last executing test programs: 1.876717553s ago: executing program 0 (id=10623): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r9, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073790900000000000900010073797a30006d29b8dc000a40000000042c000000"], 0xa8}}, 0x0) (async) ioctl$sock_FIOGETOWN(r12, 0x8903, &(0x7f0000000000)=0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r13, 0x12) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f00000001c0)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r13}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r14}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x810) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r15, {0xffe0}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x14, 0x0, 0x6, 0x401}, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x84000000, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x48}}, 0x0) (async) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0xe38}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1.61003126s ago: executing program 0 (id=10630): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x40044) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_hci(r5, 0x0, 0x286e1da51d06fc00, &(0x7f0000000040)=""/89, &(0x7f00000000c0)=0x59) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa101000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000000000000850000002d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1.584419752s ago: executing program 2 (id=10631): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x0, 0x10, 0x0, 0x2}, &(0x7f0000000500)=0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x83}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x80f3}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast2}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @loopback}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x2}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x30, 0x0, 0x8, 0x201, 0x0, 0x0, {0x26bb0d7ae1d7ab48, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x91ee, 0x9, 0x10000000, 0x1, 0x7}, 0x9, 0x8}, [{0xd6c, 0x9, 0x8, 0xff, 0x10001, 0x9}, {0x7f, 0xffff, 0x6, 0x7fffffff, 0x1, 0x7}, {0x6, 0xb37b, 0x6, 0xb38, 0x0, 0xd0cb}, {0x4, 0x3, 0x2, 0xa318, 0x80000000, 0x1}, {0x9, 0xfffffff9, 0x2, 0x4, 0x6, 0x4}, {0x8000, 0x3, 0xe, 0x4, 0xcee8000, 0x1}, {0x9, 0x8, 0xfffffffa, 0x6, 0xa0fd, 0x8}, {0xffffffff, 0xe648, 0x7c0c3ffe, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x9, 0xa}, {0x9, 0x6, 0xb6, 0x7fff, 0x5, 0x7}, {0x304, 0x66, 0x3, 0x101, 0x3, 0x9}, {0xff, 0x1, 0xe, 0x800, 0x3, 0x56}, {0xca, 0x4, 0x9, 0xfffffffa, 0x7c, 0x7921bcf1}, {0x1, 0xff, 0x5, 0x80000000, 0xaae6, 0x9}, {0x4, 0x3, 0xa9, 0x8, 0x9, 0x4}, {0x5, 0x1000, 0x200, 0x2, 0x8, 0x6}, {0x3d648283, 0x2, 0x5, 0x9, 0x10000, 0x6}, {0x3, 0xa06, 0x1, 0x1, 0x9, 0x260ba674}, {0x6, 0xc5, 0x8d3, 0x9, 0x3, 0xffffffbc}, {0x3, 0x8, 0x3, 0x5, 0x0, 0xc80}, {0x3, 0xffffffff, 0xffff, 0x2, 0x9}, {0xfffffffa, 0x6, 0x77f, 0x160c, 0x3}, {0x1ff, 0x8, 0x0, 0x6, 0xb, 0x400}, {0x3ff, 0x9, 0xffff8001, 0x100, 0x3, 0x47}, {0x529, 0x4, 0x7, 0xffff, 0xc0a, 0xbad}, {0x8, 0x7, 0x884, 0x100, 0x9}, {0x8, 0x6, 0x6, 0xc, 0x3}, {0x4, 0x40, 0xcd6c, 0x71f, 0x8000, 0x6}, {0x5, 0x30a3, 0xa, 0x200, 0xfff, 0x9}, {0x3, 0x1, 0x5, 0x8, 0x2, 0x81}, {0x81, 0x0, 0x0, 0x49f11005, 0x9, 0x7fffffff}, {0x9, 0x0, 0x5c, 0x3bad, 0x8, 0x480}, {0xe, 0x58000000, 0x9, 0x3, 0x1ff, 0xaa2}, {0x800, 0xd1, 0x0, 0x3e, 0x0, 0x5}, {0x8, 0x4, 0x200, 0xfffffc00, 0x100, 0x10001}, {0x6, 0x7, 0x0, 0x101, 0x6, 0x81}, {0x8, 0x2, 0x200, 0x3, 0x4, 0x101}, {0xad, 0xa, 0x401, 0x0, 0x9, 0xff000000}, {0x8, 0x5, 0xd, 0x24, 0xc, 0x1}, {0xfffffff8, 0x9, 0x1000, 0xc, 0xea, 0x4}, {0x3, 0x0, 0x8, 0x1, 0x1, 0xffffff32}, {0x6, 0x5, 0xd7c9, 0x0, 0x5, 0x2}, {0xffff, 0x1, 0x5, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x0, 0x401, 0x6, 0x1}, {0x3, 0x2, 0x4, 0x6, 0xfffffff8, 0x5}, {0x6, 0x0, 0x3, 0x5, 0x0, 0xffff8000}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x2, 0x7, 0x9}, {0x0, 0xfffffffd, 0x756183d, 0xfffff801, 0x5, 0x8}, {0x7, 0x10001, 0xfffffffc, 0x80000001, 0x7b, 0x2}, {0x7, 0x9, 0xee, 0x800, 0x1000}, {0x10, 0x5, 0x57a2a808, 0x80000000, 0x7fff, 0x5}, {0x729, 0x25, 0x6, 0x6, 0x8, 0x4}, {0x2, 0x406, 0xc209, 0x8, 0x0, 0xfffffffc}, {0x1, 0x7, 0x8, 0xfffffffb, 0x80000000, 0x4}, {0x1, 0x5, 0x8, 0x8000, 0x1, 0x7f}, {0x8001, 0xf42, 0x1, 0x3, 0x5, 0x430}, {0x2, 0xfffffff4, 0x5, 0xd, 0xc8, 0x7}, {0x6, 0x7, 0x9, 0x8, 0x5, 0x5}, {0x5, 0x8000000, 0x7, 0x5, 0x401, 0x9}, {0x1, 0x6, 0x1ff, 0xa8de, 0x0, 0x7b}, {0x0, 0x80000000, 0x7fff, 0x5, 0x2, 0x7}, {0xe, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x200}, {0x81, 0xaa, 0x1e, 0x9, 0x14fc, 0x8}, {0x9, 0xffffffff, 0x40, 0x6, 0x13b, 0xeacd}, {0x100020, 0xff, 0x6, 0x81, 0x0, 0x6}, {0x2, 0xe, 0xb, 0x0, 0x6, 0x2}, {0x8, 0x3, 0x5, 0x4, 0x4, 0x2}, {0x84, 0x3ff, 0x3d0c, 0x1, 0x8, 0x2}, {0x4, 0x4, 0xb85c, 0x1, 0x7, 0x6}, {0x3, 0xc6, 0x0, 0x1, 0x2, 0x3}, {0x7, 0x2, 0x8000, 0x2, 0x7fffffff, 0x79}, {0x6, 0x80000000, 0xfffffffe, 0x7, 0x3, 0x8}, {0xae, 0x3, 0x600, 0x9, 0xff, 0x3}, {0x1, 0xed5, 0x6de6, 0x10, 0x380000, 0x789}, {0x4, 0x7074, 0x32b, 0x3, 0xf}, {0x1ff, 0x7, 0x1, 0x96, 0x1, 0xc}, {0x9, 0x3, 0x0, 0x9, 0x1ff, 0x8}, {0x1, 0x7d, 0x8, 0x7, 0x2, 0x3}, {0xfffff001, 0x9, 0x65d, 0x3c10, 0x7, 0x53}, {0x7, 0x0, 0x7, 0x101, 0x9, 0x1}, {0x7, 0x9, 0xd, 0x6, 0xfffffff7, 0x827}, {0x113, 0xfffffffe, 0x2, 0x400, 0x28, 0x81}, {0xfff, 0x6, 0x7, 0x40, 0x6, 0x10}, {0xc, 0x9, 0x8001, 0x0, 0x9, 0x6}, {0x5, 0x11b9, 0x401, 0x4, 0x2, 0x6}, {0x9, 0x100, 0x400, 0x9497, 0x101, 0x84b7}, {0xb4, 0xb85, 0x7, 0x3, 0x51, 0x5}, {0x2, 0x4, 0x5, 0xf, 0xf, 0x1283}, {0xfffffff8, 0x1c0000, 0x2, 0x10001, 0x1, 0x6}, {0x61, 0x101, 0x1, 0x10000, 0x5, 0x8}, {0x8, 0x6, 0xc53, 0x80000000, 0x7, 0x5}, {0x0, 0x6, 0x5, 0x2, 0xdc, 0x6}, {0x0, 0xfffffffc, 0x101, 0x6cb685f2, 0x7, 0x1}, {0x0, 0xc3, 0x4, 0x5, 0x0, 0x9}, {0x8, 0xf7b5, 0x5, 0x5, 0x9, 0x7}, {0x1, 0x67f, 0x5689f935, 0x8, 0x6db, 0xff}, {0x1, 0x400, 0x3, 0x1e1, 0xa, 0x80000000}, {0xea, 0x5, 0x8, 0x5, 0x7fff, 0x1000}, {0x6, 0x5, 0x7, 0x0, 0x6, 0x80000000}, {0x9, 0x6, 0x7, 0x1, 0x9, 0x100}, {0x7202, 0x4, 0x5024, 0xf9, 0x6, 0x40}, {0x5, 0x10, 0x4, 0x5, 0xd, 0x8}, {0x1537, 0x101, 0x6, 0x1, 0x3, 0x6d}, {0x69, 0x400, 0x3, 0x81, 0xc6, 0x7fff}, {0x10001, 0x1, 0x3, 0x7fffffff, 0x7, 0x10001}, {0xcdc, 0x1, 0x7, 0x0, 0x8}, {0x1, 0x168dccf, 0x3, 0x3, 0x7fff, 0x6}, {0x3, 0x4, 0x7fff, 0x7, 0xaf68, 0x403}, {0x9, 0x0, 0x7, 0x6, 0x6, 0x80000001}, {0x5, 0x200, 0x800, 0xd00000, 0x3, 0x8}, {0x8001, 0x5d, 0xffffffff, 0x42e, 0x8, 0x55}, {0x1970, 0x89, 0x6d, 0x460ebb44, 0x2, 0x2}, {0x951, 0x9, 0x3, 0x8, 0x1, 0x2}, {0x3, 0x8, 0x627b, 0x5, 0x6, 0x4}, {0x6, 0x3, 0x9fbc, 0x4, 0x1, 0x2}, {0x401, 0x6, 0x32d84255, 0xfa, 0x27f, 0x8000}, {0x0, 0x6, 0x3, 0xc, 0x8000, 0x40}, {0x5, 0x4, 0x1, 0x3, 0x0, 0x5}, {0x7f, 0x4, 0x7f, 0x10001, 0xff, 0x8}, {0x17, 0x96a3, 0x2, 0xd7, 0x6, 0x200}, {0x1, 0x5, 0x5, 0x37a3, 0x7, 0x8}, {0x81, 0x9, 0xd, 0xffffffff, 0x200, 0x4}, {0x4, 0x3ff, 0x7, 0x4, 0x4, 0x4}, {0x1, 0xffffffa4, 0x9, 0x2, 0x3}, {0xd, 0x0, 0x3ff, 0x9, 0x8, 0x48}, {0x2, 0x10001, 0x9, 0x2, 0x8, 0x9}, {0xf, 0x1, 0xe, 0x101, 0x2, 0xc88}], [{}, {0x5}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x8cd778652b20be70, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0xa4f33433e7b7e23d, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {0x2, 0xa5b0c5c50171756a}, {0x3}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1.517616927s ago: executing program 4 (id=10634): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) (async) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) (async) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004040) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) (async) close(r1) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/49, 0x31}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r3], 0x34}, 0x1, 0x0, 0x0, 0x48805}, 0xc000) 1.447690959s ago: executing program 0 (id=10635): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="f9c5a167cb38dda420ea5c8df4a8cd54ee6a15dd703866bdf6941944c13871e24bf76ab70541cf1ba39fabff51d3066b24dd3d3e542ab2bfb5d149cc2e75a50b", 0x40}], 0x1}, 0x8001) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.324065598s ago: executing program 3 (id=10636): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000026000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) 1.323490439s ago: executing program 4 (id=10637): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @broadcast}}}, &(0x7f0000000380)=0x84) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="66a90c696c74657200000000000000000000000000000000000000000000000000000400"/106], 0x68) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1}, {0x300, 0x7000, 0x29, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0xce1300d54c3818a3, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bcc"}}}}}}}, 0x4f) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) close(r6) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000077c0)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x10}}, @TCA_FW_MASK={0x8, 0x5, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r9 = socket(0x8, 0x800, 0x0) ioctl$IMGETCOUNT(r9, 0x61e0, 0x0) r10 = accept4$inet(r3, &(0x7f0000000200)={0x2, 0x0, @private}, &(0x7f0000000240)=0x10, 0x800) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x248, 0x98, 0x168, 0x168, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xc}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffff, [0x0, 0x3, 0x0, 0x3, 0x0, 0x5]}, {0xffff, [0x2, 0x6, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x528d, 0x800, 0x2, 0x1, 0x0, "7bb6e1db6012e8a415416c3a753950639a046f7874289da47089813ebcebd75818b373a6560a0fa4c1513e591be9c70fcb89ed995a5b8d8e2e4f54dabf205fa3"}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0xffffff00, 'syzkaller0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x2, 0x5c}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @broadcast, 0xff000000, 0xff, 'ip6gre0\x00', 'vlan1\x00', {}, {}, 0x88, 0x3, 0xd}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7ffe, 0x8, @multicast1, 0x4e34}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x477) 1.234401578s ago: executing program 3 (id=10639): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r3, 0x3, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x8810) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c100, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x10e) 1.096580161s ago: executing program 1 (id=10640): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r4, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b3000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (rerun: 64) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x140c, 0x4, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x44, 0x30, 0x10b, 0x70bd26, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x3ffd, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x44}}, 0x0) 942.198352ms ago: executing program 3 (id=10641): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000040000100fcff0700040000000100000004004880180001801400108004000b8008000100ac1414bb04004e00080002"], 0x38}, 0x1, 0x0, 0x0, 0x400c800}, 0x4008094) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xb0, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000140)=0xffffffff, 0x4) 881.242385ms ago: executing program 2 (id=10642): r0 = socket(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r3, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa090100}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) socket(0x2a, 0x2, 0x0) write(r0, &(0x7f0000000000)="2000000012005f0214f9f4012100fbe40a000000edff84b5ca8d7c10277582b9", 0x20) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x1, @local, 0x400}, 0x1c) recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x2, 0x0) 752.639847ms ago: executing program 1 (id=10643): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710431000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001"], 0x64}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 751.381575ms ago: executing program 3 (id=10644): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xff, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="10000000000000001a01000001000000080000"], 0x28}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@deltfilter={0x4764, 0x2d, 0x1f967dd64cd3ffd9, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x6, 0xc}, {0xb, 0x7}, {0x0, 0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x413c, 0x2, [@TCA_BPF_ACT={0x4130, 0x1, [@m_skbmod={0x1ac, 0x1d, 0x0, 0x0, {{0xb}, {0xc0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10000, 0xa3, 0x4, 0xf, 0xff}, 0xa}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x2, 0x6, 0x80000001, 0xfffffff9}, 0xd}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3, 0x3, 0x5, 0xffffffff}, 0xa}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x400, 0x7, 0x8, 0x6}, 0xc}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0xc4, 0x6, "a7e3252c97895f8c543b4afdcd65e22e555fc67c7b4ef2ca08fcf15442eeea1b6c0b1f5c76aeeb87ffe2ee16233d0a25d9ccf123f2b2a33029fd175320ae43873c334346cd5733c638557f59dc60a1e7aea9ab82767926ef74eabab136451f54e3e0269cd6447c1076cab622cd6b2bfad20b1bc165fb67bed5c0d7628fdcb7269b7ef150c0e5a951c015e1f4a3400c96feb1954e63efe19b35a3505db28b396e7b337107e1e5aa1eb1231f9c619b6f77330bf8b9cf00df4df7dda339b1e2c0df"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_connmark={0xa4, 0x1a, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x6e, 0x7, 0x987, 0x4}, 0x3ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x69, 0x5, 0x7, 0x2}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x400, 0x3, 0x4, 0x80000001}, 0xfff9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000000, 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x7bf015f383764a9b}}}}, @m_connmark={0xf8, 0x2, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x53, 0x2, 0x8, 0xffff6994}, 0x1ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fffffff, 0x5, 0x0, 0x8, 0x1b}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0xf, 0x0, 0x1, 0x2}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x5, 0x8, 0x1, 0x8}, 0x1}}]}, {0x56, 0x6, "84398a2da7321522cba3d86ddf63afc56644df014ba8c3a77ec54584eadd2abc96442790357256b6cd217ba5cff3a8156b82d7baf1ae51dcd6e01fc56df2e9eae582c564b614eb50c52172d502d7a35238e7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x158, 0x12, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x4, 0xfffffffffffffff8, 0x5, 0x5}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x101, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_csum={0x130, 0xf, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x7, 0x8, 0xe1, 0x10000}, 0x6c}}]}, {0xe5, 0x6, "175e179cfe1c12eedf01ca129e705ec58cdd3b0e3f23e341fc3866f538da76789bb4acb8a005f76df0d9f1c4db0358fea5fd5376a55537ef17f060485e91e42724a7dcbd6145492546ff2b7320ee93f87dac4a89d192a4df8dfab59fbef82e91d75498316d36859de76657eef30821c60c4e1f0134acad35fbd8958d820ed69c3575abe5c1a64c48a34db80bbb971a6d52629993bd28801b1fe7af1ca8da31e44e1c85ee14f878e1d598eec341052974eaece3587e3ca5a8ec2f63ef501053f5036c82b6ef499fdab91555734c97733b87059de3758b9028cb47effb5347c36494"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0x3aa8, 0x1f, 0x0, 0x0, {{0xb}, {0x3a18, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x5d35, 0xd, 0x6, {0x8, 0x2, 0x8001, 0x735, 0x50, 0x3}, {0xa, 0x2, 0x7, 0x1, 0x8, 0x644c}, 0x5b, 0x2}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd4ab, 0x0, 0x8, 0x8, 0x4, {0x2, 0x0, 0x7c52, 0x5, 0x8000, 0x3}, {0xff, 0x1, 0xf0, 0x1, 0x7, 0x676}, 0x4, 0x6, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x3, 0xffffffff, 0xd21, 0x7, 0x3, 0x378, 0x80000001, 0x6b1c, 0x1, 0x1, 0x4, 0x8, 0x9, 0x7, 0x4, 0xff, 0x1000, 0x81, 0x30, 0x1, 0x2, 0x400, 0x0, 0x1, 0x2, 0x2, 0x5, 0xe3e, 0x6, 0x7f, 0x838, 0x1, 0x5, 0x5, 0x2, 0x8, 0x3, 0x4, 0x80, 0x36d1, 0x8001, 0xec4, 0x7, 0x7c, 0x5, 0x80, 0x5, 0x8, 0x5, 0x5, 0x80000001, 0xffffffff, 0x9, 0x25, 0x2bb, 0x7, 0x3, 0x7, 0x3, 0xf, 0x102000, 0x4, 0x1, 0x7fff, 0xf, 0xcd5, 0x44, 0xfffffffc, 0x65d0, 0x9, 0xfffffffa, 0x855e, 0x0, 0x32, 0x8, 0x261, 0x9, 0x7fff, 0x0, 0x7, 0x5, 0x0, 0xfff, 0x80000001, 0x9, 0x9, 0x30e, 0x5, 0x8, 0x3, 0x81, 0x134, 0x2, 0x6, 0xe9, 0x6, 0x7, 0x80, 0x9, 0x0, 0x2, 0x7, 0x8, 0x9, 0xffffff01, 0x2, 0xffff, 0x4, 0x0, 0x1, 0x0, 0x101, 0x10001, 0x80000000, 0x7, 0x9, 0x4, 0x3, 0x4, 0xa, 0x8, 0x7fff, 0x3, 0x1, 0x1, 0x0, 0x2, 0x101, 0x3, 0xbca8, 0xb26, 0x80000001, 0x200, 0x0, 0xb52, 0x9, 0x0, 0x0, 0x41, 0x2, 0x4, 0x7, 0x4, 0x800, 0x412, 0x3, 0x5, 0xfffffff0, 0x9, 0x5, 0x9, 0xb6, 0x0, 0x5, 0x1, 0xfff, 0xfffffffd, 0x3, 0xfffffffd, 0x623, 0xffffffff, 0x8, 0x8232, 0x7, 0x40, 0x7a7, 0x5, 0x3, 0x1, 0x460, 0x0, 0xfffffff9, 0x4, 0x7, 0xfffffff9, 0x4ec7, 0xda, 0x400, 0x2, 0x7fffffff, 0x7, 0x9, 0x40000000, 0x7, 0x800, 0x1, 0x9, 0xfffffffc, 0x7, 0x57, 0x27, 0x8, 0xda, 0x9, 0x5, 0x4, 0x40, 0x1, 0xa02, 0xc3, 0x3, 0x61, 0xffff, 0x4, 0x401, 0x4, 0x8, 0x3, 0x400, 0x6b0029da, 0xd19, 0x9, 0xa, 0xda7, 0x80, 0x9, 0x0, 0x3, 0x3, 0x9, 0x100, 0x1, 0x86f, 0x80, 0x372, 0x3, 0x83f, 0xffff, 0x80000001, 0x5, 0x800, 0xfffffffc, 0x4, 0x0, 0x81, 0x6, 0x3, 0x10001, 0x37c8, 0x9, 0x2, 0x3ac, 0x6, 0x5, 0xf, 0x1, 0xe6a, 0x3, 0x3, 0x0, 0x6, 0x3, 0x40, 0x8000, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x400}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x1, 0x80, 0x4, 0x4, 0x10, 0x5, 0x7fff, 0x8001, 0x3, 0x8, 0xa66, 0x2, 0x7fff, 0x4, 0x94, 0x49b, 0x4, 0x7f, 0x6c9, 0x3, 0x9, 0x1000, 0x2, 0x5, 0x0, 0x393924df, 0xffff, 0xa3, 0x5, 0x4, 0x80000001, 0x2, 0x9, 0xfffffff9, 0x7, 0xfffffff7, 0x1, 0xffffff80, 0x6, 0x9, 0x6, 0x5b, 0x5, 0x8, 0x2, 0x2154, 0x9, 0x80, 0x5, 0x1000, 0x1ff, 0x2, 0x8, 0x2, 0x3, 0xa9, 0x200, 0xf0, 0x5, 0x88e, 0x8001, 0xfff, 0x100, 0xc1, 0x47, 0x12000000, 0x16d3, 0x1, 0xff, 0x5, 0x88, 0x17e, 0x142a, 0x50, 0xcca, 0x4, 0xfffffffb, 0xd, 0xffffffff, 0x9, 0x5, 0x2, 0x1, 0x3, 0x44b5, 0x6, 0xfffffffc, 0x31, 0x9, 0xd, 0x2, 0x6, 0x21d, 0x4, 0xfff, 0x8, 0x2, 0x99, 0xf, 0x4, 0x7f, 0xfaa, 0x7ff, 0xf, 0xf, 0x7f, 0x6, 0x8, 0xd5, 0x5, 0xe38, 0x2, 0x3, 0x9, 0x10, 0xfffffffd, 0x6, 0xffff, 0xffffff80, 0x4, 0x10001, 0x1000, 0xfffffff8, 0x8, 0x0, 0x4, 0x2, 0x6, 0x80, 0x4, 0x0, 0x2, 0x2, 0x200, 0x3, 0x15, 0xa, 0x7, 0x737, 0x400, 0x4, 0xaf1284ce, 0x100, 0x40, 0x5, 0x4, 0x5, 0x8, 0x1, 0x2, 0x4, 0x5, 0x3, 0x5, 0x3, 0x8, 0x401, 0x7, 0x7, 0x8001, 0x80000001, 0x7, 0x9, 0x5, 0xfffffffd, 0x8, 0x7, 0x2, 0x8, 0xffff, 0x3, 0xff, 0xfffffffa, 0x5, 0x8, 0xa, 0x1ff, 0x4, 0x81a6, 0x544b, 0x7, 0x5, 0x0, 0x0, 0x2, 0x7, 0x27, 0x12929ca3, 0x4, 0xffffffff, 0x9, 0x9, 0x6, 0x2, 0xf, 0x101, 0xb7d, 0x3, 0x4, 0x0, 0xef9a, 0x4, 0x0, 0x3800000, 0x99d, 0xb9e, 0x0, 0x7, 0x100, 0x401, 0x5, 0x81, 0x5, 0x1, 0x7, 0xffff, 0xbc59, 0xfffffffc, 0x1, 0x621, 0x1, 0x9, 0x1, 0x24000000, 0x100, 0x8aaf, 0x7, 0x0, 0x1, 0x101, 0x8, 0x0, 0xfffffff8, 0x6, 0x8, 0x0, 0xb, 0x7, 0x400, 0x101, 0x2, 0x21fe, 0x6, 0xb, 0x101, 0x6, 0x1, 0x67, 0x1, 0xfff, 0x3, 0xb6a, 0x400000, 0x2, 0xb4da]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xeefb}, @TCA_POLICE_RATE={0x404, 0x2, [0x200, 0x5, 0x0, 0x1000, 0x77e1, 0x4, 0x4, 0x0, 0x8, 0x7f, 0x7, 0x80, 0x2, 0x21, 0x9, 0x80000001, 0xfffffffe, 0x80000000, 0x4, 0x8, 0x7d, 0x4, 0x80000001, 0x8, 0x1, 0x8001, 0x9, 0x83, 0x9, 0x6, 0xd, 0xfff, 0xc1b, 0x88de, 0xff, 0x1, 0x8, 0x0, 0x7f, 0xff, 0x2, 0x4, 0x3, 0x6f27, 0x8, 0x6, 0x4ba, 0x4, 0xa, 0xa, 0xf3bba1d, 0x0, 0x1000, 0xfb9, 0x80000000, 0x4, 0x1ce3f8e6, 0xe3734a, 0x5, 0x1, 0x6d26, 0x3, 0xd, 0x0, 0x1, 0x3ff, 0x2, 0x0, 0x9, 0x30b, 0x10001, 0x40, 0x3, 0x4a9, 0x3, 0x2, 0x4, 0x4, 0x8, 0xe1, 0x80000, 0x7, 0x909, 0x0, 0x101, 0x101, 0x9, 0xfffffff8, 0x9, 0x1, 0x4, 0x1, 0x9, 0x8, 0x2c, 0x8, 0xfc, 0x4b0, 0x7f05, 0xffffff59, 0x7, 0x4, 0x10000, 0x6, 0xf, 0x0, 0x8, 0x3ff, 0x5, 0x800, 0x84c6, 0xfffffff7, 0xcf, 0x865, 0x7fff, 0x7, 0x8, 0x3, 0x5, 0x3, 0x6, 0x7, 0x40, 0xfffffc00, 0x0, 0x8, 0x2, 0x3, 0x9, 0x8, 0x1, 0x2, 0x7, 0xf, 0x6, 0x400, 0x27a, 0x9, 0x9, 0x1, 0x5, 0x6, 0x0, 0x7, 0x8, 0x7, 0xf1b, 0x5, 0x7, 0x29f, 0x5, 0x8, 0x1, 0x10001, 0x99f, 0x22, 0x3, 0x2, 0x1, 0x4, 0x7, 0x1, 0x8, 0x7, 0x3584, 0xff, 0x0, 0x3, 0x54, 0x8e5, 0xa3, 0x537c35e7, 0x0, 0x4, 0xeaa, 0x400, 0x2, 0x4, 0xfffffffd, 0x752, 0x1, 0x8, 0x4, 0x4, 0x400, 0x3, 0x8, 0x1fd, 0x4, 0xfff, 0x5, 0x0, 0x5, 0x3, 0x8, 0x21f, 0x40, 0x3, 0x6, 0x4, 0x3, 0x9c6, 0x40, 0x6, 0x80000000, 0x400, 0x0, 0x7, 0xae, 0x15c, 0x7fffffff, 0x100, 0x0, 0x0, 0xecf0, 0x6, 0x779, 0x6, 0x7, 0x2, 0x200, 0x6, 0x10000, 0x2, 0x7, 0x0, 0x5, 0xca, 0x83f, 0x2, 0x2, 0x9, 0x10, 0x39, 0x75, 0x8, 0x0, 0x10, 0x4, 0x6, 0x2, 0xe, 0x8, 0xb18, 0x545, 0x6, 0x101, 0x0, 0x5, 0x1, 0x4, 0x8, 0x0, 0xfffffd7b, 0x1, 0x1000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffd}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x8, 0x8, 0xffffc111, 0x782d3ab9, 0x1, 0x8, 0x23e, 0xfffffffa, 0x4000000, 0x8, 0x8, 0x8, 0xca5, 0x101, 0x81, 0xd, 0x2, 0xa, 0x5, 0x4, 0x6, 0xfffffffc, 0xffffffff, 0x1ff, 0x484b, 0x1, 0x1ff, 0xff, 0x1, 0x80, 0x211d, 0x0, 0x9, 0xffffffff, 0x5, 0x28000000, 0x5, 0xf, 0xff, 0x3, 0x5, 0x9, 0x7, 0x10001, 0x4, 0x5, 0x6, 0x100, 0x6, 0x0, 0x1, 0x1, 0x1, 0xfffffff8, 0xfd, 0x7, 0xffffff13, 0x2, 0xc8c, 0x7, 0x8, 0x40, 0xe, 0x6, 0x1, 0x1, 0x7, 0xfffffff0, 0x6, 0x4, 0x400, 0x6, 0x800, 0x1, 0x7, 0x0, 0x400, 0x6, 0x0, 0x80000001, 0xfffffbff, 0x4, 0x1, 0x2, 0x9, 0x81, 0x0, 0x2, 0x923, 0x6, 0x2000000, 0x1, 0x1000, 0x3, 0x10000, 0x0, 0x1, 0x7, 0x7ff, 0x3, 0x3, 0x8, 0x59aa, 0xd5b, 0x6, 0x4, 0x2, 0x0, 0x9, 0x800, 0x9, 0xfffff3d9, 0x3, 0x800, 0xd7, 0x6, 0x7fffffff, 0x1000, 0x8, 0xfffffff9, 0x2, 0xb, 0xffff, 0x9, 0x5, 0x5d73c5ff, 0xffff23b2, 0x0, 0xfffffff3, 0x1b, 0x7, 0x7, 0x1, 0x1, 0x4, 0xfffffffc, 0x3, 0x8000, 0x4, 0x178, 0x0, 0x800, 0x1, 0x69, 0x965, 0xc, 0xa, 0x7, 0x0, 0x9, 0x8, 0x7, 0x0, 0x1, 0xfffffffd, 0x6, 0xffff, 0xd, 0x7, 0x7, 0xc332, 0x9, 0x7, 0x800, 0x800, 0x5, 0x100, 0x7020, 0x80000001, 0x10000, 0x0, 0x7, 0x8, 0x7, 0x5, 0x4, 0x2, 0xfffffffd, 0x3, 0x100, 0x0, 0x80, 0x2, 0xfffffffd, 0x7, 0x3, 0x2, 0x7, 0x17, 0xe, 0x5, 0x4, 0xfffffffd, 0xfaa0, 0xffffffff, 0x3, 0x3, 0x8000, 0x800, 0x0, 0x1, 0x8, 0xfffffff7, 0xe, 0xffffff01, 0x7fffffff, 0x4, 0x80000000, 0x9, 0x7, 0xff, 0x75f, 0x5, 0x4, 0x0, 0xe000, 0xfb, 0x8, 0x0, 0x2, 0xc, 0x5, 0x4ddecf17, 0x101, 0x2, 0x2, 0x5, 0x7, 0x2, 0x546, 0xa, 0x8, 0x1bf50a79, 0x1000, 0x7ff, 0x7220, 0x8, 0x3, 0x9, 0x2, 0x8001, 0x2, 0x3, 0x40, 0xfffffffa, 0xf9, 0x805, 0x783, 0x7, 0xffffffff, 0x8000, 0x0, 0x7, 0x5, 0x81]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x800}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x7, 0x80000001, 0x0, 0x2a83e7f8, {0xb4, 0x1, 0x8001, 0x1, 0x0, 0x458}, {0x4, 0x1, 0x6, 0x5, 0xd, 0x5}, 0x1, 0x5, 0x9}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xfffffc3a, 0x7, 0xfffff69e, 0xc6f, 0xffffffff, 0x81, 0x40, 0x7f, 0x6, 0x4, 0x0, 0x10, 0x3, 0xfffeffff, 0x7, 0x9, 0xfffffffe, 0x54, 0x6, 0x80, 0x5, 0xffffff7f, 0x5, 0x7, 0x0, 0x3ff, 0xffffff81, 0xcc35a98, 0x6, 0x101, 0x1, 0x7976, 0xfff, 0x8, 0x1, 0xda08, 0x3, 0xb, 0x0, 0x7ff, 0x8, 0x3, 0x7, 0x0, 0xccc0, 0x9b74, 0x8, 0x4, 0x7, 0xc, 0x1ff, 0x400, 0x2, 0x9, 0x2, 0x80000000, 0x5, 0x1367, 0x1, 0x5, 0xff, 0x0, 0xfffffff9, 0x9, 0x1, 0x9, 0x20a, 0x8, 0x6, 0x1, 0x2, 0x5, 0xd, 0x541, 0x7, 0x7fffffff, 0xbc4, 0x5, 0x80, 0x5, 0x3, 0x0, 0x7fffffff, 0x4, 0xf9, 0x8000, 0x3, 0x2, 0x2, 0xbf5d, 0xe, 0x0, 0xc, 0x8, 0x7f, 0x7, 0xffffffff, 0x3, 0x4, 0x7, 0x3ff, 0x6, 0x7ff, 0x0, 0x8, 0x0, 0xfffffff8, 0x7, 0x6, 0x1f, 0x800, 0x6, 0x2, 0x8, 0x3, 0x2, 0xf6f, 0x0, 0x10001, 0x3, 0x5a, 0x817, 0x3, 0x3, 0x6, 0x7, 0x52, 0x401, 0x6, 0x7fff, 0xfffffffb, 0x3, 0x0, 0x8, 0x7, 0x6, 0x1, 0xb, 0x6, 0x31549bcf, 0x3, 0xc7e, 0x2, 0x7ff, 