xa, 0x0, 0xa0, 0x0, r3}, {0x252a, 0x2, 0xb, 0x80000001, 0x8, 0xffffffff, 0x4, 0x6}, {0x5, 0xe21, 0x0, 0xffffffffffffffff}, 0x6, 0x6e6bb7, 0x2, 0x0, 0x1, 0x3}, {{@in=@empty, 0x4d4, 0x6c}, 0x2, @in=@rand_addr=0x64010102, 0x3501, 0x3, 0x2, 0xd, 0xb, 0x7, 0xd1}}, 0xe8) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x138, 0xa, 0xd0e0000, 0x138, 0x100, 0x270, 0x1d8, 0x1d8, 0x270, 0x1d8, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x3c}, @private=0x8a010100, 0x0, 0x0, 'ip6tnl0\x00', 'rose0\x00', {0xff}}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@unspec=@state={{0x28}, {0xfff}}, @common=@unspec=@connbytes={{0x38}, {[{0x9}, {0xfffffffffffffcdc}], 0x2, 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1a, 0x3, 0x8, 0xb, 'syz0\x00', 'syz0\x00', {0x20000001}}}}, {{@uncond, 0x3202, 0xd8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x2, 0x6], 0x2, 0x7}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x0, 0x4], 0xfd}, {0x0, [0x3, 0x0, 0x1, 0x0, 0x6], 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100008000000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f00000000c0)=0xa, 0x4) 1.022999394s ago: executing program 4 (id=3163): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x4, 0xc9, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x4, 0xc9, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xc}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010865}, 0x4008000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad386dd", 0x4, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd9, 0x6, @random="98c8ca7122df"}, 0x14) (async) sendto$packet(r7, &(0x7f0000000140)="bad386dd", 0x4, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd9, 0x6, @random="98c8ca7122df"}, 0x14) 968.981751ms ago: executing program 0 (id=3164): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x13, 0x4, &(0x7f0000001640)=ANY=[@ANYBLOB="180000000000000000000000000000007301630000000000950000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40) close(0x4) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 968.269443ms ago: executing program 3 (id=3165): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x38}, 0x1, 0xfffc}, 0x4000800) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x10001, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x11, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xa2}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x4}, @map_idx={0x18, 0xb}, @alu={0x7, 0x1, 0x1, 0x4, 0x0, 0x40, 0x10}]}, &(0x7f0000000340)='GPL\x00', 0x3, 0x7d, &(0x7f0000000480)=""/125, 0x41100, 0x31, '\x00', r6, 0x1b, r7, 0x8, &(0x7f0000000540)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x4, 0x4, 0x2}, 0x10, r8, 0x0, 0x7, 0x0, &(0x7f0000000680)=[{0x1, 0x5, 0x6, 0x3}, {0x3, 0x5, 0x7, 0x6}, {0x3, 0x3, 0x1, 0x9}, {0x3, 0x3, 0xc, 0x9}, {0x4, 0x1, 0x6, 0xa}, {0x0, 0x3, 0x1, 0x1}, {0x2, 0x2, 0xa, 0x7}], 0x10, 0x7f}, 0x94) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async, rerun: 64) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$GTP_CMD_ECHOREQ(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2c004043}, 0x24008000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x2000884c) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="9ed448b388dd965f7ab812779a00", 0x0, 0x0, 0xe8030000, 0xfffffffffffffdda, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000079109000000000007b0ae8ff00000000950000000000009fde1bac00e884215d2527ef86dafb2e8427b381d6de02ae9dbdda1ac8700f3e68f945c5cda25d5bb31657bb8c04a5f1519d199933"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r12}, 0x94) (rerun: 32) 958.941709ms ago: executing program 2 (id=3166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x11b042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911027000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) close(0x3) r3 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r3, &(0x7f00000000c0)="46e042d77ac0b7278014d0986fd96f61b79add45f58f8025a17b4c04ebbba1b6657474a94aed6dbdda82eff1e8616c5be50f332bebd324413b4c0fff9a2ecb03eec3e75f62f8f2bd8dfca375e0a5d24542b2dbc2580cbee4b6a610e4c2d762abc51df05c66719ecbbd55222046e6329bce1eabc29b67e5ba53531f51e345b000075967e70ee889fdf0069eefa6cd562f92c4c284bfe8b3216b0a244fbbd5db9a19bb43f44f94240a899f4fc09c3737c8435ef38b32b27359612bbbecd64a882772e6", 0xc2, 0x10000000, &(0x7f0000000300)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4, 0x0, 0x7}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000080)={'syzkaller0\x00', @random='\x00#\x00'}) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x11b042, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911027000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) (async) close(0x3) (async) socket$igmp(0x2, 0x3, 0x2) (async) sendto$inet(r3, &(0x7f00000000c0)="46e042d77ac0b7278014d0986fd96f61b79add45f58f8025a17b4c04ebbba1b6657474a94aed6dbdda82eff1e8616c5be50f332bebd324413b4c0fff9a2ecb03eec3e75f62f8f2bd8dfca375e0a5d24542b2dbc2580cbee4b6a610e4c2d762abc51df05c66719ecbbd55222046e6329bce1eabc29b67e5ba53531f51e345b000075967e70ee889fdf0069eefa6cd562f92c4c284bfe8b3216b0a244fbbd5db9a19bb43f44f94240a899f4fc09c3737c8435ef38b32b27359612bbbecd64a882772e6", 0xc2, 0x10000000, &(0x7f0000000300)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4, 0x0, 0x7}, 0x18) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0) (async) close(r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000080)={'syzkaller0\x00', @random='\x00#\x00'}) (async) close(0x3) (async) 957.657058ms ago: executing program 1 (id=3167): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000540)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000040)={0x1d, r8, 0x2, {0x0, 0xff}, 0xfd}, 0x18) sendmsg$sock(r7, &(0x7f0000001480)={&(0x7f0000000200)=@can={0x1d, r8, 0xf0}, 0x80, 0x0}, 0x811) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x117, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "67797606fc5b7849b94861b82da112393422112256ac505b054ea8a927d38e539fe959f9ff79b74048f6b253ccde4b2ae38a12744a435e4c919ea9461a498b44dfb2d93a22521b628962150357808871b546b398e66833c397e8fd7b2fd01d46e7d3d5664c14c766571142f0a0fef40ed233574d05bc3ecd59d9532708a78d2d022a66021d2622dcd7ebb453453b0539a3aa3e29a6f132cda1529d0dd0bc030aca421dcf0907ce2bddf06ac96ba62a4c386dc147cd14d920ab719aaf8f2a41a381429b368503b6ed5fda2395d35c004289aa3a5c8bc07c4c16ff870690020c08e5a579b7d2e2f405e1ea0227e92d18a13d9d4f7006d41f1e512d4f4a0e770e54"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x9}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x14a4}]}, 0x148}, 0x1, 0x0, 0x0, 0x51}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x700, 0x7, 0x3, 0x9bdf643, {{0xe, 0x4, 0x0, 0x39, 0x38, 0x67, 0x0, 0x3, 0x2f, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x1c, 0xd0, 0x1, 0x9, [{@empty}, {@multicast1, 0x9}, {@local, 0x7}]}, @generic={0x94, 0x7, "ea9fe5da6f"}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0, 0xe6, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x60, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000a40)={&(0x7f0000000240), 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x1b8, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r13) sendmsg$NL80211_CMD_SET_CQM(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="0100000000000800923f", @ANYRES32=r14, @ANYBLOB="14005e80050001"], 0x30}}, 0x0) r16 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r16, 0x107, 0xd, &(0x7f0000000180)=@req3={0x9, 0x8, 0xe92b, 0x6add2690, 0x9, 0x7f, 0x800}, 0x1c) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9290400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r15, 0x403, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x59e, 0x3e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x10000) 851.387234ms ago: executing program 0 (id=3168): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x56, 0x5, 0x5, 0xb0, 0x4, @mcast2, @private2, 0x0, 0x7800, 0x0, 0xf}}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x157, 0x157, 0x4, [@datasec={0x7, 0x2, 0x0, 0xf, 0x1, [{0x1, 0x0, 0x6}, {0x3, 0x5, 0x800}], '@'}, @const={0x7, 0x0, 0x0, 0xa, 0x3}, @union={0xe, 0x3, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x0, 0x6b2e}, {0x6, 0x1, 0x8}, {0x2, 0x3, 0x735}]}, @volatile={0xd}, @union={0xf, 0x5, 0x0, 0x5, 0x1, 0x1, [{0x1, 0x0, 0x4}, {0xb, 0x3, 0x4}, {0x7, 0x4, 0x9}, {0x7, 0x5, 0x9}, {0x1, 0x3, 0x4d6}]}, @datasec={0x5, 0x3, 0x0, 0xf, 0x3, [{0x4, 0xfffffff8, 0x1000000}, {0x4, 0x400, 0x5}, {0x3, 0x7ff, 0xaec}], "8dfe28"}, @const={0x10}, @union={0x8, 0x3, 0x0, 0x5, 0x0, 0x5, [{0x1, 0x4, 0xdc60}, {0x1, 0x3, 0x1000}, {0xc, 0x0, 0x5}]}, @datasec={0x2, 0x3, 0x0, 0xf, 0x3, [{0x4, 0x7fff, 0xfffffff8}, {0x2, 0x0, 0x1}, {0x5, 0x0, 0xfffffff9}], "db1d55"}]}, {0x0, [0x61, 0x61]}}, &(0x7f0000000400)=""/54, 0x174, 0x36, 0x1, 0x5, 0x10000}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3ff}, [@map_fd, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x5, 0x3, 0x3, 0x10, 0x1}, @exit, @ldst={0x1, 0x0, 0x1, 0x1, 0x7, 0xfffffffffffffff8, 0x10}, @func]}, &(0x7f0000000080)='GPL\x00', 0x9, 0xcb, &(0x7f00000000c0)=""/203, 0x41100, 0x23, '\x00', r0, 0x25, r1, 0x8, &(0x7f0000000480)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0xc, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r2], 0x0, 0x10, 0x9}, 0x94) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x9c, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x800) close(r3) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x2, 0x11, 0xe, 0x9, 0x4, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_ident={0x2, 0xa, 0xb, 0x0, 0xaa8}]}, 0x20}}, 0x20000000) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000900)={r3, 0x778, 0x7, 0x7}) syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r6) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x270c22db3bd4ef28}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r7 = getuid() ioctl$SIOCAX25DELUID(r6, 0x89e2, &(0x7f0000000a40)={0x3, @bcast, r7}) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0xa19ed95dfa3385d0}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x48, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7b}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c004}, 0x4000) sendmsg$xdp(r6, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x2c, 0x8, r0, 0xe}, 0x10, &(0x7f0000000c00), 0x0, 0x0, 0x0, 0x8000}, 0x4850) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001f40)={r6, 0x20, &(0x7f0000001f00)={&(0x7f0000000e40)=""/4096, 0x1000, 0x0, &(0x7f0000001e40)=""/174, 0xae}}, 0x10) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001fc0)=@o_path={&(0x7f0000001f80)='./file0\x00', 0x0, 0x4008, r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x14, 0xd, &(0x7f0000000c80)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4768}, @jmp={0x5, 0x0, 0x7, 0x0, 0x0, 0x20, 0xffffffffffffffff}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x33}], &(0x7f0000000d00)='syzkaller\x00', 0x10000, 0x82, &(0x7f0000000d40)=""/130, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, r8, r3, 0x0, &(0x7f0000002000)=[r2, r6, r2, r9], 0x0, 0x10, 0x1}, 0x94) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r6) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000002300)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000022c0)={&(0x7f0000002180)={0x130, r10, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x16}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xf9, 0xc5, "6d451d5d039f316fb74587c9c4a2adfaed52d60582fe3314c8c969f521bed8b60bb12e12e3b0c423c9537a65b8602c28383e3def832965a845fa5dd522ac2d331f99235765821704dcf204289bfbf58c698fe27c8a7da3cd3710df4a0e107343df4ca38a859adae52baaf0c7a688462d9fe4e3dca7bfc8d8cd252ba7a5bbf87c061b3676d764ebfddbffaef7cbe28cc335bbfe63b0bf6c22a07e6a7734606b6d9a8e89886097d48cc6e9f259d54fa0970a50d1cced5c2906d6a840c215084bc852c19babad661442896bf9f825094951665889df4a228c7c01ceb1a7f55acc678c3973877d1c9ee14a0e12bfffc2322a9fca255f8e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7af}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x57}]}, 0x130}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f00000024c0)={0x1, 0x2, 0x1000, 0xfb, &(0x7f0000002340)="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", 0x6b, 0x0, &(0x7f0000002440)="0671b8754c65745feeff2d70aef66dfed607ea922760eb22b1d64540a4a5b360a077aead6e22904e3bdcfba430aaa26140ca509090227f6f285eab137503cfe7fb9a9eafaef4456eade0f15c3730b6d535bf799767e1e3c6a0e86f1f9d3e24d5f6972686bc7fdaf5ead4ec"}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002580), r6) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r11, &(0x7f0000002780)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002740)={&(0x7f00000025c0)={0x144, r12, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000840}, 0x24000850) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreq(r13, 0x0, 0x24, &(0x7f00000027c0)={@local, @remote}, &(0x7f0000002800)=0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000002840), 0x2040, 0x0) setsockopt$inet_mreq(r13, 0x0, 0x20, &(0x7f0000002880)={@rand_addr=0x64010101, @private=0xa010102}, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000028c0)) 785.490061ms ago: executing program 2 (id=3169): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f00000001c0), 0x0}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000100000001800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r4, 0x0, 0x3ffffffffffffa) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x10, 0x803, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x88}}, 0x24000840) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0x2, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xe}}]}, 0x2c}}, 0x4000001) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r12, {0xf, 0xc}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}}, 0x20040054) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000504000000000000000000000b04000000000000000000000b020000000000000061"], 0x0, 0x52}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000b0000070000000900010073797a300000000014000000020a01010000000000000000000000002c000000180a05000000000000000000070000010900010073797a30000000000c0005400000000000000002580000000b0a01010000000000000000070000090800034000000008090001"], 0x392c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 785.211701ms ago: executing program 3 (id=3170): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01422006020607f6", @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYBLOB="96a116664ad74559c53a5c37bf77920a8e24e3f87917904747209a1e7a7bbd4a06345f71398baf73fc4e2138ce24f0e88c777e4ca8b1fa1a97a591f1b018cf14de7f48a08e12d8b4e2d3f376b583963b", @ANYRES8=0x0], 0xa) bind$bt_hci(r0, &(0x7f00000019c0)={0x1f, 0x3, 0x2}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x20, 0x8, 0xb}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a000200577f00"], 0x48}}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x0, 0x0, 0xe0, 0x40, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x6e, 0x1, 0x2, 0x0, 0x0, @empty=0xac1414aa, @dev={0xac, 0x14, 0x14, 0x22}}}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001a00010028bd7000fedbdf25810080000014"], 0x1c}}, 0x884) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x6) 673.633542ms ago: executing program 0 (id=3171): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x10, 0x17, {0x17, 0x6, @l2={'ib', 0x3a, '\x00'}}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x9a771bc9382889be, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'veth0_vlan\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x5b}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) 421.059679ms ago: executing program 4 (id=3172): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x144, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x101}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x10001}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x3}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x40011}, 0xc4) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x178, r2, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="558debd04ef0874051d4d0495b6b3d08"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "447d34bc637ef42e"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e599d6d6de89a3d36169c676d422b92b42686dd13ffe1269"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c2ab13dfccde6cf42049e8ff7357141fab5c280cbed206e7"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f72bd488d3e5670e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="594db44ae202fcf8a728458790182341"}]}, @NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d0bba953600e621b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffff8}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="61595e58685069d01612b576f31be4e9"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="58b02264113fdb7d0e4c7488fbc2b396429581473c61c06f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5a553bbc8a534f24"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a9927a9ab5867159eccceb4c5a1bb5ee"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4c5a74662b69bdd575672e874d5c9f71"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a2f1e000192f1f81"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7096126a0c3088863bf33601a36c91091d5e51b21b064f94"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="55069358e295184d6e467d94b382abf1"}]}]}, 0x178}, 0x1, 0x0, 0x0, 0xc040}, 0x800) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4028044) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x2000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000680)={'pimreg0\x00', 0x1000}) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f00000006c0)={0x8, 'erspan0\x00', {'batadv_slave_0\x00'}, 0x2b}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r6, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x7706, @bearer=@udp='udp:syz2\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x4010) (async) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4f82}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4044) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)={0x188, r7, 0x225, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x400}, {0x8, 0x15, 0xffffffff}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x8b}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x40}, {0x8, 0x15, 0x31}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8b0}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0xc8c}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xffff7fff}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x3}}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000000}, 0x44800) r8 = accept4(r0, 0x0, &(0x7f0000000c00), 0x80800) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, &(0x7f0000000c40)=0x6, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r5) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x58, r10, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) (async) setsockopt$CAIFSO_LINK_SELECT(r8, 0x116, 0x7f, &(0x7f0000000e00)=0x4, 0x4) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000e40)={'veth1_vlan\x00', 0x1000}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={0xffffffffffffffff, 0xe0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f80)=[0x0, 0x0], 0x0, 0xa3, &(0x7f0000000fc0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001000), &(0x7f0000001040), 0x8, 0x75, 0x8, 0x8, &(0x7f0000001080)}}, 0x10) sendmsg$nl_route(r8, &(0x7f0000001280)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)=@newneigh={0x30, 0x1c, 0x4, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x0, r11, 0x4, 0x12, 0xa}, [@NDA_SRC_VNI={0x8, 0xb, 0x4}, @NDA_DST_MAC={0xa, 0x1, @multicast}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000}, 0x0) (async) recvmsg$unix(r8, &(0x7f00000017c0)={&(0x7f00000012c0), 0x6e, &(0x7f0000001740)=[{&(0x7f0000001340)=""/72, 0x48}, {&(0x7f00000013c0)=""/219, 