last executing test programs: 4.059437282s ago: executing program 3 (id=12215): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x401, @ipv4={'\x00', '\xff\xff', @local}, 0x80001}, 0x1c) (async, rerun: 32) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000007000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e09900", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000010140)=ANY=[@ANYBLOB="4401000010000100000000000000000000000000000000000000ffff7f000001ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000006c000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0, @ANYBLOB="50af"], 0x144}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/64, 0x40, 0x1, &(0x7f00000000c0)=""/95, 0x5f}, &(0x7f0000000200)=0x40) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "fd1bd3edff00", "c754c484c6157749c7a85b040000008e", "0460f800", "9fd74ba2972e7547"}, 0x28) (async, rerun: 32) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000300)={{{@in=@initdev, @in6=@local}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000000400)=0xe8) (async) close(r0) 3.929121892s ago: executing program 3 (id=12216): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xc45, 0x3b}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c1}, 0x40080) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 3.601337431s ago: executing program 3 (id=12225): r0 = socket(0x10, 0x3, 0xffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x24, 0x31, 0x101, 0x70bd2a, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, 0x0}, 0x94) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet_tcp_int(r1, 0x6, 0x2c, &(0x7f0000000140)=0xfb78, 0x4) socket$inet(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r4 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=[@init={0x18, 0x84, 0x0, {0x6, 0x9, 0x6, 0xd9}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x38, 0x4855}, 0x24000052) bind$inet(r3, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7"], 0x10b8}, 0x106) sendmsg$kcm(r5, 0x0, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r8}, 0x38) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000100)=0x7, 0x4) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r8}, 0x38) 3.412786101s ago: executing program 3 (id=12226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0xb4, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x88, 0x3, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x78, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x40, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}]}}}, {0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x138}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x7, 0x1f45, 0x4, 0x7ff}, 0x4, 0x1, 0x0, 0x7, 0x2ff, 0xb, 0x1a, 0x1c, 0x4, 0x7131d5f9, {0x7, 0x80000001, 0x7, 0x81, 0x3, 0xf70a}}}}]}, 0x78}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x5) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f00000001c0)={0x0, 0x8, 0x9}) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) (async) bind$802154_dgram(r3, &(0x7f0000000200)={0x24, @long={0x3, 0x3}}, 0x14) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb, [{0xfffffa7d, 0xce, 0xfffffe00, 0x3, 0x7, 0xf5c8}]}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x8, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0xd, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0x6, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x4, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x2a8b7572, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$kcm(r8, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r7, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) 3.183115287s ago: executing program 3 (id=12233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0xb, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x7901}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x9) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xa930bb9f3fd061f1) 2.87127178s ago: executing