0xfffffff8, 0x101, 0x8001, 0x101, 0x8, 0x20000000, 0x8001, 0xc, 0x4, 0x7, 0x401, 0x8000000, 0x3cb3, 0x1ff, 0x8, 0x9, 0x4, 0x9, 0x8, 0x1, 0x1000, 0x7ff, 0xa12, 0x7fff, 0x1, 0x8, 0x400, 0xb0, 0xfffffffe, 0x81, 0x9, 0x9, 0xf, 0xfff, 0x10001, 0x32a, 0x80000000, 0x77b0, 0x8, 0x9, 0xd, 0x6, 0x1, 0x3e3, 0x8, 0x7fff, 0x81, 0x9, 0xfffffffe, 0x7a4, 0x46d, 0x5, 0xb03, 0x1, 0x1, 0x0, 0x3, 0x100, 0x0, 0x3, 0x81, 0xd1da, 0x101, 0x7, 0x4, 0x7, 0xfffffff9, 0x0, 0x24, 0x6, 0x77, 0x3, 0x3, 0x8, 0x0, 0x10000, 0x2, 0xbbe5, 0x3, 0x7, 0x6, 0x0, 0x4, 0xffffffff, 0x200, 0x200, 0x7, 0x9c, 0x9, 0x7, 0x64, 0x5, 0x99d9, 0x4b, 0x8001, 0x800, 0x5, 0x0, 0xd, 0xf5, 0x0, 0xffffffe2, 0x1ff, 0x2, 0x3000000, 0x3ff, 0x8, 0xa, 0x9, 0xfffffff4, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xfffffff7, 0x401, 0x9, 0x3, 0x7f, 0x0, 0x5, 0x5, 0x5, 0x7, 0xf, 0x7, 0x8, 0x5, 0x9, 0xffffff7f, 0x588, 0x4, 0x7, 0x3, 0x9, 0xae2, 0x40, 0xe, 0x0, 0x3, 0x3, 0x6, 0x6, 0x10001, 0x3, 0xff, 0x5, 0x3, 0x5, 0xfffffffc, 0x0, 0x6, 0x7, 0x4, 0x10000, 0x8, 0x8000, 0x80000000, 0x5, 0x7, 0x10001, 0x7, 0x6, 0x3, 0x10, 0x1896, 0x7e, 0x80000001, 0x0, 0x400, 0x0, 0x32, 0x7, 0x4, 0x6, 0x9, 0xb, 0x1, 0x6, 0xfff, 0x8, 0x8001, 0xfffffffe, 0x9, 0x9, 0x10000, 0x1000, 0x220, 0x2, 0x1ff, 0x7, 0xffffffe0, 0x8, 0x1, 0x1, 0x7fffffff, 0x1, 0x40, 0x401, 0x10000, 0x3, 0x0, 0xfffffff7, 0x9, 0x8000, 0x0, 0x10001, 0x0, 0x62fb, 0xa32e, 0x1, 0x3, 0x1, 0x6, 0x10000, 0xfff, 0x400, 0x4, 0x6, 0x1ff, 0x8050, 0x80000001, 0x3, 0x6, 0x10000, 0x80000000, 0x16, 0x6bb4, 0x5, 0x8, 0x1c00, 0xa083, 0x7fffffff, 0xfffffe04, 0x1, 0x80000001, 0x2, 0xffffc687, 0x0, 0x9, 0x5, 0x0, 0x8, 0x2, 0x6ce5, 0x800, 0x1, 0xffff, 0x8, 0x74d, 0x47b, 0x6, 0x5, 0x1, 0x80, 0x7, 0x2473, 0x8, 0x8, 0x4, 0x8, 0x134d, 0x7f6, 0x9, 0xff9a, 0xffff0f37, 0xea4, 0x5, 0x3, 0x7, 0x4, 0x1, 0x8c, 0x9c, 0x9, 0xc24, 0x3, 0x1, 0x2, 0x3ff, 0x8, 0xc25b, 0x1, 0x8, 0x401, 0x8, 0x2, 0xc0000000, 0x101, 0x1000, 0xfffffffb, 0x3, 0x7, 0x10, 0x7fffffff, 0x5, 0x6, 0x100, 0x3ff, 0x8, 0x1, 0x7, 0x3, 0xfffffff7, 0xfffffffe, 0xfffffffa, 0x6, 0x77e, 0x9, 0x7, 0x7, 0x4a000000, 0x8, 0xa, 0x8000, 0xe, 0x3, 0x672d05ef, 0x0, 0x1, 0x6, 0x200, 0x4, 0x80000001, 0xffffffff, 0x5, 0xffff, 0x81, 0x5, 0x4, 0x1000, 0x81, 0x6, 0x3, 0xd50e, 0x10001, 0x4, 0x4, 0x8, 0x79ac, 0x4, 0x1, 0x0, 0x80000000, 0x4, 0x81, 0x1, 0x7, 0x6, 0x5, 0x4, 0x9, 0x401, 0x9, 0x1, 0x9, 0x4128, 0x8, 0x0, 0x7, 0x8, 0x3cbb, 0x668148c2, 0x4, 0x2565, 0x4, 0x8, 0x1, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0xbd68, 0x10000000, 0x6, 0x90000000, 0x5, {0xc, 0x1, 0x2, 0x6fa, 0xfffa, 0x3e9b}, {0xbd, 0x2, 0x7f, 0xe4c7, 0x7, 0x7}, 0xfffffff9, 0x2, 0x9}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x68, 0x5, 0x7, 0x5, 0x34, 0x1, 0xbe, 0x1, 0xc21, 0x8, 0x3ff, 0x1, 0x55c81eb3, 0x5, 0x598, 0x10, 0x0, 0x1, 0x4, 0x7, 0xfd, 0x3, 0x0, 0x3, 0x9, 0x1, 0x101, 0x3, 0x0, 0x80000001, 0x2, 0x4, 0x90, 0x2, 0x1, 0x2, 0x7a, 0x92, 0x9, 0x1, 0x8, 0x9, 0x30, 0xd, 0x5, 0x6, 0x768, 0x8, 0x9, 0xff, 0x8000000, 0xffff7fff, 0x32c, 0xfffffa68, 0x4, 0x6, 0xf, 0x9, 0x2, 0xb, 0x7, 0x7, 0x0, 0x7324ed62, 0x1abf, 0xfffffffd, 0xbd, 0x40, 0xdfc3, 0x7b8, 0x9, 0x2, 0x4, 0x1000, 0x2db9, 0x5, 0xffffffc0, 0x7, 0x62, 0x0, 0x2, 0x7ff, 0x1, 0xce9, 0x2, 0x8, 0x3, 0x7fffffff, 0x3, 0xf, 0x4, 0x1, 0x5, 0x1, 0xfffffe01, 0x7, 0x7f, 0x9, 0x0, 0x8, 0xe4eb, 0x400, 0x80, 0x5, 0x8001, 0x926, 0x9, 0x2, 0x0, 0x10001, 0xfffffffc, 0x3, 0x7, 0x10, 0x80000000, 0x7fffffff, 0x8, 0x1000, 0xfffffffc, 0x7, 0x58c, 0x28e, 0x6, 0x3, 0x4, 0x6, 0xfe, 0x6, 0x9, 0x2, 0x89, 0x8, 0x9, 0x0, 0x2, 0x6, 0x3, 0xf0, 0xff, 0x2, 0x8, 0x4, 0x2, 0x1107c439, 0x6, 0xf86, 0x9b, 0x1, 0x6, 0xffff, 0x1000, 0x9, 0x3, 0x5574, 0x7, 0x2, 0x7, 0x400, 0x6, 0x2, 0x2, 0x8, 0x9, 0x401, 0x7, 0x0, 0x1, 0x7, 0x3, 0x1de3, 0x2d9, 0x2, 0x10, 0x2ae, 0x200, 0x0, 0x2, 0x9e, 0x29, 0x9, 0x1, 0x4, 0x4, 0x1, 0x10001, 0x4, 0x44c9, 0x3, 0x7f, 0x0, 0x6, 0x401, 0x0, 0x0, 0x4, 0xf, 0xffffffff, 0x7, 0x9, 0x1, 0x5, 0xffffff60, 0x5, 0xfffffffe, 0xfffffffa, 0x9, 0x0, 0x7f, 0x5, 0x124, 0x3, 0x8, 0x100, 0x80000001, 0x8, 0xfff, 0x6, 0x9, 0x10, 0x7, 0x1ff, 0x8, 0x10000, 0xa, 0x9, 0x94, 0x65b4, 0x101, 0x9f, 0xfffff000, 0x9, 0x6, 0x8, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0xd, 0x7, 0x1, 0x897d, 0x475a, 0x40, 0xef7c, 0x6, 0x101, 0x0, 0x1, 0x0, 0x2f, 0x3, 0x2, 0x9, 0x6, 0xdbe]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x2, 0x10000, 0x7ff, 0x15400, 0x1e4, 0x3, 0xfffeffff, 0x3ff, 0x40, 0x1, 0x66, 0x1, 0x2, 0xff, 0x7, 0x81, 0x2, 0x2, 0x0, 0x81, 0x6, 0x7, 0x100000, 0x4b0bb39e, 0x8, 0x5, 0x7fff, 0x3, 0x0, 0x5, 0x81, 0xa4, 0x3c7, 0x10001, 0x5, 0x80000001, 0x1000, 0xfffffff7, 0x4, 0x3, 0x3, 0x7, 0x81, 0x7f, 0xec, 0x9, 0x8, 0x7, 0x0, 0x5, 0xfffffff8, 0x7, 0x10001, 0xb, 0x0, 0x10000, 0x3, 0x8502, 0x4, 0x1cd0, 0x0, 0x3, 0x3, 0x3, 0x40, 0x6, 0x5, 0x800, 0x9, 0x5, 0xa2d, 0x101, 0x5d2d, 0x8, 0x6, 0x7ff, 0xf7e4, 0x4, 0xfa, 0x3, 0x6, 0x2092, 0x50, 0x8, 0x1, 0x2, 0x80000000, 0xffff, 0x200, 0x7, 0x5, 0x16cd, 0xffffffff, 0x2, 0xd56, 0x1, 0x800, 0x4, 0x3, 0x4, 0x9, 0x6e, 0x9, 0xfffffff4, 0x5, 0x9, 0x800, 0x7, 0x0, 0x1, 0x8, 0x10001, 0xd067, 0x9, 0x6a6d, 0x8000, 0x8, 0x6, 0x5, 0x1ffc0, 0xe, 0x5076, 0x80000000, 0x5, 0x4, 0x3, 0x7, 0xe44a, 0x101, 0x3, 0x9, 0x800, 0x2, 0xffff9862, 0x813c, 0x1000, 0x5, 0x160e, 0x5, 0xa00, 0x401, 0x200000, 0xfffffffa, 0x9, 0x800, 0x4, 0x7f, 0x1899, 0x0, 0x7, 0x5, 0x10000, 0x7, 0x200, 0x401, 0xf, 0x0, 0x721d, 0x3, 0x0, 0x1, 0xaa7e, 0x9, 0x7fff, 0x525d, 0x7000000, 0x2, 0xd33, 0x3, 0x6, 0xfffffffc, 0xa3, 0x4000, 0x8001, 0x6, 0x0, 0x8, 0x9, 0x0, 0x9, 0x6, 0xb, 0x0, 0x5, 0x100, 0x7, 0x7, 0x842, 0x2, 0x80000000, 0xffff, 0x4, 0xffff, 0xed43, 0x5, 0x3, 0xfaff6dcb, 0x5, 0x7, 0x3, 0x9, 0x2, 0x9, 0x5, 0x0, 0x3, 0x6d, 0x7, 0x5, 0x5, 0x620, 0x80000000, 0x5, 0x1, 0xf4c, 0x6, 0x80000001, 0x4d6deb0f, 0x7, 0x5, 0x400, 0x6, 0xc3c, 0x7fffffff, 0x4, 0x5, 0x6, 0xfff, 0x6, 0x4, 0x1, 0x1, 0x5, 0x316, 0x3, 0x3, 0x9, 0x0, 0xd21, 0xbe, 0x4, 0x3, 0x1, 0x80000000, 0x5, 0xf1b, 0x96, 0x3, 0xd, 0x7, 0x7, 0x3, 0x2, 0x80, 0xc]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x6, 0x9, 0x6, 0x2, 0x33d4, 0x7, 0xb, 0x5, 0xc52, 0xd053, 0x98a2, 0x7fffffff, 0x400, 0x9e, 0x282, 0x1, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x5, 0x5, 0x5, 0x4, 0x194, 0xd28, 0x7, 0x80, 0x4, 0x0, 0x0, 0x61680e18, 0xd, 0x6, 0x4, 0xfffffff8, 0x0, 0x3, 0x8, 0x230c3e26, 0x17, 0xc, 0x6, 0x800, 0x8, 0x8, 0x8b, 0xfffffffd, 0x4, 0x9, 0x3, 0x3ff, 0x1, 0x100, 0x9, 0x800, 0x5, 0x80000001, 0x6f7, 0x2, 0x3, 0x7, 0x1ff, 0x7, 0x3, 0x7fffffff, 0x1, 0x3ff, 0x4, 0xfffffff7, 0x2, 0x9, 0x0, 0x2, 0x9, 0x3, 0x0, 0xfc2, 0x2, 0x9b, 0x5, 0x0, 0x4, 0x1647, 0x2, 0x6, 0x3ff, 0x800, 0x4, 0xe57, 0x7c9, 0x1000, 0x6, 0x5, 0x0, 0x1, 0x80000001, 0x81, 0x7ff, 0x1, 0x9, 0x1, 0x3, 0x9, 0x138ada87, 0x388b, 0x5, 0x0, 0x4, 0x4, 0xfffffff8, 0x4, 0x7, 0x5, 0x5, 0xffffffff, 0x3, 0x3, 0x1, 0x10, 0x8000, 0x8, 0x8, 0x5d2, 0x4, 0x5, 0x100, 0x6, 0xffffffff, 0x0, 0x5, 0x0, 0x43, 0x4, 0x6, 0x1ff, 0x5, 0x7, 0x634, 0x79, 0x66, 0xb1, 0x9, 0xcb, 0xae6, 0x1, 0xaa5, 0x0, 0xfffffff7, 0x5, 0x5, 0x3, 0x3, 0x8000, 0x5b6, 0x100, 0x6, 0x80000001, 0x40, 0x101, 0x81, 0xfffffff8, 0x7, 0x8, 0xf, 0x3, 0x2, 0xb, 0x1, 0x4bb, 0x200, 0x401, 0x80000001, 0x8, 0x9000000, 0xfc33, 0x8, 0x43, 0x0, 0x8, 0x8, 0x2, 0x81, 0x6, 0x4, 0x4, 0x2, 0x8, 0x3ff, 0x80000000, 0x4, 0x9, 0x6, 0x8, 0x6, 0x81, 0x0, 0x5, 0x1, 0x2, 0x4, 0x0, 0x8, 0x9, 0xd2, 0x4, 0xff, 0x5, 0x4, 0x9, 0x0, 0x8, 0xc0, 0x2, 0x6, 0x40000000, 0x9, 0x21cd, 0x2, 0x6aae, 0x3, 0x7f, 0xb, 0x1ff, 0x6, 0x6, 0x9, 0x502b, 0x1, 0x5, 0x7, 0x3, 0x45b6, 0x6, 0x80000001, 0x9, 0x7, 0x8, 0xffff0001, 0x9, 0x0, 0x0, 0x776, 0xcdcc, 0x9, 0x3, 0x3, 0x8, 0x0, 0xffffff1b, 0x3, 0x1, 0xfffffff1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x1ab1e973, 0x10000, 0x4, 0x80000001, 0x2, 0xcc14, 0xe4, 0xf, 0x1, 0x4, 0x4, 0x7, 0x1, 0x7, 0x0, 0x40, 0x4, 0x8000, 0x3, 0x7, 0x3, 0x8, 0x5, 0x9, 0x81, 0xfffffff8, 0x4, 0xe8, 0x2, 0x0, 0x5, 0x1, 0x8, 0xd, 0x3, 0x8, 0x1, 0xaa1c, 0x8, 0x9, 0xfffffffb, 0x9, 0x1, 0x70c, 0x4, 0x5, 0x4, 0x6cd, 0x2, 0x4, 0x100, 0x6, 0xc000000, 0x7fffffff, 0x4, 0xe, 0x8, 0xa, 0x0, 0x0, 0x9, 0x2, 0x7, 0x41e5, 0x200, 0x3, 0x9, 0x2ac, 0x9, 0xc, 0x8fc5, 0x7, 0x5, 0x5, 0x200, 0x8, 0x1, 0x8001, 0x916, 0x3, 0x7, 0x3, 0x1cf, 0x8, 0x101, 0x200, 0x9efd, 0xbb9, 0x8, 0x10001, 0x9, 0x8000, 0x2, 0x40, 0x9, 0x8, 0x2, 0xfffffff9, 0x9, 0x5, 0x3, 0xffffffff, 0x4, 0x8, 0x7, 0x0, 0x2, 0x7, 0x1, 0x4, 0x4df9, 0x1, 0x1000, 0x8, 0x9, 0x4, 0x9, 0x7, 0x0, 0x3, 0x2, 0x0, 0x5, 0x9d6c, 0x4, 0xe159, 0xf1d, 0xfc4d, 0x9, 0xaebc, 0xa54, 0x10001, 0x5, 0x6, 0x80000000, 0x4, 0x0, 0x5, 0x1, 0x8, 0x2, 0x1, 0x4, 0x3ff, 0x1cf, 0x7, 0x7f, 0xffffffff, 0x7, 0x1, 0x3, 0x38000, 0x8, 0x7, 0x5, 0x10f74faa, 0x3, 0x10001, 0x101, 0x5, 0x4, 0x1, 0x1, 0x2, 0x4, 0x10001, 0x3, 0x0, 0x4, 0xc, 0xfffffffc, 0xf, 0x6, 0x576b, 0x30b, 0x3, 0x80000000, 0x3, 0x8, 0x4d9725ae, 0x784, 0x9, 0x6, 0xfff, 0x100, 0x24d6, 0x1, 0x3ff, 0x800, 0x4, 0x64000000, 0x7fffffff, 0x1, 0x5, 0x7, 0x2, 0x10001, 0xfffffffa, 0x0, 0x4, 0x3, 0x7f, 0xffffff32, 0x10001, 0x9452, 0x3d, 0x5, 0x8, 0xfffffeb8, 0x92f, 0x2, 0x8, 0x80000001, 0x6, 0x7f, 0x81, 0x5, 0x3, 0x2, 0x8, 0x81, 0x0, 0x2, 0x7f, 0x6, 0x0, 0x2, 0x0, 0x7, 0x5, 0xfffff4a4, 0x6, 0xf4, 0x8, 0x100, 0x2, 0x8, 0x4, 0x99a3, 0xa0, 0x0, 0x80000001, 0xf, 0x9, 0x80, 0x2, 0xfffffff8, 0x6, 0x8, 0x6, 0xa, 0x8, 0x1c00000, 0xfffffffc, 0x3]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x10, 0x0, 0x4, 0x80, 0x4, 0x2, 0x586, 0x6, 0x10, 0xffffffff, 0xd, 0x8, 0xe052, 0x6, 0x20, 0x6f, 0xa87d, 0x0, 0x6aa, 0x80000001, 0x2, 0x8b, 0x800, 0x7, 0xffffffff, 0xffffffc6, 0xc8, 0x2, 0x0, 0xe8, 0x7, 0xe, 0x4, 0xffff35c6, 0x6, 0x2, 0x2, 0xc, 0xfb8, 0x2, 0x4, 0x5, 0x100, 0x5, 0x9, 0x6, 0x5, 0x10000, 0x2, 0x1, 0xe, 0xa16, 0x2, 0x5f, 0x3, 0x7ff, 0xa431, 0xfffffffe, 0x4, 0x5, 0x4, 0x8, 0x1000, 0x4, 0xe12, 0x3, 0x6, 0x5453, 0x1ff, 0x5, 0x3, 0x0, 0x0, 0x4, 0x7, 0x10001, 0x8, 0x7fff, 0x10001, 0x0, 0xea, 0x9, 0x1, 0x8e3f, 0x2, 0x10000, 0xfffffffb, 0x8001, 0xff, 0x6, 0x8, 0x6, 0x7, 0x5, 0xffffffff, 0x1, 0x6, 0x34, 0x81, 0x3, 0x9, 0x80, 0x59, 0x8, 0x8, 0x2, 0x2, 0xe, 0x4, 0x6e, 0xeeab, 0x7, 0x71, 0xfffffc00, 0xfffffbff, 0x9, 0x7ff, 0xffff4993, 0x6, 0xfffffffa, 0xf27, 0x6e5, 0x3, 0x3, 0x5, 0x3, 0x42c, 0x1, 0xf7, 0x8, 0x7, 0x1, 0x3ff, 0x3f, 0x7fffffff, 0x5eb, 0x3, 0x60000000, 0x6, 0x81, 0x5, 0x9, 0x2, 0x89e, 0x8, 0x5, 0xffff3211, 0x7, 0x101, 0x0, 0x5, 0x2, 0x2, 0x1, 0xa25, 0x401, 0x2, 0x3, 0xc, 0x6bc, 0x7fff, 0x6, 0x1ff, 0x10001, 0x4, 0x7804, 0xff, 0x400, 0x84e, 0x5c98, 0x1, 0x1, 0x7, 0x4, 0x3, 0x8000, 0x5, 0x8118, 0x7f4, 0x10, 0xff, 0x9, 0x0, 0x7, 0xb, 0xd2f8, 0x90000000, 0x1, 0x9, 0xffffffff, 0x2d81, 0x8, 0x2ee, 0x7fff, 0xffff, 0xffffffff, 0xfffffbff, 0x4, 0x5, 0x800, 0x6, 0xfffffbfa, 0x4, 0x6, 0x4, 0x0, 0xfff, 0x120, 0x1, 0x210b551e, 0x5, 0xff, 0x9, 0x9, 0x1411, 0x400, 0x5, 0xba8, 0x8, 0x1, 0xffff7fff, 0xbe8, 0x14, 0x20000, 0x2, 0x6, 0x81, 0x9, 0xad5b, 0x8, 0x200, 0xd127, 0x1, 0xfffffe00, 0x0, 0xb, 0x8001, 0x18, 0x3, 0x0, 0x63a, 0x3176, 0xfffffe01, 0xd4, 0xe3a, 0xd7, 0x9, 0x7fff, 0x2, 0x8000, 0xfffffffd, 0x9, 0xc410, 0x3b7e, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xcf, 0x1, 0x7, 0x9, 0xfffffff8, {0x7, 0x0, 0x1, 0x12, 0xc8, 0x3}, {0x9, 0x0, 0x4, 0xa9f1, 0x7, 0x2}, 0x6, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xbeb, 0xa, 0x9, 0x6, 0x3, 0x2a4, 0x2, 0x5038, 0x0, 0x80000001, 0xfff, 0x57d5a666, 0x2, 0x1, 0x7, 0x8, 0x2, 0x1, 0x8, 0x0, 0x80000000, 0x5f, 0x3, 0x9, 0x8de3, 0x4, 0x0, 0x5, 0x0, 0x0, 0x5, 0x675f244e, 0x8, 0x6, 0x401, 0xe, 0x7, 0x9, 0x3, 0x2, 0x8, 0xffffffff, 0x9, 0x8, 0x9, 0x10001, 0x6ded, 0x7, 0x5, 0xe, 0x5, 0x3, 0x6, 0x7, 0x8, 0x7fc000, 0x0, 0x7, 0x2, 0x9, 0x9, 0xc, 0x7, 0x2, 0xf, 0x8001, 0x3, 0x2, 0x8, 0x6c6c44be, 0x1, 0x4, 0x80, 0x1, 0x9, 0x8b5a, 0x0, 0x5, 0x80000001, 0x7fffffff, 0x2, 0x8, 0x9, 0x1, 0x0, 0xda, 0x6, 0xfffffffe, 0x2609, 0x2, 0x42, 0x7, 0xfffffdff, 0x5, 0x7, 0x5, 0x3, 0x4, 0x1, 0x5, 0x6, 0x6, 0xe, 0x7, 0x3, 0x200, 0x5, 0xb, 0x7, 0x3ff, 0x1, 0x2, 0x4, 0xfffff47c, 0x0, 0x8001, 0xf2c, 0x8, 0x10001, 0x1c68, 0x2, 0x1ff, 0x200, 0xfff, 0x10000, 0x400000, 0x9c, 0x7, 0x7, 0x9, 0x0, 0x0, 0x7, 0x0, 0x6, 0x3, 0x4, 0x8, 0x7, 0x4, 0x3, 0x9e9b, 0x8, 0xf8dd, 0x400, 0xffff, 0x40, 0x4, 0x9, 0x0, 0x4, 0x5, 0x10000, 0x1050, 0x6, 0x9, 0x1, 0x1, 0x401, 0x7, 0x40, 0x101, 0x2, 0xc38, 0xff, 0x4, 0x5, 0x7fff, 0x5, 0x5, 0x85, 0x100, 0x1, 0x9, 0x1, 0x9, 0x7986, 0x6, 0x1, 0x2, 0x6, 0x5, 0x8, 0xfe, 0x9, 0x8, 0x5, 0x9, 0x7fffffff, 0x0, 0x2, 0x5, 0x1f6, 0x7, 0x2, 0xca, 0xff, 0x6, 0x5, 0x8, 0x8, 0x7, 0x4, 0xfffffff6, 0x9, 0x1, 0x100, 0xd5, 0x9, 0x7, 0x101, 0x64c, 0x4, 0x3, 0x916d, 0x8, 0x8d0d, 0xcb0, 0x9, 0x9f6, 0x80000, 0x0, 0x6, 0x73, 0xdf5, 0x2, 0x400, 0x12f4709c, 0x2, 0x1, 0x9be1, 0xfffffffb, 0x7, 0x3, 0x3, 0x6, 0x7, 0x8, 0x1, 0x3, 0x7, 0xee, 0x9, 0xc, 0x5, 0x5, 0x86, 0x1000, 0x3ff, 0x6, 0x9c9c, 0xf, 0x800, 0x2, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x3, 0x7f, 0xb801, 0x0, 0x0, 0x80, 0x200, 0xeb0, 0x0, 0xa4, 0x5, 0x401, 0x4, 0x10001, 0x7e7, 0x3, 0xfffffffa, 0x4, 0x4, 0x3, 0xc, 0x6, 0x4, 0x4, 0x7, 0x4, 0x9, 0x7, 0x10, 0x2b, 0x10, 0x8, 0x1, 0x37, 0x114, 0x6, 0xffffffff, 0x33e, 0x4, 0x89, 0x1, 0x4, 0xfffffff9, 0x0, 0x0, 0x32, 0x101, 0x80000001, 0xfffffff8, 0x7, 0x4, 0x8, 0x400, 0x6, 0x0, 0x0, 0x5, 0x100, 0x7, 0x1, 0xfffff001, 0x7fffffff, 0x101, 0x8, 0x1, 0xfffffff9, 0x7fff, 0x2, 0x0, 0x1, 0x3, 0x2305, 0x40, 0x6, 0x91, 0x9, 0x7, 0x200, 0x1, 0x76, 0xfffff5a4, 0x80000000, 0xff, 0x3, 0x4, 0x7, 0x2, 0x3, 0x2, 0xffff, 0x7f, 0x3, 0xa7, 0x1000, 0x93, 0x200, 0xa98, 0x1ff, 0x4, 0x6, 0xb4a1, 0x4, 0x1, 0x7ab4, 0x9, 0x7, 0x3, 0x1, 0x8, 0x7, 0x4, 0xb, 0x1, 0x1, 0x40ea, 0x8000, 0xa139, 0x4, 0xb3, 0x5, 0x1, 0xa83, 0xbfd, 0x5, 0x2, 0x5, 0x3, 0x7fffffff, 0x7, 0x9, 0x3, 0x200, 0x1000, 0x80, 0x1, 0x6, 0x6, 0x5, 0x9, 0xf, 0xd8, 0x2, 0xd7a, 0x6, 0x5d, 0x743e, 0xfff, 0x1000, 0x5, 0x8, 0x0, 0x7, 0x3a, 0x3, 0x6, 0x8, 0x2, 0x10000000, 0x9, 0xfffffe01, 0x6, 0x8, 0x80000000, 0x100, 0x1, 0x6, 0x8, 0x3, 0x3, 0x8, 0xffffff8a, 0x5, 0x400, 0x4, 0x8, 0x8, 0x6, 0x6, 0xb34070c, 0x3, 0x80, 0x1000, 0xec0, 0xfffffffc, 0x73d1, 0xe, 0x4642, 0x82, 0x2, 0x9, 0x74, 0x0, 0xffffffff, 0xc7, 0x0, 0x0, 0x4, 0x3ff, 0x8, 0x1, 0x4, 0xfff, 0x0, 0x9, 0xff, 0x3, 0x3, 0x80000, 0x4e3, 0xa0000000, 0xffffffff, 0xfffffffc, 0x40, 0xfffffffc, 0x3, 0x4026, 0x931, 0x488443d5, 0x26c, 0x4, 0x7, 0x0, 0x8, 0x45, 0x5, 0x5, 0x3, 0x8, 0xa, 0x1, 0x6, 0xfffff433, 0x3, 0xb61b, 0x2, 0x1, 0x0, 0x3, 0x7, 0x9, 0x8, 0xc, 0x8aa, 0x80, 0xa, 0x9, 0x7, 0x7, 0x1, 0x1, 0x1f, 0x80000001, 0xa, 0x60000000, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xee4, 0xfff, 0x5, 0xffffffff, 0xffffff00, 0x5, 0x3, 0x7d, 0x8, 0x4cb9, 0xd, 0xe322, 0xb, 0x100, 0x8, 0x2, 0x6d, 0x400, 0xedc, 0xc, 0x9, 0x8001, 0x0, 0x6, 0x0, 0xa, 0x5, 0x8, 0x3, 0x7, 0x9, 0x8, 0x9, 0x9, 0x7, 0xbe5, 0x70, 0x5, 0x8, 0xfa, 0x7ff, 0x2, 0x9550, 0x1, 0x6, 0xeb6, 0xc5f8, 0x1, 0xbe, 0xfc000000, 0x0, 0x0, 0x80000000, 0x40, 0x86c5, 0x4, 0x0, 0x1000, 0x0, 0x2, 0x7, 0x5, 0x8, 0x7f, 0xefd0, 0x2, 0x80000000, 0x10, 0xfffffffc, 0x5d0d, 0x743, 0x3, 0x5, 0xe2, 0x4, 0xe9, 0x80, 0x2aec, 0x8, 0xffffff80, 0x7, 0x0, 0xfffffffb, 0xfffffe7b, 0x8d4, 0x1, 0xf30f, 0xa8b4, 0x8, 0x7f, 0x2, 0x2, 0x1, 0x1b, 0x2, 0xa, 0x7fffffff, 0x4b, 0xfffffffd, 0x943, 0x10000, 0x5, 0x0, 0x40, 0x7fff, 0x0, 0xb, 0x41d4, 0x9, 0x5, 0x2, 0x400, 0x6, 0x0, 0x0, 0x4, 0x0, 0xa8, 0x10001, 0x2, 0x5, 0x2, 0x6d, 0x401, 0x2, 0x5, 0x3, 0x8, 0x5acf, 0xfbe, 0x0, 0xfffffffd, 0x2, 0xffff, 0xfffffc00, 0x1, 0xb097, 0x200, 0x9, 0xf, 0x7, 0x40, 0x1000, 0x3, 0x80000001, 0xa906, 0x17f, 0x356d, 0x4, 0xe0af, 0x81, 0xf, 0x3, 0x2, 0x5ab, 0x0, 0xffffffff, 0x2, 0x0, 0x7, 0x7fff, 0x2, 0x7, 0x5, 0x6, 0x8, 0x9, 0x59a3, 0x6, 0x6, 0xe0, 0x9, 0x5, 0xfffffff9, 0x4, 0x2, 0x7, 0x7, 0x362c, 0x6a42, 0x4, 0xffffff10, 0xe2c, 0x1, 0x39, 0x0, 0x0, 0xffffffff, 0x7, 0x4, 0x8, 0x40, 0x8, 0x7b, 0x7, 0x6, 0x7, 0x0, 0x2, 0x4c, 0x8, 0x3ff, 0x2, 0x7, 0xe, 0xb, 0x0, 0x7, 0x2, 0x7, 0x0, 0x2, 0x1, 0xb5, 0x9a, 0xaf0, 0x400, 0xe, 0x3, 0x3, 0xa9, 0x10, 0x98, 0x3, 0x7, 0x40, 0x8, 0x8, 0x2, 0x2, 0x1ff, 0x7, 0x22b, 0x5, 0x9, 0x9, 0x3, 0xf8, 0x3, 0x1, 0x5, 0xe, 0x5, 0x14, 0x8, 0xc, 0xfff, 0x6dfd, 0x5, 0x80000000, 0x9, 0x8, 0x7f, 0xacef, 0xe, 0x8]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xa}]]}, {0x68, 0x6, "11f14d428e66745cf672c761527feff2da466cea265933a79cb9cd9af9183a46b93ceab328ea60a4a61e2555c65ac36531753dc4fd27521449a2f8503ddbe13dc5f0520675a35d9a19f3752d202acbd8ec0263aad5fc762e67b7aaccf24b506d944e566c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x3}}}}, @m_mpls={0xb4, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xfc}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x78, 0x6, "42c9efae8b1d0bf9f106e42dca5c7ba96bd1e59edb618205091a7006a1d235a040fe8ec3c9e9611cda392f62179ceae015746e6e6406bd71901cfd9de2c9e5ef4643b126570b58be1db8ef2e0c89c519f7ab9d28e0498591b4ef5554fe99977b2053709dea193156c4975dbe9170f0aced70c60b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BPF_FD={0x8, 0x6, r3}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x45}}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x5d4, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x7f, 0x6, 0x9, 0x5}, {0x2, 0x2, 0x2, 0x9}, {0x1, 0xc, 0x10}, {0x2, 0xa, 0x8, 0x222}, {0xe, 0x1, 0xc8, 0x80000000}, {0x4, 0x3, 0x17, 0x6}]}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_ife={0x98, 0xc, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x9}]}, {0x66, 0x6, "9d5d415bbfc554c893d4f3423f7d29a31a2be9a47d1ba62c37059693efb6d436f7a5fc373b9800a642da4949e3d30f458fb6820e877864b84aa81424f570ef70f0593da6c11e1116d8f9be4fdddcbe3b48e326530304932fb5d546dcc5594dc62f17"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_BPF_ACT={0x4ec, 0x1, [@m_ife={0x128, 0x11, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x32cd}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}]}, {0xd3, 0x6, "161cf8b06529b37577427f6a0a608bd75e4b56d39c27c16a79a56db9cd560968ac439ffa600c41545d8821d6a3cdad30b7dbc4e08b7130b42affc3729bfccc5a8e9d9e5939f7410c54369e7dc28335478696c283ab287599ad42b2d0bcb6ccc5e35403749aac5cf7a5d21638a2498e77730824d0ee6c73210ebb5711589f770c45a7f457cf66496cc26f0f40793e62142b1087858d7f9f9f2b686eb4256e5feb0e5b3e260c38d6646417f163ff4a6ac42852f90ccf868453d4c92853bc3fe6feb85171e4ed19e766311de08d955f06"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0xf4, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0xc5, 0x6, "1d287cfc3b2766f680a7ce902dc55aebb5ecd33edf41e898f4614f21c35038a15ebf6a81827cf28d7dabe782f0ae8fbb41f7290e0b47010b857badf60be169a70b865a351736d7d3e0a1fa37d493162f81160e975f12b5f92f704e4edf5b2d10b4deabf4d34e2299d652c07adc8f206a2ceead00b236a572b3ee181e242b1abfafd7fbe471676b7f48a1fb80015a8821df1d8f1b0a92b411c208321737a3156c80a29255b3a2b176231dbbd194a6b9bb024ea2e39236cc097011fc64be333d4894"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0x174, 0x1f, 0x0, 0x0, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x34, 0x4, [{0x8, 0x8, 0x3, 0x81}, {0x1, 0x1, 0x2, 0xb4b}, {0x9, 0x9, 0x2, 0x2}, {0x1, 0x3, 0x10, 0x7}, {0x10, 0x0, 0x7, 0xffffffff}, {0x9400, 0x56, 0x7, 0xba9b}]}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x5, 0xa5, 0x6, 0xaf9a}, {0x4, 0x7, 0x1, 0x8}, {0x0, 0x0, 0x1, 0xf9c}, {0x0, 0xc, 0x30, 0x1}, {0x40, 0x6, 0x9, 0x2}, {0xffd5, 0x6, 0xeb, 0x400000}, {0x60, 0x7f, 0x3, 0x800}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x6, 0x7, 0x1, 0x7}}]}, {0xc2, 0x6, "cdef5f2d151d15c17745609d9fe4eae6aaf23b14592c56faa1c91abdc8043e8aa7719aea9314d23eb8c6ad9d7bb339ace37df2dca5b63cab20285cf0270fc554b602655e20d2d61149315d30cbbec7751ef08b1a795393ad7fb9fdf38fead2e8dcc3642821fce83d94fc1dc8627406821b5e6f044f4a9dcaf69ccfb93d2eaa755209cbd96b8b061a40293cb9666c641e2cc20adb295efb0ca2fbf7a178d04b3cfec2bb88752ee656dcfe9e95161933083eb71f2ca3bcecc72373073ed86f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x158, 0x14, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_ACTION={0x6, 0x3, 0x2}, @TCA_CT_LABELS={0x14, 0x7, "cf6d77f67db1185f8c03c94838a6d8b5"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_ZONE={0x6, 0x4, 0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x2}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, {0xc6, 0x6, "a0d5c2e62980d45758d8fc8686ee060051a1e3a76291bf837da2c365c72a02904f93c0890ab3dadca843be435f31661c10ee642053effb3cca719e924ede7b93ab5f193a1c08e87bf3ee5461c37d18defbf170fe7fe5e4ec8e62a77be2681fe565a68e5228d037800e94567cb1c3fc0f3bb1792e1764d62978614b9a38d181aabfa0cf9a2d485fe2cd7fc54e0a057b64168113fc342c8328d7fbaa0a573ea4c7756452175f6e122c83ae84f81e2545155d2613db6128e1c3214ac6cca87b2e63786d"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x4764}}, 0x0) 717.14296ms ago: executing program 1 (id=10645): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f00000005c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@empty, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4040, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}, {0xbe00, 0x88be, 0x8}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x2000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14880, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x20000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xb]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv6_getmulticast={0x14, 0x3a, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000040)=0x2) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0x12c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x118, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x94f}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffffff}]}, @NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6e}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "518ae00cc327b69710aedd580d41e21d"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e5e75f1ca5ca2f2ad09abf43973e4797b27ec883db73fa93f5d1d82408be7516"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f2b135355a1cf508fc1dda7f76526f8ed5439d23e5d08f870ad156746edd6f85"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "69d47ad70c7e7415a7a8710f396d19ac"}]}]}, 0x12c}}, 0x0) 707.229593ms ago: executing program 4 (id=10646): r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x3, 0x4}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14c, 0x40, 0x1, 0x70bd2a, 0x25dfdbff, {0x1}, [@nested={0x124, 0xcb, 0x0, 0x1, [@nested={0x120, 0x8, 0x0, 0x1, [@nested={0x119, 0x77, 0x0, 0x1, [@typed={0x8, 0xa4, 0x0, 0x0, @fd=r1}, @generic="0edc637154a4b102c36d0df589e11af1af91f5f5e16e5ebbb8a1b686d8174be92f00f92c0f0f569273189889a9bd8098dda708c434ce8ea3a3cd9ec8262158f219e09b61ef10e3826a202deb6da1c5fde9e9576255912825ecaf87477872899d31a2f1f84e5e7ad826a7fc3030e3a7754788b820b8c2bd058f9ffd491171bab4b1df00dd1400def9a3c2c25645558ceef63a598244650017273cb81fa2a2d95d1794610e07fe32b38d", @generic="e32f16dc937c60b2c2fbf8fb0efc3c8d125fe0a83cfd48b6a9c5b8b8e211b5037649e61a6cb555cf5c49730d92c2ce48cd0ed5e0a91092608df80d5add0fe994ddf6e7374084996d5dad0110a8fcf51892bf205f52550741d5062ca4d66df82ddbe3c0c5"]}]}]}, @typed={0x8, 0x12f, 0x0, 0x0, @pid=r2}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x14c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 596.902527ms ago: executing program 2 (id=10647): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="560a0000000000006111bc00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) socket$inet_udp(0x2, 0x2, 0x0) 565.155881ms ago: executing program 4 (id=10648): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x3}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x34}, 0x20) 482.642356ms ago: executing program 0 (id=10649): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff807000000000000000000ffa6080009000d000000", 0x24) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x8917, 0x0) 433.207157ms ago: executing program 1 (id=10650): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="180000001a00fd5800006c610e2a00000a"], 