0xdb}, {&(0x7f00000014c0)=""/70, 0x46}, {&(0x7f0000001540)=""/37, 0x25}, {&(0x7f0000001580)=""/70, 0x46}, {&(0x7f0000001600)=""/189, 0xbd}, {&(0x7f00000016c0)=""/85, 0x55}], 0x7}, 0x0) (async) clock_gettime(0x0, &(0x7f00000018c0)={0x0, 0x0}) select(0x40, &(0x7f0000001800)={0x8, 0x4, 0x2, 0xd2, 0x2, 0x4, 0x6, 0x8}, &(0x7f0000001840)={0x2, 0x2, 0x9, 0x10, 0x59c1, 0xc03c, 0x200, 0x7}, &(0x7f0000001880)={0x1ee, 0x5, 0x80000001, 0x1, 0xd2, 0x6, 0x80, 0x10000}, &(0x7f0000001900)={r12, r13/1000+60000}) syz_open_procfs$namespace(0x0, &(0x7f0000001980)='ns/mnt\x00') 177.816309ms ago: executing program 0 (id=3173): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x4e24, @rand_addr=0x64010101}}}, 0x88) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r2, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0xfffffffffffffff8, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='task_newtask\x00', r3, 0x0, 0x7}, 0x18) 175.278743ms ago: executing program 3 (id=3174): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18010000786c6c2500000000002020207b1af8ff000000d60d4006994122829103ba7c18a300bfa100000000000007010000f82000ffb702000008000000b70340000800000085000000ca000000ad03b92800000000"], &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980600000000002000128008000100677265001400028008000700ac14"], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f00000001c0)="11eb0300fc0baf745836da8888a8", 0xe, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r2, 0x1, 0x4, 0x6, @multicast}, 0x14) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x81800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0xc, 0xb}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000080)=@buf={0xde, &(0x7f00000001c0)="100e702c77a0cda352ac034401d495bc4833db4b7e66710623052a03b517730d7d1040fd906f6e2b6068bd5a6c9d8c9dd80a71df895ead119c4d57382ac97066717c075cef8d3a06331e4c7cacc751f2aba4cdbf480166eb069f9a5d1652391b8ddda404aca09c5e5a6dada84cccc7c8ff84a724f367897b663d22b9583ddbee7e7b203e11713b61126df59fbd7e99ea9f44c753464ef0f968baaff29cf4ae8187abe0b18710b9d519b79bd9059e8d0738f60e85dc028e1007b32179266562757c18f46af35e127df30bfc927a21bb99f3d741bb525b738cd8d9bc21a5d1"}) socket(0x2c, 0x2, 0x2) 175.048358ms ago: executing program 4 (id=3175): openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) mmap(&(0x7f0000ebd000/0x2000)=nil, 0x2000, 0x3000005, 0x10, r0, 0xffffc000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000380)="1c", 0x1, 0x48015, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) unshare(0x2040400) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f00000002c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x2, @null}, 0x1c) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r5, 0x0, 0x4, &(0x7f0000000040)="0409", 0x2) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, &(0x7f0000000140)=0xa, 0x4) bind$nfc_llcp(r6, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r6, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) openat$cgroup(r2, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=3176): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f00000005c0)=0x4, 0x4) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRESOCT=r0], 0x2c}}, 0x20068804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb2da763bb3282b121692bc43eb4105000000003080106000240000000002c"], 0x50}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) socket$kcm(0x10, 0x2, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0xb1, "f6fdc0d8cf065ec24a8b424e919e0d91e86dc47ff68aa5b2d564241bb0b3cb3fd5de7468951197ddbddb38c6b1e1046c926ed911604eba894a8d8498eb4a71daed057317e0223669a358ac7f46ad2f01c6b19011a1b0107a1842654e26461714dc45a4d2dc8b62a47be7bdf0e61ab15b0f7fa0d82da18e83fa65b83abdda1d49a03dfb5cf76f4572aa7215065871deef65bc673fcddf124b1e34f30819b5dbac125c55e1f7b877af72db9ae8e150def714"}, &(0x7f0000000080)=0xb9) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xffc, @local}, 0x1c) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000300000000000004000000080002000500000006000b000a"], 0x24}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r10, 0x0, 0x20000890) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000440)={r6, @in={{0x2, 0x4e20, @multicast2}}, 0x4, 0x1, 0x5, 0x4, 0xb0, 0x5, 0x6}, &(0x7f00000000c0)=0x9c) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x4010080, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000180)={0x6, 0x7, 0x1000006, 0x692}, 0x10) kernel console output (not intermixed with test programs): te 5 is lower than or equals to rate 6829859379779001161 ! [ 198.482264][T11031] veth0_vlan: entered allmulticast mode [ 198.490321][T11031] ªªªªª»: renamed from ip6tnl0 [ 198.746366][ T48] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 198.804988][T11046] netlink: 'syz.0.1215': attribute type 4 has an invalid length. [ 198.996867][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 199.347780][T11080] lo speed is unknown, defaulting to 1000 [ 199.361753][T11080] ip6_vti0 speed is unknown, defaulting to 1000 [ 199.535994][ T48] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 199.658574][T11097] IPVS: length: 153 != 24 [ 200.019429][ T9345] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 200.032045][ T9345] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 200.054425][T11106] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20000 [ 200.075908][T11106] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20000 [ 200.346123][ T5889] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 200.473431][ T48] lo speed is unknown, defaulting to 1000 [ 200.764825][T11128] syz.2.1237 uses old SIOCAX25GETINFO [ 201.224992][T11145] netlink: 'syz.2.1241': attribute type 10 has an invalid length. [ 201.268505][T11149] netlink: 'syz.4.1242': attribute type 1 has an invalid length. [ 201.278467][T11149] __nla_validate_parse: 6 callbacks suppressed [ 201.278483][T11149] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1242'. [ 201.327628][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1242'. [ 201.684867][T11166] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1247'. [ 201.748978][T11168] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 202.459174][T11200] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 202.698461][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1261'. [ 202.873544][T11232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1266'. [ 203.027498][T11246] tipc: Enabling of bearer rejected, already enabled [ 203.183131][T11249] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20004 [ 203.244209][T11243] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.306236][T11249] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.391815][T11252] tipc: Resetting bearer [ 203.502323][T11263] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 203.510722][T11263] pim6reg0: persist disabled [ 203.518240][T11263] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1274'. [ 203.528793][T11263] netlink: 'syz.1.1274': attribute type 33 has an invalid length. [ 203.537604][T11263] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1274'. [ 203.546798][T11263] `: renamed from team0 (while UP) [ 203.765772][T11274] netlink: 'syz.1.1277': attribute type 83 has an invalid length. [ 203.828997][T11278] geneve3: entered promiscuous mode [ 203.839661][ T9342] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 203.880109][ T9342] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 203.888738][ T9342] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 203.897394][ T9342] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 204.097510][T11298] netlink: 'syz.0.1283': attribute type 1 has an invalid length. [ 204.163325][T11298] bond2: entered promiscuous mode [ 204.168848][T11298] bond2: entered allmulticast mode [ 204.174384][T11298] 8021q: adding VLAN 0 to HW filter on device bond2 [ 204.198931][T11306] Cannot find add_set index 2 as target [ 204.372324][T11317] raw_sendmsg: syz.3.1286 forgot to set AF_INET. Fix it! [ 204.416335][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 204.478492][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'. [ 204.631975][T11323] macvlan4: entered promiscuous mode [ 204.655134][T11323] bond0: entered promiscuous mode [ 204.666724][T11323] macvlan4: entered allmulticast mode [ 204.680797][T11323] bond0: entered allmulticast mode [ 204.701982][T11323] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 204.767825][T11334] lo speed is unknown, defaulting to 1000 [ 204.795008][T11334] ip6_vti0 speed is unknown, defaulting to 1000 [ 205.173527][T11360] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1298'. [ 205.218845][T11362] lo speed is unknown, defaulting to 1000 [ 205.320968][T11362] ip6_vti0 speed is unknown, defaulting to 1000 [ 206.099494][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1305'. [ 206.298820][T11398] __nla_validate_parse: 1 callbacks suppressed [ 206.298838][T11398] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1307'. [ 206.431805][T11403] netlink: 'syz.3.1310': attribute type 6 has an invalid length. [ 206.694236][T11428] tipc: Enabling of bearer rejected, already enabled [ 206.718421][T11428] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1316'. [ 206.823787][T11408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1312'. [ 206.845593][T11438] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1319'. [ 206.863399][T11412] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1309'. [ 206.901403][T11436] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1317'. [ 206.929973][T11439] bridge5: entered promiscuous mode [ 206.935343][T11439] bridge5: entered allmulticast mode [ 206.956468][T11442] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1320'. [ 207.022431][T11441] delete_channel: no stack [ 207.193150][T11456] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 207.252138][T11462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1326'. [ 207.439906][T11473] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1327'. [ 207.517382][T11474] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1328'. [ 207.840215][T11484] bond3: option mode: invalid value (254) [ 207.945195][T11484] bond3 (unregistering): Released all slaves [ 208.034301][T11498] netlink: 'syz.4.1333': attribute type 5 has an invalid length. [ 208.259947][T11507] netlink: 'syz.4.1335': attribute type 39 has an invalid length. [ 208.560018][T11528] gretap2: entered promiscuous mode [ 208.661765][T11541] netpci0: tun_chr_ioctl cmd 1074025678 [ 208.667563][T11541] netpci0: group set to 0 [ 208.684576][T11544] ip6tnl1: entered promiscuous mode [ 208.805611][T11547] netlink: 'syz.3.1349': attribute type 1 has an invalid length. [ 208.825284][T11556] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 208.876750][T11547] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.912259][T11553] bond3: (slave gretap3): making interface the new active one [ 208.922822][T11553] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 209.009213][T11562] 8021q: adding VLAN 0 to HW filter on device bond3 [ 209.073027][T11563] 8021q: adding VLAN 0 to HW filter on device bond3 [ 209.096073][T11563] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 209.107119][T11563] bond3: (slave sit1): Error -95 calling set_mac_address [ 209.132345][T11568] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 209.144289][T11568] bond3: (slave sit1): Error -95 calling set_mac_address [ 209.173675][T11575] netlink: 'syz.3.1355': attribute type 9 has an invalid length. [ 209.292930][T11580] bond3 (unregistering): Released all slaves [ 209.322751][T11582] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 209.413411][T11587] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.421400][T11587] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.629804][T11587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.661045][T11605] netlink: 'syz.1.1366': attribute type 3 has an invalid length. [ 209.980790][T11587] geneve2: left promiscuous mode [ 209.998605][T11587] geneve3: left promiscuous mode [ 210.008447][T11586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.125607][ T48] lo speed is unknown, defaulting to 1000 [ 210.136425][ T9351] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.138452][ T5889] syz0: Port: 1 Link DOWN [ 210.144898][ T9351] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 210.155793][ T48] syz1: Port: 1 Link DOWN [ 210.184215][ T9351] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.217459][ T9351] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 210.245012][ T9351] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.262309][ T9351] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 210.275027][ T9351] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.283930][ T9351] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 210.355483][T11611] lo speed is unknown, defaulting to 1000 [ 210.361717][T11619] tipc: Enabled bearer , priority 0 [ 210.373475][T11611] ip6_vti0 speed is unknown, defaulting to 1000 [ 210.453768][T11619] syzkaller0: entered promiscuous mode [ 210.459394][T11619] syzkaller0: entered allmulticast mode [ 210.465509][T11619] tipc: Resetting bearer [ 210.481706][T11616] macvtap1: entered promiscuous mode [ 210.487515][T11616] veth1_to_hsr: entered promiscuous mode [ 210.493407][T11616] macvtap1: entered allmulticast mode [ 210.498767][T11619] xt_hashlimit: max too large, truncated to 1048576 [ 210.505918][T11616] veth1_to_hsr: entered allmulticast mode [ 210.518516][T11618] tipc: Resetting bearer [ 211.985910][T11618] tipc: Disabling bearer [ 212.011548][T11629] netlink: 'syz.3.1372': attribute type 29 has an invalid length. [ 212.037857][ T5889] tipc: Node number set to 1530766375 [ 212.297203][T11644] netlink: 'syz.2.1377': attribute type 1 has an invalid length. [ 212.333994][T11644] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 212.815963][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 212.924737][T11662] __nla_validate_parse: 9 callbacks suppressed [ 212.924754][T11662] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1380'. [ 213.194873][T11666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.558160][T11677] syzkaller0: entered promiscuous mode [ 213.563667][T11677] syzkaller0: entered allmulticast mode [ 213.621302][T11677] tipc: Enabled bearer , priority 0 [ 213.647228][T11677] tipc: Resetting bearer [ 213.670157][T11676] tipc: Resetting bearer [ 213.718580][T11676] tipc: Disabling bearer [ 213.869896][T11688] tipc: Enabled bearer , priority 0 [ 213.888270][T11689] syzkaller0: entered promiscuous mode [ 213.895835][T11689] syzkaller0: entered allmulticast mode [ 213.968313][T11689] tipc: Resetting bearer [ 213.998634][T11689] tipc: Disabling bearer [ 214.083188][T11707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1395'. [ 214.136818][T11710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1396'. [ 214.173231][T11711] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 214.220214][T11714] lo speed is unknown, defaulting to 1000 [ 214.285260][T11714] ip6_vti0 speed is unknown, defaulting to 1000 [ 214.337522][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1398'. [ 214.388214][T11721] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 214.522312][T11726] netlink: 'syz.3.1397': attribute type 11 has an invalid length. [ 214.759233][T11740] netlink: 'syz.1.1404': attribute type 10 has an invalid length. [ 214.795885][T11740] batadv0: entered allmulticast mode [ 214.808181][T11740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.827817][T11740] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 214.863768][T11749] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1407'. [ 214.876539][T11746] netlink: 'syz.0.1408': attribute type 1 has an invalid length. [ 214.909747][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1409'. [ 214.932657][T11749] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 214.948827][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1409'. [ 214.960548][T11749] bond3 (unregistering): Released all slaves [ 215.154906][T11753] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 215.167323][T11753] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 215.302761][T11767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1411'. [ 215.327963][T11745] lo speed is unknown, defaulting to 1000 [ 215.353731][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1411'. [ 215.378531][T11756] lo speed is unknown, defaulting to 1000 [ 215.476556][T11745] ip6_vti0 speed is unknown, defaulting to 1000 [ 215.727489][T11787] tipc: Enabled bearer , priority 0 [ 215.750901][T11780] syzkaller0: entered promiscuous mode [ 215.796767][T11780] syzkaller0: entered allmulticast mode [ 215.875287][T11792] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.883066][T11792] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.979280][T11792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.992155][T11792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.104182][T11792] tipc: Resetting bearer [ 216.155519][T11756] ip6_vti0 speed is unknown, defaulting to 1000 [ 216.183104][T11799] tipc: Resetting bearer [ 216.189804][ T9351] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.208956][ T9351] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.256391][T11779] tipc: Resetting bearer [ 216.281676][T11779] tipc: Disabling bearer [ 216.304322][ T9351] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.375024][ T9351] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.690393][T11802] lo speed is unknown, defaulting to 1000 [ 216.864904][T11805] lo speed is unknown, defaulting to 1000 [ 216.923950][T11805] ip6_vti0 speed is unknown, defaulting to 1000 [ 217.161193][T11802] ip6_vti0 speed is unknown, defaulting to 1000 [ 217.755342][T11833] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1425'. [ 218.135217][T11855] xt_hashlimit: max too large, truncated to 1048576 [ 218.365138][ T30] audit: type=1800 audit(1766074736.572:5): pid=11867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1430" name=CB dev="tmpfs" ino=1660 res=0 errno=0 [ 218.725458][T11881] tipc: Enabled bearer , priority 0 [ 218.754228][T11875] tipc: Resetting bearer [ 218.770186][T11874] tipc: Disabling bearer [ 218.842827][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1435'. [ 218.864859][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1435'. [ 219.032592][T11897] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1439'. [ 219.106314][T11903] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1440'. [ 219.120993][T11897] bond3: option resend_igmp: invalid value (2878) [ 219.128964][T11897] bond3: option resend_igmp: allowed values 0 - 255 [ 219.138601][T11897] bond3 (unregistering): Released all slaves [ 219.239184][T11903] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 219.319876][T11912] lo speed is unknown, defaulting to 1000 [ 219.329557][T11912] ip6_vti0 speed is unknown, defaulting to 1000 [ 219.356946][T11919] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1441'. [ 219.578282][T11921] syzkaller0: entered promiscuous mode [ 219.630134][T11921] syzkaller0: entered allmulticast mode [ 219.707501][T11934] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1447'. [ 219.736396][T11934] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1447'. [ 219.747626][T11934] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1447'. [ 219.780232][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1444'. [ 219.803913][T11934] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1447'. [ 220.098979][T11951] syzkaller0: entered promiscuous mode [ 220.104593][T11951] syzkaller0: entered allmulticast mode [ 220.126875][ T9356] syzkaller0: tun_net_xmit 48 [ 220.134219][T11953] syzkaller0: tun_net_xmit 1280 [ 