program 3 (id=12238): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x62, 0x0, &(0x7f0000000580)="c1188e32a7acac6913ef5eebf268d8a296df46af6af66ea334307b45fa3550b39f21542b671354515331cb8cb599476f2e88aebb66c1fb3f173575fb8a5ff6b986bb2d24ee72028b86754661d3b1c4682978dd77dc8f77fdd4ced083821f40ffcd51", 0x0, 0x800002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x50) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000eddd00000000000000ffdbdf2502180000ff0000080000000208000108ac141400"], 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2a, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff00850000000f00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r7, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f0000000200), &(0x7f0000000180)=@tcp6=r6, 0x2}, 0xe) r8 = socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_RM_DEV(r8, 0x5000940b, &(0x7f0000002440)={{r8}, "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"}) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000140)={0x4, 0x7f, 0x4, 0x4000000}, 0x18) write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff110002000200000800040001200000", 0x24) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, 0xd, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x1}]}}]}, 0x44}}, 0x24004000) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010056e8ee6b000000004c00000008000300", @ANYRES32=r12], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071102800000000001f150000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.852615004s ago: executing program 2 (id=12154): r0 = socket(0x8, 0x5, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xd1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket(0x3, 0x2, 0xffc) getsockopt$bt_hci(r5, 0x84, 0x3, 0x0, &(0x7f00000003c0)=0xffffffffffffff90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4288d2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) write$tun(r6, 0x0, 0xfdef) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r7, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) setsockopt$inet_int(r7, 0x0, 0x1, &(0x7f0000000000)=0xfffffffb, 0x4) getsockopt$inet_opts(r7, 0x0, 0x9, &(0x7f0000000300)=""/19, &(0x7f0000000340)=0x13) socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x800, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r9, &(0x7f0000000140), 0x2, 0x0) 2.538155622s ago: executing program 2 (id=12245): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007cc0)=@newtaction={0x272c, 0x30, 0xcac229faa96ee7df, 0x70bd29, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev}]}, {0x4}, {0xc}, {0xc}}}]}, {0x1404, 0x1, [@m_police={0x1234, 0xb, 0x0, 0x0, {{0xb}, {0x11a4, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x8, 0x8, 0x1ff, 0x0, {0x6, 0x3, 0x7ff, 0x8000, 0x2, 0xb31}, {0x81, 0x2, 0x4, 0x6, 0x1, 0x40}, 0x1, 0x2, 0x8}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x174d}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x9, 0x6, 0x4, {0x1, 0x1, 0x14d, 0x7, 0x7, 0x7}, {0x1, 0x2, 0x7, 0xde, 0x9, 0x8000}, 0x0, 0xb, 0x2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x101, 0xf8, 0x8, 0x9, 0x4, 0x4, 0x4, 0x1, 0x1, 0x3ff, 0x0, 0x85, 0x9, 0x3, 0xed, 0x7, 0x100, 0x6, 0x7, 0x4, 0x8000, 0x3, 0x8, 0x1, 0x5de, 0xfffffe01, 0x7fff, 0x8, 0x0, 0x7ff, 0x0, 0x1, 0x7, 0x7, 0xb, 0xe, 0x40, 0x2, 0x101, 0x6, 0xfffffff3, 0x8000, 0x18b2, 0xf42, 0x6, 0x9, 0x3, 0xfffffff4, 0x562, 0x800, 0x9, 0xfc1, 0x8c9, 0x3, 0x2, 0x9, 0x9, 0x6, 0x1, 0x9, 0x4408d939, 0x1000, 0x7ff, 0x0, 0x91f, 0x7, 0x8, 0x8, 0xa616, 0x8, 0x5, 0x9, 0x8, 0x4, 0x9, 0x1, 0xd, 0x3, 0x6ae, 0x40, 0xfffffff9, 0x8000, 0x7, 0x3, 0x92b05fe7, 0x2, 0x1, 0xea, 0x7, 0x1, 0x4, 0xa277, 0x2, 0x3, 0x800, 0x8, 0x1, 0x11, 0x6, 0x9, 0x5, 0x89, 0xc1b2, 0x9, 0x4, 0x2, 0x3, 0x4, 0x800, 0x8, 0x5, 0xfffffffe, 0x7, 0x8001, 0x7, 0x5, 0x2ba3, 0x3, 0x1000, 0x0, 0x7fff, 0x6, 0x0, 0xffff0001, 0x3, 0x7, 0xa0000000, 0x7f, 0x1, 0x7f, 0x4, 0xe, 0x5, 0x0, 0x68b12110, 0x0, 0x8, 0x5b2, 0x8, 0x0, 0x7, 0x9, 