0x18}, 0x1, 0x0, 0x0, 0x811}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x91}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 432.619647ms ago: executing program 2 (id=10651): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) 356.790886ms ago: executing program 4 (id=10652): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37786fd808252372a31e4939884f0abc3c", 0x35}], 0x1}, 0x24004010) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040), 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x2c8, r4, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x29}}}}, [@NL80211_ATTR_TX_RATES={0x2a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x130, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x7, 0x5, 0x4, 0x8, 0x2, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b7, 0x0, 0x5, 0x10, 0x3, 0xcfe2, 0x4c]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x8}, {0x6, 0x4}, {0x5, 0x5}, {0x3, 0x9}, {0x0, 0x1}, {0x1, 0x6}, {0x3, 0x6}, {0x4, 0x5}, {0x1, 0x8}, {0x6, 0x6}, {0x7, 0x9}, {0x0, 0x3}, {0x7, 0x1}, {0x5, 0x9}, {0x2}, {0x7}, {0x4, 0x6}, {0x0, 0x5}, {0x3, 0x7}, {0x6, 0x8}, {0x5, 0x5}, {0x4, 0x2}, {0x1, 0x9}, {0x2, 0x2}, {0x3, 0x2}, {0x3, 0x9}, {0x1, 0x7}, {0x1, 0x4}, {0x1, 0x6}, {0x1, 0x9}, {0x6, 0x6}, {0x1, 0x9}, {0x0, 0x5}, {0x6, 0x9}, {0x1, 0x4}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0x2}, {0x0, 0x6}, {0x4, 0x9}, {0x6, 0x8}, {0x3, 0xa}, {0x4}, {0x7, 0x2}, {0x5, 0x8}, {0x0, 0xa}, {0x6, 0x3}, {0x1, 0x2}, {0x2, 0x4}, {0x6, 0x3}, {0x2, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x1, 0x4}, {0x4, 0x7}, {0x4}, {0x4}, {0x2, 0x8}, {0x2, 0xa}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x7, 0x6}, {0x0, 0x9}, {0x4, 0x9}, {0x2, 0x7}, {0x7, 0x4}, {0x6, 0x2}, {0x3, 0x5}, {0x2}, {0x4, 0xa}, {0x4, 0x7}, {0x1, 0x8}, {0x5}, {0x7, 0xa}, {0x6, 0x4}, {0x3, 0x6}, {0x3, 0x8}, {0x2, 0x7}, {0x3, 0x7}, {0x7, 0x1b}, {0x2, 0x9}, {0x6, 0x5}, {0x2, 0xa}, {0x1, 0x3}, {0x7, 0x8}, {0x1, 0x8}, {0x5, 0x8}, {0x3, 0x6}, {0x1, 0x4}, {0x2}, {0x4, 0x8}, {0x6, 0x2}, {0x3, 0x3}, {0x3}, {0x6, 0x8}, {0x6, 0x3}, {0x7, 0x2}, {0x2, 0x8}, {0x1}, {0x6, 0x7}, {0x4, 0x8}, {0x7, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x12, 0x1b, 0x5, 0x4, 0xc, 0x0, 0x2, 0x6, 0x30, 0x18, 0xc, 0x36, 0x24, 0xb, 0x9, 0xc, 0x9, 0xc, 0x1b, 0x3, 0x5, 0x1, 0x24]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6a, 0x36, 0x48, 0x2, 0xb]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x7, 0x8}, {0x4, 0x3}, {0x4, 0x4}, {0x3, 0x8}, {0x2, 0x7}, {0x3, 0x6}, {0x4, 0x6}, {0x5, 0x6}, {0x2, 0x3}, {0x4, 0x5}, {0x3, 0x2}, {0x1}, {0x5, 0x3}, {0x2, 0x2}, {0x7, 0xa}, {0x2, 0x3}, {0x6, 0x9}, {0x1, 0x2}, {0x5, 0x4}, {0x2, 0x4}, {0x0, 0x3}, {0x0, 0x4}, {0x1, 0x1}, {0x5, 0xa}, {0x3, 0x4}, {0x3, 0x1}, {0x5, 0x2}, {0x7, 0x3}, {0x1, 0x8}, {0x2, 0x2}, {0x2, 0x5}, {0x5, 0x7}, {0x2, 0x2}, {0x1}, {0x7, 0x7}, {0x6, 0x2}, {0x0, 0xa}, {0x6}, {0x5, 0x2}, {0x3, 0x8}, {0x3, 0x4}, {0x4, 0xa}, {0x6, 0x4}, {0x7, 0x6}, {0x2, 0x2}, {0x0, 0x7}, {0x4}, {0x5, 0x4}, {0x1, 0x1}, {0x7, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7, 0xa}, {0x4, 0x4}, {0x7, 0x7}, {0x0, 0x3}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x4}, {0x0, 0x4}, {0x3, 0x1}, {0x6, 0x6}, {0x2, 0x8}, {0x3, 0x8}, {0x0, 0x4}, {0x1, 0x3}, {0x0, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x0, 0x7fff, 0x4, 0x4, 0x7ff, 0x9]}}]}, @NL80211_BAND_2GHZ={0x110, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x401, 0x6, 0x6383, 0x101, 0x3ff, 0x7, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0xde1a, 0x200, 0x4f, 0x1, 0x5, 0x7f, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x2, 0x8}, {0x0, 0x1}, {0x7, 0x1}, {0x5, 0x5}, {0x1, 0x9}, {0x7, 0x9}, {0x7, 0x3}, {0x4, 0x5}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x60, 0x4, 0x2, 0x60, 0x16, 0x0, 0x30]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x6, 0x4}, {0x6, 0x7}, {0x1, 0x4}, {0x2, 0x7}, {0x4, 0x2}, {0x5, 0x1e}, {0x6, 0x3}, {0x5}, {0x7, 0x4}, {0x1, 0x8}, {0x5, 0x4}, {0x0, 0x5}, {0x1, 0x4}, {0x1, 0xa}, {0x5}, {0x4, 0x6}, {0x0, 0x6}, {0x1, 0x7}, {0x4, 0x6}, {0x1, 0x4}, {0x0, 0x1}, {0x3, 0x5}, {0x0, 0x9}, {0x5, 0x2}, {0x6, 0x7}, {0x3, 0x3}, {0x7}, {0x0, 0x8}, {0x1, 0x3}, {0x4, 0x1}, {0x2, 0x9}, {0x6, 0x6}, {0x4}, {0x1, 0x8}, {0x3, 0x9}, {0x0, 0x8}, {0x3, 0xa}, {0x2, 0x6}, {0x2, 0x4}, {0x3, 0x9}, {0x7, 0x3}, {0x6, 0x4}, {0x5}, {}, {}, {0x2, 0x2}, {0x0, 0x1}, {0x7, 0x7}, {0x5, 0x6}, {0x6, 0x3}, {0x5, 0x5}, {0x6, 0x9}, {0x6, 0x6}, {0x2, 0x9}, {0x5, 0x7}]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x2, 0x1}, {0x2, 0x7}, {0x5, 0x7}, {0x0, 0x6}, {0x0, 0x5}, {0x7, 0x3}, {0x7, 0xa}, {0x1, 0x8}, {0x1, 0x8}, {}, {0x5, 0x6}, {0x2}, {0x6, 0xa}, {0x3, 0x1}, {0x3, 0xa}, {0x4, 0xa}, {0x7, 0x2}, {0x2, 0x6}, {0x5, 0x7}, {0x0, 0x3}, {0x5, 0x5}, {0x2, 0x4}, {0x1, 0x1}, {0x5, 0x5}, {0x5, 0x6}, {0x1, 0x1}, {0x1, 0x1}, {0x6, 0x7}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0x4}, {0x1, 0x5}, {}, {0x3, 0x9}, {0x2, 0xa}, {0x3}, {0x0, 0x3}, {0x3, 0xa}, {0x2, 0x5}, {0x4, 0x7}, {0x1, 0x1}, {0x6, 0x9}, {0x2, 0x7}, {0x3, 0x5}, {0x7, 0x6}, {0x0, 0x2}, {0x2, 0x8}, {0x2, 0x3}, {0x3}, {0x3, 0x6}, {0x3, 0x6}, {0x1, 0x2}, {0x3, 0x4}, {0x3, 0x2}, {0x3, 0x3}, {0x5, 0x3}, {0x5, 0x7}]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x0, 0x4}, {0x5, 0x4}, {0x0, 0x5}, {0x7, 0x3}, {0x0, 0x8}, {0x3, 0x2}, {0x6, 0x3}, {0x6}, {0x6, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x1, 0x9}, {0x0, 0x2}, {0x0, 0x1}, {0x7, 0x9}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x7, 0x9}, {0x7, 0x9}, {0x3, 0x6}, {0x0, 0x3}, {0x0, 0x7}, {0x0, 0x2}, {0x3, 0x7}, {0x4, 0x2}, {0x6, 0x7}, {0x4, 0x1}, {0x3, 0x7}, {0x7, 0x8}, {0x4}, {0x3, 0x4}, {0x6, 0x1}, {0x6, 0x3}, {0x3, 0x6}, {0x2, 0x8}, {0x5, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0xff, 0x0, 0x2, 0x9, 0xb, 0x2, 0xffff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8000, 0x80, 0x8, 0x2, 0x4, 0x61, 0x8]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x48, 0x6c, 0x1, 0x12, 0x6c, 0xc, 0x2, 0x3, 0x21, 0x4, 0x6c, 0x4, 0xc, 0x24, 0x1]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x3, 0x1e}, {0x5, 0x5}, {0x2, 0x9}, {0x2, 0x9}, {0x2, 0x8}, {0x4, 0x3}, {0x4, 0x9}, {0x7, 0x8}, {0x4, 0x1}, {0x2, 0x9}, {0x4, 0x4}, {0x0, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf01e, 0x456, 0x40, 0xbcc8, 0x6, 0x8, 0x3ff, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x200000a0}, 0x0) (async) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x2c}}, 0x0) 341.697827ms ago: executing program 3 (id=10653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000000)=0x4, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x80c) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}}, 0x40) 244.495705ms ago: executing program 0 (id=10654): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) (async) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r7, 0x89e2, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) connect$rose(r8, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r8, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b000100736f636b6574000014000280080002400000000b08000140000000030900010073797a2ff60000000900020073797a3200000000142300001100010000000000000000000000000a"], 0x7c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0xffff, 0xffff}, {0x8, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x20000005, 0x8, 0x2, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) (async) sendto$packet(r0, &(0x7f0000000080)="40c33b69ebc9e05e9bde800088a8", 0xe, 0x24040041, &(0x7f00000000c0)={0x11, 0x9, r9, 0x1, 0x8}, 0x14) 244.098863ms ago: executing program 2 (id=10655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x6, 0x0, 0xffffffff, 0x4}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x5e41}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x6, 0x0, 0xffffffff, 0x4}, 0x10) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x5e41}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) 242.609017ms ago: executing program 1 (id=10656): r0 = socket(0x11, 0x2, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x3, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8981f23689eb65be16f4264404ead3486d8a823382092e64c0800d8de6d01309d6", 0x21) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8981f23689eb65be16f4264404ead3486d8a823382092e64c0800d8de6d01309d6", 0x21) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4750a8f0842baf26}, 0x408c0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8, 0x1b, 0x5}]}, 0x44}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) 185.747185ms ago: executing program 3 (id=10657): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x110}}, 0x40040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x800) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3c}, 0x80) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r3) sendmsg$kcm(r2, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000001c0)=@device_b, &(0x7f0000000980)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6b40}, @broadcast, @from_mac=@broadcast, @random="79023f8b0251", {0xd, 0x2}}, @a_msdu=[{@device_b, @broadcast, 0x87, "3e863485a9c88be2243fe05b7d51dcb0b36d620254e8cad053c170ea894a7835612a7dc9e1f9d618ab05b41fa39888ef7847fd0bb298d5f2172113fe996c1574fcde8ec6149c436a3937d789779c987d88049ac26f2dd85145971a4c228ed6f3842ab0e69352d733de2de9c9270542cdc5303348af95cafb0ae74edc776a188cbb9cf5c5056794"}, {@device_a, @broadcast, 0xd6, "4ce8465d7b8a0de68fcb6c8eb97ef3e63631f0e4981ad16f9dbf24901a070b03cf48635e4dc9d9b2bc445ef75160f7ac3ba255f4616aa84b10e335a71c7dab86858e877986a243f00def4d0fc5477d9fd69570c69edc4eae93a6556a7c0be7829c4ce8f0b6553f6bbb5424eb6046c28efd68a96f0a88860dd86f74bac6f135fd5b848ec00fb41da1034f555cc143877987c30e06ca76e65897ca0178d738a156f06e134ca04f1b2234b76f92b193e7038c3ef2f17395e0c01b578996003433af6189e5e62c734b33e5e943c5f3ffd8f0e1e81666eb5e"}]}, 0x194) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000940)=ANY=[@ANYRES16=r4], 0x5a) 169.452607ms ago: executing program 4 (id=10658): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280), 0x1000000}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=@newtfilter={0x484, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x454, 0x2, [@TCA_BASIC_POLICE={0x450, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0x5, 0xfffffffb, 0x6, 0x6, 0x2, 0x9, 0x6, 0xb04a, 0x3, 0x7, 0x9, 0xca2, 0x3, 0x9, 0x9, 0x3, 0xaeb2, 0x6, 0x81, 0x2, 0x8, 0x1000, 0x2, 0x6, 0x2, 0x7, 0x0, 0x9, 0x8, 0x46, 0x1000, 0xd47, 0xc98, 0x4, 0x4, 0x8, 0x0, 0x2, 0x80000000, 0x80000000, 0x10, 0x0, 0x1, 0x3, 0x0, 0x80000, 0x9, 0x3, 0x8, 0x4, 0x23a2, 0x80, 0x1, 0x4, 0xffffff80, 0x5, 0x6, 0x6, 0x6, 0x4, 0x6, 0x8, 0x372e, 0x9, 0x1, 0x0, 0x2, 0x1, 0x5a, 0x5, 0x80040001, 0x4, 0xb6, 0x7, 0x99fc, 0x8, 0x5, 0x3, 0xffffffff, 0x4, 0x3ff, 0x400, 0x0, 0xea12, 0x4, 0x720, 0x2, 0x118, 0x6, 0x103, 0x3, 0x1, 0x6444, 0x28, 0x10001, 0x1, 0x87, 0x23, 0x1, 0x200, 0x8, 0x2, 0x7, 0x10000, 0x2, 0x8, 0x200, 0x100, 0x9, 0x1, 0x1, 0x9, 0x8, 0x3, 0x100, 0x1, 0x7, 0x8, 0x34, 0x9, 0x7, 0x30529d92, 0xea0, 0x6, 0x0, 0x400, 0x2, 0x8d1, 0x3, 0x7fffffff, 0xdaba, 0x9, 0x5, 0x5, 0x3, 0x81, 0x8, 0x4, 0x8, 0x2, 0x5, 0x5, 0x80000001, 0x3, 0x8, 0xe0eb, 0x461, 0x9, 0x2, 0xffff73b1, 0x23f7, 0x40, 0x7, 0x9, 0x7b3, 0x5, 0x1ff, 0x7, 0x80, 0x8, 0x4, 0x400, 0xdb61, 0x6, 0x4, 0x7, 0xd4, 0xffff6a88, 0xe901, 0x5, 0xe, 0x1, 0x5, 0x9, 0x1372, 0x800, 0x72, 0x8, 0xe, 0x7f5, 0x2b, 0x25, 0x6, 0x6, 0x6, 0x100, 0x71, 0xe, 0xfffffffd, 0x60, 0xc, 0x5, 0x2b, 0x6, 0x2, 0x3, 0x7, 0x3, 0x9, 0x3, 0x4, 0xfffffc00, 0x2, 0x6, 0x3ff, 0x101, 0x5, 0x7f, 0x3, 0x1, 0x1, 0x40400, 0x7, 0x0, 0xdd6, 0x4, 0x3, 0x35, 0x9, 0x7, 0x3, 0x1b9, 0x2, 0xc572, 0x33, 0x7, 0xb6, 0xf1, 0x188b, 0x4, 0x5, 0x5, 0x3, 0x80, 0x3, 0x3, 0x0, 0x3, 0x6, 0x7fff, 0x7b, 0x5, 0x9, 0x3, 0x942, 0x4, 0x3, 0x7, 0x7, 0xa8, 0xfff, 0x6, 0x1000, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x8, 0x5, 0xff, 0x73, {0xf, 0x1, 0x436, 0x8, 0xff81, 0x4}, {0x3, 0x0, 0x9, 0x6, 0x3, 0xc11}, 0x5, 0x8, 0x7d80}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}]}]}}]}, 0x484}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x10, 0x10, 0x6, 0x6, {{0x38, 0x4, 0x0, 0x8, 0xe0, 0x68, 0x0, 0x81, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0xe0fea0bd7bc0fd03, 0xea, 0x3, 0xa, [{@rand_addr=0x64010100, 0x3}, {@remote, 0x5}, {@private=0xa010101, 0xaf}, {@loopback, 0x8}, {@empty}, {@remote, 0x8001}, {@multicast2, 0xfffff800}]}, @cipso={0x86, 0x4d, 0x3, [{0x7, 0x3, "a0"}, {0x2, 0x5, "11a7e1"}, {0x2, 0x12, "bc3f04f397c9b858fb4278f2bbfa77c6"}, {0x1, 0x8, "fc388e45103f"}, {0xb, 0xf, "859508248daea27372765fe770"}, {0x2, 0x7, "e92acaa706"}, {0x5, 0xf, "7136e657db6cbf04a767b26a14"}]}, @cipso={0x86, 0x1a, 0x2, [{0x1, 0x12, "74211bd125d992d8530ed375cbbf3ee8"}, {0x1, 0x2}]}, @timestamp_addr={0x44, 0xc, 0xe9, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x70000000}]}, @generic={0x7, 0x3, "9d"}, @noop, @timestamp={0x44, 0x18, 0x3e, 0x0, 0x9, [0x9, 0x7f, 0x9, 0x1ff, 0xffff8000]}]}}}}}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r10) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) bind$inet6(r12, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)={0x24, r11, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '[\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}}, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x4, 0xc}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r16 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r16, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@dev}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@multicast1}, {{@in=@multicast1, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in6=@private1}]}]}, 0x1bc}}, 0x0) r17 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r17, 0x0, 0x0, 0x2020, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf250000000008000100", @ANYRES32=r6, @ANYBLOB="0001028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400eb00000008000600", @ANYRES32=r7, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000080000008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="7c00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000004040000100244001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400010000000800070000000000"], 0x1a0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) r18 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x1bc}}, 0x0) 530.219µs ago: executing program 0 (id=10659): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00'}) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (rerun: 64) close(r2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) (async) unshare(0x6020400) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00') (async, rerun: 32) unshare(0x2c060000) (rerun: 32) close(0x3) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)={0x14, 0x14, 0x1, 0x70bd2d, 0x0, "", [@generic="09fa6c93"]}, 0x14}], 0x1}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x278, 0x1, 0x3, 0x801, 0x0, 0x0, {0x1}, [@NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}, @NFQA_VLAN_PROTO={0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xff}]}, @NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x10}]}, @NFQA_CT={0x11c, 0xb, 0x0, 0x1, [@CTA_NAT_DST={0xb0, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xd47f}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xe, 0x7, 0x4]}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x68000000}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}]}]}, @NFQA_EXP={0x44, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x401}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}]}, @NFQA_EXP={0xac, 0xf, 0x0, 0x1, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_NAT={0x88, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x850}, 0x2044) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r5, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) (async, rerun: 32) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x6, 0x2, 0xf, 0x6, 0x2}) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f00000001c0)=0x80000002, 0x4) (async) listen(r6, 0xea) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) 311.717µs ago: executing program 1 (id=10660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x6e, "9e16ccf7d3fa4ad20e058d4a6edb53dc90c00a9cae2681aff83d41b98563d4a0f8e368914796ecd11bfc447e550d188cd67ee812500ad0401eea20446d3738114817e1ab7958659183914aec51b986e9bae8f26cb4dd49032dd6ab02fb2543c1e5df0bf8ae7e243faee7a87c9f9c"}, &(0x7f0000000180)=0x76) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x40}, &(0x7f0000000200)=0x8) socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4c800}, 0x40) 0s ago: executing program 2 (id=10661): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x25, 0xa, 0x7f) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000000000950000001507000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210}, 0x90) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='\b\x00', @ANYRES32=r3, @ANYBLOB="00c0000001880000"], 0x20}, 0x1, 0x0, 0x0, 0x40811}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYBLOB="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"]) kernel console output (not intermixed with test programs): lec:lec_start_xmit: lec0:No lecd attached [ 1041.785675][ T5661] netlink: 'syz.2.8818': attribute type 1 has an invalid length. [ 1041.940057][ T5662] can: request_module (can-proto-4) failed. [ 1042.125537][T23925] Bluetooth: hci4: link tx timeout [ 1042.133864][T23925] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1042.227943][ T5693] __nla_validate_parse: 16 callbacks suppressed [ 1042.227966][ T5693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8827'. [ 1042.295277][ T5697] netlink: 'syz.3.8829': attribute type 2 has an invalid length. [ 1042.378574][ T5699] syzkaller1: entered promiscuous mode [ 1042.385637][ T5699] syzkaller1: entered allmulticast mode [ 1042.401868][ T5702] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.8831'. [ 1042.558763][ T5712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8834'. [ 1042.600808][ T5718] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8833'. [ 1042.671975][T31662] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xb [ 1043.001103][ T5743] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 1043.056185][ T5743] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8842'. [ 1043.106244][ T5753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8843'. [ 1043.284844][ T5764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8846'. [ 1043.296665][ T5764] vcan0 (unregistering): left allmulticast mode [ 1043.362766][ T5768] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8847'. [ 1043.371988][ T5768] netlink: 43 bytes leftover after parsing attributes in process `syz.4.8847'. [ 1043.388590][ T5768] netlink: 'syz.4.8847': attribute type 6 has an invalid length. [ 1043.408983][ T5768] netlink: 'syz.4.8847': attribute type 5 has an invalid length. [ 1043.434429][ T5768] netlink: 43 bytes leftover after parsing attributes in process `syz.4.8847'. [ 1043.500730][ T5770] IPVS: set_ctl: invalid protocol: 8 10.1.1.2:20000 [ 1043.508228][ T5770] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1043.585388][T31662] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xb [ 1043.743753][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1043.762605][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1043.776898][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1043.791604][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1043.811265][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1044.049416][ T5782] wlan0 speed is unknown, defaulting to 1000 [ 1044.136049][ T5782] vxcan1 speed is unknown, defaulting to 1000 [ 1044.202851][T30806] Bluetooth: hci4: command 0x0405 tx timeout [ 1044.576338][ T5818] syzkaller1: entered promiscuous mode [ 1044.593609][ T5818] syzkaller1: entered allmulticast mode [ 1044.650862][ T5823] openvswitch: netlink: Flow key attr not present in new flow. [ 1044.826049][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 1045.217803][T31664] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 1045.405226][ T5844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1045.738298][T22768] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xb [ 1045.754350][ T5871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1045.827125][T31664] bond5 (unregistering): (slave bridge9): Releasing backup interface [ 1045.871099][T23925] Bluetooth: hci0: command tx timeout [ 1046.098763][T31664] bond0 (unregistering): Released all slaves [ 1046.109031][T31664] bond1 (unregistering): Released all slaves [ 1046.124596][T31664] bond2 (unregistering): Released all slaves [ 1046.145166][T31664] bond3 (unregistering): Released all slaves [ 1046.159107][T31664] bond4 (unregistering): Released all slaves [ 1046.173343][T31664] bond5 (unregistering): Released all slaves [ 1046.188521][T31664] bond6 (unregistering): Released all slaves [ 1046.208167][T31664] bond7 (unregistering): Released all slaves [ 1046.227766][T31664] bond8 (unregistering): Released all slaves [ 1046.242180][T31664] bond9 (unregistering): Released all slaves [ 1046.473097][T31664] 9: left promiscuous mode [ 1046.621913][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.652239][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.667168][ T5782] bridge_slave_0: entered allmulticast mode [ 1046.683822][ T5911] xt_policy: output policy not valid in PREROUTING and INPUT [ 1046.699769][ T5782] bridge_slave_0: entered promiscuous mode [ 1046.721415][T31664] 9: left promiscuous mode [ 1046.762213][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.785918][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.810411][ T5782] bridge_slave_1: entered allmulticast mode [ 1046.824266][ T5782] bridge_slave_1: entered promiscuous mode [ 1046.830407][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5140 ms [ 1046.830440][ C1] lec:lec_tx_timeout: lec0 [ 1046.929009][T31664] tipc: Left network mode [ 1046.997979][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.052841][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.202514][ T5925] syzkaller1: entered promiscuous mode [ 1047.208272][ T5925] syzkaller1: entered allmulticast mode [ 1047.273028][ T5930] bond7: peer notification delay (7680) is not a multiple of miimon (100), value rounded to 7600 ms [ 1047.305007][ T5930] bond7: Invalid ad_actor_system MAC address. [ 1047.324454][ T5930] bond7: option ad_actor_system: invalid value (1) [ 1047.355774][ T5930] bond7 (unregistering): Released all slaves [ 1047.447977][ T5782] team0: Port device team_slave_0 added [ 1047.555808][ T5942] netlink: 'syz.0.8877': attribute type 39 has an invalid length. [ 1047.589540][ T5782] team0: Port device team_slave_1 added [ 1047.956879][T23925] Bluetooth: hci0: command tx timeout [ 1048.003881][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.020756][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.069095][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.108740][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.127192][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.175466][ T5968] netlink: 'syz.3.8881': attribute type 9 has an invalid length. [ 1048.178176][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.190336][ T5968] netlink: 'syz.3.8881': attribute type 6 has an invalid length. [ 1048.278940][ T5974] __nla_validate_parse: 6 callbacks suppressed [ 1048.278961][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8882'. [ 1048.398376][ T5782] hsr_slave_0: entered promiscuous mode [ 1048.447198][ T5782] hsr_slave_1: entered promiscuous mode [ 1048.474083][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 1048.487438][ T5782] Cannot create hsr debugfs directory [ 1048.521607][ T5980] openvswitch: netlink: EtherType 50a is less than min 600 [ 1048.533183][T31502] hid-generic 0005:00A3:5508.0001: item fetching failed at offset 0/1 [ 1048.603565][T31502] hid-generic 0005:00A3:5508.0001: probe with driver hid-generic failed with error -22 [ 1048.895011][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8888'. [ 1048.897458][ T5974] macvtap1: entered promiscuous mode [ 1048.928816][ T5974] vlan0: entered promiscuous mode [ 1048.982822][ T5974] macvtap1: entered allmulticast mode [ 1048.988278][ T5974] vlan0: entered allmulticast mode [ 1049.250295][T31664] hsr_slave_0: left promiscuous mode [ 1049.276088][T31664] 0·: left promiscuous mode [ 1049.405562][T31664] pim6reg (unregistering): left allmulticast mode [ 1049.896004][T31664] team0 (unregistering): Port device vxcan1 removed [ 1049.987162][ T6026] syzkaller1: entered promiscuous mode [ 1049.993085][ T6026] syzkaller1: entered allmulticast mode [ 1050.030872][T23925] Bluetooth: hci0: command tx timeout [ 1050.185348][ T6037] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8894'. [ 1050.206819][ T6041] nbd: illegal input index 2958377 [ 1050.515823][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8897'. [ 1050.538706][ T6052] netlink: 'syz.1.8898': attribute type 3 has an invalid length. [ 1050.560286][ T6052] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8898'. [ 1050.616343][T31664] IPVS: stop unused estimator thread 0... [ 1050.935893][ T6076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8904'. [ 1051.056567][ T6087] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8906'. [ 1051.129938][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8904'. [ 1051.192799][ T6089] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 1051.389831][ T6097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8907'. [ 1051.490811][T31663] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xb [ 1051.814206][ T6102] syzkaller1: entered promiscuous mode [ 1051.823735][ T6102] syzkaller1: entered allmulticast mode [ 1051.849365][ T6121] netlink: 'syz.4.8911': attribute type 11 has an invalid length. [ 1051.880459][ T6121] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.8911'. [ 1052.111319][T23925] Bluetooth: hci0: command tx timeout [ 1052.246843][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1052.476912][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1052.558432][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1052.615000][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1052.673242][ T6157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1052.804607][ T6162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1052.937985][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1053.017096][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 1053.048112][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.055395][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1053.108871][T31664] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.116206][T31664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1053.220659][T31664] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xb [ 1053.429368][ T6192] gtp0: entered promiscuous mode [ 1053.448206][ T6192] gtp0: entered allmulticast mode [ 1053.815361][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.918781][ T6210] __nla_validate_parse: 2 callbacks suppressed [ 1053.918804][ T6210] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8923'. [ 1053.954019][ T6210] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8923'. [ 1053.968854][ T6211] netlink: 908 bytes leftover after parsing attributes in process `syz.0.8924'. [ 1053.969368][ T5782] veth0_vlan: entered promiscuous mode [ 1054.045034][ T5782] veth1_vlan: entered promiscuous mode [ 1054.164695][ T6215] syzkaller1: entered promiscuous mode [ 1054.181815][ T6215] syzkaller1: entered allmulticast mode [ 1054.223016][ T5782] veth0_macvtap: entered promiscuous mode [ 1054.248029][ T5782] veth1_macvtap: entered promiscuous mode [ 1054.313492][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1054.368864][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.408168][T31664] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.440538][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1054.444205][T31664] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.489141][T31664] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.493619][ T6232] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8929'. [ 1054.518111][T31664] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.662633][T31661] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xb [ 1054.905848][ T6250] netlink: 'syz.3.8932': attribute type 1 has an invalid length. [ 1055.106792][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.160893][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.269537][T31664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.283634][T31664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.332042][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8936'. [ 1055.462928][ T6275] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8939'. [ 1055.498449][ T6281] netlink: 'syz.0.8938': attribute type 1 has an invalid length. [ 1055.519701][ T6281] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8938'. [ 1055.574786][ T6281] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8938'. [ 1055.601096][ T6281] netlink: 'syz.0.8938': attribute type 1 has an invalid length. [ 1055.612962][ T6281] netlink: 'syz.0.8938': attribute type 8 has an invalid length. [ 1055.646294][ T6280] netlink: 'syz.3.8940': attribute type 10 has an invalid length. [ 1055.662151][ T6281] netlink: 606 bytes leftover after parsing attributes in process `syz.0.8938'. [ 1055.758650][T31664] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xb [ 1055.803597][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8944'. [ 1056.202170][ T6314] syzkaller1: entered promiscuous mode [ 1056.237682][ T6314] syzkaller1: entered allmulticast mode [ 1056.332625][T31661] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xb [ 1056.361808][ T6333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1056.886600][ T6359] dvmrp0: entered allmulticast mode [ 1057.019820][ T6370] netlink: 'syz.1.8958': attribute type 10 has an invalid length. [ 1057.059681][ T6371] ip6t_rpfilter: unknown options [ 1057.421442][ T6393] netlink: 'syz.1.8962': attribute type 1 has an invalid length. [ 1057.854314][ T6412] SET target dimension over the limit! [ 1057.928491][ T6415] gretap0: entered promiscuous mode [ 1057.949157][ T6415] gretap0: left promiscuous mode [ 1058.347840][ T6429] syzkaller1: entered promiscuous mode [ 1058.370478][ T6429] syzkaller1: entered allmulticast mode [ 1058.856777][ T6464] veth0: entered promiscuous mode [ 1059.515385][ T6492] __nla_validate_parse: 12 callbacks suppressed [ 1059.515411][ T6492] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8988'. [ 1059.870167][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 1059.878278][ C1] lec:lec_tx_timeout: lec0 [ 1059.884284][ T6508] syzkaller1: entered promiscuous mode [ 1059.889797][ T6508] syzkaller1: entered allmulticast mode [ 1060.022194][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8998'. [ 1060.062163][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8998'. [ 1060.111942][ T6519] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.8998'. [ 1060.118545][ T6527] netlink: 'syz.3.9000': attribute type 1 has an invalid length. [ 1060.452843][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9004'. [ 1060.572497][ T6557] netlink: 'syz.2.9007': attribute type 142 has an invalid length. [ 1060.701419][ T6561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9009'. [ 1060.721369][ T6561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9009'. [ 1060.862675][ T6567] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9011'. [ 1060.922163][ T6569] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9014'. [ 1060.956888][T30806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1060.957413][ T6575] netlink: 'syz.0.9013': attribute type 1 has an invalid length. [ 1060.976410][T30806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1060.991738][T30806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1061.009346][T30806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1061.039500][T30806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1061.124045][ T6584] block nbd4: Unsupported socket: should be TCP or UNIX. [ 1061.174840][ T6585] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9017'. [ 1061.285627][ T6571] wlan0 speed is unknown, defaulting to 1000 [ 1061.338669][ T6571] vxcan1 speed is unknown, defaulting to 1000 [ 1061.974892][ T6627] Bluetooth: MGMT ver 1.23 [ 1062.382388][ T6642] tipc: Enabled bearer , priority 0 [ 1062.422356][ T6642] syzkaller0: entered promiscuous mode [ 1062.427897][ T6642] syzkaller0: entered allmulticast mode [ 1062.486597][ T6654] tipc: Resetting bearer [ 1062.519012][ T6571] chnl_net:caif_netlink_parms(): no params data found [ 1062.571382][ T6658] bond9: peer notification delay (55552) is not a multiple of miimon (100), value rounded to 55500 ms [ 1062.582464][ T6658] bond9: Invalid ad_actor_system MAC address. [ 1062.588570][ T6658] bond9: option ad_actor_system: invalid value (1) [ 1062.601944][ T6658] bond9 (unregistering): Released all slaves [ 1062.695098][ T6641] tipc: Resetting bearer [ 1062.722325][ T6641] tipc: Disabling bearer [ 1062.749023][ T6661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1062.845616][ T6571] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.853718][ T6571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.863023][ T6571] bridge_slave_0: entered allmulticast mode [ 1062.882403][ T6571] bridge_slave_0: entered promiscuous mode [ 1062.894753][ T6571] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.909216][ T6571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.928441][ T6571] bridge_slave_1: entered allmulticast mode [ 1062.942181][ T6571] bridge_slave_1: entered promiscuous mode [ 1063.069747][ T6571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.087274][ T6571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.160227][T30806] Bluetooth: hci3: command tx timeout [ 1063.179777][ T6571] team0: Port device team_slave_0 added [ 1063.189508][ T6571] team0: Port device team_slave_1 added [ 1063.285041][ T6571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.303502][ T6571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.348530][ T6571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1063.403923][ T6571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1063.428184][ T6571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.466248][ T6698] netlink: 'syz.3.9048': attribute type 8 has an invalid length. [ 1063.468558][ T6571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1063.519561][ T6702] netlink: 'syz.2.9050': attribute type 3 has an invalid length. [ 1063.568565][ T6700] bond4: peer notification delay (58368) is not a multiple of miimon (100), value rounded to 58300 ms [ 1063.580467][ T6700] bond4: Invalid ad_actor_system MAC address. [ 1063.593902][ T6700] bond4: option ad_actor_system: invalid value (1) [ 1063.605102][ T6700] bond4 (unregistering): Released all slaves [ 1063.645420][ T6702] vxcan2: entered allmulticast mode [ 1063.858094][ T6571] hsr_slave_0: entered promiscuous mode [ 1063.888610][ T6571] hsr_slave_1: entered promiscuous mode [ 1064.000930][ T6728] openvswitch: netlink: IP tunnel dst address not specified [ 1064.030637][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1064.055568][ T6728] openvswitch: netlink: IP tunnel dst address not specified [ 1064.317035][ T6571] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.482606][ T6571] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.549532][ T6753] bond9: peer notification delay (59904) is not a multiple of miimon (100), value rounded to 59900 ms [ 1064.561758][ T6753] bond9: Invalid ad_actor_system MAC address. [ 1064.567972][ T6753] bond9: option ad_actor_system: invalid value (1) [ 1064.582079][ T6753] bond9 (unregistering): Released all slaves [ 1064.646076][ T6571] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.961506][ T6773] __nla_validate_parse: 15 callbacks suppressed [ 1064.961531][ T6773] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9068'. [ 1065.021689][ T6773] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9068'. [ 1065.059140][ T6773] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9068'. [ 1065.226943][ T6571] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1065.234220][T30806] Bluetooth: hci3: command tx timeout [ 1065.254914][ T6571] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1065.306049][ T6571] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1065.355029][ T6571] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1065.705266][ T6571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.791928][ T6571] 8021q: adding VLAN 0 to HW filter on device team0 [ 1065.811920][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9076'. [ 1065.835151][T31659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.843221][T31659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1065.948818][ T6813] bond4: peer notification delay (60672) is not a multiple of miimon (100), value rounded to 60600 ms [ 1065.984785][ T6813] bond4: Invalid ad_actor_system MAC address. [ 1066.001635][ T6813] bond4: option ad_actor_system: invalid value (1) [ 1066.012502][ T6813] bond4 (unregistering): Released all slaves [ 1066.093239][T31661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.100477][T31661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.303862][ T6838] netlink: 'syz.1.9081': attribute type 10 has an invalid length. [ 1066.374797][ T6838] team0 (unregistering): Port device team_slave_0 removed [ 1066.403625][T31662] tipc: Subscription rejected, illegal request [ 1066.424923][ T6838] team0 (unregistering): Port device team_slave_1 removed [ 1066.476171][ T6849] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9085'. [ 1066.490394][ T6849] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9085'. [ 1066.508353][ T6849] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9085'. [ 1066.524666][ T6849] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9085'. [ 1066.719324][ T6571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1066.968828][ T6876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9091'. [ 1067.078012][ T6876] bond4: peer notification delay (61440) is not a multiple of miimon (100), value rounded to 61400 ms [ 1067.130577][ T6876] bond4: Invalid ad_actor_system MAC address. [ 1067.151912][ T6876] bond4: option ad_actor_system: invalid value (1) [ 1067.181207][ T6876] bond4 (unregistering): Released all slaves [ 1067.320491][T30806] Bluetooth: hci3: command tx timeout [ 1067.763814][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9097'. [ 1068.128914][ T6571] veth0_vlan: entered promiscuous mode [ 1068.158776][ T6571] veth1_vlan: entered promiscuous mode [ 1068.227069][ T6571] veth0_macvtap: entered promiscuous mode [ 1068.257546][ T6571] veth1_macvtap: entered promiscuous mode [ 1068.325734][ T6571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1068.361702][ T6571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1068.399220][T31664] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.419265][T31664] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.471073][ T6927] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 1068.481977][T31664] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.501795][T31664] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.688156][T22768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.699275][ T6932] netlink: 'syz.1.9106': attribute type 12 has an invalid length. [ 1068.719697][T22768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.796009][T31659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.809720][T31659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.004584][ T6941] veth1: Caught tx_queue_len zero misconfig [ 1069.394354][T30806] Bluetooth: hci3: command tx timeout [ 1069.708078][ T6980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1069.858546][ T6992] veth0: entered promiscuous mode [ 1069.869012][ T6990] veth0: left promiscuous mode [ 1070.137978][ T7002] tipc: Enabling of bearer rejected, failed to enable media [ 1070.165300][ T7004] __nla_validate_parse: 2 callbacks suppressed [ 1070.165347][ T7004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9123'. [ 1070.682938][ T7024] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9127'. [ 1070.692253][ T7023] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9127'. [ 1070.841039][ T7034] wlan0 speed is unknown, defaulting to 1000 [ 1070.878893][ T7034] vxcan1 speed is unknown, defaulting to 1000 [ 1070.925197][ T7039] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1071.202002][ T7046] vlan1: entered allmulticast mode [ 1071.220816][ T7046] bridge_slave_0: entered allmulticast mode [ 1071.297935][ T7049] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1071.725126][ T7061] syzkaller0: entered promiscuous mode [ 1071.741275][ T7061] syzkaller0: entered allmulticast mode [ 1071.825070][ T7064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9141'. [ 1071.838250][ T7064] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9141'. [ 1072.328597][ T7077] vlan1: entered allmulticast mode [ 1072.416374][T23925] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1072.427777][T23925] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1072.448689][ T7077] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1072.458530][T23925] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1072.483330][T23925] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1072.493550][T23925] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1072.510687][ T7093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9147'. [ 1072.558485][ T7092] nft_compat: unsupported protocol 0 [ 1072.569409][ T7083] wlan0 speed is unknown, defaulting to 1000 [ 1072.579720][ T7083] vxcan1 speed is unknown, defaulting to 1000 [ 1072.717503][ T7095] netlink: 'syz.2.9149': attribute type 5 has an invalid length. [ 1072.810462][ T7098] sctp: [Deprecated]: syz.4.9150 (pid 7098) Use of int in max_burst socket option. [ 1072.810462][ T7098] Use struct sctp_assoc_value instead [ 1072.861177][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9150'. [ 1072.884764][ T7103] netlink: 'syz.1.9151': attribute type 1 has an invalid length. [ 1073.048285][ T7111] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9155'. [ 1073.154858][ T7103] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1073.445645][ T7129] netlink: 204 bytes leftover after parsing attributes in process `syz.2.9160'. [ 1073.464452][ T7130] syzkaller0: entered promiscuous mode [ 1073.471349][ T7130] syzkaller0: entered allmulticast mode [ 1073.482678][ T7130] 0: reclassify loop, rule prio 0, protocol 800 [ 1073.497520][ T7132] netlink: 'syz.1.9158': attribute type 3 has an invalid length. [ 1073.605928][ T7083] chnl_net:caif_netlink_parms(): no params data found [ 1074.077534][ T7083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.114671][ T7170] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9171'. [ 1074.123274][ T7083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.146027][ T7083] bridge_slave_0: entered allmulticast mode [ 1074.155177][ T7083] bridge_slave_0: entered promiscuous mode [ 1074.166914][ T7083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.179282][ T7083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.202542][ T7083] bridge_slave_1: entered allmulticast mode [ 1074.220809][ T7083] bridge_slave_1: entered promiscuous mode [ 1074.392642][ T7083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1074.485782][ T7184] sit3: entered promiscuous mode [ 1074.496267][ T7184] sit3: entered allmulticast mode [ 1074.537279][ T7083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1074.598598][T23925] Bluetooth: hci5: command tx timeout [ 1074.660372][ T7083] team0: Port device team_slave_0 added [ 1074.691730][ T7083] team0: Port device team_slave_1 added [ 1074.697998][ T7191] netlink: 'syz.1.9176': attribute type 11 has an invalid length. [ 1074.843745][ T7083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1074.851964][ T7083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.888712][ T7083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1074.915156][ T7083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1074.924077][ T7083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.956912][ T7083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1074.991855][T31662] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.001033][T31662] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.125524][T31662] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.132922][ T7210] sctp: [Deprecated]: syz.2.9180 (pid 7210) Use of int in max_burst socket option deprecated. [ 1075.132922][ T7210] Use struct sctp_assoc_value instead [ 1075.236442][T31662] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.276814][ T7215] __nla_validate_parse: 7 callbacks suppressed [ 1075.276839][ T7215] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9182'. [ 1075.289200][ T7083] hsr_slave_0: entered promiscuous mode [ 1075.302174][ T7083] hsr_slave_1: entered promiscuous mode [ 1075.313760][ T7083] debugfs: 'hsr0' already exists in 'hsr' [ 1075.319550][ T7083] Cannot create hsr debugfs directory [ 1075.857146][ T7247] sctp: [Deprecated]: syz.1.9192 (pid 7247) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1075.857146][ T7247] Use struct sctp_sack_info instead [ 1075.919291][ T7240] syzkaller0: entered promiscuous mode [ 1075.930857][ T7240] syzkaller0: entered allmulticast mode [ 1075.986156][ T7252] tipc: Started in network mode [ 1076.010357][ T7252] tipc: Node identity ac14140f, cluster identity 4711 [ 1076.014146][ T7247] netlink: 'syz.1.9192': attribute type 10 has an invalid length. [ 1076.027807][ T7252] tipc: New replicast peer: 255.255.255.255 [ 1076.048731][ T7252] tipc: Enabled bearer , priority 10 [ 1076.051440][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9194'. [ 1076.120421][ T7261] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9194'. [ 1076.673619][T23925] Bluetooth: hci5: command tx timeout [ 1078.048810][ T9] tipc: Node number set to 2886997007 [ 1078.486477][ T7286] bond9: entered allmulticast mode [ 1078.517425][ T7291] bridge7: entered promiscuous mode [ 1078.523798][ T7291] bridge7: entered allmulticast mode [ 1078.556169][ T7291] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 1078.575866][ T7295] sit0: Caught tx_queue_len zero misconfig [ 1078.667479][ T7297] netlink: 'syz.2.9206': attribute type 1 has an invalid length. [ 1078.730237][ T7303] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9207'. [ 1078.762997][T23925] Bluetooth: hci5: command tx timeout [ 1078.775400][ T7304] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1078.779901][ T7297] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9206'. [ 1078.785481][ T7304] bond2: (slave bond3): making interface the new active one [ 1078.801352][ T7304] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1078.944638][ T7083] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1078.965514][ T7083] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1078.987755][ T7083] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1079.029263][ T7083] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1079.156813][ T7320] IPVS: persistence engine module ip_vs_pe_À not found [ 1079.253102][ T7083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1079.303615][ T7083] 8021q: adding VLAN 0 to HW filter on device team0 [ 1079.383213][T31663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.390558][T31663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1079.390912][ T7334] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9215'. [ 1079.423046][T31663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.430300][T31663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.631851][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9218'. [ 1079.664023][ T7345] netlink: 'syz.0.9218': attribute type 1 has an invalid length. [ 1079.712272][ T7345] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1079.761182][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9221'. [ 1079.786872][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9220'. [ 1079.995170][ T7363] ip6tnl0: Caught tx_queue_len zero misconfig [ 1080.063704][ T7083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1080.200545][ T7083] veth0_vlan: entered promiscuous mode [ 1080.216909][ T7083] veth1_vlan: entered promiscuous mode [ 1080.270649][ T7083] veth0_macvtap: entered promiscuous mode [ 1080.283264][ T7083] veth1_macvtap: entered promiscuous mode [ 1080.325182][ T7083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1080.372602][ T7083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1080.416206][T31662] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.438576][T31662] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.456776][T31662] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.471224][T31662] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.658214][T31662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.689210][T31662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.747639][T31664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.767639][T31664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.831578][T23925] Bluetooth: hci5: command tx timeout [ 1080.984750][ T7408] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9237'. [ 1081.308547][ T7427] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9244'. [ 1081.328278][ T7427] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9244'. [ 1081.384234][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9243'. [ 1081.465530][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.473403][ T7433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.542341][ T7437] IPVS: set_ctl: invalid protocol: 120 172.20.20.187:20004 [ 1081.555358][ T7430] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9243'. [ 1081.581517][ T7430] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9243'. [ 1081.592133][ T7443] netlink: 404 bytes leftover after parsing attributes in process `syz.0.9251'. [ 1082.056116][ T7467] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9258'. [ 1082.238058][ T7456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9247'. [ 1082.255638][ T7473] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9260'. [ 1083.064863][ T7507] syzkaller0: entered promiscuous mode [ 1083.087255][ T7507] syzkaller0: entered allmulticast mode [ 1085.635327][ T7563] syzkaller1: entered promiscuous mode [ 1085.642634][ T7563] syzkaller1: entered allmulticast mode [ 1085.659446][ T7566] syzkaller0: entered promiscuous mode [ 1085.665566][ T7555] xt_CT: No such helper "pptp" [ 1085.685729][ T7566] syzkaller0: entered allmulticast mode [ 1085.706814][ T7561] delete_channel: no stack [ 1085.728452][ T7560] wlan0 speed is unknown, defaulting to 1000 [ 1085.762948][ T7561] delete_channel: no stack [ 1086.022273][ T7560] vxcan1 speed is unknown, defaulting to 1000 [ 1086.383299][ T7593] __nla_validate_parse: 5 callbacks suppressed [ 1086.383321][ T7593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9290'. [ 1086.475460][ T7602] C: renamed from lo (while UP) [ 1086.536037][ T7602] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1086.715357][ T7609] netlink: 256 bytes leftover after parsing attributes in process `syz.3.9294'. [ 1086.938437][T30806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1086.949952][T30806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1086.962018][T30806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1086.977518][T30806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1086.993655][T30806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1087.103061][ T7619] wlan0 speed is unknown, defaulting to 1000 [ 1087.114657][ T7619] vxcan1 speed is unknown, defaulting to 1000 [ 1087.349934][ T7633] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.9299'. [ 1087.492326][ T7635] pim6reg527: entered allmulticast mode [ 1087.517869][ T7633] netlink: 'syz.2.9299': attribute type 2 has an invalid length. [ 1087.540155][ T7633] netlink: 'syz.2.9299': attribute type 5 has an invalid length. [ 1087.943442][ T7662] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9305'. [ 1088.427344][ T7619] chnl_net:caif_netlink_parms(): no params data found [ 1088.599012][ T7685] openvswitch: netlink: Message has 4 unknown bytes. [ 1088.762097][ T7690] syzkaller0: entered promiscuous mode [ 1088.767701][ T7690] syzkaller0: entered allmulticast mode [ 1089.036767][ T7619] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.045534][ T7619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.053413][ T7619] bridge_slave_0: entered allmulticast mode [ 1089.053708][ T7706] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9319'. [ 1089.062426][ T7619] bridge_slave_0: entered promiscuous mode [ 1089.076535][T30806] Bluetooth: hci2: command tx timeout [ 1089.097262][ T7619] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.105505][ T7619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.115775][ T7619] bridge_slave_1: entered allmulticast mode [ 1089.127380][ T7619] bridge_slave_1: entered promiscuous mode [ 1089.136549][ T7702] syzkaller0: entered promiscuous mode [ 1089.146471][ T7713] netlink: 'syz.1.9321': attribute type 1 has an invalid length. [ 1089.156678][ T7702] syzkaller0: entered allmulticast mode [ 1089.239369][ T7715] IPv6: sit1: Disabled Multicast RS [ 1089.267613][ T7715] sit1: entered allmulticast mode [ 1089.374059][ T7619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1089.393384][ T7619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1089.655713][ T7619] team0: Port device team_slave_0 added [ 1089.678893][ T7619] team0: Port device team_slave_1 added [ 1089.699948][ T7744] Cannot find set identified by id 65534 to match [ 1089.699966][ T7745] Cannot find set identified by id 65534 to match [ 1089.787605][ T7619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.817247][ T7619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.873103][ T7619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.888131][ T7619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.896944][ T7619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.925962][ T7619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.955320][ T7756] netlink: 'syz.2.9333': attribute type 11 has an invalid length. [ 1090.102754][ T7619] hsr_slave_0: entered promiscuous mode [ 1090.112847][ T7619] hsr_slave_1: entered promiscuous mode [ 1090.122244][ T7619] debugfs: 'hsr0' already exists in 'hsr' [ 1090.133310][ T7619] Cannot create hsr debugfs directory [ 1090.143577][ T7767] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 1090.216239][ T7769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9339'. [ 1090.364777][ T7781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1090.472677][ T7774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1090.534779][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9343'. [ 1090.632859][ T7619] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1090.652932][ T7619] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.694270][ T7619] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1090.716623][ T7797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9344'. [ 1090.786103][ T7796] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9346'. [ 1090.932542][ T7619] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1090.953201][ T7619] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.968488][ T7619] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1091.150366][T30806] Bluetooth: hci2: command tx timeout [ 1091.174603][ T7619] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1091.178086][ T7823] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.9353'. [ 1091.195288][ T7619] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.207408][ T7619] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1091.242138][ T7823] netlink: Conntrack attr has 4 unknown bytes [ 1091.252818][ T7823] netlink: 'syz.4.9353': attribute type 1 has an invalid length. [ 1091.322360][ T7828] netlink: 'syz.2.9355': attribute type 21 has an invalid length. [ 1091.384291][ T7619] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1091.435766][ T7619] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.464967][ T7619] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1091.514813][ T7828] netlink: 'syz.2.9355': attribute type 6 has an invalid length. [ 1091.536276][ T7828] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9355'. [ 1091.847644][ T7619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1091.889488][ T7619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1091.972398][ T7619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1092.024690][ T7619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1092.093729][ T7866] netlink: 'syz.3.9365': attribute type 13 has an invalid length. [ 1092.113635][ T7866] netlink: 'syz.3.9365': attribute type 58 has an invalid length. [ 1092.123408][ T7866] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9365'. [ 1092.574138][ T7619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1092.582295][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9369'. [ 1092.662520][ T7619] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.696853][T31663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.704186][T31663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1092.771956][ T7898] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9373'. [ 1092.821624][T31663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.828901][T31663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1092.842760][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9373'. [ 1093.231359][T30806] Bluetooth: hci2: command tx timeout [ 1093.517341][ T7619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1093.584188][ T7921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1093.666318][ T7619] veth0_vlan: entered promiscuous mode [ 1093.686058][ T7927] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9382'. [ 1093.723276][ T7619] veth1_vlan: entered promiscuous mode [ 1093.747429][ T7929] geneve2: entered promiscuous mode [ 1093.753422][ T7929] geneve2: entered allmulticast mode [ 1093.774869][T31664] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1093.799156][T31664] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1093.840487][T31664] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1093.852170][ T7925] wlan0 speed is unknown, defaulting to 1000 [ 1093.867538][ T7925] vxcan1 speed is unknown, defaulting to 1000 [ 1093.879919][T31664] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1093.905529][ T7619] veth0_macvtap: entered promiscuous mode [ 1093.934396][ T7619] veth1_macvtap: entered promiscuous mode [ 1093.984547][ T7619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1094.014933][ T7619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1094.049466][T31664] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.056584][ T7941] netlink: 496 bytes leftover after parsing attributes in process `syz.3.9387'. [ 1094.068335][T31664] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.118173][T31664] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.192430][T31664] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.326937][ T7944] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9388'. [ 1094.451974][ T7943] +: renamed from syzkaller0 [ 1094.596132][T31663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.647818][T31663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.738424][ T7956] syzkaller0: entered promiscuous mode [ 1094.745712][ T7956] syzkaller0: entered allmulticast mode [ 1095.144039][ T7980] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9395'. [ 1095.310450][T30806] Bluetooth: hci2: command tx timeout [ 1097.063533][ T7980] ve: renamed from macvlan0 [ 1097.079866][T31663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.097988][T31663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.441028][ T8000] netlink: 'syz.1.9400': attribute type 2 has an invalid length. [ 1097.557306][ T8018] netlink: 27 bytes leftover after parsing attributes in process `syz.2.9401'. [ 1097.781386][ T8026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9404'. [ 1098.224199][ T8042] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9408'. [ 1098.248826][T23925] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1098.262812][T23925] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1098.279529][T23925] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1098.300295][T23925] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1098.308354][T23925] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1098.463100][ T8045] wlan0 speed is unknown, defaulting to 1000 [ 1098.478823][ T8045] vxcan1 speed is unknown, defaulting to 1000 [ 1098.754105][ T8056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9411'. [ 1098.930723][ T8064] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9413'. [ 1099.240541][ T8071] netlink: 'syz.3.9415': attribute type 1 has an invalid length. [ 1099.256511][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9415'. [ 1099.297903][ T8071] bond1: entered promiscuous mode [ 1099.307295][ T8071] bond1: entered allmulticast mode [ 1099.319525][ T8071] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1099.353756][ T8072] macvlan2: entered promiscuous mode [ 1099.359256][ T8072] macvlan2: entered allmulticast mode [ 1099.423560][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9418'. [ 1099.602853][ T8079] team0: Port device team_slave_0 removed [ 1100.136981][ T8116] veth0: entered promiscuous mode [ 1100.235283][ T8045] chnl_net:caif_netlink_parms(): no params data found [ 1100.293950][ T8125] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9426'. [ 1100.311763][ T8125] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9426'. [ 1100.324899][ T8125] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9426'. [ 1100.350972][T30806] Bluetooth: hci4: command tx timeout [ 1100.471100][ T8045] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.478860][ T8045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.492622][ T8045] bridge_slave_0: entered allmulticast mode [ 1100.508487][ T8045] bridge_slave_0: entered promiscuous mode [ 1100.528969][ T8045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.536638][ T8045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.544515][ T8045] bridge_slave_1: entered allmulticast mode [ 1100.554040][ T8045] bridge_slave_1: entered promiscuous mode [ 1100.667820][ T8045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.683327][ T8045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.781875][ T8045] team0: Port device team_slave_0 added [ 1100.793536][ T8045] team0: Port device team_slave_1 added [ 1100.885601][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.904146][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.946202][ T8045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1100.958878][ T8115] veth0: left promiscuous mode [ 1100.973699][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1100.987371][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.050133][ T8045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1101.165734][ T8045] hsr_slave_0: entered promiscuous mode [ 1101.172766][ T8045] hsr_slave_1: entered promiscuous mode [ 1101.179296][ T8045] debugfs: 'hsr0' already exists in 'hsr' [ 1101.185471][ T8045] Cannot create hsr debugfs directory [ 1101.191910][ T8159] syzkaller1: entered promiscuous mode [ 1101.197450][ T8159] syzkaller1: entered allmulticast mode [ 1101.222144][ T8163] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 1101.602387][ T8045] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.626604][ T8045] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.764450][ T8045] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.788062][ T8045] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.824739][ T8187] veth1_macvtap: left promiscuous mode [ 1101.848586][ T8189] openvswitch: netlink: Flow key attr not present in new flow. [ 1101.868868][ T8045] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.889752][ T8045] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.988320][ T8045] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1102.003104][ T8045] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.045776][ T8201] netlink: 'syz.4.9444': attribute type 1 has an invalid length. [ 1102.099997][ T8201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1102.140224][ T8204] netlink: 'syz.2.9447': attribute type 1 has an invalid length. [ 1102.178799][ T8204] bond4: entered promiscuous mode [ 1102.184516][ T8204] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1102.212480][ T8204] bond4: (slave bridge1): making interface the new active one [ 1102.220471][ T8204] bridge1: entered promiscuous mode [ 1102.226947][ T8204] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 1102.431430][T30806] Bluetooth: hci4: command tx timeout [ 1102.498710][ T8045] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1102.551491][ T8045] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1102.572558][ T8220] syzkaller0: entered promiscuous mode [ 1102.579702][ T8220] syzkaller0: entered allmulticast mode [ 1102.588625][ T8045] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1102.618389][ T8045] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1102.653581][ T8231] netlink: 'syz.4.9454': attribute type 2 has an invalid length. [ 1102.662378][ T8231] netlink: 'syz.4.9454': attribute type 1 has an invalid length. [ 1102.752730][ T8243] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1102.771177][ T8245] __nla_validate_parse: 15 callbacks suppressed [ 1102.771197][ T8245] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9455'. [ 1102.924350][ T8045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1102.933204][ T8249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1102.986166][ T8045] 8021q: adding VLAN 0 to HW filter on device team0 [ 1103.057380][T31662] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.064621][T31662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1103.098447][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9459'. [ 1103.132933][ T8258] openvswitch: netlink: EtherType 0 is less than min 600 [ 1103.143160][T31663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.150418][T31663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1103.410377][ T8271] netlink: 'syz.0.9460': attribute type 39 has an invalid length. [ 1103.641707][ T8045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1103.738601][ T8045] veth0_vlan: entered promiscuous mode [ 1103.757527][ T8045] veth1_vlan: entered promiscuous mode [ 1103.795973][ T8289] syzkaller0: entered promiscuous mode [ 1103.806178][ T8289] syzkaller0: entered allmulticast mode [ 1103.968470][ T8294] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9468'. [ 1104.014204][ T8045] veth0_macvtap: entered promiscuous mode [ 1104.042187][ T8045] veth1_macvtap: entered promiscuous mode [ 1104.079079][ T8045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1104.101870][ T8045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1104.137268][T31662] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.197028][T31662] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.254920][T31662] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.291598][ T84] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.510397][T30806] Bluetooth: hci4: command tx timeout [ 1104.543418][ T8325] netlink: 'syz.3.9474': attribute type 7 has an invalid length. [ 1104.553461][ T8325] netlink: 'syz.3.9474': attribute type 4 has an invalid length. [ 1104.562570][ T8315] xt_hashlimit: size too large, truncated to 1048576 [ 1104.572237][ T8321] syzkaller0: entered allmulticast mode [ 1104.578576][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1104.591913][ T8325] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9474'. [ 1104.613003][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1104.647652][ T8321] bond1: (slave ip6gre0): Device is not bonding slave [ 1104.654656][ T8321] bond1: option active_slave: invalid value (ip6gre0) [ 1104.678286][ T8321] bond1 (unregistering): Released all slaves [ 1104.769770][ T8308] –: renamed from veth1 (while UP) [ 1104.852309][T22768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1104.874110][T22768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1105.082082][ T8338] netlink: 'syz.1.9406': attribute type 21 has an invalid length. [ 1105.158385][ T8338] netlink: 'syz.1.9406': attribute type 6 has an invalid length. [ 1105.168452][ T8338] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9406'. [ 1105.306660][ T8350] delete_channel: no stack [ 1105.404182][ T8364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9484'. [ 1105.439250][ T8353] syzkaller0: entered promiscuous mode [ 1105.455822][ T8353] syzkaller0: entered allmulticast mode [ 1105.546998][ T8377] netlink: 192 bytes leftover after parsing attributes in process `syz.1.9486'. [ 1105.604059][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9488'. [ 1105.860910][T10967] lec:lec_start_xmit: lec0:No lecd attached [ 1106.077239][ T8400] netlink: 'syz.0.9491': attribute type 5 has an invalid length. [ 1106.425293][T31663] tipc: Disabling bearer [ 1106.485423][T31663] dvmrp0 (unregistering): left allmulticast mode [ 1106.590338][T30806] Bluetooth: hci4: command tx timeout [ 1106.777962][T31663] bond1 (unregistering): (slave bridge6): Releasing backup interface [ 1106.786264][T31663] bridge6 (unregistering): left promiscuous mode [ 1107.125496][T31663] bond1 (unregistering): Released all slaves [ 1107.141082][T31663] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1107.149716][T31663] veth0_to_bond: left promiscuous mode [ 1107.156003][T31663] veth0_to_bond: left allmulticast mode [ 1107.164927][T31663] bond2 (unregistering): Released all slaves [ 1107.178102][T31663] bond0 (unregistering): Released all slaves [ 