220.140938][T11953] syzkaller0: create flow: hash 3304840049 index 1 [ 220.204088][T11951] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 220.289797][T11955] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.386223][T11944] syzkaller0: delete flow: hash 3304840049 index 1 [ 221.669566][T11955] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.682860][T11972] netlink: 'syz.3.1456': attribute type 1 has an invalid length. [ 221.808807][T11955] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.839056][T11984] ieee802154 phy1 wpan1: encryption failed: -22 [ 221.928300][T11955] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.108940][ T9343] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.140944][ T9343] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.175997][ T9356] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.214878][ T9342] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.378938][T12016] netlink: 'syz.1.1468': attribute type 1 has an invalid length. [ 222.441854][T12019] tap0: tun_chr_ioctl cmd 1074025681 [ 222.484196][T12016] vlan2: entered promiscuous mode [ 222.495375][T12016] bond0: entered promiscuous mode [ 222.500661][T12016] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 222.519555][T12016] batadv0: entered promiscuous mode [ 222.641038][T12021] lo speed is unknown, defaulting to 1000 [ 222.660090][T12021] ip6_vti0 speed is unknown, defaulting to 1000 [ 222.967609][T12045] lo speed is unknown, defaulting to 1000 [ 223.053044][T12063] tipc: Enabled bearer , priority 0 [ 223.062345][T12063] syzkaller0: entered promiscuous mode [ 223.075910][T12063] syzkaller0: entered allmulticast mode [ 223.124693][T12045] ip6_vti0 speed is unknown, defaulting to 1000 [ 223.508218][T12072] netlink: 'syz.1.1480': attribute type 1 has an invalid length. [ 223.592462][T12074] lo speed is unknown, defaulting to 1000 [ 223.713335][T12074] ip6_vti0 speed is unknown, defaulting to 1000 [ 223.723145][T12046] tipc: Resetting bearer [ 223.769571][T12046] tipc: Disabling bearer [ 223.995155][T12095] __nla_validate_parse: 70 callbacks suppressed [ 223.995179][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1486'. [ 224.109190][T12104] netlink: 23 bytes leftover after parsing attributes in process `syz.0.1489'. [ 224.140588][T12105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1488'. [ 224.512320][T12118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.400130][T12160] bond7: option packets_per_slave: invalid value (809004142) [ 225.419107][T12160] bond7: option packets_per_slave: allowed values 0 - 65535 [ 225.484576][T12160] bond7 (unregistering): Released all slaves [ 225.605516][T12190] lo speed is unknown, defaulting to 1000 [ 225.627765][T12190] ip6_vti0 speed is unknown, defaulting to 1000 [ 225.702073][T12199] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 225.838080][T12201] netlink: 'syz.4.1508': attribute type 11 has an invalid length. [ 225.923164][T12201] lo speed is unknown, defaulting to 1000 [ 225.939382][T12205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1508'. [ 226.053946][T12208] lo: Caught tx_queue_len zero misconfig [ 226.197998][T12201] ip6_vti0 speed is unknown, defaulting to 1000 [ 226.447892][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1514'. [ 226.458718][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1514'. [ 226.483399][T12217] netlink: 'syz.0.1512': attribute type 11 has an invalid length. [ 226.492093][T12217] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1512'. [ 226.532310][T12235] xt_l2tp: v2 sid > 0xffff: 16776960 [ 226.597918][T12227] lo speed is unknown, defaulting to 1000 [ 226.655486][T12240] netlink: 'syz.3.1517': attribute type 2 has an invalid length. [ 226.729207][T12227] ip6_vti0 speed is unknown, defaulting to 1000 [ 227.268033][T12251] sctp: [Deprecated]: syz.0.1521 (pid 12251) Use of int in max_burst socket option. [ 227.268033][T12251] Use struct sctp_assoc_value instead [ 227.715151][T12259] smc: net device veth1_to_bond applied user defined pnetid SYZ0 [ 227.882067][T12272] ipt_REJECT: ECHOREPLY no longer supported. [ 228.005324][T12276] geneve2: entered promiscuous mode [ 228.050514][T12278] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1530'. [ 228.066950][T12278] netlink: 'syz.1.1530': attribute type 1 has an invalid length. [ 228.106386][T12278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1530'. [ 228.344340][T12297] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1536'. [ 228.610732][T12306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.645400][T12306] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 228.690868][ T48] lo speed is unknown, defaulting to 1000 [ 228.702023][ T5832] ip6_vti0 speed is unknown, defaulting to 1000 [ 228.708794][ T5832] syz2: Port: 1 Link ACTIVE [ 228.717365][ T48] syz1: Port: 1 Link ACTIVE [ 228.729394][ T48] ip6_vti0 speed is unknown, defaulting to 1000 [ 229.196667][T12330] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 229.296136][T12332] netlink: 'syz.1.1546': attribute type 1 has an invalid length. [ 229.310272][T12334] Bluetooth: MGMT ver 1.23 [ 229.360560][T12337] bond3: (slave xfrm2): The slave device specified does not support setting the MAC address [ 229.413981][T12337] bond3: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 229.437828][T12337] bond3: (slave xfrm2): making interface the new active one [ 229.455942][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 229.492666][T12337] bond3: (slave xfrm2): Enslaving as an active interface with an up link [ 229.511937][T12346] __nla_validate_parse: 1 callbacks suppressed [ 229.511956][T12346] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1549'. [ 230.540091][T12397] can: request_module (can-proto-0) failed. [ 230.585400][T12400] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1562'. [ 230.783779][T12412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1564'. [ 231.022753][T12423] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 231.027808][T12418] ip6t_srh: unknown srh invflags 4000 [ 231.330019][T12426] syzkaller0: entered promiscuous mode [ 231.384615][T12426] syzkaller0: entered allmulticast mode [ 232.738203][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1571'. [ 234.582465][T12481] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1584'. [ 234.963975][T12500] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 235.226646][T12513] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 235.478932][T12520] lo speed is unknown, defaulting to 1000 [ 235.488781][T12520] ip6_vti0 speed is unknown, defaulting to 1000 [ 235.686537][T12531] lo speed is unknown, defaulting to 1000 [ 235.829106][T12531] ip6_vti0 speed is unknown, defaulting to 1000 [ 236.204857][T12545] tipc: Enabled bearer , priority 0 [ 236.214737][T12544] syzkaller0: entered promiscuous mode [ 236.221080][T12544] syzkaller0: entered allmulticast mode [ 236.248612][T12551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1605'. [ 236.278790][T12544] tipc: Resetting bearer [ 236.310347][T12552] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1604'. [ 236.420293][T12551] syzkaller0: entered promiscuous mode [ 236.426583][T12551] syzkaller0: entered allmulticast mode [ 236.434715][T12559] lo speed is unknown, defaulting to 1000 [ 237.093767][T12549] tipc: Resetting bearer [ 237.108334][T12549] tipc: Disabling bearer [ 238.249906][ T9343] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.270215][T12559] ip6_vti0 speed is unknown, defaulting to 1000 [ 238.411366][ T9343] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.426367][ T9343] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.455924][ T9343] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.046657][T12602] netlink: 'syz.3.1614': attribute type 13 has an invalid length. [ 239.835905][T12634] netlink: 'syz.4.1623': attribute type 10 has an invalid length. [ 239.882459][T12639] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1625'. [ 239.914500][T12639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1625'. [ 239.972509][T12649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1625'. [ 240.119349][T12652] netlink: 'syz.3.1628': attribute type 32 has an invalid length. [ 240.138468][T12652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1628'. [ 240.154465][T12652] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 240.198680][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1631'. [ 240.244903][T12660] 8021q: adding VLAN 0 to HW filter on device bond4 [ 240.261490][T12666] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 240.332883][T12672] netlink: 'syz.1.1634': attribute type 10 has an invalid length. [ 240.414906][T12674] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 240.441207][T12668] netlink: 'syz.4.1633': attribute type 1 has an invalid length. [ 240.522335][T12668] 8021q: adding VLAN 0 to HW filter on device bond7 [ 240.687878][T12699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1640'. [ 240.707387][T12699] vlan3: entered allmulticast mode [ 240.712543][T12699] bridge_slave_0: entered allmulticast mode [ 240.718849][T12699] bridge0: port 1(vlan3) entered blocking state [ 240.727223][T12699] bridge0: port 1(vlan3) entered disabled state [ 240.739414][T12699] vlan3: entered promiscuous mode [ 240.744838][T12699] bridge_slave_0: entered promiscuous mode [ 240.758971][T12703] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1642'. [ 240.785129][T12705] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1642'. [ 240.857042][T12709] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1644'. [ 240.872143][T12707] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1643'. [ 241.312866][T12732] netlink: 'syz.3.1651': attribute type 1 has an invalid length. [ 241.341283][T12732] netlink: 'syz.3.1651': attribute type 1 has an invalid length. [ 241.362102][T12732] netlink: 'syz.3.1651': attribute type 2 has an invalid length. [ 241.453366][T12740] lo speed is unknown, defaulting to 1000 [ 241.486807][T12740] ip6_vti0 speed is unknown, defaulting to 1000 [ 241.530294][T12749] syzkaller0: Caught tx_queue_len zero misconfig [ 241.557630][T12749] tipc: Enabling of bearer rejected, already enabled [ 241.732542][T12759] tipc: Enabling of bearer rejected, failed to enable media [ 242.011506][T12773] 8021q: adding VLAN 0 to HW filter on device bond8 [ 242.055102][T12773] lo speed is unknown, defaulting to 1000 [ 242.112734][T12773] ip6_vti0 speed is unknown, defaulting to 1000 [ 242.546664][T12789] bond5: Unable to set up delay as MII monitoring is disabled [ 242.566002][T12789] bond5 (unregistering): Released all slaves [ 243.161605][T12816] x_tables: duplicate underflow at hook 1 [ 243.186208][T12816] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20004 [ 243.203831][T12816] IPVS: set_ctl: invalid protocol: 46 172.20.20.32:20000 [ 243.219168][T12816] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20004 [ 243.458443][T12828] xt_hashlimit: size too large, truncated to 1048576 [ 243.526127][T12830] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 243.729428][T12839] tipc: Enabled bearer , priority 0 [ 243.737148][T12839] syzkaller0: entered promiscuous mode [ 243.742744][T12839] syzkaller0: entered allmulticast mode [ 243.834227][T12844] tipc: Resetting bearer [ 243.876957][T12844] tipc: Disabling bearer [ 244.104168][T12857] syzkaller0: entered promiscuous mode [ 244.117967][T12857] syzkaller0: entered allmulticast mode [ 244.139008][T12856] nbd0: detected capacity change from 0 to 63 [ 244.149030][T12860] nbd: must specify an index to disconnect [ 244.163842][ T5837] block nbd0: Receive control failed (result -32) [ 245.469081][T12867] __nla_validate_parse: 9 callbacks suppressed [ 245.469098][T12867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1688'. [ 245.641634][T12887] netlink: 'syz.2.1694': attribute type 3 has an invalid length. [ 245.650521][T12887] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1694'. [ 245.751792][T12906] x_tables: duplicate underflow at hook 1 [ 245.903381][T12919] netlink: 'syz.4.1704': attribute type 6 has an invalid length. [ 245.911754][T12919] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1704'. [ 246.483046][T12958] netlink: 'syz.2.1712': attribute type 2 has an invalid length. [ 246.561378][T12958] : entered promiscuous mode [ 246.591590][T12968] batman_adv: batadv0: Adding interface: dummy0 [ 246.613742][T12968] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.646147][T12968] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 246.756222][T12975] ip6erspan0: entered allmulticast mode [ 249.029638][T13043] syzkaller1: entered promiscuous mode [ 249.045342][T13043] syzkaller1: entered allmulticast mode [ 249.559916][T13078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1741'. [ 249.729497][T13091] netlink: 'syz.4.1743': attribute type 10 has an invalid length. [ 249.749878][T13090] lo speed is unknown, defaulting to 1000 [ 249.759960][T13091] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.770776][T13091] bond0: (slave team0): Enslaving as an active interface with an up link [ 249.820903][T13090] ip6_vti0 speed is unknown, defaulting to 1000 [ 250.315923][T13124] warn_alloc: 1 callbacks suppressed [ 250.315939][T13124] syz.2.1756: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 250.318458][T13123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1755'. [ 250.330566][T13124] ,cpuset=/,mems_allowed=0-1 [ 250.366992][T13124] CPU: 1 UID: 0 PID: 13124 Comm: syz.2.1756 Not tainted syzkaller #0 PREEMPT(full) [ 250.367017][T13124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.367028][T13124] Call Trace: [ 250.367035][T13124] [ 250.367042][T13124] dump_stack_lvl+0x189/0x250 [ 250.367065][T13124] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 250.367089][T13124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.367121][T13124] ? __pfx__printk+0x10/0x10 [ 250.367143][T13124] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 250.367168][T13124] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 250.367204][T13124] warn_alloc+0x214/0x310 [ 250.367224][T13124] ? stack_depot_save_flags+0x40/0x850 [ 250.367255][T13124] ? __pfx_warn_alloc+0x10/0x10 [ 250.367278][T13124] ? kasan_save_track+0x3e/0x80 [ 250.367296][T13124] ? __kasan_kmalloc+0x93/0xb0 [ 250.367318][T13124] ? xsk_setsockopt+0x4dc/0x8d0 [ 250.367333][T13124] ? do_sock_setsockopt+0x17c/0x1b0 [ 250.367354][T13124] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 250.367374][T13124] ? do_syscall_64+0xfa/0xf80 [ 250.367394][T13124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.367419][T13124] __vmalloc_node_range_noprof+0x125/0x12d0 [ 250.367466][T13124] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 250.367489][T13124] ? __kasan_kmalloc+0x93/0xb0 [ 250.367514][T13124] vmalloc_user_noprof+0xad/0xf0 [ 250.367533][T13124] ? xskq_create+0xbf/0x170 [ 250.367553][T13124] xskq_create+0xbf/0x170 [ 250.367574][T13124] xsk_init_queue+0xb0/0x110 [ 250.367595][T13124] xsk_setsockopt+0x4dc/0x8d0 [ 250.367616][T13124] ? __pfx_xsk_setsockopt+0x10/0x10 [ 250.367636][T13124] ? __pfx_aa_sk_perm+0x10/0x10 [ 250.367662][T13124] ? aa_sock_opt_perm+0xff/0x1a0 [ 250.367683][T13124] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 250.367703][T13124] ? __pfx_xsk_setsockopt+0x10/0x10 [ 250.367722][T13124] do_sock_setsockopt+0x17c/0x1b0 [ 250.367750][T13124] __x64_sys_setsockopt+0x13f/0x1b0 [ 250.367777][T13124] do_syscall_64+0xfa/0xf80 [ 250.367798][T13124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.367813][T13124] ? clear_bhb_loop+0x60/0xb0 [ 250.367833][T13124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.367849][T13124] RIP: 0033:0x7fc660f8f749 [ 250.367872][T13124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.367886][T13124] RSP: 002b:00007fc661eac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 250.367905][T13124] RAX: ffffffffffffffda RBX: 00007fc6611e5fa0 RCX: 00007fc660f8f749 [ 250.367917][T13124] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 250.367926][T13124] RBP: 00007fc661013f91 R08: 0000000000000004 R09: 0000000000000000 [ 250.367936][T13124] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.367947][T13124] R13: 00007fc6611e6038 R14: 00007fc6611e5fa0 R15: 00007ffda58897d8 [ 250.367978][T13124] [ 250.369242][T13124] Mem-Info: [ 250.659817][T13124] active_anon:6794 inactive_anon:0 isolated_anon:0 [ 250.659817][T13124] active_file:3204 inactive_file:39949 isolated_file:0 [ 250.659817][T13124] unevictable:768 dirty:83 writeback:0 [ 250.659817][T13124] slab_reclaimable:12162 slab_unreclaimable:121497 [ 250.659817][T13124] mapped:31895 shmem:4207 pagetables:963 [ 250.659817][T13124] sec_pagetables:0 bounce:0 [ 250.659817][T13124] kernel_misc_reclaimable:0 [ 250.659817][T13124] free:1301431 free_pcp:13478 free_cma:0 [ 250.756601][T13124] Node 0 active_anon:27076kB inactive_anon:0kB active_file:12816kB inactive_file:159596kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116280kB dirty:332kB writeback:0kB shmem:15292kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12956kB pagetables:3620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 250.853403][T13124] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 250.971334][T13124] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 251.003779][T13139] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1759'. [ 251.015024][T13141] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1759'. [ 251.067221][T13124] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 251.129500][T13124] Node 0 DMA32 free:1283332kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21588kB inactive_anon:0kB active_file:12816kB inactive_file:159596kB unevictable:1536kB writepending:332kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:55420kB local_pcp:21468kB free_cma:0kB [ 251.186516][T13134] pimreg3: entered allmulticast mode [ 251.218775][T13124] lowmem_reserve[]: 0 0 0 0 0 [ 251.232644][T13124] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 251.290515][T13147] netlink: 'syz.3.1760': attribute type 29 has an invalid length. [ 251.305410][T13149] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1762'. [ 251.325870][T13124] lowmem_reserve[]: 0 0 0 0 0 [ 251.330628][T13124] Node 1 Normal free:3893860kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18272kB local_pcp:8220kB free_cma:0kB [ 251.339686][T13149] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1762'. [ 251.380046][T13147] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1760'. [ 251.396328][T13147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1760'. [ 251.422319][T13147] netlink: 588 bytes leftover after parsing attributes in process `syz.3.1760'. [ 251.424406][T13150] netlink: 'syz.3.1760': attribute type 29 has an invalid length. [ 251.436680][T13124] lowmem_reserve[]: 0 0 0 0 0 [ 251.449795][T13124] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 251.513522][T13124] Node 0 DMA32: 1058*4kB (UME) 359*8kB (UM) 196*16kB (UME) 330*32kB (UME) 44*64kB (UM) 95*128kB (UME) 54*256kB (UME) 15*512kB (UM) 28*1024kB (UME) 8*2048kB (UM) 289*4096kB (UME) = 1286080kB [ 251.572866][T13124] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 251.626648][T13124] Node 1 Normal: 207*4kB (U) 43*8kB (UME) 41*16kB (UME) 100*32kB (UME) 29*64kB (UME) 9*128kB (UME) 3*256kB (ME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3893860kB [ 251.711851][T13124] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 251.738625][T13124] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 251.764971][T13124] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 251.779629][T13124] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 251.790101][T13124] 44508 total pagecache pages [ 251.794988][T13124] 0 pages in swap cache [ 