0x2f8, 0x1, 0x8, 0x13c, 0x2, 0xb0c6, 0x5, 0xf23, 0x4, 0x7ff80000, 0x4, 0x3, 0x200, 0xfffffff7, 0x0, 0x1, 0x9, 0x2, 0x9, 0x80, 0x78c, 0x8, 0xfc60, 0x7, 0x5, 0x9, 0x7, 0x9, 0xfff, 0x6f, 0xff, 0x3, 0xfffffff7, 0x80, 0x7f, 0x7, 0x72cae798, 0x2, 0x100, 0xe, 0x8, 0x6, 0x0, 0x0, 0x7, 0x3, 0x1, 0xf, 0x1000, 0x21736070, 0x2, 0x4, 0x6, 0x7, 0x4, 0x1, 0x100, 0x0, 0x7, 0x3, 0x3, 0x6, 0xfffffff8, 0x3, 0x40, 0xff, 0x9, 0x4ce1, 0x2, 0x3, 0x8, 0x0, 0x9, 0x2, 0x43ed, 0x6, 0x3, 0x6, 0x7, 0x9, 0x7de66b6c, 0x2, 0x8, 0x7, 0x3, 0xe78, 0xfffffffa, 0x8, 0x8500, 0x478b, 0x17, 0x8, 0x3, 0x1, 0x8, 0x4ee, 0x9, 0x6, 0x8, 0x1, 0x9, 0x0, 0x2, 0x80000000, 0x6, 0x7fff, 0x92be, 0xaa, 0x3ea5, 0x3, 0xf7, 0x2, 0xffffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xffff, 0xb9, 0x3ff, 0x3945, 0x7fffffff, 0x29e2, 0x1, 0xba, 0x9, 0x9, 0x4, 0x8, 0xffffff37, 0x3, 0x80, 0x8000, 0x6, 0x7, 0x3, 0x10001, 0xffffffff, 0x7, 0x5639, 0x5, 0xfffff001, 0x5, 0xffffff7f, 0x1, 0xb, 0x594, 0x5, 0x497, 0x80000001, 0x6, 0x0, 0x5, 0x1, 0x3, 0xb, 0x9, 0x8, 0x1, 0x7f, 0x5, 0x0, 0x13b, 0x7, 0x9, 0x7, 0x0, 0x5, 0x1, 0x53f, 0x2, 0x7, 0x8, 0x7edf6c7a, 0x2, 0x5, 0xc, 0x7d76, 0x8, 0x1ff, 0x8, 0x6, 0x7, 0x3, 0xfffffffa, 0x2, 0x7f, 0xd1f, 0x3, 0x7, 0x3, 0xfff, 0x4, 0x4, 0xce2, 0x100, 0x2, 0x32, 0x3, 0x200, 0x1, 0x4d6, 0x31, 0x5, 0x7fffffff, 0x8, 0xc, 0x6, 0x200, 0x0, 0x80000000, 0x1000, 0x0, 0x5, 0x8, 0x6, 0x8239, 0xa, 0x1, 0x9, 0x0, 0x30a, 0x0, 0x6, 0x9, 0x9, 0x400, 0x2, 0x8257, 0xeb, 0xfffff801, 0x0, 0x100, 0x4, 0x97f, 0x8, 0x4, 0x8, 0x6, 0x5, 0x7, 0x3afa, 0x5, 0x9, 0x5, 0xe3a, 0xffffffff, 0x0, 0x3, 0xffffff7f, 0x8001000, 0x5, 0x8, 0x4, 0x3, 0xd9b1, 0x70f, 0x2, 0x7, 0xff, 0x5, 0x9, 0xfd, 0xe20, 0x8, 0x8, 0x6cd, 0x4, 0x5, 0x7, 0x101, 0x6, 0x9, 0x0, 0x0, 0x3000000, 0x3, 0x7, 0x7, 0x9, 0x8, 0x7f, 0x8, 0x6, 0x8001, 0xb7b, 0x8, 0x7f, 0x585, 0x1, 0x4, 0xf431, 0x6, 0x5, 0x441, 0x6, 0x9, 0x64e, 0xfffffff8, 0x1, 0x101, 0x9, 0x3, 0x3, 0x7, 0x7600, 0x0, 0x2, 0xffffff01, 0x97b, 0xcfb, 0x2, 0x3ff, 0x0, 0x6, 0x85e7, 0xffff, 0x5, 0x9, 0xd, 0x80000000, 0x0, 0x1, 0x8, 0x4, 0x4, 0x0, 0x2, 0x2215fdbd, 0x1, 0x8001, 0x80000000, 0x8, 0xce, 0x3ff, 0x7fffffff, 0x6, 0xf, 0x9, 0x1, 0x5, 0xfffff7df, 0xf6a7, 0x7fff80, 0x0, 0xffffffff, 0x3ff, 0x2, 0x3, 0xffff92aa, 0x5, 0x101, 0xfffff801, 0x3b, 0x2, 0x9, 0x401, 0x9, 0x5, 0x3, 0x100, 0x558, 0x30a2b33a, 0xfffffff9, 0x5, 0x98b, 0x7, 0x4, 0xffffffff, 0x1, 0x4000000, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x7, 0x1, 0x7, 0x8, 0xb722, 0x6, 0x1, 0x8, 0x800, 0x0, 0x6, 0x100, 0x5, 0x0, 0x4, 0x7, 0x4, 0x7, 0xce, 0xb43, 0xb18b, 0x1, 0x0, 0x1b, 0x1, 0x5, 0x80000000, 0x8, 0x4, 0x1, 0xffff, 0x2, 0xbf, 0x7ff, 0x1, 0xfb, 0x2, 0xfffffffc, 0x0, 0x1, 0x3, 0x5, 0x7, 0xed3e, 0x3ff, 0xda4, 0x9, 0x3, 0x6, 0x80000000, 0xfffffff8, 0x80, 0x7, 0xb, 0x5, 0x5, 0x3, 0x101, 0x2, 0xd, 0x5, 0x80, 0x1, 0x2bc, 0x9, 0x1, 0x7e8, 0x822f, 0x7fff, 0xe13, 0xef, 0x55, 0x6, 0x800, 0x6, 0x3ff, 0x5, 0x1, 0x0, 0xc3, 0x5, 0x7, 0x6, 0x9, 0x2, 0x5, 0x1775, 0x1ff, 0x9c2d, 0x8, 0x6, 0xf, 0x0, 0x3ff, 0x81, 0x6, 0x5, 0x7, 0x7fffffff, 0x7, 0x81, 0x6, 0x5b94d5a8, 0x7, 0x3, 0x0, 0x7, 0x5, 0x4, 0xc67, 0x6, 0x7, 0x8, 0x9, 0xbb, 0x56d2, 0x7, 0x1, 0x5, 0x1, 0x7, 0x2, 0x1, 0x80, 0x8, 0xfffffff7, 0x7, 0x81e, 0x5, 0x20000000, 0x1, 0x1, 0x9, 0x40, 0x0, 0xa9e8, 0x81, 0x5, 0x10, 0xa, 0x8, 0x18000, 0xd, 0xe56b, 0x10000, 0x2773589a, 0x648, 0xfff, 0xf1d6, 0x81, 0xbb, 0xd, 0xc, 0x81, 0x8, 0x3e, 0x6e, 0x40, 0x9, 0x3, 0x7, 0x7, 0x7, 0x3, 0x4, 0x0, 0x1, 0x9, 0xff, 0x2d, 0x8, 0xd76, 0x6, 0xfc6, 0x0, 0x9257, 0x6, 0xf8a, 0x4, 0x0, 0x7, 0x4, 0x5, 0x8, 0x7, 0x3, 0xe, 0x0, 0xe, 0x8, 0xce, 0x3000000, 0x8001, 0x5, 0x8, 0x7, 0x1ff, 0xb, 0x9, 0x7, 0x3, 0x2, 0xffffffff, 0x3, 0x200, 0x1, 0x6, 0x1, 0x65b, 0x8, 0x4, 0xb3, 0xfdc0, 0x4, 0x10, 0x4, 0x1, 0x5, 0x7, 0x3, 0x1, 0x44, 0xb, 0x40, 0xfffffffb, 0x5, 0x10, 0x8, 0x3de655dd, 0xf, 0x7, 0x4, 0xf, 0x523f, 0x4e, 0x0, 0xbbd7, 0x10000, 0x100, 0x8, 0xfffffff8, 0x4, 0x2, 0x2, 0x200, 0x6f3, 0x6, 0x4, 0x2, 0x818, 0x2, 0x9, 0x7f, 0x5, 