1107.195003][T31663] bond3 (unregistering): (slave lo): Releasing backup interface [ 1107.205729][T31663] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1107.217820][T31663] bond3 (unregistering): Released all slaves [ 1107.236842][T31663] bond4 (unregistering): Released all slaves [ 1107.410166][T31663] : left promiscuous mode [ 1107.644225][T31663] tipc: Left network mode [ 1107.858167][ T8434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.056188][ T8450] tipc: Enabling of bearer rejected, failed to enable media [ 1108.726360][T31663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1108.753011][T31663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.779253][T31663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1108.802532][ T8472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9511'. [ 1108.811005][T31663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1108.826358][ T8473] netlink: 'syz.1.9510': attribute type 11 has an invalid length. [ 1108.866603][T31663] veth1_vlan: left promiscuous mode [ 1108.895662][T31663] veth0_vlan: left promiscuous mode [ 1108.988604][ T8484] netlink: 'syz.3.9513': attribute type 1 has an invalid length. [ 1109.028480][ T8484] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9513'. [ 1109.427520][T31659] smc: removing ib device syz2 [ 1109.431661][T31663] vxcan0 (unregistering): left allmulticast mode [ 1109.615386][ T8470] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1110.248223][ T8515] netlink: 'syz.0.9521': attribute type 29 has an invalid length. [ 1110.275710][ T8524] netlink: 'syz.3.9522': attribute type 1 has an invalid length. [ 1110.572107][ T8538] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.9526'. [ 1110.807453][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9528'. [ 1110.826575][ T8545] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1110.870744][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1110.878860][ C1] lec:lec_tx_timeout: lec0 [ 1110.892157][ T8545] netlink: 348 bytes leftover after parsing attributes in process `syz.0.9528'. [ 1111.099812][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9531'. [ 1111.108929][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9531'. [ 1111.205556][ T8559] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9532'. [ 1111.258704][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9533'. [ 1111.274973][ T8556] netlink: 'syz.4.9532': attribute type 1 has an invalid length. [ 1111.558899][ T8577] Cannot find add_set index 2 as target [ 1111.583877][ T8575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9537'. [ 1111.646043][ T8557] macvlan2: entered promiscuous mode [ 1111.673577][ T8557] macvlan2: entered allmulticast mode [ 1111.959119][ T8594] xt_l2tp: v2 doesn't support IP mode [ 1112.077934][ T8594] gretap0: entered promiscuous mode [ 1112.107072][ T8594] vlan2: entered promiscuous mode [ 1112.198864][ T8595] vlan2: entered promiscuous mode [ 1112.728131][ T8615] vlan2: entered allmulticast mode [ 1112.743303][ T8615] gretap0: entered allmulticast mode [ 1113.113985][ T8638] netlink: 'syz.4.9549': attribute type 7 has an invalid length. [ 1113.152426][ T8638] netlink: 'syz.4.9549': attribute type 8 has an invalid length. [ 1113.457454][ T8656] gre0: entered promiscuous mode [ 1113.483213][ T8656] gre0: entered allmulticast mode [ 1113.601857][ T9] IPVS: starting estimator thread 0... [ 1113.650902][ T8666] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1113.740202][ T8667] IPVS: using max 24 ests per chain, 57600 per kthread [ 1114.082645][ T8689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1114.139762][ T8687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1114.421382][ T8698] sock: sock_set_timeout: `syz.4.9567' (pid 8698) tries to set negative timeout [ 1114.458324][ T8711] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 1114.469305][ T8704] netlink: 'syz.0.9569': attribute type 10 has an invalid length. [ 1114.479009][ T8704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.486814][ T8704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.564331][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.571615][ T8704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1114.579171][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.586427][ T8704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.694041][ T8704] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1114.833287][ T8724] netlink: 'syz.4.9571': attribute type 1 has an invalid length. [ 1114.878922][ T8724] netlink: 'syz.4.9571': attribute type 2 has an invalid length. [ 1114.932405][ T8724] netlink: 'syz.4.9571': attribute type 1 has an invalid length. [ 1114.996901][ T8724] __nla_validate_parse: 9 callbacks suppressed [ 1114.996925][ T8724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9571'. [ 1115.168570][ T8743] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1115.242369][T31663] IPVS: stop unused estimator thread 0... [ 1115.586027][ T8766] netlink: zone id is out of range [ 1115.593718][ T8766] netlink: zone id is out of range [ 1115.598949][ T8766] netlink: zone id is out of range [ 1115.605139][ T8766] netlink: zone id is out of range [ 1115.610739][ T8766] netlink: zone id is out of range [ 1115.678992][ T8766] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9585'. [ 1115.791947][ T8780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1115.805396][ T8780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1115.884636][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1115.915176][ T8787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1115.993233][ T8787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1115.996306][ T8791] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20000 [ 1116.033565][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9590'. [ 1116.079824][ T8787] veth0_macvtap: left promiscuous mode [ 1116.253210][ T8808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9590'. [ 1116.317542][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9596'. [ 1116.338942][ T8813] smc: net device team0 applied user defined pnetid SYZ2 [ 1116.344009][ T8811] netlink: 'syz.3.9596': attribute type 1 has an invalid length. [ 1116.364750][ T8811] netlink: 'syz.3.9596': attribute type 2 has an invalid length. [ 1116.588753][ T8825] sctp: [Deprecated]: syz.1.9603 (pid 8825) Use of int in max_burst socket option deprecated. [ 1116.588753][ T8825] Use struct sctp_assoc_value instead [ 1116.764760][ T8834] Cannot find del_set index 4 as target [ 1116.826295][ T8839] ipt_rpfilter: unknown options [ 1117.057330][ T8851] netlink: 'syz.4.9610': attribute type 1 has an invalid length. [ 1117.189863][ T8851] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1117.212615][ T8855] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9611'. [ 1117.884197][ T8892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9621'. [ 1117.956994][ T8901] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9620'. [ 1117.969527][ T8901] net_ratelimit: 3 callbacks suppressed [ 1117.969549][ T8901] netlink: Unknown conntrack attr (0) [ 1118.139621][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9624'. [ 1118.151026][ T8907] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1118.161661][ T8907] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9624'. [ 1120.381186][ T8867] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1120.651557][ T8928] Cannot find set identified by id 0 to match [ 1120.854268][ T8938] bridge0: port 3(gretap0) entered blocking state [ 1120.861259][ T8938] bridge0: port 3(gretap0) entered disabled state [ 1120.869085][ T8938] gretap0: entered allmulticast mode [ 1120.897073][ T8938] gretap0: left allmulticast mode [ 1120.902393][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1120.902427][ C1] lec:lec_tx_timeout: lec0 [ 1121.045853][ T8946] __nla_validate_parse: 1 callbacks suppressed [ 1121.045876][ T8946] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9635'. [ 1121.299711][ T8946] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.325549][ T8946] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1121.434395][ T8963] netlink: 'syz.3.9640': attribute type 21 has an invalid length. [ 1121.482321][ T8963] IPv6: NLM_F_CREATE should be specified when creating new route [ 1121.502779][ T8963] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1121.510148][ T8963] IPv6: NLM_F_CREATE should be set when creating new route [ 1121.514324][ T8946] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.517527][ T8963] IPv6: NLM_F_CREATE should be set when creating new route [ 1121.528900][ T8946] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1121.535302][ T8963] IPv6: NLM_F_CREATE should be set when creating new route [ 1121.583034][ T8969] nbd: nbd1 already in use [ 1121.587929][ T8969] block nbd1: NBD_DISCONNECT [ 1121.594072][ T8969] block nbd1: Send disconnect failed -32 [ 1121.600172][ T8969] block nbd1: shutting down sockets [ 1121.732820][ T8946] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.746825][ T8946] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1121.915699][ T8946] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.950685][ T8946] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1122.093129][ T8975] delete_channel: no stack [ 1122.303677][ T9000] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9648'. [ 1122.502146][T31661] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 1122.514089][ T8917] block nbd64: NBD_DISCONNECT [ 1122.523201][T31661] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1122.533700][T31661] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 1122.545893][T31661] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1122.704684][T31662] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 1122.735288][T31662] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1122.832157][T31658] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 1122.849718][T31658] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1122.873493][ T8917] udevd[8917]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1122.887966][ T9008] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9650'. [ 1123.210014][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9656'. [ 1123.624507][ T9052] netlink: 'syz.3.9665': attribute type 1 has an invalid length. [ 1123.778730][ T9055] bond2: (slave gretap1): making interface the new active one [ 1123.823940][ T9055] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1123.925324][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9667'. [ 1123.954838][ T9059] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9667'. [ 1124.467847][ T9079] netlink: 'syz.4.9672': attribute type 64 has an invalid length. [ 1124.942639][ T9101] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9679'. [ 1124.952211][ T9102] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 1125.198116][ T9113] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1125.243286][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9684'. [ 1125.252854][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9684'. [ 1125.358393][ T9122] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9684'. [ 1125.429997][ T9126] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1125.658344][ T9140] tc_dump_action: action bad kind [ 1126.322758][ T9175] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1126.323517][ T9189] __nla_validate_parse: 3 callbacks suppressed [ 1126.323537][ T9189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9707'. [ 1126.475481][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9707'. [ 1126.696493][ T9208] syzkaller0: entered promiscuous mode [ 1126.724687][ T9208] syzkaller0: entered allmulticast mode [ 1126.852557][ T9217] bridge_slave_0: invalid flags given to default FDB implementation [ 1127.308378][ T30] audit: type=1804 audit(1773745290.483:11): pid=9244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.9722" name="/newroot/110/cgroup.controllers" dev="tmpfs" ino=578 res=1 errno=0 [ 1127.316884][ T9243] syzkaller0: entered promiscuous mode [ 1127.336869][ T9243] syzkaller0: entered allmulticast mode [ 1127.400422][ T30] audit: type=1800 audit(1773745290.513:12): pid=9244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9722" name="cgroup.controllers" dev="tmpfs" ino=578 res=0 errno=0 [ 1127.502272][ T9249] netlink: 'syz.4.9724': attribute type 25 has an invalid length. [ 1127.513231][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9724'. [ 1127.530205][ T9249] netlink: 'syz.4.9724': attribute type 25 has an invalid length. [ 1127.538390][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9724'. [ 1127.683497][ T9260] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1127.691255][ T9260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1127.833377][ T9231] Cannot find set identified by id 1 to match [ 1127.877399][ T9270] netlink: 'syz.2.9731': attribute type 9 has an invalid length. [ 1127.886317][ T9270] netlink: 'syz.2.9731': attribute type 11 has an invalid length. [ 1127.897750][ T9270] netlink: 'syz.2.9731': attribute type 12 has an invalid length. [ 1127.916168][ T9270] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.9731'. [ 1127.929640][ T9270] veth0: entered promiscuous mode [ 1128.448629][ T9269] veth0: left promiscuous mode [ 1128.655319][ T9308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1128.782360][ T9308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1128.875591][ T9312] bond0: entered promiscuous mode [ 1128.894657][ T9321] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9742'. [ 1128.914270][ T9312] bond_slave_0: entered promiscuous mode [ 1128.940233][ T9321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9742'. [ 1128.949244][ T9321] netlink: 31 bytes leftover after parsing attributes in process `syz.3.9742'. [ 1128.950395][ T9312] bond_slave_1: entered promiscuous mode [ 1128.993854][ T9312] bridge0: entered promiscuous mode [ 1129.013901][ T9321] netlink: 'syz.3.9742': attribute type 2 has an invalid length. [ 1129.016271][ T9312] batadv0: entered promiscuous mode [ 1129.047349][ T9312] hsr1: entered promiscuous mode [ 1129.050141][ T9321] netlink: 31 bytes leftover after parsing attributes in process `syz.3.9742'. [ 1129.060416][ T9312] hsr1: entered allmulticast mode [ 1129.075260][ T9312] bond0: entered allmulticast mode [ 1129.088603][ T9312] bond_slave_0: entered allmulticast mode [ 1129.106517][ T9312] bond_slave_1: entered allmulticast mode [ 1129.121130][ T9312] bridge0: entered allmulticast mode [ 1129.133302][ T9312] batadv0: entered allmulticast mode [ 1129.147471][ T9312] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1129.185141][ T9312] bond0: left promiscuous mode [ 1129.190219][ T9312] bond_slave_0: left promiscuous mode [ 1129.196552][ T9312] bond_slave_1: left promiscuous mode [ 1129.205309][ T9312] bridge0: left promiscuous mode [ 1129.213475][ T9312] batadv0: left promiscuous mode [ 1129.309819][ T9318] syzkaller0: entered promiscuous mode [ 1129.317446][ T9318] syzkaller0: entered allmulticast mode [ 1129.559972][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9746'. [ 1129.675856][ T9342] netlink: 'syz.0.9747': attribute type 2 has an invalid length. [ 1131.240336][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1131.768837][ T9342] vþ: entered promiscuous mode [ 1131.777326][ T9344] __nla_validate_parse: 1 callbacks suppressed [ 1131.777351][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9744'. [ 1131.996481][ T9360] netlink: 256 bytes leftover after parsing attributes in process `syz.3.9753'. [ 1132.019304][ T9358] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9751'. [ 1132.073997][ T9364] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1132.093425][ T9358] syzkaller1: entered promiscuous mode [ 1132.099044][ T9358] syzkaller1: entered allmulticast mode [ 1132.183006][ T9372] netlink: 216 bytes leftover after parsing attributes in process `syz.3.9755'. [ 1132.480734][ T9380] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9757'. [ 1132.597463][ T9388] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9760'. [ 1132.622668][ T9391] netlink: get zone limit has 4 unknown bytes [ 1132.664892][ T9394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9759'. [ 1132.687469][ T9395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9760'. [ 1133.016519][ T9402] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9764'. [ 1133.086549][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9765'. [ 1133.567504][ T9419] netlink: 'syz.2.9768': attribute type 1 has an invalid length. [ 1134.291821][ T9472] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 1134.427087][ T9473] syzkaller0: entered promiscuous mode [ 1134.433849][ T9473] syzkaller0: entered allmulticast mode [ 1134.877520][ T9450] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1136.111079][T30806] Bluetooth: hci0: command 0x0401 tx timeout [ 1136.684499][ T9495] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1136.814683][ T9514] __nla_validate_parse: 5 callbacks suppressed [ 1136.814709][ T9514] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9794'. [ 1137.063305][ T84] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1137.083238][ T84] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1137.109830][ T84] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1137.145624][ T84] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1137.335486][ T9549] netlink: 'syz.1.9799': attribute type 16 has an invalid length. [ 1137.372685][ T9549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9799'. [ 1137.403598][ T9548] bond6: (slave bond_slave_1): Device is not our slave [ 1137.417285][ T9548] bond6: option active_slave: invalid value (bond_slave_1) [ 1137.442006][ T9548] bond6 (unregistering): Released all slaves [ 1137.476261][ T9546] wlan0 speed is unknown, defaulting to 1000 [ 1137.484219][ T9561] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9806'. [ 1137.564607][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9799'. [ 1137.857293][ T9575] netlink: 'syz.2.9811': attribute type 11 has an invalid length. [ 1137.866273][ T9575] netlink: 228 bytes leftover after parsing attributes in process `syz.2.9811'. [ 1138.070298][ T9590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1138.114562][ T9584] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1138.128695][ T9584] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.383600][ T9593] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.429370][ T9597] mac80211_hwsim hwsim80 wlan0: entered promiscuous mode [ 1138.469158][ T9593] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.526118][ T9599] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1138.540820][ T9599] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1138.548817][ T9599] gretap1: entered promiscuous mode [ 1138.555182][ T9599] gretap1: entered allmulticast mode [ 1138.576058][ T9602] : entered promiscuous mode [ 1138.638671][ T9614] netlink: 220 bytes leftover after parsing attributes in process `syz.2.9822'. [ 1138.653244][ T9584] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1138.664450][ T9584] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.707637][ T9612] netlink: 88 bytes leftover after parsing attributes in process `syz.0.9821'. [ 1138.777533][ T9593] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.793607][ T9618] netlink: 116 bytes leftover after parsing attributes in process `syz.1.9823'. [ 1138.879391][ T9584] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1138.910479][ T9584] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.007580][ T9629] xt_connbytes: Forcing CT accounting to be enabled [ 1139.026882][ T9618] bond2 (unregistering): Released all slaves [ 1139.063818][ T9620] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1139.078355][ T9620] bond2 (unregistering): Released all slaves [ 1139.166213][ T9593] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.214015][ T9635] netlink: 260 bytes leftover after parsing attributes in process `syz.2.9826'. [ 1139.256458][ T9584] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1139.267151][ T9584] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.329165][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9827'. [ 1139.354745][T31663] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.389875][ T9638] bond1: entered promiscuous mode [ 1139.396849][ T9638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1139.431139][T31661] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.466278][T31663] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.488151][T31661] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1139.498398][T31661] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.514900][T31663] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.591370][T31659] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1139.609952][T31659] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.658187][T31659] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1139.668582][T31659] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.707751][T31659] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1139.720138][T31659] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.839913][ T9655] sctp: [Deprecated]: syz.1.9831 (pid 9655) Use of int in maxseg socket option. [ 1139.839913][ T9655] Use struct sctp_assoc_value instead [ 1140.070517][ T9673] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1140.393184][ T9694] netlink: 'syz.2.9842': attribute type 1 has an invalid length. [ 1140.474271][ T9694] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1140.537364][ T9695] bond6: (slave veth6): Enslaving as an active interface with a down link [ 1140.574294][ T9694] bond6: (slave veth0_to_bond): making interface the new active one [ 1140.585245][ T9694] veth0_to_bond: entered promiscuous mode [ 1140.593189][ T9694] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1140.704521][ T9715] netlink: 'syz.0.9847': attribute type 1 has an invalid length. [ 1140.763655][ T9722] netlink: 'syz.1.9849': attribute type 1 has an invalid length. [ 1141.096948][ T9747] sctp: [Deprecated]: syz.2.9855 (pid 9747) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1141.096948][ T9747] Use struct sctp_sack_info instead [ 1141.482765][ T9773] IPv6: sit1: Disabled Multicast RS [ 1141.982437][ T9808] syzkaller0: entered promiscuous mode [ 1141.988182][ T9808] syzkaller0: entered allmulticast mode [ 1142.152826][ T9819] vcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 1142.275047][ T9828] __nla_validate_parse: 72 callbacks suppressed [ 1142.275072][ T9828] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9880'. [ 1142.292457][ T9828] tipc: Invalid UDP bearer configuration [ 1142.292594][ T9828] tipc: Enabling of bearer rejected, failed to enable media [ 1142.404406][ T9826] wlan0 speed is unknown, defaulting to 1000 [ 1142.555394][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9883'. [ 1142.687142][ T9847] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1142.746690][ T9852] netlink: 'syz.4.9886': attribute type 7 has an invalid length. [ 1143.422532][ T9896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9899'. [ 1143.459045][ T9898] syzkaller0: entered promiscuous mode [ 1143.466883][ T9898] syzkaller0: entered allmulticast mode [ 1143.581724][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9897'. [ 