251.795642][T13175] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1771'. [ 251.799337][T13124] Free swap = 124996kB [ 251.799348][T13124] Total swap = 124996kB [ 251.799358][T13124] 2097051 pages RAM [ 251.799365][T13124] 0 pages HighMem/MovableOnly [ 251.799373][T13124] 424280 pages reserved [ 251.799380][T13124] 0 pages cma reserved [ 252.003159][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1774'. [ 252.414927][T13225] syzkaller1: entered promiscuous mode [ 252.426519][T13225] syzkaller1: entered allmulticast mode [ 252.435184][T13230] netlink: 'syz.1.1786': attribute type 12 has an invalid length. [ 252.460711][T13233] x_tables: duplicate underflow at hook 3 [ 252.698351][T13240] lo speed is unknown, defaulting to 1000 [ 252.761439][T13240] ip6_vti0 speed is unknown, defaulting to 1000 [ 252.862056][T13255] syzkaller0: entered promiscuous mode [ 252.869709][T13255] syzkaller0: entered allmulticast mode [ 252.903207][T13245] netlink: 'syz.3.1791': attribute type 1 has an invalid length. [ 253.536659][T13291] lec:lec_atm_send: lec0: Unknown message type 875837489 [ 253.565653][T13275] lec:lec_atm_close: lec0: Shut down! [ 253.610180][T13293] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1803'. [ 253.620692][T13293] block nbd0: reconnected socket [ 253.630253][ T5837] block nbd0: Receive control failed (result -32) [ 253.691734][T13299] netlink: 'syz.1.1805': attribute type 3 has an invalid length. [ 253.699696][T13299] netlink: 'syz.1.1805': attribute type 1 has an invalid length. [ 253.708588][T13299] NCSI netlink: No device for ifindex 23016 [ 253.727217][T13299] netlink: 'syz.1.1805': attribute type 3 has an invalid length. [ 253.739342][T13299] netlink: 'syz.1.1805': attribute type 1 has an invalid length. [ 253.754503][T13299] NCSI netlink: No device for ifindex 23016 [ 253.850648][T13304] netlink: 'syz.1.1808': attribute type 2 has an invalid length. [ 253.948268][T13304] !: entered promiscuous mode [ 253.996771][T13315] netlink: 'syz.2.1806': attribute type 33 has an invalid length. [ 254.078389][T13310] ip6t_rpfilter: unknown options [ 254.187416][T13315] lo speed is unknown, defaulting to 1000 [ 254.219547][T13315] ip6_vti0 speed is unknown, defaulting to 1000 [ 254.278593][T13330] lo speed is unknown, defaulting to 1000 [ 254.502268][ T48] IPVS: starting estimator thread 0... [ 254.542948][T13343] lo speed is unknown, defaulting to 1000 [ 254.577086][T13344] lo speed is unknown, defaulting to 1000 [ 254.625945][T13345] IPVS: using max 26 ests per chain, 62400 per kthread [ 254.665383][T13330] ip6_vti0 speed is unknown, defaulting to 1000 [ 255.060545][T13343] ip6_vti0 speed is unknown, defaulting to 1000 [ 255.145493][T13357] Bluetooth: MGMT ver 1.23 [ 255.346882][T13344] ip6_vti0 speed is unknown, defaulting to 1000 [ 255.700856][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.263868][T13390] tipc: Enabled bearer , priority 0 [ 256.336464][T13391] syzkaller0: entered promiscuous mode [ 256.341970][T13391] syzkaller0: entered allmulticast mode [ 256.374666][T13388] tipc: Resetting bearer [ 256.388466][T13388] tipc: Enabling of bearer rejected, already enabled [ 256.403478][T13387] tipc: Resetting bearer [ 257.213700][T13387] tipc: Disabling bearer [ 257.273457][T13402] __nla_validate_parse: 5 callbacks suppressed [ 257.273474][T13402] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1830'. [ 257.333161][T13403] syzkaller0: entered promiscuous mode [ 257.338909][T13403] syzkaller0: entered allmulticast mode [ 257.577218][T13417] sctp: [Deprecated]: syz.4.1836 (pid 13417) Use of int in max_burst socket option. [ 257.577218][T13417] Use struct sctp_assoc_value instead [ 257.730836][T13425] lo speed is unknown, defaulting to 1000 [ 257.761600][T13425] ip6_vti0 speed is unknown, defaulting to 1000 [ 258.244378][T13438] netlink: 'syz.2.1842': attribute type 3 has an invalid length. [ 258.264294][T13434] syzkaller0: entered promiscuous mode [ 258.266274][T13438] netlink: 'syz.2.1842': attribute type 1 has an invalid length. [ 258.278369][T13434] syzkaller0: entered allmulticast mode [ 258.286412][T13438] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1842'. [ 258.457101][T13443] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 258.739706][T13447] tipc: Enabling of bearer rejected, already enabled [ 260.181441][T13452] lo speed is unknown, defaulting to 1000 [ 260.191536][T13452] ip6_vti0 speed is unknown, defaulting to 1000 [ 260.379210][T13466] tipc: Enabling of bearer rejected, already enabled [ 260.622390][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1854'. [ 260.860367][T13491] lo speed is unknown, defaulting to 1000 [ 260.870216][T13491] ip6_vti0 speed is unknown, defaulting to 1000 [ 261.380382][T13510] delete_channel: no stack [ 261.391240][T13510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1863'. [ 261.494138][T13506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1862'. [ 261.535451][T13510] 8021q: adding VLAN 0 to HW filter on device bond9 [ 261.542673][T13511] bond9: option ad_select: unable to set because the bond device is up [ 261.574606][T13511] delete_channel: no stack [ 261.621435][T13515] lo speed is unknown, defaulting to 1000 [ 261.679514][T13515] ip6_vti0 speed is unknown, defaulting to 1000 [ 261.859614][T13537] netlink: 'syz.3.1868': attribute type 54 has an invalid length. [ 262.213852][ T48] IPVS: starting estimator thread 0... [ 262.240922][T13552] netlink: 1152 bytes leftover after parsing attributes in process `syz.4.1873'. [ 262.251448][T13562] netlink: 1152 bytes leftover after parsing attributes in process `syz.4.1873'. [ 262.317773][T13564] IPVS: using max 29 ests per chain, 69600 per kthread [ 262.449312][T13570] syzkaller1: entered promiscuous mode [ 262.464109][T13570] syzkaller1: entered allmulticast mode [ 262.479032][T13571] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1878'. [ 262.550899][T13578] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1878'. [ 262.606830][T13587] netlink: 'syz.2.1882': attribute type 29 has an invalid length. [ 262.714106][T13596] openvswitch: netlink: IP tunnel dst address not specified [ 262.736273][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 262.934907][T13606] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1888'. [ 262.955305][T13606] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1888'. [ 262.974072][T13606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1888'. [ 263.219873][T13631] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1891'. [ 263.334778][T13628] lo speed is unknown, defaulting to 1000 [ 263.372026][T13628] ip6_vti0 speed is unknown, defaulting to 1000 [ 263.691602][T13661] netlink: 'syz.1.1899': attribute type 1 has an invalid length. [ 263.778582][T13661] bond5: entered promiscuous mode [ 263.794638][T13661] 8021q: adding VLAN 0 to HW filter on device bond5 [ 263.824700][T13667] netlink: 'syz.3.1900': attribute type 1 has an invalid length. [ 263.927238][T13671] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1901'. [ 264.098067][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1901'. [ 264.258114][T13689] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1905'. [ 264.424764][T13699] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1907'. [ 264.453216][T13697] lo speed is unknown, defaulting to 1000 [ 264.462448][T13697] ip6_vti0 speed is unknown, defaulting to 1000 [ 264.884117][T13722] netlink: 'syz.4.1915': attribute type 5 has an invalid length. [ 264.930764][T13722] veth0_to_bond: left allmulticast mode [ 264.941454][T13722] veth0_macvtap: left allmulticast mode [ 264.948230][T13722] macvtap0: left promiscuous mode [ 264.955951][T13722] gretap1: left promiscuous mode [ 264.961213][T13722] batadv1: left allmulticast mode [ 264.967457][T13722] bond5: left allmulticast mode [ 264.973128][T13722] bond6: left allmulticast mode [ 264.980235][T13722] geneve2: left promiscuous mode [ 265.037014][T13732] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 266.213650][T13768] veth0: Caught tx_queue_len zero misconfig [ 266.450308][T13772] netlink: 'syz.4.1928': attribute type 29 has an invalid length. [ 266.482099][T13781] tipc: Enabled bearer , priority 0 [ 266.499574][T13777] netlink: 'syz.4.1928': attribute type 29 has an invalid length. [ 266.521247][T13774] syzkaller0: entered promiscuous mode [ 266.536698][T13774] syzkaller0: entered allmulticast mode [ 266.618870][T13774] tipc: Resetting bearer [ 266.629637][T13773] tipc: Resetting bearer [ 266.633816][T13790] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 266.654859][T13773] tipc: Disabling bearer [ 266.819289][T13796] netlink: 'syz.0.1934': attribute type 12 has an invalid length. [ 266.891030][T13806] vxcan3: entered promiscuous mode [ 267.005365][T13811] netlink: 'syz.3.1942': attribute type 10 has an invalid length. [ 267.034585][T13811] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 267.179987][T13822] lo: Caught tx_queue_len zero misconfig [ 267.184450][T13824] netlink: 'syz.2.1946': attribute type 14 has an invalid length. [ 267.207147][T13824] netlink: 'syz.2.1946': attribute type 11 has an invalid length. [ 267.208379][T13822] gtp0: entered promiscuous mode [ 267.220152][T13822] gtp0: entered allmulticast mode [ 267.860128][T13836] __nla_validate_parse: 9 callbacks suppressed [ 267.860148][T13836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1949'. [ 267.941363][T13838] tipc: Enabled bearer , priority 0 [ 267.952395][T13838] tipc: Resetting bearer [ 267.965140][T13837] tipc: Disabling bearer [ 268.024600][T13845] pimreg: entered allmulticast mode [ 268.050519][T13842] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1953'. [ 268.076749][T13846] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1953'. [ 268.078023][T13845] pimreg: left allmulticast mode [ 268.086243][T13842] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1953'. [ 268.417009][T13874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1961'. [ 268.452451][T13879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1963'. [ 268.518292][T13879] netlink: 30 bytes leftover after parsing attributes in process `syz.0.1963'. [ 268.591851][T13888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1966'. [ 268.630317][T13889] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 268.695140][T13896] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1967'. [ 268.908152][T13911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.373469][T13930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1977'. [ 269.559751][T13930] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 269.583751][T13938] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 269.623521][T13930] macvlan4: entered promiscuous mode [ 269.636263][T13930] macvlan4: entered allmulticast mode [ 269.642777][T13930] bond6: entered promiscuous mode [ 269.656336][T13930] bridge3: entered promiscuous mode [ 269.662355][T13930] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 269.689500][T13930] bond6: left promiscuous mode [ 269.694368][T13930] bridge3: left promiscuous mode [ 269.961989][T13963] xt_CT: You must specify a L4 protocol and not use inversions on it [ 270.025823][T13971] xt_bpf: check failed: parse error [ 270.058649][T13970] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20001 [ 270.128208][T13978] netlink: 'syz.1.1989': attribute type 12 has an invalid length. [ 271.070522][T14028] tipc: Enabling of bearer rejected, already enabled [ 271.166273][T14034] netlink: 'syz.0.2005': attribute type 13 has an invalid length. [ 271.181938][T14034] gretap0: refused to change device tx_queue_len [ 271.188979][T14034] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 271.207934][T14035] lo speed is unknown, defaulting to 1000 [ 271.222798][T14035] ip6_vti0 speed is unknown, defaulting to 1000 [ 272.011267][T14049] lo speed is unknown, defaulting to 1000 [ 272.039627][T14049] ip6_vti0 speed is unknown, defaulting to 1000 [ 272.112745][T14056] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 272.138652][T14057] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:19999 [ 272.149573][T14057] netlink: 'syz.1.2009': attribute type 7 has an invalid length. [ 272.157667][T14057] netlink: 'syz.1.2009': attribute type 8 has an invalid length. [ 272.504155][T14078] tipc: Enabled bearer , priority 0 [ 272.607180][T14084] bridge_slave_1: left allmulticast mode [ 272.613005][T14084] bridge_slave_1: left promiscuous mode [ 272.619078][T14084] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.631105][T14082] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 272.779365][T14092] tipc: Resetting bearer [ 272.893154][T14090] lo speed is unknown, defaulting to 1000 [ 272.963972][T14090] ip6_vti0 speed is unknown, defaulting to 1000 [ 273.067065][T14101] __nla_validate_parse: 6 callbacks suppressed [ 273.067085][T14101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2025'. [ 273.137860][T14104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2025'. [ 273.364564][T14077] tipc: Disabling bearer [ 273.639171][T14127] lo speed is unknown, defaulting to 1000 [ 273.683481][T14127] ip6_vti0 speed is unknown, defaulting to 1000 [ 273.749856][T14130] syzkaller0: entered promiscuous mode [ 273.765565][T14130] syzkaller0: entered allmulticast mode [ 273.873244][T14138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2034'. [ 275.248397][T14154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2038'. [ 275.346222][T12135] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.467373][T12135] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.486998][T12135] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.506069][T14164] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 275.512617][T14164] syzkaller1: linktype set to 825 [ 275.525236][T12135] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.576118][T14166] syzkaller1: entered promiscuous mode [ 275.583682][T14166] syzkaller1: entered allmulticast mode [ 275.879241][T14173] lo speed is unknown, defaulting to 1000 [ 275.928832][T14173] ip6_vti0 speed is unknown, defaulting to 1000 [ 275.944966][T14178] lo speed is unknown, defaulting to 1000 [ 276.065312][T14174] lo speed is unknown, defaulting to 1000 [ 276.137831][T14187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2048'. [ 276.176056][T14187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2048'. [ 276.190202][T14188] netlink: 'syz.1.2048': attribute type 1 has an invalid length. [ 276.207803][T14188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2048'. [ 276.208399][T14187] netlink: 'syz.1.2048': attribute type 18 has an invalid length. [ 276.233080][T14188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2048'. [ 276.245279][T14190] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2049'. [ 276.255080][T14188] netlink: 'syz.1.2048': attribute type 18 has an invalid length. [ 276.375468][T14178] ip6_vti0 speed is unknown, defaulting to 1000 [ 276.717651][T14203] lo speed is unknown, defaulting to 1000 [ 276.792167][T14174] ip6_vti0 speed is unknown, defaulting to 1000 [ 276.892173][T14217] netlink: 'syz.0.2057': attribute type 21 has an invalid length. [ 276.900714][T14217] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2057'. [ 276.929868][T14217] netlink: 'syz.0.2057': attribute type 4 has an invalid length. [ 276.938072][T14217] netlink: 'syz.0.2057': attribute type 3 has an invalid length. [ 277.095498][T14203] ip6_vti0 speed is unknown, defaulting to 1000 [ 277.833595][T14239] netlink: 'syz.4.2064': attribute type 2 has an invalid length. [ 277.866108][T14239] !©9: entered promiscuous mode [ 277.881568][T14239] netlink: 'syz.4.2064': attribute type 2 has an invalid length. [ 277.906223][T14239] !©9: left promiscuous mode [ 278.208297][T14256] openvswitch: netlink: Missing key (keys=40, expected=80) [ 278.288274][T14260] SET target dimension over the limit! [ 278.428590][T14265] netlink: 'syz.1.2072': attribute type 1 has an invalid length. [ 278.446807][T14265] netlink: 'syz.1.2072': attribute type 2 has an invalid length. [ 278.508848][T14269] __nla_validate_parse: 2 callbacks suppressed [ 278.508865][T14269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2073'. [ 278.511991][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2074'. [ 278.617402][T14271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2074'. [ 278.629148][T14269] pim6reg: left allmulticast mode [ 279.301689][T14285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2080'. [ 279.385042][T14294] bond6: entered promiscuous mode [ 279.395465][T14294] bond6: entered allmulticast mode [ 279.401182][T14294] 8021q: adding VLAN 0 to HW filter on device bond6 [ 280.532615][T14334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2094'. [ 280.581230][T14340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2095'. [ 280.605124][T14340] bond0: (slave batadv0): Releasing backup interface [ 280.613504][T14340] batadv0 (unregistering): left promiscuous mode [ 281.051892][T14379] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2106'. [ 281.167358][T14381] syzkaller0: left promiscuous mode [ 281.178693][T14381] syzkaller0: left allmulticast mode [ 281.209996][T14384] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2107'. [ 281.379476][T14400] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2110'. [ 281.677965][T14411] lo speed is unknown, defaulting to 1000 [ 281.680945][T14420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.700749][T14411] ip6_vti0 speed is unknown, defaulting to 1000 [ 281.976093][T14442] batadv_slave_0: entered promiscuous mode [ 282.531191][T14480] IPVS: Unknown mcast interface: pimreg [ 283.336061][T14500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.539728][T14505] pim6reg: entered allmulticast mode [ 283.558479][T14516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2141'. [ 283.575849][T14513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2141'. [ 283.791520][T14528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2145'. [ 283.803882][T14531] lo speed is unknown, defaulting to 1000 [ 283.806511][T14532] validate_nla: 3 callbacks suppressed [ 283.806528][T14532] netlink: 'syz.3.2146': attribute type 4 has an invalid length. [ 283.833095][T14531] ip6_vti0 speed is unknown, defaulting to 1000 [ 283.872810][T14532] netlink: 'syz.3.2146': attribute type 4 has an invalid length. [ 283.887105][T14536] sctp: [Deprecated]: syz.4.2147 (pid 14536) Use of int in maxseg socket option. [ 283.887105][T14536] Use struct sctp_assoc_value instead [ 284.049029][T14544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.100601][T14546] xt_hashlimit: max too large, truncated to 1048576 [ 284.137400][T14548] netlink: 'syz.1.2151': attribute type 1 has an invalid length. [ 284.149342][T14549] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2151'. [ 284.360609][T14554] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 284.397081][T14554] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 284.505566][T14559] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.2152'. [ 284.850412][T14581] xt_limit: Overflow, try lower: 271964/0 [ 284.860819][T14577] wg1 speed is unknown, defaulting to 1000 [ 284.863749][T14578] xt_TCPMSS: Only works on TCP SYN packets [ 284.883519][T14580] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2157'. [ 284.888850][T14577] wg1 speed is unknown, defaulting to 1000 [ 284.911516][T14577] wg1 speed is unknown, defaulting to 1000 [ 284.965992][T14577] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 285.092654][T14577] wg1 speed is unknown, defaulting to 1000 [ 285.124037][T14577] wg1 speed is unknown, defaulting to 1000 [ 285.150439][T14577] wg1 speed is unknown, defaulting to 1000 [ 285.159899][T14577] wg1 speed is unknown, defaulting to 1000 [ 285.169344][T14577] wg1 speed is unknown, defaulting to 