0xff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x5, 0x6, 0x6, 0x7fffffff, 0x10, 0x7, 0x3, 0x5, 0x3ff, 0x2400, 0xcce, 0x2, 0x55, 0x1, 0xa0000000, 0x7, 0x4, 0xffff, 0x2, 0x400, 0x5, 0xa, 0x4, 0x1, 0x1, 0x9, 0xffffffff, 0x1, 0x80000000, 0x400, 0x3, 0x8, 0x3ff, 0x7, 0x3, 0x7ff, 0x34, 0x7, 0x10001, 0x3, 0x3, 0x7, 0x7fff, 0x1, 0xe35, 0x21b, 0x1, 0x3ff, 0x0, 0x5, 0x5, 0x9, 0x6, 0x1, 0x2, 0xfffffff9, 0x9, 0xfff, 0x6, 0x2, 0x3, 0x5, 0xffffff01, 0x83ee, 0x400, 0x6, 0x9, 0x0, 0x4, 0x5, 0x1, 0x1, 0x9, 0x2, 0x80000000, 0x400, 0x0, 0x3, 0x9, 0xffffffff, 0xffffffff, 0x42f6, 0x9, 0xfdcf, 0x7fffffff, 0x1, 0x4fbf8715, 0x7b9, 0x6, 0x7, 0x6, 0x401, 0x120, 0x4, 0xfffff001, 0x5, 0xfffffff9, 0x40, 0x8, 0xc, 0xa5, 0x47a, 0xcc, 0xc86, 0x1, 0x10001, 0x9, 0x40, 0x3, 0x3, 0x0, 0x7, 0x4b556641, 0x5, 0xa637, 0x10000, 0x10, 0x583, 0x10001, 0xfffffffc, 0x7, 0x4, 0xa5, 0x5, 0x7, 0x1, 0x200, 0x9, 0x4, 0xc, 0x14000000, 0x6, 0x3, 0x6, 0x84, 0x6, 0x5, 0x6, 0x8, 0x8001, 0x3ff, 0x8000, 0x6, 0x5, 0x200, 0x1, 0x10000, 0x1, 0x0, 0x10, 0x400, 0x2, 0x8, 0x10001, 0x1ca73bef, 0x6, 0xfffff001, 0x200, 0x3, 0xb, 0x21abb3d8, 0xc, 0x39, 0xb, 0xfffffffd, 0x9fa, 0x1, 0x8, 0xffff7fff, 0x9, 0xff, 0xee, 0xf536, 0x1, 0x5, 0x8001, 0x2914, 0x101, 0x2, 0x8, 0x7, 0x4, 0x10001, 0x7, 0x8, 0x80000000, 0x2, 0x80, 0x9, 0xe, 0x101, 0xfa, 0x6, 0x40, 0x9, 0x3a29, 0x4, 0x2, 0x422b, 0x4, 0x1, 0x3, 0x2, 0x101, 0x40, 0x3, 0x4, 0x2, 0x1000, 0x3ff, 0x4, 0x3, 0x9daf, 0x1, 0x9, 0x8000, 0xf8, 0xffffff89, 0x7, 0x0, 0x85, 0x7, 0x2, 0x5, 0xfffffffd, 0x3, 0x3, 0x1, 0xffffff13, 0x2, 0x0, 0x4, 0x4d5, 0x5, 0x1a, 0x2, 0x0, 0x1, 0x1000, 0xffffffff, 0x8, 0x8, 0x2, 0x4, 0xd, 0x400, 0x8, 0x401, 0x2, 0x354, 0x0, 0x10000000, 0x2, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x0, 0x0, 0x9, 0x4, {0x7f, 0x2, 0x0, 0xd, 0xaa62}, {0x9, 0x0, 0x7, 0x9, 0x1000, 0x4}, 0xfffffff8, 0x6, 0x3ff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0xffffffffffffffff, 0xffffff0c, 0x7f, 0x1, {0x10, 0x0, 0x4, 0x631, 0x6, 0x4}, {0xf9, 0x0, 0x99, 0x875, 0xffff, 0x4}, 0x8, 0x80000000, 0x20000000}}]]}, {0x65, 0x6, "eb6bc2c595720b05058a7fe5bf1309cdd8ce36a901efe7ae9c5d33a802fb4a386437f14cd98dfb4b7f1dc869271e95dded8670700241330a8be3798af4afb568360342b38137383ce239d1cfb59d25de3d70b50f6077e34525609de1401ae8851a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x1cc, 0xc, 0x0, 0x0, {{0x9}, {0xb8, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x9, 0x4, 0x3, 0x7}, 0x4}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x8, 0x2, 0x9, 0x7f}, 0x4}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0xb, 0x4, 0xe, 0x6}, 0x4}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x5e7, 0x10000000, 0x7fff, 0x2}, 0x3}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd48a8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8917}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4a, 0x6, 0x8, 0x5, 0x8a0}, 0x4}}]}, {0xeb, 0x6, "8f4f2951728bd304a475f79c87558d7d7dcb9ce66671bccca87553cfb7f4e0887c7c5d81d7684159fa5ed2c22ecd1cc0eec7450c351cc21dfd42905c586818eda5d1134ed47f49737f6f4bbb6a37693c6d7c2c9839a08fc01620b999a7cfbec5918daabdd69477a270d22d49574fbf6b6a81a949bae6872a3cc4bf2ccbc2436c7ed6c744e0f0b38d21cee275951c7139736f89edab7814aba83b7919dd6e846229070c070140fd4201528d5b64d3ce9251ba728b3a674a6d04dcf438f99a827c38a3e4e708acf972d8b926073512f8efb3ccbbfdaa0ce48aa6c518510848ba5d9cea0357850f62"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x12bc, 0x1, [@m_pedit={0xe80, 0x19, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xff, 0x39, 0x0, 0x1, 0xccd}, 0x3b, 0x0, [{0x4, 0x7, 0x4, 0x0, 0xfff, 0x800}]}, [{0x10000, 0x72, 0x40, 0x8, 0x8, 0x800}, {0x9, 0x7fff, 0x7, 0x1ff, 0x7f, 0x3}, {0x9, 0x1, 0x8, 0x690, 0xf56, 0x6}, {0x478, 0x6, 0x6, 0x868, 0x4, 0x8}, {0x1, 0x1ff, 0x5, 0x8, 0x4, 0xbfe6}, {0x5, 0xffff, 0xfff, 0xf4f, 0x6, 0x10001}, {0xf8, 0x40, 0xfffffffd, 0x0, 0x1000, 0x77fa}, {0x401, 0x1000, 0x8001, 0xfff, 0xf9a, 0x3}, {0x81, 0x1, 0x7ff, 0x401, 0x9, 0x2}, {0x8, 0xfffffffb, 0x6, 0x1, 0x2, 0x5}, {0x8, 0x3, 0x8, 