1143.594212][ T9898] netlink: 512 bytes leftover after parsing attributes in process `syz.3.9897'. [ 1143.754065][ T9914] sctp: [Deprecated]: syz.0.9903 (pid 9914) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1143.754065][ T9914] Use struct sctp_sack_info instead [ 1143.797688][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9904'. [ 1143.823536][ T9916] netlink: 'syz.1.9904': attribute type 1 has an invalid length. [ 1143.852726][ T9916] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9904'. [ 1143.884195][ T9918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9904'. [ 1143.910452][ T9918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9904'. [ 1144.240639][ T9938] sctp: [Deprecated]: syz.3.9908 (pid 9938) Use of int in max_burst socket option. [ 1144.240639][ T9938] Use struct sctp_assoc_value instead [ 1144.403913][ T9954] IPVS: set_ctl: invalid protocol: 93 0.0.0.0:0 [ 1144.619650][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9913'. [ 1144.650591][ T9963] netlink: 'syz.3.9913': attribute type 1 has an invalid length. [ 1144.782523][ T9977] netlink: 'syz.4.9915': attribute type 1 has an invalid length. [ 1144.804119][ T9963] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1144.913880][ T9981] netlink: 'syz.0.9916': attribute type 5 has an invalid length. [ 1144.936455][ T9981] geneve2: entered promiscuous mode [ 1144.942052][ T9981] geneve2: entered allmulticast mode [ 1144.949715][T31662] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1144.980186][T31662] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1144.999343][T31662] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1145.017240][T31662] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1145.424780][ T9992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1146.423463][T10074] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1146.444211][T10074] bond1: left promiscuous mode [ 1146.451616][T10074] geneve2: left promiscuous mode [ 1146.467992][T10080] netlink: 'syz.0.9941': attribute type 29 has an invalid length. [ 1146.568278][T10074] netlink: 'syz.0.9941': attribute type 29 has an invalid length. [ 1146.610933][T10088] netlink: ct family unspecified [ 1146.619422][T10086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1147.064095][T10114] netlink: 'syz.0.9954': attribute type 1 has an invalid length. [ 1147.391871][T10135] __nla_validate_parse: 16 callbacks suppressed [ 1147.391896][T10135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9961'. [ 1147.545973][T10135] bond7: entered promiscuous mode [ 1147.554892][T10135] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1147.635695][T10145] bridge3: entered promiscuous mode [ 1147.660945][T10145] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 1147.697711][T10150] macvlan2: entered promiscuous mode [ 1147.725067][T10150] macvlan2: entered allmulticast mode [ 1147.738688][T10150] bond7: (slave macvlan2): Error -98 calling set_mac_address [ 1148.243548][T10171] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 1148.283792][T10173] IPv6: NLM_F_CREATE should be specified when creating new route [ 1148.414065][T10175] netlink: 9 bytes leftover after parsing attributes in process `syz.1.9971'. [ 1148.427724][T10181] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9972'. [ 1148.428162][T10178] netlink: 788 bytes leftover after parsing attributes in process `syz.0.9973'. [ 1148.462424][T10184] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9972'. [ 1148.652427][T10196] openvswitch: netlink: Message has 4 unknown bytes. [ 1148.888897][T10214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9982'. [ 1148.921839][T10217] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9981'. [ 1149.039704][T10224] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20002 [ 1149.185695][T10230] TC_ACT_REPEAT abuse ? [ 1149.230697][T30806] Bluetooth: hci2: command tx timeout [ 1149.439753][T10237] netlink: 'syz.1.9990': attribute type 1 has an invalid length. [ 1149.481258][T10237] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1149.496683][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9990'. [ 1149.505917][T10237] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9990'. [ 1149.651213][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9994'. [ 1149.984389][T10267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1150.029732][T10269] bond0: (slave bridge0): Releasing backup interface [ 1150.048358][T10269] bridge0: left allmulticast mode [ 1150.058796][T10269] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.066695][T10269] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.087960][T10269] bridge_slave_0: left allmulticast mode [ 1150.094180][T10269] bridge_slave_0: left promiscuous mode [ 1150.106304][T10269] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.142513][T10269] bridge_slave_1: left allmulticast mode [ 1150.158675][T10269] bridge_slave_1: left promiscuous mode [ 1150.175586][T10269] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.202247][T10269] bond0: (slave bond_slave_0): Releasing backup interface [ 1150.224683][T10269] bond_slave_0: left allmulticast mode [ 1150.254806][T10269] bond0: (slave bond_slave_1): Releasing backup interface [ 1150.264373][T10269] bond_slave_1: left allmulticast mode [ 1150.281253][T10269] team0: Port device team_slave_1 removed [ 1150.296497][T10269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1150.310450][T10269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1150.321620][T10269] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1150.666976][T10304] tipc: Started in network mode [ 1150.685044][T10304] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1150.698656][T10304] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1150.711659][T10304] tipc: Enabled bearer , priority 10 [ 1151.006650][T10315] wlan0 speed is unknown, defaulting to 1000 [ 1151.411388][T10338] xt_addrtype: ipv6 does not support BROADCAST matching [ 1151.441379][T10339] netlink: 'syz.3.10022': attribute type 8 has an invalid length. [ 1151.449384][T10339] sch_fq: defrate 0 ignored. [ 1151.732424][T31662] veth0_to_bond: left promiscuous mode [ 1151.832309][ T9331] tipc: Node number set to 1 [ 1151.979850][T10370] sctp: [Deprecated]: syz.1.10032 (pid 10370) Use of int in max_burst socket option deprecated. [ 1151.979850][T10370] Use struct sctp_assoc_value instead [ 1152.275654][T10390] netlink: 'syz.1.10035': attribute type 3 has an invalid length. [ 1152.409794][T10401] __nla_validate_parse: 6 callbacks suppressed [ 1152.409817][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10039'. [ 1152.513281][T10410] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.10039'. [ 1152.524188][T10410] netlink: Unknown conntrack attr (0) [ 1152.846980][T10422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10046'. [ 1152.964117][T10430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10049'. [ 1152.983877][T10429] IPv6: sit2: Disabled Multicast RS [ 1152.989269][T10430] openvswitch: netlink: Flow key attr not present in new flow. [ 1153.101407][T10446] netlink: 88 bytes leftover after parsing attributes in process `syz.4.10053'. [ 1153.253184][T10450] netlink: 9 bytes leftover after parsing attributes in process `syz.0.10055'. [ 1153.253981][T10457] sch_fq: defrate 0 ignored. [ 1153.430515][T10469] netlink: 81 bytes leftover after parsing attributes in process `syz.2.10060'. [ 1153.437323][T10471] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10061'. [ 1153.455626][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10060'. [ 1153.460565][T10471] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.10061'. [ 1153.476773][T10469] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1153.664690][T10481] syzkaller0: entered promiscuous mode [ 1153.670372][T10481] syzkaller0: entered allmulticast mode [ 1154.147212][T10515] xt_HMARK: spi-set and port-set can't be combined [ 1154.439062][T10533] netlink: 'syz.3.10079': attribute type 26 has an invalid length. [ 1154.449988][T10533] netlink: 'syz.3.10079': attribute type 26 has an invalid length. [ 1154.769977][T10549] netlink: 'syz.4.10084': attribute type 12 has an invalid length. [ 1154.783205][T10549] netlink: 'syz.4.10084': attribute type 11 has an invalid length. [ 1155.055702][T10566] bridge4: entered promiscuous mode [ 1155.061727][T10566] bridge4: entered allmulticast mode [ 1155.177036][T10574] netlink: 'syz.2.10092': attribute type 21 has an invalid length. [ 1157.554345][T10538] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1157.571499][T10572] __nla_validate_parse: 10 callbacks suppressed [ 1157.571524][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10092'. [ 1157.729833][T10579] lo: entered promiscuous mode [ 1157.751951][T10579] tunl0: entered promiscuous mode [ 1157.764594][T10579] gre0: entered promiscuous mode [ 1157.800567][T10579] gretap0: entered promiscuous mode [ 1157.815345][T10579] erspan0: entered promiscuous mode [ 1157.827121][T10579] ip_vti0: entered promiscuous mode [ 1157.865257][T10594] netlink: 'syz.0.10097': attribute type 1 has an invalid length. [ 1157.885261][T10593] syzkaller1: entered promiscuous mode [ 1157.900509][T10594] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10097'. [ 1157.902088][T10593] syzkaller1: entered allmulticast mode [ 1157.915425][T10594] netlink: 1 bytes leftover after parsing attributes in process `syz.0.10097'. [ 1157.915515][T10594] netlink: 'syz.0.10097': attribute type 1 has an invalid length. [ 1157.915533][T10594] netlink: 634 bytes leftover after parsing attributes in process `syz.0.10097'. [ 1158.183477][T10611] netlink: 'syz.1.10102': attribute type 21 has an invalid length. [ 1158.201770][T10611] IPv6: NLM_F_CREATE should be specified when creating new route [ 1158.207696][T10609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10100'. [ 1158.286457][T10616] netlink: 788 bytes leftover after parsing attributes in process `syz.3.10104'. [ 1158.303440][T10615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10103'. [ 1158.349914][T10618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10105'. [ 1158.783923][T10643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10114'. [ 1158.894826][T10652] syzkaller1: entered promiscuous mode [ 1158.920710][T10652] syzkaller1: entered allmulticast mode [ 1159.062592][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10118'. [ 1159.121648][T10663] macsec1: entered promiscuous mode [ 1159.161888][T10663] bridge0: entered promiscuous mode [ 1159.175653][T10663] macsec1: entered allmulticast mode [ 1159.191814][T10663] bridge0: entered allmulticast mode [ 1159.209012][T10663] bridge0: port 1(macsec1) entered blocking state [ 1159.242814][T10663] bridge0: port 1(macsec1) entered disabled state [ 1159.254722][T10663] bridge0: left allmulticast mode [ 1159.259829][T10663] bridge0: left promiscuous mode [ 1159.303057][T10671] netlink: 'syz.2.10122': attribute type 1 has an invalid length. [ 1159.311488][T10671] netlink: 'syz.2.10122': attribute type 2 has an invalid length. [ 1159.319335][T10671] netlink: 'syz.2.10122': attribute type 1 has an invalid length. [ 1159.348028][T10671] netlink: 'syz.2.10122': attribute type 3 has an invalid length. [ 1159.389559][T10671] syzkaller0: entered promiscuous mode [ 1159.401282][T10671] syzkaller0: entered allmulticast mode [ 1159.518840][T10684] netlink: 'syz.1.10125': attribute type 1 has an invalid length. [ 1159.545242][T10684] netlink: 'syz.1.10125': attribute type 4 has an invalid length. [ 1159.675243][T10695] bridge_slave_1: left allmulticast mode [ 1159.682235][T10695] bridge_slave_1: left promiscuous mode [ 1159.688923][T10695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.728205][T10695] bridge_slave_0: left allmulticast mode [ 1159.734693][T10695] bridge_slave_0: left promiscuous mode [ 1159.742240][T10695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.943403][T10703] : entered promiscuous mode [ 1159.945412][T10704] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1159.963608][T10704] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1160.068099][T10711] xt_l2tp: v2 doesn't support IP mode [ 1160.087267][T10711] veth0_to_team: entered promiscuous mode [ 1160.095278][T10711] veth0_to_team: left promiscuous mode [ 1162.543171][T10686] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1162.915363][T10757] bridge0: entered allmulticast mode [ 1163.079978][T30806] block nbd0: Receive control failed (result -32) [ 1164.058270][T10791] __nla_validate_parse: 8 callbacks suppressed [ 1164.058293][T10791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10155'. [ 1164.300897][T10795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10156'. [ 1164.372360][T10803] syzkaller1: entered promiscuous mode [ 1164.388234][T10803] syzkaller1: entered allmulticast mode [ 1164.408053][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10160'. [ 1164.421490][T10800] netlink: 'syz.2.10158': attribute type 2 has an invalid length. [ 1164.519561][T10812] netlink: 'syz.0.10159': attribute type 12 has an invalid length. [ 1164.588007][T10818] sctp: [Deprecated]: syz.2.10162 (pid 10818) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1164.588007][T10818] Use struct sctp_sack_info instead [ 1164.663058][T10818] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1164.716176][T10818] bond8 (unregistering): Released all slaves [ 1165.189984][T10840] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.10168'. [ 1165.233586][T10840] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1165.247639][T10840] bond3 (unregistering): Released all slaves [ 1165.282844][T10842] pim6reg: entered allmulticast mode [ 1165.339710][T10842] pim6reg: left allmulticast mode [ 1165.623777][T10857] Cannot find map_set index 65533 as target [ 1167.313829][T10808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1167.515789][T10868] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 1167.526803][T10866] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10177'. [ 1167.696739][T10877] netlink: 'syz.4.10181': attribute type 1 has an invalid length. [ 1167.749242][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10181'. [ 1167.793349][T10877] bond3: entered promiscuous mode [ 1167.798692][T10877] bond3: entered allmulticast mode [ 1167.810623][T10877] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1167.819105][ T5896] IPVS: starting estimator thread 0... [ 1167.848054][T10877] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10181'. [ 1167.930260][T10887] IPVS: using max 26 ests per chain, 62400 per kthread [ 1167.997494][T10902] netlink: 'syz.3.10186': attribute type 1 has an invalid length. [ 1168.037583][T10897] netlink: 'syz.1.10183': attribute type 21 has an invalid length. [ 1168.300882][T10920] openvswitch: netlink: IP tunnel TTL not specified. [ 1169.038207][T10959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10203'. [ 1169.281900][T10978] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10209'. [ 1169.378643][T10984] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1169.440004][T10987] openvswitch: netlink: Key 2 has unexpected len 0 expected 4 [ 1169.607635][T10999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10217'. [ 1169.654299][T10999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10217'. [ 1169.659068][T11005] netlink: 260 bytes leftover after parsing attributes in process `syz.4.10219'. [ 1169.865464][T11022] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10221'. [ 1169.908199][T11024] netlink: 'syz.4.10223': attribute type 11 has an invalid length. [ 1169.926609][T11024] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10223'. [ 1170.129351][T11041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10226'. [ 1170.368998][T11052] netlink: 'syz.1.10233': attribute type 83 has an invalid length. [ 1170.436590][T11057] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10236'. [ 1170.457540][T11058] ip6gre1: entered allmulticast mode [ 1170.562095][T11066] netlink: 85 bytes leftover after parsing attributes in process `syz.0.10236'. [ 1170.661666][T11068] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10238'. [ 1170.688125][T10967] lec:lec_start_xmit: lec0:No lecd attached [ 1170.799714][ T30] audit: type=1107 audit(1773745333.973:13): pid=11074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÖÝkrnÒ»g)è¦ðiÐÆ]V\‰Ð–FX²ù' [ 1170.803356][T11075] geneve3: entered promiscuous mode [ 1170.828538][T11079] openvswitch: netlink: IP tunnel dst address not specified [ 1171.094075][ T30] audit: type=1804 audit(1773745334.273:14): pid=11099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.10249" name="/newroot/155/cgroup.controllers" dev="tmpfs" ino=808 res=1 errno=0 [ 1171.167291][ T30] audit: type=1800 audit(1773745334.293:15): pid=11099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10249" name="cgroup.controllers" dev="tmpfs" ino=808 res=0 errno=0 [ 1171.462713][T11116] Bluetooth: hci4: link tx timeout [ 1171.469564][T11116] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1171.969397][T11135] block nbd9: Receive control failed (result -32) [ 1171.969411][T30806] block nbd1: Receive control failed (result -32) [ 1171.976710][T23925] block nbd4: Receive control failed (result -32) [ 1171.983014][ T5826] block nbd6: Receive control failed (result -32) [ 1171.985719][T11136] block nbd10: Receive control failed (result -32) [ 1172.001456][ T5786] block nbd5: Receive control failed (result -32) [ 1172.017832][T11119] block nbd8: Receive control failed (result -32) [ 1172.020283][T11122] block nbd7: Receive control failed (result -32) [ 1172.132343][T11159] netlink: 'syz.4.10264': attribute type 12 has an invalid length. [ 1172.153591][T11157] netlink: 'syz.2.10263': attribute type 21 has an invalid length. [ 1172.173912][T11157] IPv6: NLM_F_CREATE should be specified when creating new route [ 1172.202417][T11159] bond4 (unregistering): Released all slaves [ 1172.365931][T11154] "syz.3.10262" (11154) uses obsolete ecb(arc4) skcipher [ 1172.845805][T11198] gretap3: entered promiscuous mode [ 1172.880080][T11198] gretap3: entered allmulticast mode [ 1173.557606][T11122] Bluetooth: hci4: command 0x0406 tx timeout [ 1175.007188][T11216] __nla_validate_parse: 15 callbacks suppressed [ 1175.007212][T11216] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10280'. [ 1175.255103][T11241] batadv1: entered allmulticast mode [ 1175.305817][T11247] netlink: 'syz.4.10288': attribute type 12 has an invalid length. [ 1175.331141][T11247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10288'. [ 1175.413802][T11254] netlink: 'syz.1.10290': attribute type 29 has an invalid length. [ 1175.438606][T11258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10289'. [ 1175.459799][T11250] netlink: 204 bytes leftover after parsing attributes in process `syz.3.10289'. [ 1175.623241][T11264] netlink: 'syz.0.10294': attribute type 1 has an invalid length. [ 1175.729538][T11270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10294'. [ 1175.732252][T11264] bond2: entered promiscuous mode [ 1175.745052][T11264] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1175.788858][T11270] bond2: entered allmulticast mode [ 1175.870536][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 1175.876377][T11264] bond2: (slave bridge1): making interface the new active one [ 1175.878716][ C1] lec:lec_tx_timeout: lec0 [ 1175.894955][T11264] bridge1: entered promiscuous mode [ 1175.910306][T11264] bridge1: entered allmulticast mode [ 1175.942243][T11264] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1176.051489][T11291] netlink: 'syz.2.10302': attribute type 12 has an invalid length. [ 1176.084694][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10302'. [ 1176.213083][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10306'. [ 1176.221770][T11307] netlink: 108 bytes leftover after parsing attributes in process `syz.2.10307'. [ 1176.402224][T11314] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10309'. [ 1176.433671][T11319] netlink: 'syz.0.10310': attribute type 2 has an invalid length. [ 1176.758387][T11329] bond3: Unable to set down delay as MII monitoring is disabled [ 1176.804279][T11329] bond3 (unregistering): Released all slaves [ 1177.118985][ T30] audit: type=1107 audit(1773745340.293:16): pid=11359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1177.171404][T11362] netlink: 'syz.3.10317': attribute type 12 has an invalid length. [ 1177.277221][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10317'. [ 1177.336359][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1177.377019][T11370] netlink: 'syz.3.10322': attribute type 1 has an invalid length. [ 1177.806342][T11398] netlink: 'syz.1.10331': attribute type 1 has an invalid length. [ 1177.962997][T11409] netlink: 'syz.4.10332': attribute type 12 has an invalid length. [ 1178.235826][T11420] bond5 (unregistering): Released all slaves [ 1178.388617][T11445] netlink: 'syz.4.10342': attribute type 2 has an invalid length. [ 1178.613833][T11459] bridge_slave_0: left allmulticast mode [ 1178.631086][ T9331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.648998][T11459] bridge_slave_0: left promiscuous mode [ 1178.658131][T11459] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.673411][T11459] bridge_slave_1: left allmulticast mode [ 1178.681435][T11459] bridge_slave_1: left promiscuous mode [ 1178.687702][T11459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.704653][T11459] bond0: (slave bond_slave_0): Releasing backup interface [ 1178.715128][T11462] netlink: 'syz.2.10347': attribute type 11 has an invalid length. [ 1178.759401][T11459] bond0: (slave bond_slave_1): Releasing backup interface [ 1178.809861][T11459] team0: Port device team_slave_0 removed [ 1178.844961][T11459] team0: Port device team_slave_1 removed [ 1178.879144][T11459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1178.893313][T11459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1178.903323][T11459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1178.912328][T11459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1178.922037][T11459] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1178.973734][T11116] block nbd11: Receive control failed (result -32) [ 1178.993804][T11470] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1179.041632][T31497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.056969][T11462] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1179.065386][T11462] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1179.078736][T11462] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 1179.108363][T11483] mac80211_hwsim hwsim91 ÿ: renamed from wlan1 (while UP) [ 1179.394885][T31659] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1179.412237][T31659] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1179.429765][T31659] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1179.432155][T11501] tc action pedit 'at' offset 6 out of bounds [ 1179.440443][T31659] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1179.522705][T11509] sctp: [Deprecated]: syz.0.10361 (pid 11509) Use of int in maxseg socket option. [ 1179.522705][T11509] Use struct sctp_assoc_value instead [ 1179.977767][T11530] wlan0 speed is unknown, defaulting to 1000 [ 1180.356706][T11548] __nla_validate_parse: 14 callbacks suppressed [ 1180.356732][T11548] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10373'. [ 