1000 [ 285.177745][T14577] wg1 speed is unknown, defaulting to 1000 [ 285.578763][T14601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2162'. [ 285.632438][T14601] vlan1: entered promiscuous mode [ 285.650307][T14601] bond0: entered promiscuous mode [ 285.655370][T14601] bond_slave_0: entered promiscuous mode [ 285.662897][T14601] bond_slave_1: entered promiscuous mode [ 285.669420][T14601] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 285.677225][T14601] syz_tun: entered promiscuous mode [ 285.682786][T14601] vlan1: entered allmulticast mode [ 285.688318][T14601] bond0: entered allmulticast mode [ 285.693516][T14601] bond_slave_0: entered allmulticast mode [ 285.699690][T14601] bond_slave_1: entered allmulticast mode [ 285.705476][T14601] syz_tun: entered allmulticast mode [ 285.707050][T14602] netlink: 'syz.1.2161': attribute type 39 has an invalid length. [ 285.777881][T14604] lo speed is unknown, defaulting to 1000 [ 285.800599][T14604] ip6_vti0 speed is unknown, defaulting to 1000 [ 286.105812][T14604] wg1 speed is unknown, defaulting to 1000 [ 286.162180][T14623] pim6reg1: entered promiscuous mode [ 286.176207][T14623] pim6reg1: entered allmulticast mode [ 286.278582][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2173'. [ 286.298789][T14635] veth0_to_bond: entered allmulticast mode [ 286.331557][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2173'. [ 286.637188][T14660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2181'. [ 286.843859][T14668] tipc: Enabled bearer , priority 0 [ 286.868175][T14668] syzkaller0: entered promiscuous mode [ 286.881551][T14668] syzkaller0: entered allmulticast mode [ 286.977350][T14668] sctp: [Deprecated]: syz.0.2184 (pid 14668) Use of int in max_burst socket option. [ 286.977350][T14668] Use struct sctp_assoc_value instead [ 287.019130][T14668] tipc: Resetting bearer [ 287.041128][T14667] tipc: Resetting bearer [ 287.083750][T14667] tipc: Disabling bearer [ 287.391896][T14687] tipc: Enabled bearer , priority 0 [ 287.427468][T14687] syzkaller0: entered promiscuous mode [ 287.436362][T14687] syzkaller0: entered allmulticast mode [ 287.481198][T14687] tipc: Resetting bearer [ 287.569704][T14687] tipc: Disabling bearer [ 288.013137][T14737] tipc: Enabled bearer , priority 0 [ 288.064301][T14737] tipc: Resetting bearer [ 288.094328][T14733] tipc: Disabling bearer [ 288.261346][T14757] netlink: 'syz.4.2206': attribute type 6 has an invalid length. [ 288.759239][T14769] lo speed is unknown, defaulting to 1000 [ 288.767762][T14769] ip6_vti0 speed is unknown, defaulting to 1000 [ 289.003511][T14788] lo speed is unknown, defaulting to 1000 [ 289.037008][T14791] macvlan2: entered promiscuous mode [ 289.044572][T14791] batman_adv: batadv0: Adding interface: macvlan2 [ 289.051507][T14791] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.085396][T14791] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 289.105054][T14788] ip6_vti0 speed is unknown, defaulting to 1000 [ 289.105093][T14769] wg1 speed is unknown, defaulting to 1000 [ 289.500706][T14806] netlink: 'syz.1.2221': attribute type 2 has an invalid length. [ 289.535994][T14806] netlink: 'syz.1.2221': attribute type 11 has an invalid length. [ 289.545682][T14788] wg1 speed is unknown, defaulting to 1000 [ 289.562769][T14808] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20002 [ 289.585923][T14806] __nla_validate_parse: 7 callbacks suppressed [ 289.585940][T14806] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2221'. [ 289.757790][T14813] netlink: 'syz.3.2223': attribute type 33 has an invalid length. [ 289.795916][T14813] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2223'. [ 289.836881][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2224'. [ 289.873014][T14815] sit1: entered promiscuous mode [ 289.887911][T14816] ip6tnl0: Caught tx_queue_len zero misconfig [ 290.079525][T14827] netlink: 'syz.1.2226': attribute type 3 has an invalid length. [ 290.124666][T14827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2226'. [ 290.487845][T14838] tipc: Enabling of bearer rejected, already enabled [ 290.534431][T14844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2232'. [ 290.582042][T14844] tap0: tun_chr_ioctl cmd 2147767521 [ 290.800954][T14862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2236'. [ 290.870585][T14866] netlink: 'syz.2.2237': attribute type 4 has an invalid length. [ 290.902519][T14871] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 290.946104][T14866] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.2237'. [ 290.997497][T14878] netlink: 'syz.4.2241': attribute type 2 has an invalid length. [ 291.015912][T14878] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2241'. [ 291.194751][T14894] netlink: 'syz.4.2247': attribute type 1 has an invalid length. [ 291.203927][T14893] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2248'. [ 291.226410][T14894] 8021q: adding VLAN 0 to HW filter on device bond10 [ 291.233212][T14898] netlink: 'syz.4.2247': attribute type 1 has an invalid length. [ 291.233724][T14893] netlink: 'syz.0.2248': attribute type 1 has an invalid length. [ 291.253111][T14893] ip_vti0: left promiscuous mode [ 291.258551][T14893] syz_tun: left promiscuous mode [ 291.263892][T14893] ip6tnl1: left promiscuous mode [ 291.269185][T14893] macsec1: left promiscuous mode [ 291.274314][T14893] macsec2: left promiscuous mode [ 291.280649][T14893] geneve2: left promiscuous mode [ 291.286414][T14893] bond2: left promiscuous mode [ 291.291554][T14893] macvlan4: left promiscuous mode [ 291.296858][T14893] bond0: left promiscuous mode [ 291.302615][T14893] bond6: left promiscuous mode [ 291.310559][T14902] tipc: Enabled bearer , priority 0 [ 291.362932][T14908] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2248'. [ 292.040806][T14894] 8021q: adding VLAN 0 to HW filter on device bond10 [ 292.048102][T14894] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 292.059249][T14894] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 292.080748][T14902] syzkaller0: entered promiscuous mode [ 292.095105][T14902] syzkaller0: entered allmulticast mode [ 292.137570][T14923] netlink: 'syz.0.2251': attribute type 1 has an invalid length. [ 292.150185][T14918] tipc: Resetting bearer [ 292.185224][T14900] tipc: Resetting bearer [ 292.201092][T14900] tipc: Disabling bearer [ 292.239343][T14923] 8021q: adding VLAN 0 to HW filter on device bond7 [ 292.251278][T14926] erspan0: entered allmulticast mode [ 292.590833][T14952] delete_channel: no stack [ 292.596668][T14952] delete_channel: no stack [ 292.612328][T14952] dummy0: entered promiscuous mode [ 292.636023][T14952] bridge0: port 2(dummy0) entered blocking state [ 292.660700][T14952] bridge0: port 2(dummy0) entered disabled state [ 292.676593][T14952] dummy0: entered allmulticast mode [ 292.780097][T14961] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.910001][T14961] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.959697][T14971] syzkaller0: entered promiscuous mode [ 293.011715][T14971] syzkaller0: entered allmulticast mode [ 293.165315][T14961] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.364718][T14961] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.532606][T15023] bridge_slave_0: default FDB implementation only supports local addresses [ 293.632121][ T60] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.671975][ T60] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.736004][ T9343] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.806628][T15042] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 293.831221][ T9351] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.031317][T15066] xt_cgroup: invalid path, errno=-2 [ 294.109728][T15072] tipc: Enabled bearer , priority 0 [ 294.118651][T15072] syzkaller0: entered promiscuous mode [ 294.131889][T15072] syzkaller0: entered allmulticast mode [ 294.183011][T15070] tipc: Resetting bearer [ 294.210418][T15070] tipc: Disabling bearer [ 294.432182][T15093] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.782103][T15116] validate_nla: 3 callbacks suppressed [ 294.782120][T15116] netlink: 'syz.0.2300': attribute type 64 has an invalid length. [ 294.805763][T15116] __nla_validate_parse: 13 callbacks suppressed [ 294.805780][T15116] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2300'. [ 294.970049][T15138] netlink: 'syz.4.2306': attribute type 322 has an invalid length. [ 295.006975][T15142] netlink: 'syz.4.2306': attribute type 322 has an invalid length. [ 295.069017][T15140] lo speed is unknown, defaulting to 1000 [ 295.089527][T15140] ip6_vti0 speed is unknown, defaulting to 1000 [ 295.387700][T15140] wg1 speed is unknown, defaulting to 1000 [ 295.491567][T15167] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 295.503305][T15167] bond8 (unregistering): Released all slaves [ 295.528939][T15171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2314'. [ 295.550730][T15171] pimreg: entered allmulticast mode [ 295.603368][T15171] pimreg: left allmulticast mode [ 295.731348][T15180] lo speed is unknown, defaulting to 1000 [ 295.744830][T15180] ip6_vti0 speed is unknown, defaulting to 1000 [ 296.160068][T15204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2322'. [ 296.187257][T15202] netlink: 'syz.4.2321': attribute type 11 has an invalid length. [ 296.318188][T15204] team0 (unregistering): Port device team_slave_0 removed [ 296.328096][T15204] team0 (unregistering): Port device team_slave_1 removed [ 296.347643][T15180] wg1 speed is unknown, defaulting to 1000 [ 296.518559][T15222] netlink: 'syz.2.2325': attribute type 1 has an invalid length. [ 296.556884][ T30] audit: type=1800 audit(1766074814.772:6): pid=15222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2325" name="memory.events" dev="tmpfs" ino=2060 res=0 errno=0 [ 296.562855][T15225] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2326'. [ 296.657574][T15220] netlink: 'syz.3.2326': attribute type 1 has an invalid length. [ 296.674877][T15220] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2326'. [ 296.837467][T15220] lo speed is unknown, defaulting to 1000 [ 296.858804][T15220] ip6_vti0 speed is unknown, defaulting to 1000 [ 296.951378][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058b09c00: rx timeout, send abort [ 296.997642][T15251] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2333'. [ 297.026566][T15251] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2333'. [ 297.107321][T15256] netlink: 'syz.4.2335': attribute type 4 has an invalid length. [ 297.153102][T15256] netlink: 'syz.4.2335': attribute type 4 has an invalid length. [ 297.186102][T15220] wg1 speed is unknown, defaulting to 1000 [ 297.447274][T15275] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2342'. [ 297.460987][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058b09c00: abort rx timeout. Force session deactivation [ 297.822453][T15297] netlink: 'syz.0.2347': attribute type 32 has an invalid length. [ 297.839586][T15285] lo speed is unknown, defaulting to 1000 [ 297.855534][T15297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2347'. [ 297.874092][T15285] ip6_vti0 speed is unknown, defaulting to 1000 [ 298.074701][T15297] bond8: Setting coupled_control to off (0) [ 298.098794][T15302] tipc: Enabling of bearer rejected, already enabled [ 298.170740][T15285] wg1 speed is unknown, defaulting to 1000 [ 298.196942][T15314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2350'. [ 298.784259][T15333] bond0: option resend_igmp: invalid value (4096) [ 298.810435][T15333] bond0: option resend_igmp: allowed values 0 - 255 [ 299.567770][T15358] netlink: 'syz.0.2361': attribute type 10 has an invalid length. [ 299.944144][T15370] lo speed is unknown, defaulting to 1000 [ 299.987958][T15370] ip6_vti0 speed is unknown, defaulting to 1000 [ 300.315604][T15370] wg1 speed is unknown, defaulting to 1000 [ 300.779954][T15388] tipc: Enabled bearer , priority 0 [ 301.326500][T15387] tipc: Disabling bearer [ 301.883054][T15443] lo speed is unknown, defaulting to 1000 [ 301.892177][T15443] ip6_vti0 speed is unknown, defaulting to 1000 [ 301.939487][T15446] 8021q: adding VLAN 0 to HW filter on device bond11 [ 302.016807][T15450] lo speed is unknown, defaulting to 1000 [ 302.026573][T15452] __nla_validate_parse: 6 callbacks suppressed [ 302.026589][T15452] netlink: 1053 bytes leftover after parsing attributes in process `syz.4.2389'. [ 302.154260][T15459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2391'. [ 302.260099][T15450] ip6_vti0 speed is unknown, defaulting to 1000 [ 302.260099][T15443] wg1 speed is unknown, defaulting to 1000 [ 302.304194][T15463] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2392'. [ 302.323628][T15463] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2392'. [ 302.341673][T15463] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2392'. [ 302.449923][T15468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2393'. [ 302.523098][T15471] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2393'. [ 302.682991][T15450] wg1 speed is unknown, defaulting to 1000 [ 302.683901][T15474] lo speed is unknown, defaulting to 1000 [ 302.763391][T15474] ip6_vti0 speed is unknown, defaulting to 1000 [ 302.915443][T15487] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2396'. [ 302.969876][T15484] can: request_module (can-proto-0) failed. [ 303.071823][T15490] validate_nla: 4 callbacks suppressed [ 303.071840][T15490] netlink: 'syz.4.2398': attribute type 12 has an invalid length. [ 303.122555][T15474] wg1 speed is unknown, defaulting to 1000 [ 303.736704][T15499] netlink: 308 bytes leftover after parsing attributes in process `syz.3.2402'. [ 303.750734][T15499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2402'. [ 304.023839][T15506] openvswitch: netlink: Flow actions attr not present in new flow. [ 304.090072][T15511] lo speed is unknown, defaulting to 1000 [ 304.175177][T15511] ip6_vti0 speed is unknown, defaulting to 1000 [ 304.536288][T15539] netlink: 'syz.2.2411': attribute type 5 has an invalid length. [ 304.746977][T15511] wg1 speed is unknown, defaulting to 1000 [ 305.068073][T15565] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 305.079801][T15565] bond8 (unregistering): Released all slaves [ 305.221998][T15580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.568905][T15609] openvswitch: netlink: IP tunnel dst address not specified [ 306.753314][T15621] syzkaller0: entered promiscuous mode [ 306.777277][T15621] syzkaller0: entered allmulticast mode [ 306.856272][T15614] netlink: 'syz.3.2431': attribute type 11 has an invalid length. [ 306.880038][T15614] netlink: 'syz.3.2431': attribute type 11 has an invalid length. [ 307.085997][T15642] tipc: Enabled bearer , priority 0 [ 307.102914][T15645] __nla_validate_parse: 3 callbacks suppressed [ 307.102932][T15645] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2436'. [ 307.106039][T15634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2437'. [ 307.218258][T15652] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2439'. [ 307.268712][T15634] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2437'. [ 307.323592][T15642] tipc: Disabling bearer [ 307.383345][T15648] lo speed is unknown, defaulting to 1000 [ 307.419208][T15648] ip6_vti0 speed is unknown, defaulting to 1000 [ 307.716987][T15668] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2446'. [ 307.729056][T15648] wg1 speed is unknown, defaulting to 1000 [ 308.076861][T15671] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 308.131121][T15680] lo speed is unknown, defaulting to 1000 [ 308.140508][T15680] ip6_vti0 speed is unknown, defaulting to 1000 [ 308.420768][T15680] wg1 speed is unknown, defaulting to 1000 [ 308.426815][T15689] lo speed is unknown, defaulting to 1000 [ 308.448912][T15689] ip6_vti0 speed is unknown, defaulting to 1000 [ 308.984474][T15706] lo speed is unknown, defaulting to 1000 [ 309.164575][T15689] wg1 speed is unknown, defaulting to 1000 [ 309.170130][T15706] ip6_vti0 speed is unknown, defaulting to 1000 [ 309.185058][T15710] lo speed is unknown, defaulting to 1000 [ 309.476371][T15722] netlink: 'syz.2.2460': attribute type 3 has an invalid length. [ 309.501760][T15722] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2460'. [ 309.524747][T15726] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2461'. [ 309.578734][T15706] wg1 speed is unknown, defaulting to 1000 [ 309.631135][T15710] ip6_vti0 speed is unknown, defaulting to 1000 [ 309.655921][T15735] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2464'. [ 309.698925][T15737] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2465'. [ 309.711032][T15731] tipc: Enabled bearer , priority 0 [ 309.751237][T15730] tipc: Disabling bearer [ 309.804493][T15742] netlink: 'syz.3.2467': attribute type 13 has an invalid length. [ 309.918508][T15742] tipc: Resetting bearer [ 310.098141][ T1138] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.108179][T15710] wg1 speed is unknown, defaulting to 1000 [ 310.137536][ T1138] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.226902][ T1138] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.273349][ T1138] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.464308][T15767] tipc: Enabling of bearer rejected, failed to enable media [ 310.960563][T15781] xt_hashlimit: max too large, truncated to 1048576 [ 310.972218][T15781] netlink: 'syz.2.2476': attribute type 1 has an invalid length. [ 311.045453][T15783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2477'. [ 311.371727][T15799] : entered promiscuous mode [ 311.507032][T15814] netlink: 'syz.1.2483': attribute type 8 has an invalid length. [ 311.552727][T15806] lo speed is unknown, defaulting to 1000 [ 311.590344][T15806] ip6_vti0 speed is unknown, defaulting to 1000 [ 311.636839][T15813] lo speed is unknown, defaulting to 1000 [ 312.078476][T15813] ip6_vti0 speed is unknown, defaulting to 1000 [ 312.087223][T15806] wg1 speed is unknown, defaulting to 1000 [ 312.220400][T15841] netlink: 'syz.4.2491': attribute type 30 has an invalid length. [ 312.409249][T15813] wg1 speed is unknown, defaulting to 1000 [ 313.363538][T15886] netlink: 'syz.0.2503': attribute type 1 has an invalid length. [ 313.467138][T15890] netlink: 'syz.3.2504': attribute type 2 has an invalid length. [ 313.474880][T15890] netlink: 'syz.3.2504': attribute type 1 has an invalid length. [ 313.487905][T15893] __nla_validate_parse: 5 callbacks suppressed [ 313.487922][T15893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2503'. [ 313.508805][T15892] xt_TCPMSS: Only works on TCP SYN packets [ 313.527035][T15890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2504'. [ 313.569230][T15889] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 313.581689][T15889] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 313.667196][T15893] bond9: (slave bridge6): Enslaving as an active interface with a down link [ 313.848284][T15886] macvlan5: entered promiscuous mode [ 313.875345][T15886] macvlan5: entered allmulticast mode [ 313.887263][T15886] bond9: entered promiscuous mode [ 313.911732][T15886] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 313.939526][T15886] bond9: left promiscuous mode [ 314.136620][T15919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2511'. [ 314.317221][T15931] lo speed is unknown, defaulting to 1000 [ 314.326534][T15926] scsi_nl_rcv_msg: discarding partial skb [ 314.329253][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2514'. [ 314.339152][T15931] ip6_vti0 speed is unknown, defaulting to 1000 [ 314.349115][T15917] lo speed is unknown, defaulting to 1000 [ 314.377176][T15934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2514'. [ 314.471044][T15937] lo speed is unknown, defaulting to 1000 [ 314.629567][T15931] wg1 speed is unknown, defaulting