0x6, 0x739, 0x7}, {0x7, 0x746, 0x6, 0x5b33, 0x10}, {0x6, 0x5, 0x9e, 0x8001, 0x1, 0x8}, {0x5, 0xfffff48a, 0xbc, 0x3, 0x81}, {0x10001, 0x5, 0x6, 0x3, 0x0, 0x7}, {0x5, 0x1, 0xa, 0x8, 0x1, 0x4}, {0x81, 0x3, 0x9e2, 0xf, 0xfffffff9}, {0x4, 0x3, 0x7, 0x3, 0xc, 0x4}, {0xfffffff0, 0x6, 0x1, 0x2, 0x73c18e7, 0x8}, {0x9, 0xa8f9, 0xa6, 0x8000, 0xfffff7ca, 0x100}, {0x1, 0x9, 0x4, 0xe9ea, 0x0, 0xf65}, {0x4, 0x2, 0x6, 0x5, 0x9, 0x400}, {0x10, 0x7, 0x8, 0x7, 0x6, 0x2}, {0x8, 0x1, 0x3, 0x5}, {0x1, 0xffffffff, 0x10, 0x35a, 0x10, 0xe}, {0xc9, 0xfffffff9, 0x3, 0x3, 0x400, 0x2}, {0xa, 0x1, 0x0, 0x800, 0x2b05, 0x4}, {0x8000, 0x6, 0x1, 0x7, 0x40, 0xb}, {0x7fff, 0x3, 0x0, 0x0, 0x0, 0x7ff}, {0x5, 0x1, 0x6, 0x3, 0x5, 0x9}, {0x8000, 0x1, 0x4, 0xd5a, 0x0, 0x7f}, {0x2, 0x8, 0x7fffffff, 0x855, 0x8, 0x9a0}, {0x5, 0x1, 0x3, 0x9, 0x6, 0x9}, {0x101, 0x8, 0x8, 0x0, 0x0, 0x3}, {0x9, 0x4, 0x8, 0xa7, 0xfffffffb, 0x67cc}, {0xffffffff, 0x5, 0x9, 0x0, 0x8, 0x1000}, {0x6, 0x8000, 0x80000000, 0x401, 0x6, 0x2}, {0x4, 0x0, 0x8, 0x9, 0x80000001, 0x3}, {0xb28, 0x8, 0xdd81, 0x9, 0x3, 0x9}, {0x8, 0x0, 0x4, 0x3, 0x3, 0x40}, {0x10, 0xffffffff, 0xd38, 0x7fffffff, 0x6, 0x4bdb}, {0x3, 0xe, 0xffffff1a, 0x0, 0x6, 0x4}, {0xfffffff2, 0xbdb, 0x9, 0x4, 0x2, 0x7}, {0x101, 0x378, 0x6e8, 0xb903, 0x1, 0x6aa}, {0x2, 0x9, 0x8, 0x8001, 0x0, 0x511e}, {0x9, 0x7fffffff, 0x6, 0xe336, 0x81, 0x6}, {0xb2d2, 0x4, 0x5, 0x70, 0x3, 0x9}, {0x8364, 0x6, 0x9, 0x9, 0xc74, 0xfffffffc}, {0xd13, 0xd, 0xffffffff, 0x8, 0x8, 0x22b9}, {0xf, 0xa, 0x100, 0x0, 0xb, 0x5}, {0x5, 0x9, 0x721, 0x2, 0x401, 0x100}, {0x7, 0x3, 0x3ff, 0x7, 0x2, 0x2}, {0x2, 0x4, 0x8, 0x4, 0xa0, 0x7ff}, {0x303, 0x8, 0x8414, 0xa5, 0x8, 0x4}, {0x0, 0x5, 0x40000, 0x7, 0x4, 0x3fc}, {0x4, 0x4, 0xffffffff, 0xf, 0x0, 0x6}, {0x8, 0x6, 0x4, 0x200, 0x0, 0x6}, {0xd, 0x1a3b1065, 0x4, 0x200, 0x3, 0x7fff}, {0x1, 0x1ff, 0x5, 0x3d354dda, 0x5, 0x21}, {0xa, 0x3, 0x7, 0x0, 0x8, 0x292e}, {0x8b, 0x4, 0xfffffffb, 0x8, 0x7, 0xc}, {0xd510, 0x1, 0x400, 0xa, 0x7, 0x4}, {0x2e1, 0x3, 0x400, 0x5, 0x0, 0xff}, {0x3, 0x9, 0x40, 0xffff, 0x1, 0x4}, {0x0, 0xffff71b3, 0xfffffd7b, 0x1, 0x9, 0x8}, {0x9, 0xf4, 0x6, 0x2, 0xd, 0x4}, {0x51, 0xfffffffc, 0x5, 0x8, 0x6, 0xffff6734}, {0x1, 0x1, 0x1, 0x2, 0x9, 0xff2}, {0x1, 0x0, 0x3, 0x2, 0x5, 0xc7}, {0xc0, 0x3, 0xd, 0x1, 0x6c2, 0xd}, {0x0, 0xc4e4, 0xfffffff3, 0xfffffff7, 0x7fff, 0x6}, {0x8, 0xfffffffb, 0x7ff, 0x8, 0x9, 0x2}, {0x4, 0xfffffff3, 0x2, 0x6, 0x9, 0x5}, {0x7, 0x10001, 0x10001, 0x1, 0x7, 0x1ff}, {0xb, 0x4, 0xa, 0xfffff000, 0x9, 0x8}, {0x4, 0x6c0, 0x0, 0x6, 0x0, 0x9}, {0x7, 0x81, 0x9, 0x94c, 0x4}, {0xb0c, 0x7, 0xffffffff, 0x3, 0xa, 0x80000000}, {0x5, 0x100, 0xfffffffd, 0x4, 0x10000, 0x6}, {0x401, 0x9, 0x6, 0x1, 0xffff, 0x1}, {0xf0, 0x7fff, 0xffffff01, 0x818, 0x5, 0x1c38}, {0x401, 0x8, 0xf12f, 0x4, 0x3, 0x7}, {0x87, 0x6, 0x5, 0x2, 0x7, 0x3}, {0x82, 0x3, 0x2, 0x4, 0x48, 0x401}, {0xfffffffe, 0x1400, 0x557, 0x4, 0x7}, {0x8, 0x6, 0x2, 0x2, 0x0, 0x31}, {0x7, 0x5, 0x7, 0x8, 0x6, 0x10}, {0x1ff, 0x4, 0x7, 0x0, 0x2, 0xd}, {0x8, 0xef, 0xd4, 0xd2, 0x6, 0x7ff}, {0xfff, 0xad99, 0xf, 0x0, 0x7, 0x2}, {0x1, 0x7fff, 0x6, 0x7ff, 0x82e, 0xfc}, {0x3, 0x5d06, 0x6, 0x7f, 0x9, 0x3d}, {0xae4e, 0x2, 0x3, 0x86, 0x6, 0xc5}, {0x45, 0x60, 0xa, 0xffff8000, 0x4, 0x7680000}, {0x4, 0x3, 0x9, 0x8001, 0x9, 0x9}, {0x80, 0x1, 0xdc8a, 0x95, 0x80000001, 0x3}, {0x7, 0xe2, 0x0, 0xd, 0xff, 0x3221}, {0x3, 0x6, 0x0, 0xc1, 0x6, 0x80000000}, {0xfffffffa, 0x101, 0x1, 0x9, 0x5, 0x7ff}, {0x7fb, 0x1ff, 0x7, 0x1, 0x8001, 0x7}, {0x7ff, 0x5, 0x1, 0x6, 0xfff}, {0x3, 0xff, 0x5, 0x867, 0x0, 0x779}, {0xc, 0xdb29, 0x0, 0xb, 0x7, 0x2}, {0x0, 0x6, 0x9, 0x67, 0x7fff, 0x6}, {0x0, 0x4, 0x3a4, 0x1000, 0x5, 0x8}, {0x1, 0x7fffffff, 0x7, 0x9, 0x200, 0x5}, {0x6, 0x9, 0x4, 0x10, 0x7, 0xffffff15}, {0x10000, 0x88, 0xc, 0xb36, 0x1, 0xfffffff4}, {0x8, 0x4, 0x2, 0x7fff, 0x9, 0x1000}, {0x3ff, 0x3, 0xb, 0x6, 0xfffffff9, 0x2}, {0x6, 0x8, 0x1, 0x4e, 0x8000, 0x2}, {0x0, 0x9, 0x3, 0xd, 0x7ff, 0xff}, {0x47, 0x8001, 0x3, 0x4, 0x2, 0xd}, {0xc, 0xe234, 0x266f, 0x81, 