1180.375979][T11548] tipc: Invalid UDP bearer configuration [ 1180.376043][T11548] tipc: Enabling of bearer rejected, failed to enable media [ 1181.123894][T11585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10385'. [ 1181.247389][T11589] wlan0 speed is unknown, defaulting to 1000 [ 1181.751632][T11614] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10391'. [ 1181.913539][T11625] validate_nla: 3 callbacks suppressed [ 1181.913561][T11625] netlink: 'syz.0.10393': attribute type 4 has an invalid length. [ 1182.074640][T11635] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.10395'. [ 1182.175137][T11637] netlink: 'syz.1.10396': attribute type 1 has an invalid length. [ 1182.190427][T11637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1182.219801][T11637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10396'. [ 1182.232424][T11637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10396'. [ 1182.251356][T11637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10396'. [ 1182.303668][T11642] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1182.313430][T11644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10399'. [ 1182.385831][T11650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1182.401694][T11650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1182.423624][T11650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1182.446261][T11650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1182.830148][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5490 ms [ 1182.838368][ C1] lec:lec_tx_timeout: lec0 [ 1182.892270][T11686] netlink: 112 bytes leftover after parsing attributes in process `syz.0.10411'. [ 1182.942465][T11692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10413'. [ 1182.962851][T11686] xt_socket: unknown flags 0x50 [ 1183.026682][T11695] netlink: 'syz.2.10414': attribute type 21 has an invalid length. [ 1183.047619][T11695] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1183.125063][T11702] netlink: 'syz.1.10417': attribute type 2 has an invalid length. [ 1183.171294][T11702] netlink: 'syz.1.10417': attribute type 11 has an invalid length. [ 1183.242283][T11711] openvswitch: netlink: Multiple metadata blocks provided [ 1183.385859][T11714] xt_ipcomp: unknown flags 1D [ 1183.387404][T11717] xt_hashlimit: size too large, truncated to 1048576 [ 1183.784597][T11747] netlink: 'syz.0.10428': attribute type 12 has an invalid length. [ 1183.795574][T11749] netlink: 'syz.2.10430': attribute type 12 has an invalid length. [ 1183.858243][T11747] bond3: option primary_reselect: invalid value (255) [ 1183.867796][T11747] bond3 (unregistering): Released all slaves [ 1184.006941][T11765] tipc: Started in network mode [ 1184.060638][T11765] tipc: Node identity e0000001, cluster identity 4711 [ 1184.071600][T11765] tipc: Enabling of bearer rejected, failed to enable media [ 1184.101005][T11771] openvswitch: netlink: IP tunnel dst address not specified [ 1184.513203][T11116] Bluetooth: hci3: command 0x0406 tx timeout [ 1184.836876][T11815] netlink: 'syz.4.10444': attribute type 12 has an invalid length. [ 1186.763041][T11810] tunl0: entered promiscuous mode [ 1186.772003][T11810] netlink: 'syz.2.10441': attribute type 3 has an invalid length. [ 1186.779949][T11810] __nla_validate_parse: 9 callbacks suppressed [ 1186.779965][T11810] netlink: 9 bytes leftover after parsing attributes in process `syz.2.10441'. [ 1186.798281][T11815] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1186.878512][T11829] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10446'. [ 1186.897555][T11829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10446'. [ 1187.163249][T11848] netlink: 220 bytes leftover after parsing attributes in process `syz.4.10453'. [ 1187.173339][T11844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10450'. [ 1187.291068][T11852] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10454'. [ 1187.386138][T11857] openvswitch: netlink: Tunnel attr 31 out of range max 16 [ 1187.398420][T11861] netlink: 'syz.2.10457': attribute type 12 has an invalid length. [ 1187.398835][T11858] bond6: Removing last ns target with arp_interval on [ 1187.421768][T11865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10458'. [ 1187.547244][T11870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10462'. [ 1187.631634][T31664] bridge_slave_1: left allmulticast mode [ 1187.660250][T31664] bridge_slave_1: left promiscuous mode [ 1187.666080][T31664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.776180][T31664] bridge_slave_0: left allmulticast mode [ 1187.818467][T31664] bridge_slave_0: left promiscuous mode [ 1187.855670][T31664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.369462][T31664] .` (unregistering): (slave bridge0): Releasing backup interface [ 1188.714738][T31664] bond9 (unregistering): (slave bridge7): Releasing backup interface [ 1188.755787][T31664] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1188.766640][T31664] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1188.777118][T31664] .` (unregistering): Released all slaves [ 1188.787836][T31664] bond1 (unregistering): Released all slaves [ 1188.803555][T31664] bond2 (unregistering): Released all slaves [ 1188.817511][T31664] bond3 (unregistering): Released all slaves [ 1188.836600][T31664] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1188.856249][T31664] bond0 (unregistering): (slave bond4): Releasing active interface [ 1188.865854][T31664] bond0 (unregistering): Released all slaves [ 1188.880378][T31664] bond4 (unregistering): Released all slaves [ 1188.894756][T31664] bond5 (unregistering): Released all slaves [ 1188.909262][T31664] bond6 (unregistering): Released all slaves [ 1188.928354][T31664] bond7 (unregistering): Released all slaves [ 1188.943478][T31664] bond8 (unregistering): Released all slaves [ 1188.959621][T31664] bond9 (unregistering): Released all slaves [ 1189.237504][T11921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10471'. [ 1189.249544][T11916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10470'. [ 1189.262019][T11913] bond12: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1189.298038][T11913] bond12 (unregistering): Released all slaves [ 1189.301011][T11926] netlink: 'syz.1.10472': attribute type 12 has an invalid length. [ 1189.341533][T31664] : left promiscuous mode [ 1189.358293][T11928] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1189.378055][T11928] xt_hashlimit: size too large, truncated to 1048576 [ 1189.589200][T31664] tipc: Left network mode [ 1190.082418][T11946] erspan0: entered promiscuous mode [ 1190.090353][T11946] erspan0: entered allmulticast mode [ 1190.207188][T11955] netlink: 'syz.1.10479': attribute type 3 has an invalid length. [ 1190.258021][T11955] openvswitch: netlink: IP tunnel dst address not specified [ 1190.503871][T31664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1190.543301][T31664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1190.595091][T31664] veth1_macvtap: left promiscuous mode [ 1190.601490][T31664] veth0_macvtap: left promiscuous mode [ 1190.877433][T31664] pim6reg527 (unregistering): left allmulticast mode [ 1191.226528][T11988] veth0: entered promiscuous mode [ 1191.304818][T11997] sch_fq: defrate 0 ignored. [ 1191.436272][T12008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1191.463982][T11965] veth0: left promiscuous mode [ 1191.702060][T12020] openvswitch: netlink: Flow key attr not present in new flow. [ 1191.809647][T12023] openvswitch: netlink: Flow actions attr not present in new flow. [ 1191.895715][T31664] IPVS: stop unused estimator thread 0... [ 1192.165372][T12040] __nla_validate_parse: 7 callbacks suppressed [ 1192.165395][T12040] netlink: 92 bytes leftover after parsing attributes in process `syz.0.10501'. [ 1192.409505][T12062] netlink: 'syz.0.10507': attribute type 1 has an invalid length. [ 1192.436809][T12062] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1192.447498][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10507'. [ 1192.467417][T12068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10506'. [ 1192.478274][T12062] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1192.493532][T12066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10508'. [ 1192.505468][T12062] bond3: entered allmulticast mode [ 1192.528056][T12071] bond3: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1192.600672][T12073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10510'. [ 1192.609963][T12073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10510'. [ 1192.623098][T12073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10510'. [ 1192.632522][T12073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10510'. [ 1192.768151][T12078] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.10511'. [ 1192.986118][T12087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10514'. [ 1193.409556][T12103] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1193.547161][T12112] netlink: 'syz.3.10523': attribute type 2 has an invalid length. [ 1193.669355][ T9331] IPVS: starting estimator thread 0... [ 1193.688894][T12126] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20000 [ 1193.714071][T12128] team0: Device ip6gre2 is of different type [ 1193.760206][T12127] IPVS: using max 24 ests per chain, 57600 per kthread [ 1193.926747][T12143] netlink: 'syz.2.10529': attribute type 1 has an invalid length. [ 1193.943281][T12143] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1194.501493][T12179] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1194.501541][T12177] netlink: 'syz.4.10538': attribute type 83 has an invalid length. [ 1194.540690][T12176] ip6gre1: entered allmulticast mode [ 1195.892172][T12262] xt_CT: No such helper "pptp" [ 1195.975039][T12264] xt_CT: No such helper "pptp" [ 1196.203548][T12270] netlink: 'syz.3.10559': attribute type 1 has an invalid length. [ 1196.230176][T12270] netlink: 'syz.3.10559': attribute type 1 has an invalid length. [ 1196.258685][T12278] syzkaller0: entered promiscuous mode [ 1196.276817][T12278] syzkaller0: entered allmulticast mode [ 1196.439617][T12283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1197.592179][T12359] __nla_validate_parse: 16 callbacks suppressed [ 1197.592204][T12359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10582'. [ 1197.722887][T12355] wlan0 speed is unknown, defaulting to 1000 [ 1198.221330][T12387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.857918][T12417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10595'. [ 1199.048526][T12423] veth0_to_bridge: entered promiscuous mode [ 1199.056685][T12422] veth0_to_bridge: left promiscuous mode [ 1199.274986][T12431] veth0_to_bond: entered allmulticast mode [ 1199.286379][T12429] netlink: 220 bytes leftover after parsing attributes in process `syz.0.10599'. [ 1199.686368][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10605'. [ 1199.695613][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10605'. [ 1199.837805][T12458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10606'. [ 1199.844494][T12457] netlink: 'syz.0.10608': attribute type 2 has an invalid length. [ 1199.874991][T12461] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 1199.916078][T12465] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.10611'. [ 1199.964535][T12467] netlink: 'syz.0.10608': attribute type 21 has an invalid length. [ 1200.016508][T12467] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10608'. [ 1200.060426][T12457] netlink: 27 bytes leftover after parsing attributes in process `syz.0.10608'. [ 1200.172194][T12479] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1200.208964][T12488] netlink: 'syz.1.10615': attribute type 1 has an invalid length. [ 1200.222315][T12481] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1200.424269][T12498] netlink: 'syz.1.10618': attribute type 11 has an invalid length. [ 1200.444767][T12498] netlink: 'syz.1.10618': attribute type 4 has an invalid length. [ 1200.454500][T12498] netlink: 'syz.1.10618': attribute type 5 has an invalid length. [ 1200.463152][T12498] netlink: 'syz.1.10618': attribute type 6 has an invalid length. [ 1200.473987][T12498] netlink: 199748 bytes leftover after parsing attributes in process `syz.1.10618'. [ 1200.485037][T12494] netlink: 'syz.2.10617': attribute type 1 has an invalid length. [ 1201.098352][T12545] syzkaller0: entered promiscuous mode [ 1201.129437][T12545] syzkaller0: entered allmulticast mode [ 1201.511145][T12561] wlan0 speed is unknown, defaulting to 1000 [ 1201.607903][T12579] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 1202.409276][T12243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.428657][T12243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.500478][ T9] ------------[ cut here ]------------ [ 1202.506549][ T9] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 1202.516446][ T9] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800, CPU#0: kworker/0:0/9 [ 1202.526956][ T9] Modules linked in: [ 1202.531492][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 1202.540683][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1202.550805][ T9] Workqueue: mld mld_ifc_work [ 1202.551233][T12629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1202.555527][ T9] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 1202.555667][ T9] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 1202.555688][ T9] RSP: 0018:ffffc900000e6678 EFLAGS: 00010246 [ 1202.555712][ T9] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 1202.555727][ T9] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9022de30 [ 1202.555743][ T9] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1202.555759][ T9] R10: 0000000000000004 R11: 0000000000000000 R12: ffff888029b3a168 [ 1202.555774][ T9] R13: 0000000000000000 R14: ffffffff9022de30 R15: ffff88807d6fb138 [ 1202.638018][ T9] FS: 0000000000000000(0000) GS:ffff888125460000(0000) knlGS:0000000000000000 [ 1202.647021][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1202.653775][ T9] CR2: 00007f890984eddd CR3: 0000000035e46000 CR4: 00000000003526f0 [ 1202.661999][ T9] Call Trace: [ 1202.665318][ T9] [ 1202.668291][ T9] rate_control_send_low+0x1a7/0x7b0 [ 1202.673721][ T9] ? __skb_flow_dissect+0x265e/0x6d20 [ 1202.679149][ T9] rate_control_get_rate+0x20b/0x5d0 [ 1202.684589][ T9] ieee80211_tx_h_rate_ctrl+0xaf6/0x1760 [ 1202.690333][ T9] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1202.696480][ T9] ? unwind_next_frame+0xa5/0x23c0 [ 1202.701698][ T9] invoke_tx_handlers_late+0xba/0x18a0 [ 1202.707309][ T9] ? ieee80211_tx_h_select_key+0xd1b/0x1ab0 [ 1202.713279][ T9] ieee80211_tx_dequeue+0x3f4c/0x5440 [ 1202.718750][ T9] ? arch_stack_walk+0x11b/0x150 [ 1202.723757][ T9] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 1202.729515][ T9] ? ieee80211_next_txq+0x82e/0x9a0 [ 1202.734775][ T9] ieee80211_handle_wake_tx_queue+0x132/0x2c0 [ 1202.740898][ T9] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 1202.747523][ T9] ? ieee80211_queue_skb+0x184f/0x2260 [ 1202.753075][ T9] ? __local_bh_enable_ip+0xd0/0x130 [ 1202.758394][ T9] ieee80211_queue_skb+0x1a3f/0x2260 [ 1202.763787][ T9] ieee80211_tx+0x2c2/0x4b0 [ 1202.768346][ T9] ? __pfx_ieee80211_tx+0x10/0x10 [ 1202.773459][ T9] ? ieee80211_xmit+0x315/0x400 [ 1202.778371][ T9] __ieee80211_subif_start_xmit+0xd12/0x1660 [ 1202.784414][ T9] ? __ieee80211_subif_start_xmit+0x2cf/0x1660 [ 1202.790637][ T9] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 1202.797192][ T9] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 1202.803576][ T9] ieee80211_subif_start_xmit+0xf3/0x570 [ 1202.809251][ T9] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 1202.815573][ T9] ? dev_queue_xmit_nit+0x969/0xad0 [ 1202.820864][ T9] ? dev_queue_xmit_nit+0x2d/0xad0 [ 1202.826049][ T9] dev_hard_start_xmit+0x2d8/0x870 [ 1202.831296][ T9] __dev_queue_xmit+0x16d1/0x3890 [ 1202.836376][ T9] ? __dev_queue_xmit+0x277/0x3890 [ 1202.841581][ T9] ? __local_bh_enable_ip+0xd0/0x130 [ 1202.847004][ T9] ? lockdep_hardirqs_on+0x7a/0x110 [ 1202.852287][ T9] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1202.857694][ T9] ? neigh_resolve_output+0x438/0x750 [ 1202.863127][ T9] ? eth_header+0x11b/0x200 [ 1202.867689][ T9] ? __asan_memcpy+0x40/0x70 [ 1202.872373][ T9] ? ip6_output+0x126/0x550 [ 1202.876926][ T9] ip6_output+0x340/0x550 [ 1202.881333][ T9] ? __pfx_ip6_output+0x10/0x10 [ 1202.886225][ T9] NF_HOOK+0x177/0x4f0 [ 1202.890384][ T9] ? __pfx_NF_HOOK+0x10/0x10 [ 1202.895012][ T9] ? __pfx_dst_output+0x10/0x10 [ 1202.899901][ T9] ? lockdep_hardirqs_on+0x7a/0x110 [ 1202.905165][ T9] ? __local_bh_enable_ip+0xd0/0x130 [ 1202.910569][ T9] ? icmp6_dst_alloc+0x3a6/0x440 [ 1202.912274][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.915570][ T9] mld_sendpack+0x8b4/0xe40 [ 1202.915611][ T9] ? look_up_lock_class+0x57/0x110 [ 1202.933704][ T9] ? mld_sendpack+0x213/0xe40 [ 1202.938425][ T9] ? __pfx_mld_sendpack+0x10/0x10 [ 1202.943559][ T9] mld_ifc_work+0x835/0xe70 [ 1202.949354][ T9] ? process_scheduled_works+0xa25/0x1830 [ 1202.955156][ T9] process_scheduled_works+0xb02/0x1830 [ 1202.960819][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 1202.964220][T12650] __nla_validate_parse: 5 callbacks suppressed [ 1202.964238][T12650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10661'. [ 1202.966855][ T9] ? assign_work+0x3d5/0x5e0 [ 1202.986718][ T9] worker_thread+0xa50/0xfc0 [ 1202.991411][ T9] kthread+0x388/0x470 [ 1202.995528][ T9] ? __pfx_worker_thread+0x10/0x10 [ 1203.000711][ T9] ? __pfx_kthread+0x10/0x10 [ 1203.005338][ T9] ret_from_fork+0x51e/0xb90 [ 1203.009943][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 1203.015105][ T9] ? __switch_to+0xc7d/0x1450 [ 1203.019929][ T9] ? __pfx_kthread+0x10/0x10 [ 1203.024583][ T9] ret_from_fork_asm+0x1a/0x30 [ 1203.029430][ T9] [ 1203.032523][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1203.039831][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 1203.049045][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1203.059113][ T9] Workqueue: mld mld_ifc_work [ 1203.063818][ T9] Call Trace: [ 1203.067102][ T9] [ 1203.070048][ T9] vpanic+0x56c/0xa60 [ 1203.074054][ T9] ? __pfx__printk+0x10/0x10 [ 1203.078654][ T9] ? __pfx_vpanic+0x10/0x10 [ 1203.083165][ T9] ? is_bpf_text_address+0x292/0x2b0 [ 1203.088462][ T9] ? is_bpf_text_address+0x26/0x2b0 [ 1203.093675][ T9] panic+0xc5/0xd0 [ 1203.097406][ T9] ? __pfx_panic+0x10/0x10 [ 1203.101844][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 1203.106797][ T9] __warn+0x315/0x4f0 [ 1203.110784][ T9] ? __rate_control_send_low+0x524/0x800 [ 1203.116433][ T9] ? __rate_control_send_low+0x524/0x800 [ 1203.122077][ T9] __report_bug+0x29a/0x540 [ 1203.126593][ T9] ? __lock_acquire+0x6b5/0x2cf0 [ 1203.131549][ T9] ? __rate_control_send_low+0x524/0x800 [ 1203.137197][ T9] ? __pfx___report_bug+0x10/0x10 [ 1203.142249][ T9] ? __lock_acquire+0x6b5/0x2cf0 [ 1203.147211][ T9] report_bug_entry+0x19a/0x290 [ 1203.152079][ T9] ? __rate_control_send_low+0x5bb/0x800 [ 1203.157731][ T9] ? __rate_control_send_low+0x5c0/0x800 [ 1203.163373][ T9] handle_bug+0xce/0x200 [ 1203.167627][ T9] exc_invalid_op+0x1a/0x50 [ 1203.172141][ T9] asm_exc_invalid_op+0x1a/0x20 [ 1203.177087][ T9] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 1203.183341][ T9] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 1203.202955][ T9] RSP: 0018:ffffc900000e6678 EFLAGS: 00010246 [ 1203.209039][ T9] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 1203.217010][ T9] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9022de30 [ 1203.224983][ T9] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1203.232958][ T9] R10: 0000000000000004 R11: 0000000000000000 R12: ffff888029b3a168 [ 1203.240935][ T9] R13: 0000000000000000 R14: ffffffff9022de30 R15: ffff88807d6fb138 [ 1203.248933][ T9] ? __rate_control_send_low+0x58d/0x800 [ 1203.254599][ T9] rate_control_send_low+0x1a7/0x7b0 [ 1203.259990][ T9] ? __skb_flow_dissect+0x265e/0x6d20 [ 1203.265468][ T9] rate_control_get_rate+0x20b/0x5d0 [ 1203.270774][ T9] ieee80211_tx_h_rate_ctrl+0xaf6/0x1760 [ 1203.276435][ T9] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1203.282521][ T9] ? unwind_next_frame+0xa5/0x23c0 [ 1203.287657][ T9] invoke_tx_handlers_late+0xba/0x18a0 [ 1203.293156][ T9] ? ieee80211_tx_h_select_key+0xd1b/0x1ab0 [ 1203.299082][ T9] ieee80211_tx_dequeue+0x3f4c/0x5440 [ 1203.304486][ T9] ? arch_stack_walk+0x11b/0x150 [ 1203.309494][ T9] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 1203.315240][ T9] ? ieee80211_next_txq+0x82e/0x9a0 [ 1203.320464][ T9] ieee80211_handle_wake_tx_queue+0x132/0x2c0 [ 1203.326551][ T9] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 1203.333161][ T9] ? ieee80211_queue_skb+0x184f/0x2260 [ 1203.338651][ T9] ? __local_bh_enable_ip+0xd0/0x130 [ 1203.343951][ T9] ieee80211_queue_skb+0x1a3f/0x2260 [ 1203.349282][ T9] ieee80211_tx+0x2c2/0x4b0 [ 1203.353810][ T9] ? __pfx_ieee80211_tx+0x10/0x10 [ 1203.358869][ T9] ? ieee80211_xmit+0x315/0x400 [ 1203.363738][ T9] __ieee80211_subif_start_xmit+0xd12/0x1660 [ 1203.369732][ T9] ? __ieee80211_subif_start_xmit+0x2cf/0x1660 [ 1203.375896][ T9] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 1203.382409][ T9] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 1203.388659][ T9] ieee80211_subif_start_xmit+0xf3/0x570 [ 1203.394303][ T9] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 1203.400553][ T9] ? dev_queue_xmit_nit+0x969/0xad0 [ 1203.405768][ T9] ? dev_queue_xmit_nit+0x2d/0xad0 [ 1203.410902][ T9] dev_hard_start_xmit+0x2d8/0x870 [ 1203.416044][ T9] __dev_queue_xmit+0x16d1/0x3890 [ 1203.421168][ T9] ? __dev_queue_xmit+0x277/0x3890 [ 1203.426290][ T9] ? __local_bh_enable_ip+0xd0/0x130 [ 1203.431583][ T9] ? lockdep_hardirqs_on+0x7a/0x110 [ 1203.436796][ T9] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1203.442176][ T9] ? neigh_resolve_output+0x438/0x750 [ 1203.447631][ T9] ? eth_header+0x11b/0x200 [ 1203.452184][ T9] ? __asan_memcpy+0x40/0x70 [ 1203.456824][ T9] ? ip6_output+0x126/0x550 [ 1203.461346][ T9] ip6_output+0x340/0x550 [ 1203.465694][ T9] ? __pfx_ip6_output+0x10/0x10 [ 1203.470561][ T9] NF_HOOK+0x177/0x4f0 [ 1203.474662][ T9] ? __pfx_NF_HOOK+0x10/0x10 [ 1203.479265][ T9] ? __pfx_dst_output+0x10/0x10 [ 1203.484128][ T9] ? lockdep_hardirqs_on+0x7a/0x110 [ 1203.489342][ T9] ? __local_bh_enable_ip+0xd0/0x130 [ 1203.494742][ T9] ? icmp6_dst_alloc+0x3a6/0x440 [ 1203.499695][ T9] mld_sendpack+0x8b4/0xe40 [ 1203.504210][ T9] ? look_up_lock_class+0x57/0x110 [ 1203.509345][ T9] ? mld_sendpack+0x213/0xe40 [ 1203.514210][ T9] ? __pfx_mld_sendpack+0x10/0x10 [ 1203.519276][ T9] mld_ifc_work+0x835/0xe70 [ 1203.523797][ T9] ? process_scheduled_works+0xa25/0x1830 [ 1203.529532][ T9] process_scheduled_works+0xb02/0x1830 [ 1203.535123][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 1203.541119][ T9] ? assign_work+0x3d5/0x5e0 [ 1203.545729][ T9] worker_thread+0xa50/0xfc0 [ 1203.550373][ T9] kthread+0x388/0x470 [ 1203.554497][ T9] ? __pfx_worker_thread+0x10/0x10 [ 1203.559620][ T9] ? __pfx_kthread+0x10/0x10 [ 1203.564214][ T9] ret_from_fork+0x51e/0xb90 [ 1203.568819][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 1203.573939][ T9] ? __switch_to+0xc7d/0x1450 [ 1203.578636][ T9] ? __pfx_kthread+0x10/0x10 [ 1203.583231][ T9] ret_from_fork_asm+0x1a/0x30 [ 1203.588024][ T9] [ 1203.591404][ T9] Kernel Offset: disabled [ 1203.595739][ T9] Rebooting in 86400 seconds..