to 1000 [ 314.629718][T15917] ip6_vti0 speed is unknown, defaulting to 1000 [ 315.007608][T15917] wg1 speed is unknown, defaulting to 1000 [ 315.010190][T15937] ip6_vti0 speed is unknown, defaulting to 1000 [ 315.327892][T15958] syzkaller0: entered promiscuous mode [ 315.352591][T15958] syzkaller0: entered allmulticast mode [ 315.358666][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 315.448260][T15965] tipc: Enabling of bearer rejected, already enabled [ 315.567020][T15977] netlink: 'syz.1.2524': attribute type 6 has an invalid length. [ 315.580159][T15973] x_tables: duplicate underflow at hook 3 [ 315.590106][T15977] netlink: 'syz.1.2524': attribute type 6 has an invalid length. [ 315.595979][T15975] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2526'. [ 315.640401][T15937] wg1 speed is unknown, defaulting to 1000 [ 315.640729][T15969] lo speed is unknown, defaulting to 1000 [ 315.730482][T15981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2528'. [ 315.744454][T15969] ip6_vti0 speed is unknown, defaulting to 1000 [ 316.002828][T15986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2530'. [ 316.249666][T15969] wg1 speed is unknown, defaulting to 1000 [ 316.283699][T16004] macvtap0: entered promiscuous mode [ 316.299632][T16004] macvtap0: entered allmulticast mode [ 316.310237][T16004] bond0: entered promiscuous mode [ 316.332425][T16004] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 316.356186][T16004] team0: Device macvtap0 failed to register rx_handler [ 316.381816][T16004] bond0: left promiscuous mode [ 316.880049][T16023] netlink: 'syz.0.2537': attribute type 13 has an invalid length. [ 316.892293][T16023] netlink: 'syz.0.2537': attribute type 17 has an invalid length. [ 317.141729][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.531375][T16061] netlink: 'syz.1.2544': attribute type 1 has an invalid length. [ 317.801787][T16061] 8021q: adding VLAN 0 to HW filter on device bond8 [ 317.876175][T16067] veth5: entered promiscuous mode [ 317.895834][T16067] bond8: (slave veth5): Enslaving as an active interface with a down link [ 318.248697][T16101] veth1_to_bond: entered allmulticast mode [ 318.265667][T16101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2557'. [ 318.287964][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2554'. [ 318.326390][T16103] netlink: 'syz.3.2558': attribute type 1 has an invalid length. [ 318.334249][T16104] netlink: 'syz.3.2558': attribute type 1 has an invalid length. [ 318.395567][T16101] smc: removing net device veth1_to_bond with user defined pnetid SYZ0 [ 319.079246][T16153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2568'. [ 319.248692][T16160] netlink: 'syz.3.2570': attribute type 10 has an invalid length. [ 319.272675][T16158] netlink: 'syz.0.2569': attribute type 10 has an invalid length. [ 319.298825][T16158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.345623][T16158] batadv0: entered allmulticast mode [ 319.386406][T16158] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 319.397062][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2572'. [ 319.531407][T16176] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2575'. [ 319.554736][T16179] lo speed is unknown, defaulting to 1000 [ 319.562194][T16176] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2575'. [ 319.592377][T16179] ip6_vti0 speed is unknown, defaulting to 1000 [ 319.625504][T16183] lo speed is unknown, defaulting to 1000 [ 319.949810][T16201] lo speed is unknown, defaulting to 1000 [ 320.093580][T16207] lo speed is unknown, defaulting to 1000 [ 320.753404][T16217] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.2585'. [ 320.763102][T16217] openvswitch: netlink: nsh attr 0 has unexpected len 5 expected 0 [ 320.781383][T16217] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2585'. [ 320.832050][T16183] ip6_vti0 speed is unknown, defaulting to 1000 [ 320.847728][T16179] wg1 speed is unknown, defaulting to 1000 [ 320.974539][T16226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2588'. [ 321.100893][T16231] netlink: 'syz.3.2590': attribute type 4 has an invalid length. [ 321.113954][T16231] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2590'. [ 321.216264][T16236] syzkaller0: left promiscuous mode [ 321.233346][T16236] syzkaller0: left allmulticast mode [ 321.261948][T16201] ip6_vti0 speed is unknown, defaulting to 1000 [ 321.440185][T16207] ip6_vti0 speed is unknown, defaulting to 1000 [ 321.604805][T16207] wg1 speed is unknown, defaulting to 1000 [ 321.620204][T16247] lo speed is unknown, defaulting to 1000 [ 321.625750][T16183] wg1 speed is unknown, defaulting to 1000 [ 321.643309][T16201] wg1 speed is unknown, defaulting to 1000 [ 321.676125][T16247] ip6_vti0 speed is unknown, defaulting to 1000 [ 321.968189][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2596'. [ 321.969359][T16247] wg1 speed is unknown, defaulting to 1000 [ 321.995805][T16252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2596'. [ 322.020527][T16252] netlink: 'syz.1.2596': attribute type 11 has an invalid length. [ 322.138984][T16251] syzkaller0: entered promiscuous mode [ 322.144714][T16251] syzkaller0: entered allmulticast mode [ 322.753162][T16260] tipc: Enabled bearer , priority 0 [ 322.770963][T16260] syzkaller0: entered promiscuous mode [ 322.790616][T16260] syzkaller0: entered allmulticast mode [ 322.914962][T16260] 8021q: adding VLAN 0 to HW filter on device bond9 [ 322.956552][T16260] tipc: Resetting bearer [ 323.044804][T16260] tipc: Disabling bearer [ 323.237983][T16271] syzkaller0: entered promiscuous mode [ 323.243829][T16271] syzkaller0: entered allmulticast mode [ 323.874061][T16303] xt_CT: You must specify a L4 protocol and not use inversions on it [ 324.229973][T16316] lo speed is unknown, defaulting to 1000 [ 324.249633][T16316] ip6_vti0 speed is unknown, defaulting to 1000 [ 324.315065][T16324] netlink: 'syz.4.2617': attribute type 1 has an invalid length. [ 324.393770][T16329] netlink: 'syz.0.2618': attribute type 16 has an invalid length. [ 324.454748][T16324] 8021q: adding VLAN 0 to HW filter on device bond14 [ 324.494880][T16319] netlink: 'syz.1.2613': attribute type 2 has an invalid length. [ 324.525498][T16330] bond14: (slave ip6gretap1): making interface the new active one [ 324.547309][T16330] bond14: (slave ip6gretap1): Enslaving as an active interface with an up link [ 324.570966][T16331] gretap5: entered promiscuous mode [ 324.622006][T16334] veth9: entered promiscuous mode [ 324.691849][T16330] erspan0: entered allmulticast mode [ 324.715824][T16316] wg1 speed is unknown, defaulting to 1000 [ 324.726358][T16340] netlink: 'syz.2.2620': attribute type 1 has an invalid length. [ 324.734380][T16340] __nla_validate_parse: 11 callbacks suppressed [ 324.734394][T16340] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2620'. [ 324.765047][T16346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2622'. [ 324.779324][T16346] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2622'. [ 324.991185][T16364] bond15 (unregistering): Released all slaves [ 325.085287][T16368] syzkaller0: entered promiscuous mode [ 325.111925][T16368] syzkaller0: entered allmulticast mode [ 325.358364][T16379] netlink: 'syz.1.2628': attribute type 8 has an invalid length. [ 325.411186][T16381] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2629'. [ 325.439124][T16379] sch_fq: defrate 0 ignored. [ 325.908750][T16375] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 326.033417][T16400] netlink: 'syz.1.2634': attribute type 1 has an invalid length. [ 326.075832][T16400] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2634'. [ 326.098754][T16403] netlink: 'syz.3.2635': attribute type 4 has an invalid length. [ 326.110685][T16400] netlink: 'syz.1.2634': attribute type 1 has an invalid length. [ 326.126738][T16403] netlink: 'syz.3.2635': attribute type 4 has an invalid length. [ 326.457533][T16401] lo speed is unknown, defaulting to 1000 [ 326.464224][T16417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2638'. [ 326.472792][T16401] ip6_vti0 speed is unknown, defaulting to 1000 [ 326.490606][T16419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2639'. [ 326.509108][T16417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2638'. [ 326.819990][T16433] netlink: 'syz.0.2643': attribute type 18 has an invalid length. [ 326.836654][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2643'. [ 326.850756][T16401] wg1 speed is unknown, defaulting to 1000 [ 326.866894][T16437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2644'. [ 326.976962][T16412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.049592][T16495] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 328.370907][T16500] syzkaller0: entered promiscuous mode [ 328.395929][T16500] syzkaller0: entered allmulticast mode [ 329.056026][T16531] netlink: 'syz.2.2669': attribute type 4 has an invalid length. [ 330.219454][T16548] __nla_validate_parse: 4 callbacks suppressed [ 330.219472][T16548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2673'. [ 330.274466][T16531] .`: renamed from bond0 (while UP) [ 330.282369][T16544] bridge: RTM_NEWNEIGH with invalid ether address [ 330.289390][T16548] dummy0: left allmulticast mode [ 330.294662][T16548] bridge0: port 2(dummy0) entered disabled state [ 330.371398][T16548] vlan3: left allmulticast mode [ 330.383959][T16548] bridge_slave_0: left allmulticast mode [ 330.394484][T16548] vlan3: left promiscuous mode [ 330.428127][T16548] bridge_slave_0: left promiscuous mode [ 330.434116][T16548] bridge0: port 1(vlan3) entered disabled state [ 330.517731][T16556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2676'. [ 330.613837][T16556] bond10: Invalid ad_actor_system MAC address. [ 330.621093][T16556] bond10: option ad_actor_system: invalid value (7) [ 330.631285][T16556] bond10 (unregistering): Released all slaves [ 330.820306][ T30] audit: type=1804 audit(1766074849.022:7): pid=16578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2681" name="/newroot/562/cgroup.controllers" dev="tmpfs" ino=2904 res=1 errno=0 [ 330.854734][ T30] audit: type=1800 audit(1766074849.032:8): pid=16578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2681" name="cgroup.controllers" dev="tmpfs" ino=2904 res=0 errno=0 [ 330.971732][T16591] sctp: [Deprecated]: syz.0.2684 (pid 16591) Use of int in max_burst socket option deprecated. [ 330.971732][T16591] Use struct sctp_assoc_value instead [ 331.131494][T16599] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2687'. [ 331.148153][T16601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2688'. [ 331.198831][T16603] netlink: 'syz.1.2688': attribute type 1 has an invalid length. [ 331.243866][T16601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.251246][T16601] IPv6: NLM_F_CREATE should be set when creating new route [ 331.258538][T16601] IPv6: NLM_F_CREATE should be set when creating new route [ 331.267969][T16601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.604690][ T10] IPVS: starting estimator thread 0... [ 331.606642][T16630] netlink: 'syz.0.2694': attribute type 29 has an invalid length. [ 331.610912][T16629] IPVS: sh: FWM 3 0x00000003 - no destination available [ 331.634201][T16631] netlink: 'syz.0.2694': attribute type 29 has an invalid length. [ 331.637914][T16629] IPVS: sh: FWM 3 0x00000003 - no destination available [ 331.726043][T16632] IPVS: using max 30 ests per chain, 72000 per kthread [ 331.819341][T16647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2700'. [ 331.858839][T16653] bond0: (slave team0): Releasing backup interface [ 331.878713][T16653] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 331.927810][T16653] team0: No ports can be present during mode change [ 332.267472][T16676] pimreg: entered allmulticast mode [ 332.289657][T16676] pimreg: left allmulticast mode [ 332.304978][T16682] sock: sock_set_timeout: `syz.3.2707' (pid 16682) tries to set negative timeout [ 332.435171][T16685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2709'. [ 332.480853][T16688] bond0: Unable to set down delay as MII monitoring is disabled [ 332.491044][T16688] bond0 (unregistering): Released all slaves [ 333.244260][T16730] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 333.516781][T16737] lo speed is unknown, defaulting to 1000 [ 333.549973][T16737] ip6_vti0 speed is unknown, defaulting to 1000 [ 333.557223][T16745] lo speed is unknown, defaulting to 1000 [ 333.756683][T16737] wg1 speed is unknown, defaulting to 1000 [ 333.763002][T16745] ip6_vti0 speed is unknown, defaulting to 1000 [ 334.022922][T16762] netlink: 'syz.0.2724': attribute type 10 has an invalid length. [ 334.031458][T16762] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2724'. [ 334.157254][T16769] lo speed is unknown, defaulting to 1000 [ 334.200692][T16769] ip6_vti0 speed is unknown, defaulting to 1000 [ 334.236797][T16745] wg1 speed is unknown, defaulting to 1000 [ 334.622630][T16769] wg1 speed is unknown, defaulting to 1000 [ 334.712089][T16779] lo speed is unknown, defaulting to 1000 [ 334.752946][T16779] ip6_vti0 speed is unknown, defaulting to 1000 [ 335.094614][T16793] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2730'. [ 335.107958][T16793] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2730'. [ 335.139611][T16792] : left promiscuous mode [ 335.152033][T16779] wg1 speed is unknown, defaulting to 1000 [ 335.294087][T16799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2732'. [ 335.392021][T16806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2734'. [ 335.703412][T16818] netlink: 'syz.4.2738': attribute type 1 has an invalid length. [ 335.726551][T16819] netlink: 'syz.4.2738': attribute type 1 has an invalid length. [ 335.803487][T16818] bond15: entered promiscuous mode [ 335.808829][T16818] bond15: entered allmulticast mode [ 335.816327][T16818] 8021q: adding VLAN 0 to HW filter on device bond15 [ 335.823501][T16825] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2740'. [ 335.851249][T16821] macvlan3: entered promiscuous mode [ 335.860773][T16821] macvlan3: entered allmulticast mode [ 335.910396][T16821] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 336.033642][T16833] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2743'. [ 336.053936][T16833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2743'. [ 336.478279][T16846] dvmrp3: entered allmulticast mode [ 336.544496][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.545103][T16846] tipc: Enabling of bearer rejected, already enabled [ 336.554149][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.586276][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.594370][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.602068][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.659589][T16851] lo speed is unknown, defaulting to 1000 [ 336.679006][T16851] ip6_vti0 speed is unknown, defaulting to 1000 [ 336.692996][T16845] dvmrp3: left allmulticast mode [ 336.858841][T16858] netlink: set zone limit has 4 unknown bytes [ 336.876992][T16860] delete_channel: no stack [ 337.131459][T16877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2753'. [ 337.283849][T16851] wg1 speed is unknown, defaulting to 1000 [ 337.547560][T16898] Bluetooth: MGMT ver 1.23 [ 337.654088][T16851] chnl_net:caif_netlink_parms(): no params data found [ 337.699465][T16912] netlink: 1372 bytes leftover after parsing attributes in process `syz.4.2757'. [ 337.812319][T16851] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.819885][T16851] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.827338][T16851] bridge_slave_0: entered allmulticast mode [ 337.835289][T16851] bridge_slave_0: entered promiscuous mode [ 337.845031][T16851] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.852996][T16851] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.860930][T16851] bridge_slave_1: entered allmulticast mode [ 337.868808][T16851] bridge_slave_1: entered promiscuous mode [ 337.896931][T16851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.908441][T16851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.939606][T16851] team0: Port device team_slave_0 added [ 337.948582][T16851] team0: Port device team_slave_1 added [ 337.974753][T16851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.982028][T16851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.008097][T16851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.020573][T16851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.027639][T16851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.053592][T16851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.094740][T16851] hsr_slave_0: entered promiscuous mode [ 338.101860][T16851] hsr_slave_1: entered promiscuous mode [ 338.108173][T16851] debugfs: 'hsr0' already exists in 'hsr' [ 338.113903][T16851] Cannot create hsr debugfs directory [ 338.210619][T16851] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 338.254970][T16851] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 338.398975][T16851] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 338.546917][T16851] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 338.610916][T16940] tunl0: Caught tx_queue_len zero misconfig [ 338.660637][ T5837] Bluetooth: hci0: command tx timeout [ 338.840544][T16957] netlink: 'syz.2.2767': attribute type 12 has an invalid length. [ 338.938557][T16851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 338.989613][T16964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2770'. [ 339.016665][T16851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 339.036768][T16851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 339.048536][T16851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 339.125052][T16973] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2771'. [ 339.165865][T16973] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2771'. [ 339.191687][T16851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.223258][T16851] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.281297][T16976] lo speed is unknown, defaulting to 1000 [ 339.283517][ T9343] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.294195][ T9343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.309058][T16976] ip6_vti0 speed is unknown, defaulting to 1000 [ 339.334439][ T9343] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.341643][ T9343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.543248][T16976] wg1 speed is unknown, defaulting to 1000 [ 339.571903][T16984] IPv6: NLM_F_CREATE should be specified when creating new route [ 339.624799][T16982] tipc: Enabling of bearer rejected, already enabled [ 339.644900][T16982] syzkaller0: entered promiscuous mode [ 339.654432][T16982] syzkaller0: entered allmulticast mode [ 339.881501][T16992] lo speed is unknown, defaulting to 1000 [ 339.921910][T17003] netlink: 'syz.1.2778': attribute type 8 has an invalid length. [ 340.065255][T16851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.080385][T16992] ip6_vti0 speed is unknown, defaulting to 1000 [ 340.270743][T16851] veth0_vlan: entered promiscuous mode [ 340.351575][T16851] veth1_vlan: entered promiscuous mode [ 340.412923][T16851] veth0_macvtap: entered promiscuous mode [ 340.429355][T16851] veth1_macvtap: entered promiscuous mode [ 340.462238][T16851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.512020][T16851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.556776][ T725] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.597665][ T725] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.696565][ T725] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.731481][T16992] wg1 speed is unknown, defaulting to 1000 [ 340.731871][ T725] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.745752][ T5837] Bluetooth: hci0: command tx timeout [ 340.860166][T17031] Cannot find set identified by id 1 to match [ 340.967048][T12135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.974902][T12135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.096591][T17053] __nla_validate_parse: 1 callbacks suppressed [ 341.096610][T17053] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2789'. [ 341.112304][ T9343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.136390][ T9343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.201718][T17053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2789'. [ 341.509806][T17062] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 341.553496][T17062] syzkaller0: entered promiscuous mode [ 341.563451][T17062] syzkaller0: entered allmulticast mode [ 341.614387][T17069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2792'. [ 341.627595][T17071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2792'. [ 342.826314][ T5837] Bluetooth: hci0: command tx timeout [ 342.990674][T17074] vlan2: entered promiscuous mode [ 343.004650][T17074] geneve1: entered promiscuous mode [ 343.010677][T17074] vlan2: entered allmulticast mode [ 343.016995][T17074] geneve1: entered allmulticast mode [ 343.107565][T17078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2795'. [ 343.181750][T17078] netlink: zone id is out of range [ 343.189947][T17078] netlink: zone id is out of range [ 343.195082][T17078] netlink: zone id is out of range [ 343.201394][T17085] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2798'. [ 343.216211][T17078] netlink: zone id is out of range [ 343.224890][T17078] netlink: zone id is out of range [ 343.234343][T17078] netlink: zone id is out of range [ 343.239616][T17078] netlink: zone id is out of range [ 343.267405][T17078] netlink: zone id is out of range [ 343.272555][T17078] netlink: zone id is out of range [ 343.297278][T17078] netlink: zone id is out of range [ 343.302776][T17088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2799'. [ 343.402745][T17090] lo speed is unknown, defaulting to 1000 [ 343.428563][T17090] ip6_vti0 speed is unknown, defaulting to 1000 [ 343.579442][T17100] lo speed is unknown, defaulting to 1000 [ 343.963515][T17125] lo speed is unknown, defaulting to 1000 [ 344.060102][T17100] ip6_vti0 speed is unknown, defaulting to 1000 [ 344.067577][T17090] wg1 speed is unknown, defaulting to 1000 [ 344.405649][T17090] tipc: can't start tipc send workqueue [ 344.442442][T17100] wg1 speed is unknown, defaulting to 1000 [ 344.443300][T17125] ip6_vti0 speed is unknown, defaulting to 1000 [ 344.763342][T17125] wg1 speed is unknown, defaulting to 1000 [ 344.782001][T17130] siw: device registration error -23 [ 344.906590][ T5837] Bluetooth: hci0: command tx timeout [ 345.017254][T17144] netlink: 'syz.1.2809': attribute type 10 has an invalid length. [ 345.038179][T17144] 8021q: adding VLAN 0 to HW filter on device ` [ 345.103492][T17144] `: entered promiscuous mode [ 345.138628][T17144] bond0: (slave `): Enslaving as an active interface with an up link [ 345.400862][T17156] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2813'. [ 345.592523][T17160] syzkaller0: entered promiscuous mode [ 345.599100][T17160] syzkaller0: entered allmulticast mode [ 345.615598][T17164] syzkaller1: entered promiscuous mode [ 345.622571][T17164] syzkaller1: entered allmulticast mode [ 345.880092][T17180] veth0_to_batadv: entered promiscuous mode [ 345.886173][T17180] veth0_to_batadv: entered allmulticast mode [ 345.945130][T17175] lo speed is unknown, defaulting to 1000 [ 345.955087][T17175] ip6_vti0 speed is unknown, defaulting to 1000 [ 346.107404][T17184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2821'. [ 346.174100][T17186] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2821'. [ 346.208474][T17186] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2821'. [ 346.234331][T17186] netlink: 'syz.1.2821': attribute type 6 has an invalid length. [ 346.258551][T17186] netlink: 'syz.1.2821': attribute type 5 has an invalid length. [ 346.264941][T17191] netlink: 'syz.0.2825': attribute type 1 has an invalid length. [ 346.286649][T17186] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2821'. [ 346.297673][T17175] wg1 speed is unknown, defaulting to 1000 [ 346.469590][T17200] lo speed is unknown, defaulting to 1000 [ 346.528403][T17200] ip6_vti0 speed is unknown, defaulting to 1000 [ 346.562711][T17204] lo speed is unknown, defaulting to 1000 [ 346.716243][T17215] netlink: 'syz.0.2829': attribute type 5 has an invalid length. [ 347.028393][T17200] wg1 speed is unknown, defaulting to 1000 [ 347.028405][T17204] ip6_vti0 speed is unknown, defaulting to 1000 [ 347.099734][T17227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2833'. [ 347.219265][T17233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2835'. [ 347.465245][T17244] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2840'. [ 347.470233][T17246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2839'. [ 347.535422][T17204] wg1 speed is unknown, defaulting to 1000 [ 347.545168][T17250] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2841'. [ 347.573103][T17247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2839'. [ 347.929425][T17262] syz_tun: entered allmulticast mode [ 348.042366][T17261] syz_tun: left allmulticast mode [ 348.394003][T17291] €Â: renamed from veth1 [ 348.909032][T17328] netlink: 'syz.3.2863': attribute type 1 has an invalid length. [ 348.967247][T17332] netlink: 'syz.1.2864': attribute type 13 has an invalid length. [ 348.983103][T17332] netlink: 'syz.1.2864': attribute type 17 has an invalid length. [ 349.039183][T17328] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 349.080025][T17340] IPv6: Can't replace route, no match found [ 349.170789][T17347] net_ratelimit: 6 callbacks suppressed [ 349.170806][T17347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.220515][T17332] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 349.221973][T17347] SET target dimension over the limit! [ 349.469746][T17359] bond10: entered promiscuous mode [ 349.487244][T17359] 8021q: adding VLAN 0 to HW filter on device bond10 [ 349.576172][T17362] syzkaller1: entered promiscuous mode [ 349.587245][T17362] syzkaller1: entered allmulticast mode [ 349.644258][T17377] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma? [ 349.675655][T17379] sit0: entered promiscuous mode [ 349.851490][T17386] tipc: Started in network mode [ 349.866486][T17386] tipc: Node identity c68e1e7b681d, cluster identity 4711 [ 349.895327][T17386] tipc: Enabled bearer , priority 0 [ 350.067325][T17394] tipc: Resetting bearer [ 350.229031][T17383] tipc: Disabling bearer [ 350.732982][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 350.743106][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 350.751181][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 350.759130][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 350.767034][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 350.883907][T17416] lo speed is unknown, defaulting to 1000 [ 350.900121][T17416] ip6_vti0 speed is unknown, defaulting to 1000 [ 350.911268][T17426] syzkaller0: entered promiscuous mode [ 350.917003][T17426] syzkaller0: entered allmulticast mode [ 351.220196][T17438] lo speed is unknown, defaulting to 1000 [ 351.314219][T17416] wg1 speed is unknown, defaulting to 1000 [ 351.321796][T17438] ip6_vti0 speed is unknown, defaulting to 1000 [ 351.391825][T17442] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 351.941387][T17416] chnl_net:caif_netlink_parms(): no params data found [ 352.173814][T17466] syzkaller0: entered promiscuous mode [ 352.183944][T17466] syzkaller0: entered allmulticast mode [ 352.194685][T17438] wg1 speed is unknown, defaulting to 1000 [ 352.258277][T17416] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.272618][T17416] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.281351][T17416] bridge_slave_0: entered allmulticast mode [ 352.288741][T17416] bridge_slave_0: entered promiscuous mode [ 352.296270][T17466] tipc: Enabled bearer , priority 0 [ 352.311914][T17416] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.320360][T17416] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.327924][T17416] bridge_slave_1: entered allmulticast mode [ 352.336636][T17416] bridge_slave_1: entered promiscuous mode [ 352.345270][T17465] tipc: Resetting bearer [ 352.365321][T17465] tipc: Disabling bearer [ 352.417646][T17416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.463549][T17416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.653844][T17416] team0: Port device team_slave_0 added [ 352.692472][T17416] team0: Port device team_slave_1 added [ 352.816061][ T5837] Bluetooth: hci5: command tx timeout [ 352.835878][T17416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.842868][T17416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.880818][T17416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.907045][T17416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.915990][T17416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.949065][T17416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.997409][T17499] tipc: Enabled bearer , priority 0 [ 353.027261][T17499] syzkaller0: entered promiscuous mode [ 353.033391][T17499] syzkaller0: entered allmulticast mode [ 353.061081][T17416] hsr_slave_0: entered promiscuous mode [ 353.080957][T17416] hsr_slave_1: entered promiscuous mode [ 353.093958][T17416] debugfs: 'hsr0' already exists in 'hsr' [ 353.101351][T17416] Cannot create hsr debugfs directory [ 353.216460][T17499] tipc: Resetting bearer [ 353.238497][T17498] tipc: Resetting bearer [ 353.238902][T17512] __nla_validate_parse: 13 callbacks suppressed [ 353.238915][T17512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2912'. [ 353.380836][T17498] tipc: Disabling bearer [ 353.512831][T17526] xt_hashlimit: max too large, truncated to 1048576 [ 353.526628][T17522] netlink: 'syz.0.2916': attribute type 3 has an invalid length. [ 353.554549][T17528] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2918'. [ 353.649792][T17534] tipc: Enabling of bearer rejected, already enabled [ 353.702331][T17535] tipc: Enabling of bearer rejected, already enabled [ 353.726506][T17541] netlink: 'syz.2.2923': attribute type 29 has an invalid length. [ 353.752764][T17541] netlink: 'syz.2.2923': attribute type 29 has an invalid length. [ 353.782801][T17541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2923'. [ 353.945346][T17552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2925'. [ 354.032413][T17552] netlink: 'syz.4.2925': attribute type 1 has an invalid length. [ 354.050821][T17552] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2925'. [ 354.088311][T17562] tipc: Enabling of bearer rejected, already enabled [ 354.137800][T17563] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2925'. [ 354.214254][T17563] bond16 (unregistering): Released all slaves [ 354.412140][T17416] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 354.430379][T17416] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 354.455504][T17416] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 354.469621][T17568] lo speed is unknown, defaulting to 1000 [ 354.470026][T17416] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 354.493667][T17568] ip6_vti0 speed is unknown, defaulting to 1000 [ 354.601179][T17575] xt_CT: No such helper "snmp" [ 354.671297][T17416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.722747][T17416] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.754574][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.761799][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.830600][T17568] wg1 speed is unknown, defaulting to 1000 [ 354.880858][T12135] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.888079][T12135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.896907][ T5837] Bluetooth: hci5: command tx timeout [ 354.946034][T17584] lo speed is unknown, defaulting to 1000 [ 355.011884][T17584] ip6_vti0 speed is unknown, defaulting to 1000 [ 355.131246][T17591] lo speed is unknown, defaulting to 1000 [ 355.139884][T17416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 355.431810][T17591] ip6_vti0 speed is unknown, defaulting to 1000 [ 355.650270][T17416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.759722][T17416] veth0_vlan: entered promiscuous mode [ 355.809118][T17416] veth1_vlan: entered promiscuous mode [ 355.878979][T17416] veth0_macvtap: entered promiscuous mode [ 355.892924][T17416] veth1_macvtap: entered promiscuous mode [ 355.943151][T17416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.969531][T17591] wg1 speed is unknown, defaulting to 1000 [ 355.971846][T17416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.007476][T17584] wg1 speed is unknown, defaulting to 1000 [ 356.018071][ T1138] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.032563][ T1138] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.067183][ T1138] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.141436][ T1138] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.676316][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.688814][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.940222][T17644] lo speed is unknown, defaulting to 1000 [ 356.970266][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.981992][ T5837] Bluetooth: hci5: command tx timeout [ 357.001976][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.051541][T17644] ip6_vti0 speed is unknown, defaulting to 1000 [ 357.102678][T17647] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 357.254274][T17651] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2945'. [ 357.294426][T17651] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2945'. [ 357.371944][T17654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2946'. [ 357.574891][T17663] tipc: Enabling of bearer rejected, already enabled [ 357.631556][T17644] wg1 speed is unknown, defaulting to 1000 [ 358.136165][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 358.146709][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 358.159773][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 358.169079][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 358.186660][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 358.240063][T17681] lo speed is unknown, defaulting to 1000 [ 358.254814][T17681] ip6_vti0 speed is unknown, defaulting to 1000 [ 358.475988][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2960'. [ 358.488242][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2960'. [ 358.509943][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2960'. [ 358.521827][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2960'. [ 358.552310][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2960'. [ 358.576822][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2960'. [ 358.607024][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2960'. [ 358.638779][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2960'. [ 358.667127][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2960'. [ 358.678064][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2960'. [ 358.767934][T17716] ªªªªªª: renamed from wg2 [ 358.792935][T17681] wg1 speed is unknown, defaulting to 1000 [ 358.862006][T17718] can: request_module (can-proto-4) failed. [ 359.066263][ T5837] Bluetooth: hci5: command tx timeout [ 359.112007][T17733] netlink: 'syz.3.2969': attribute type 8 has an invalid length. [ 359.195214][T17681] chnl_net:caif_netlink_parms(): no params data found [ 359.298313][T17749] ipvlan4: entered promiscuous mode [ 359.304112][T17749] bridge0: port 3(ipvlan4) entered blocking state [ 359.311689][T17749] bridge0: port 3(ipvlan4) entered disabled state [ 359.319164][T17749] ipvlan4: entered allmulticast mode [ 359.324452][T17749] bridge0: entered allmulticast mode [ 359.333323][T17749] ipvlan4: left allmulticast mode [ 359.339998][T17749] bridge0: left allmulticast mode [ 359.520029][T17681] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.546505][T17764] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 359.574225][T17681] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.584145][T17766] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 359.590853][T17681] bridge_slave_0: entered allmulticast mode [ 359.607868][T17681] bridge_slave_0: entered promiscuous mode [ 359.628706][T17681] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.646296][T17681] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.653626][T17681] bridge_slave_1: entered allmulticast mode [ 359.667264][T17681] bridge_slave_1: entered promiscuous mode [ 359.773834][T17681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.793570][T17681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.884453][T17681] team0: Port device team_slave_0 added [ 359.901563][T17681] team0: Port device team_slave_1 added [ 359.959334][T17681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.978089][T17681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.978179][T17783] netlink: 'syz.3.2984': attribute type 11 has an invalid length. [ 360.016163][T17783] netlink: 'syz.3.2984': attribute type 11 has an invalid length. [ 360.033254][T17681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.056722][T17681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.064579][T17681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.095272][T17681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.129928][T17784] netlink: 'syz.1.2983': attribute type 4 has an invalid length. [ 360.215936][T17681] hsr_slave_0: entered promiscuous mode [ 360.230626][T17681] hsr_slave_1: entered promiscuous mode [ 360.247492][T17681] debugfs: 'hsr0' already exists in 'hsr' [ 360.258337][ T5837] Bluetooth: hci2: command tx timeout [ 360.263479][T17681] Cannot create hsr debugfs directory [ 360.934803][ T6041] nci: nci_rx_work: unknown MT 0x7 [ 361.052675][T17835] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 361.584776][T17681] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 361.686431][T17681] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 361.723010][T17681] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 361.749419][T17681] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 361.954614][T17865] macsec1: entered allmulticast mode [ 361.960235][T17865] dummy0: entered allmulticast mode [ 362.025319][T17865] dummy0: left allmulticast mode [ 362.169915][T17866] macsec1: entered allmulticast mode [ 362.175228][T17866] dummy0: entered allmulticast mode [ 362.188763][T17866] dummy0: left allmulticast mode [ 362.223945][T17867] tipc: Invalid UDP bearer configuration [ 362.224004][T17867] tipc: Enabling of bearer rejected, failed to enable media [ 362.287325][T17681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.295632][T17874] lo speed is unknown, defaulting to 1000 [ 362.320314][T17681] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.329180][T17874] ip6_vti0 speed is unknown, defaulting to 1000 [ 362.336106][ T5837] Bluetooth: hci2: command tx timeout [ 362.353770][ T6041] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.360995][ T6041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.424659][ T6041] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.431888][ T6041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.467903][T17881] sch_tbf: burst 274 is lower than device lo mtu (11337746) ! [ 363.051676][T17681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.123283][T17874] wg1 speed is unknown, defaulting to 1000 [ 363.211949][T17909] netlink: 'syz.1.3013': attribute type 54 has an invalid length. [ 363.614697][T17681] veth0_vlan: entered promiscuous mode [ 363.644467][T17681] veth1_vlan: entered promiscuous mode [ 363.675553][T17681] veth0_macvtap: entered promiscuous mode [ 363.724995][T17681] veth1_macvtap: entered promiscuous mode [ 363.764002][T17681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.942444][T17681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.213386][T17936] syzkaller0: entered promiscuous mode [ 364.238923][T17936] syzkaller0: entered allmulticast mode [ 364.416076][ T5837] Bluetooth: hci2: command tx timeout [ 365.807386][ T725] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.843747][ T725] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.886289][ T725] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.923143][ T725] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.122203][T17971] __nla_validate_parse: 144 callbacks suppressed [ 366.122221][T17971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3026'. [ 366.136155][ T9356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.154105][ T9356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.245763][ T9356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.262588][ T9356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.499965][ T5837] Bluetooth: hci2: command tx timeout [ 366.735177][T18007] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 366.899726][T18017] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 367.146200][ T106] IPVS: starting estimator thread 0... [ 367.255886][T18024] IPVS: using max 41 ests per chain, 98400 per kthread [ 367.479615][ T5836] bond0: (slave syz_tun): Releasing backup interface [ 367.515119][ T5836] syz_tun (unregistering): left promiscuous mode [ 367.526682][T18036] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3044'. [ 367.532254][ T5836] syz_tun (unregistering): left allmulticast mode [ 367.562315][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 367.576767][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 367.584694][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 367.594872][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 367.605972][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 367.790784][T18037] lo speed is unknown, defaulting to 1000 [ 367.808111][T18047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3045'. [ 367.832893][T18037] ip6_vti0 speed is unknown, defaulting to 1000 [ 368.114196][T18056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3047'. [ 368.150049][T18056] netlink: 'syz.4.3047': attribute type 11 has an invalid length. [ 368.218779][ T725] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.218897][T18056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3047'. [ 368.250357][ T725] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.262979][T18056] netlink: 'syz.4.3047': attribute type 11 has an invalid length. [ 368.286049][ T725] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.307673][T18059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3048'. [ 368.313676][ T725] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.340467][T18037] wg1 speed is unknown, defaulting to 1000 [ 368.594142][T18072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3053'. [ 368.609619][T18072] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3053'. [ 368.624394][T18074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3052'. [ 368.661056][T18074] hsr_slave_0: left promiscuous mode [ 368.677274][T18074] hsr_slave_1: left promiscuous mode [ 368.879055][T18080] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 369.705995][ T5839] Bluetooth: hci1: command tx timeout [ 369.990575][T18102] netlink: 296 bytes leftover after parsing attributes in process `syz.0.3061'. [ 370.733336][T18111] openvswitch: netlink: Flow key attr not present in new flow. [ 370.813103][T18037] chnl_net:caif_netlink_parms(): no params data found [ 370.950898][T18125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.024315][T18133] netlink: 'syz.0.3068': attribute type 23 has an invalid length. [ 371.076243][T18134] bridge1: entered allmulticast mode [ 371.114401][T18142] netlink: 'syz.2.3072': attribute type 1 has an invalid length. [ 371.143086][T18138] __nla_validate_parse: 69 callbacks suppressed [ 371.143104][T18138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3070'. [ 371.158585][T18138] nbd: must specify a size in bytes for the device [ 371.211622][T18037] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.231233][T18037] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.239768][T18037] bridge_slave_0: entered allmulticast mode [ 371.251320][T18037] bridge_slave_0: entered promiscuous mode [ 371.271894][T18037] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.279244][T18037] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.286650][T18037] bridge_slave_1: entered allmulticast mode [ 371.294355][T18037] bridge_slave_1: entered promiscuous mode [ 371.369357][T18037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.393374][T18037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.450910][T18151] lo speed is unknown, defaulting to 1000 [ 371.452977][T18037] team0: Port device team_slave_0 added [ 371.466469][T18037] team0: Port device team_slave_1 added [ 371.472073][T18151] ip6_vti0 speed is unknown, defaulting to 1000 [ 371.562965][T18037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.571794][T18037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.603219][T18037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.619545][T18037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.627195][T18037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.653548][T18037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.667735][T18161] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3078'. [ 371.681886][ T5957] IPVS: starting estimator thread 0... [ 371.726619][T18151] wg1 speed is unknown, defaulting to 1000 [ 371.754165][T18162] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3078'. [ 371.776002][T18163] IPVS: using max 33 ests per chain, 79200 per kthread [ 371.790007][ T5839] Bluetooth: hci1: command tx timeout [ 371.891703][T18037] hsr_slave_0: entered promiscuous mode [ 371.907982][T18037] hsr_slave_1: entered promiscuous mode [ 371.915422][T18037] debugfs: 'hsr0' already exists in 'hsr' [ 371.921933][T18037] Cannot create hsr debugfs directory [ 372.130750][T18166] netlink: 'syz.2.3079': attribute type 1 has an invalid length. [ 372.250641][T18168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3080'. [ 373.145370][T18197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3088'. [ 373.221174][T18199] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3091'. [ 373.292158][T18037] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 373.335631][T18037] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 373.371066][T18037] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 373.395265][T18208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3092'. [ 373.414763][T18037] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 373.856049][ T5839] Bluetooth: hci1: command tx timeout [ 373.899412][T18037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.901454][T18240] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3100'. [ 373.944574][T18243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3101'. [ 373.991709][T18037] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.035425][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.042639][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.056515][T18246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3102'. [ 374.087897][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.095095][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.379658][T18259] bond1: option arp_validate: invalid value (18446744073491447809) [ 374.468831][T18259] bond1 (unregistering): Released all slaves [ 374.991644][T18296] syzkaller0: entered promiscuous mode [ 375.006037][T18296] syzkaller0: entered allmulticast mode [ 375.937681][ T5839] Bluetooth: hci1: command tx timeout [ 376.163232][T18309] __nla_validate_parse: 2 callbacks suppressed [ 376.163250][T18309] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3115'. [ 376.968747][T18313] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3117'. [ 376.978459][T18313] netlink: 170 bytes leftover after parsing attributes in process `syz.2.3117'. [ 377.026356][T18037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.554653][T18037] veth0_vlan: entered promiscuous mode [ 377.744808][T18037] veth1_vlan: entered promiscuous mode [ 377.882053][T18323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3120'. [ 377.893377][T18037] veth0_macvtap: entered promiscuous mode [ 377.928326][T18037] veth1_macvtap: entered promiscuous mode [ 377.972277][T18037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.020668][T18037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.065026][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.107109][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.140142][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.286325][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.417663][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.446238][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.510160][T18343] lo speed is unknown, defaulting to 1000 [ 378.535097][T18348] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3127'. [ 378.536191][ T6224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.555623][T18349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3128'. [ 378.565633][ T6224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.600703][T18343] ip6_vti0 speed is unknown, defaulting to 1000 [ 378.747346][T18355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3130'. [ 378.766146][T18355] netlink: 'syz.0.3130': attribute type 7 has an invalid length. [ 378.795968][T18355] netlink: 'syz.0.3130': attribute type 8 has an invalid length. [ 378.817417][T18355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3130'. [ 378.861649][T18355] syz_tun: entered promiscuous mode [ 378.889056][T18355] syz_tun: left promiscuous mode [ 379.127619][T18367] netlink: 'syz.0.3132': attribute type 1 has an invalid length. [ 379.155576][T18343] wg1 speed is unknown, defaulting to 1000 [ 379.320965][T18374] ipt_ECN: cannot use operation on non-tcp rule [ 379.398711][T18377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3136'. [ 379.493622][T18382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3136'. [ 379.580516][T18377] bond1: entered allmulticast mode [ 379.869445][T18392] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 379.897142][T18384] netlink: 'syz.4.3138': attribute type 13 has an invalid length. [ 380.106597][T18410] xt_TCPMSS: Only works on TCP SYN packets [ 380.161390][T18412] IPv4: Oversized IP packet from 127.202.26.0 [ 380.279310][T18420] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.286975][T18420] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.435389][T18423] syzkaller0: entered promiscuous mode [ 380.447804][T18423] syzkaller0: entered allmulticast mode [ 381.530366][T18465] openvswitch: netlink: IP tunnel TTL not specified. [ 381.596761][T18466] xt_connbytes: Forcing CT accounting to be enabled [ 381.603464][T18466] xt_CT: You must specify a L4 protocol and not use inversions on it [ 382.250413][T18452] __nla_validate_parse: 2 callbacks suppressed [ 382.250426][T18452] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3159'. [ 382.270709][T18452] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 382.442151][T18468] syzkaller0: entered promiscuous mode [ 382.467821][T18468] syzkaller0: entered allmulticast mode [ 382.569833][T18491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3170'. [ 382.651500][T18496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3167'. [ 382.714159][T18499] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 382.720879][T18478] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.783202][T18496] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.791281][T18496] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.811238][T18497] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3169'. [ 382.851550][T18498] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3170'. [ 382.935995][T18499] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3167'. [ 383.109059][T18478] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.270022][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3174'. [ 383.271649][T18478] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Connection to 10.128.1.57 closed by remote host. [ 383.570512][T18478] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.807730][ T1138] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.842173][ T1138] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.877934][ T9351] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.926636][ T1138] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.429736][ T3512] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.506407][ T3512] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.568780][ T3512] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.624034][ T3512] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.724716][ T3512] bridge_slave_1: left allmulticast mode [ 384.732714][ T3512] bridge_slave_1: left promiscuous mode [ 384.739823][ T3512] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.750144][ T3512] bridge_slave_0: left allmulticast mode [ 384.756234][ T3512] bridge_slave_0: left promiscuous mode [ 384.761921][ T3512] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.072305][ T3512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.083579][ T3512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.094056][ T3512] bond0 (unregistering): Released all slaves [ 385.106652][ T3512] bond1 (unregistering): Released all slaves [ 385.189100][ T3512] tipc: Left network mode [ 385.216953][ T3512] IPVS: stopping backup sync thread 17442 ... [ 385.490270][ T3512] hsr_slave_0: left promiscuous mode [ 385.496799][ T3512] hsr_slave_1: left promiscuous mode [ 385.502594][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.513608][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.522516][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.530186][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.560455][ T3512] veth1_macvtap: left promiscuous mode [ 385.566368][ T3512] veth0_macvtap: left promiscuous mode [ 385.571931][ T3512] veth1_vlan: left promiscuous mode [ 385.577595][ T3512] veth0_vlan: left promiscuous mode [ 385.954748][ T3512] team0 (unregistering): Port device team_slave_1 removed [ 385.995443][ T3512] team0 (unregistering): Port device team_slave_0 removed [ 386.653212][ T3512] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.735397][ T3512] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.790481][ T3512] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.882351][ T3512] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.982823][ T3512] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.994109][ T3512] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.063185][ T3512] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.074104][ T3512] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.140002][ T3512] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.150637][ T3512] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.199750][ T3512] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.210485][ T3512] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.305516][ T3512] bridge_slave_1: left allmulticast mode [ 387.312364][ T3512] bridge_slave_1: left promiscuous mode [ 387.318434][ T3512] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.329156][ T3512] bridge_slave_0: left allmulticast mode [ 387.334795][ T3512] bridge_slave_0: left promiscuous mode [ 387.340858][ T3512] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.350619][ T3512] bridge_slave_1: left allmulticast mode [ 387.356429][ T3512] bridge_slave_1: left promiscuous mode [ 387.362073][ T3512] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.372105][ T3512] bridge_slave_0: left allmulticast mode [ 387.381619][ T3512] bridge_slave_0: left promiscuous mode [ 387.387470][ T3512] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.759772][ T3512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.770635][ T3512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.780889][ T3512] bond0 (unregistering): Released all slaves [ 388.085604][ T3512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.098297][ T3512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.109020][ T3512] bond0 (unregistering): Released all slaves [ 388.627205][ T3512] hsr_slave_0: left promiscuous mode [ 388.633518][ T3512] hsr_slave_1: left promiscuous mode [ 388.660459][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.668407][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.676481][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.683857][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.694454][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.701981][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.710006][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.717507][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.767828][ T3512] veth1_macvtap: left promiscuous mode [ 388.773347][ T3512] veth0_macvtap: left promiscuous mode [ 388.779068][ T3512] veth1_vlan: left promiscuous mode [ 388.784332][ T3512] veth0_vlan: left promiscuous mode [ 388.790543][ T3512] veth1_macvtap: left promiscuous mode [ 388.796158][ T3512] veth0_macvtap: left promiscuous mode [ 388.801698][ T3512] veth1_vlan: left promiscuous mode [ 388.806989][ T3512] veth0_vlan: left promiscuous mode [ 389.387591][ T3512] team0 (unregistering): Port device team_slave_1 removed [ 389.423751][ T3512] team0 (unregistering): Port device team_slave_0 removed [ 390.040216][ T3512] team0 (unregistering): Port device team_slave_1 removed [ 390.075489][ T3512] team0 (unregistering): Port device team_slave_0 removed [ 390.861701][ T3512] IPVS: stop unused estimator thread 0... [ 390.897110][ T3512] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.952672][ T3512] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.991805][ T3512] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.049587][ T3512] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.123863][ T3512] bridge_slave_1: left allmulticast mode [ 391.129658][ T3512] bridge_slave_1: left promiscuous mode [ 391.135331][ T3512] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.143942][ T3512] bridge_slave_0: left allmulticast mode [ 391.149827][ T3512] bridge_slave_0: left promiscuous mode [ 391.155503][ T3512] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.540037][ T3512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.550917][ T3512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.561193][ T3512] bond0 (unregistering): Released all slaves [ 391.573633][ T3512] bond1 (unregistering): Released all slaves [ 391.890306][ T3512] hsr_slave_0: left promiscuous mode [ 391.896399][ T3512] hsr_slave_1: left promiscuous mode [ 391.902224][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.909890][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.917981][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.925366][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.950484][ T3512] veth1_macvtap: left promiscuous mode [ 391.956151][ T3512] veth0_macvtap: left promiscuous mode [ 391.962830][ T3512] veth1_vlan: left promiscuous mode [ 391.968266][ T3512] veth0_vlan: left promiscuous mode [ 392.334234][ T3512] team0 (unregistering): Port device team_slave_1 removed [ 392.372342][ T3512] team0 (unregistering): Port device team_slave_0 removed