0x9, 0x800}, {0xd5f, 0x10001, 0x9, 0xff, 0x0, 0x3}, {0x4575, 0xfffffffb, 0x0, 0x2, 0x89c, 0x6}, {0x80, 0x0, 0x5, 0x8, 0x7ff, 0x2}, {0x9, 0x401, 0x9, 0x4, 0x0, 0x10}, {0xde1, 0x4, 0x1, 0x5, 0x5, 0x1}, {0x3, 0x400, 0x2, 0x6, 0x0, 0x170b}, {0x1, 0x1, 0x80, 0x5, 0x2, 0x8}, {0x1a, 0x2, 0x4, 0x6, 0xecd, 0x6}, {0x101, 0x2, 0x4a, 0x7, 0x1, 0x65}, {0x10001, 0x5, 0x879e, 0x4, 0x6, 0x9e1}, {0x9, 0x1000, 0x9, 0x3, 0x80000001, 0x1}, {0x2, 0x982, 0x3, 0x2, 0x9, 0x9}, {0x8, 0x3, 0x7, 0x4, 0x10001, 0xfffffffd}, {0x75c, 0x800, 0x0, 0x6, 0x9931, 0x8}], [{0x3, 0xa6f694a514e0a564}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {}, {0x0, 0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x700ea67f0e70d70e}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x2}, {}, {0x2, 0x1}, {0x80fbdae0d4050961}, {0x1, 0x1}, {}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x0, 0x9ca19ee21b6c9d1c}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x4a1ce762b63c1bf8}, {0x3}, {0x2, 0x1}, {}, {0x1}, {0x3}, {0x3065406a67a5713b, 0x1}, {0x0, 0x1}], 0x1}}]}, {0x1c, 0x6, "1b2fa642a60ff51c15e6a8db0d1737b8ce518cb298c5c450"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}, @m_csum={0x174, 0x1d, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x2, 0x1, 0xe6, 0xbc1}, 0x81}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x10000000, 0xc}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000, 0xb8c, 0x4, 0x885fde8b, 0x70e16860}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x51b, 0x7f, 0x8, 0x1, 0x7}, 0x2d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x87c1}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x7, 0x4, 0x200}, 0x12}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xaf, 0x943, 0x3, 0x3, 0x4}, 0xf}}]}, {0x81, 0x6, "a74f976e65214f5467e5f346f17e4f9d3356378f220a22748196c666526a66c3707b6f2c14e3054e6d6eb73ba5ae6a102ea4a7a0bf01148d4f5de859a7d8bc473368accec2c12580a242ff48b2bec5c96fbba60296a2cd6acd18678e58af629bead3c5fd24500dfa58a2bafc293232be89725fa9a9c5273aac30a86f08"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x8c, 0xd, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xca0b, 0x1, 0x313, 0xf}, 0x4}}]}, {0x3e, 0x6, "2794deeced33d28c634da3fd0d0d5dd7222a0c2efbdb9a37644fb47f1705255ac667e9c522f2e7b85734784f0a62627fe11b962647babb52d572"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_bpf={0xfc, 0xf, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x800, 0xc3d6, 0x5, 0x5, 0x3}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xa7, 0x6, "dc5c0542affd867ff337aecf56c5ff208aca49fdf693a9bf4f6455bdef4311a16c3ac4074ecd3ecc3c10e7624b9d417d705a36b6d48763686e22eb3e70ef4a9928f75f80b62c9ed0319dec9a2b4d1473a469d2995189bca116a3f793bc2abba9d0a4423dabf6b18cd0015fb2b675bcbae2a6b98fb9c9159181698ace33f6685e836f6c40d64604504a32db1209cd89dfb2b9146261037f9bfd84ef94c41f34d5dc6649"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x13c, 0x20, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd6}]]}, {0x101, 0x6, "5095c975e192f5f0c0aa794c9c7d69c2bae827380db8a8f937814dd9c2871ab7c76453fb27b2e6e8efe7889342c866db760d8789ff5cce9baffb830ae8f34d24928fee807f7d81804f5fd702a5e5276bc856962dcf15d0fdb7666ad4498c15b60cedbdc095338076d8140ddd3aecdab7f94231848a7c257b08cf886af40788fcf14d6806088860ebabcb74a57a4126f50ae9fbb3a46f266a8e1db4e607a3d12a7d76fdea2516938bf11833f7d78e84914b85fe47bfbd74fbde7b7ab8013a6574af09c4277a976e63245dafc69268a1fe47c8b3c8537c46f927d132fd54bf11b513f34cd2db7323b730cddb73dea0a292f56417664ddc575412254a565b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x272c}, 0x1, 0x500}, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000240)=@req3={0xfffffbff, 0xe, 0x9, 0xfb, 0x0, 0x1, 0x10001}, 0x1c) unshare(0x400) recvmmsg$unix(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)}}], 0x1, 0x400122a0, 0x0) sendmsg$kcm(r0, 0x0, 0x20000c00) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61158c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916900000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x9}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r5, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYRES8=r6, @ANYRES64=r5, @ANYRES16=r4], 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x0) r7 = socket(0x8000000010, 0x2, 0x0) write(r7, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91", 0xd7) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r9, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r8, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) 1.671372755s ago: executing program 2 (id=12257): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000240)=@req3={0xfffffbff, 0xe, 0x9, 0xfb, 0x0, 0x1, 0x10001}, 0x1c) unshare(0x400) recvmmsg$unix(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)}}], 0x1, 0x400122a0, 0x0) sendmsg$kcm(r0, 0x0, 0x20000c00) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61158c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916900000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x9}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r6, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYRESOCT, @ANYRES8=r3, @ANYRES32=0x0, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES64=r4, @ANYRES16=r5, @ANYBLOB="fbacd730283ba50172768d9e368da263c5a8ed3a8e20e37965a3854ad4d93d36c8ef6671e590a2d7ba4189881444c78c1979ecfe3ac60c1d40b61350bfcf3d490c210d845699feaa359ef6e1ce399e43c05f876edb42379b50e16873766cd07206d39ec3ebeb8ada63a2055ee0275bbb5b56b491e13c6a16b56ca0bddaf46e37c538b695753437780c877e0b", @ANYRES16=r3], 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x0) r7 = socket(0x8000000010, 0x2, 0x0) write(r7, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91", 0xd7) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r11, 0x701, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000) sendto$inet(r9, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r8, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x8040) 1.61503259s ago: executing program 0 (id=12258): socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0102"], 0x2dc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000b00000040000580"], 0x54}}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000b00000040000580"], 0x54}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r4, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, 0x0, 0xffffffffffffff70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000d482609e0000800000000000000000913cd4913d4d318d9a7e03df2aaf3ebb51825b33d6df855f58e6e44f75540e401601b33c12f0b4a4ff11662996dab976027f2d52dd3b408904bae82830606d176767f84f4d33e7b2ef97dd922c9e546486ba626b05af27c55d52994996f9955c2de5fc9231ea0e0ff096", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES8=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000d482609e0000800000000000000000913cd4913d4d318d9a7e03df2aaf3ebb51825b33d6df855f58e6e44f75540e401601b33c12f0b4a4ff11662996dab976027f2d52dd3b408904bae82830606d176767f84f4d33e7b2ef97dd922c9e546486ba626b05af27c55d52994996f9955c2de5fc9231ea0e0ff096", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES8=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r11}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xf, 0x0, &(0x7f0000000240)="7993ff011900000000a63b00008f20", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xf, 0x0, &(0x7f0000000240)="7993ff011900000000a63b00008f20", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), 0xffffffffffffffff) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x1c, r12, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x40000) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0xec, r12, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6d}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x36, 0x1, "a925776c8aa2710e096c0ed6748089511e5c0ecf99d01e53aa62bc49d59aa74e6b6e7b0795b2651090311f07a059130182e1"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xff}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x58, 0x3, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x4e, 0x2, "f4d2be584ff58cec79205ea27d2762eed81b6c401dca0e990b5a8a596a54cd12340658b96fbe5a907fecfc8918b3e1c3c49b690b24bb60bbaaffca939e0e1e0c36e7c99a405a76e3fca3"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xfff}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0xec}, 0x1, 0x0, 0x0, 0x20048010}, 0x40040) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0xb8}}, 0x20040014) 1.477565823s ago: executing program 0 (id=12260): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="1e000000010401010000000000000000050000000500010042000000"], 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x20008888) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4) getsockopt$inet6_tcp_int(r5, 0x6, 0x5, 0x0, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56141, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0xd8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xac, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x2, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffc, 0x6}, {0x7fde, 0x40, 0x51, 0x3fc}, {0x7, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x200}, {0x1, 0x1800004, 0xa525, 0x200000}]}}, @TCA_U32_POLICE={0x4, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}]}, @TCA_U32_LINK={0xfffffffffffffe2a, 0x3, 0xd}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0xc040) 1.283502524s ago: executing program 1 (id=12262): mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001000ffff2cbd7000ffdbde2500000000", @ANYRES32=0x0, @ANYBLOB="096d050025100400280012800b00010067656e657665000018000280060005004e24000005000800000000000400060008000a00", @ANYRES32=r3, @ANYBLOB="d31d1f4a3562e3a368f9cd0d6f8ed10c637879268ebabfb32f5b592f82a7b4"], 0x50}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x5000004, 0x6e073, r1, 0x0) 1.26129546s ago: executing program 0 (id=12264): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44851}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988ca", 0xe}, {&(0x7f00000006c0)="9c6a6db8babc7becfcc6349131df", 0xe}, {&(0x7f0000000200)="4f396a9489c38f0deda7d4", 0xb}], 0x3) 1.118163093s ago: executing program 1 (id=12265): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRESOCT=r1, @ANYBLOB="220b111ea061fe5916129bcc354d0bce8bfbaf722fc90fd67b330a38893365"], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x3ff}, @in6={0xa, 0x4e20, 0x4, @mcast1, 0xe2d8}], 0x54) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r0, 0x1, 0x1, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback=r0, r0, 0x27, 0x2040, 0x0, @value=r0, @void, @void, @void, r3}, 0x20) 1.011315742s ago: executing program 1 (id=12266): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009700000095000000000000233145db56c85f16db5dc554b4654b53e1ad25d9c1dce96c0fae143c71d790ac2c84d7901158905695f22c4c0ec0755a9bc2c9a7f773c7b3011100d3467c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00', 0x0}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000001240)={{r3, &(0x7f0000000840)=')#),:\xe4++}^(/\'!{&:\'\x00', 0x0, &(0x7f0000000880)={@_ha_fsid={[0xd]}, {0x7, 0xe, 0x3, 0xff}}, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x109}, 0x8, &(0x7f0000001140)=[{0x3, 0x80, &(0x7f0000000940)='syzkaller\x00', &(0x7f0000000980)="07e26644f60a47da2d9338a118e7356e5d9eb9c18950713eddbe0ba7224fda92363c84679fcec0b7105b59c4e32c2316c37d91f13f79d8f460fce82f86b233a047f0234f2b77d49648fd1d346466df0ffd78fc822f3476ff19dedf4399a820a3d39522e1313409b1e0dd0c282bee22035d36cb110f45beaa0287a84a099085f9d3209deca0620eb7837d6e79733ebd46d5945c98bd90d1ec893428cfd44faecff90dcf", 0xa3, 0x32}, {0x2, 0xd, &(0x7f0000000a40)='syzkaller\x00', &(0x7f0000000a80)="2d90be578729d530a3dfd4425c5b23af8e44515faf916b8b505943f94eacdb25737d2de0d84ca60e69992651a0637bd104e66f1cee43f9f03047bf4ac2883d3fa97d24efe1758eed2f38ab88", 0x4c}, {0x3, 0x7, &(0x7f0000000b00)='#)/:@\x00', &(0x7f0000000b40)="de6cff04dd8a90623f042fcabd0dddb80d2ba88964c74cf7d8ad161621723b35bc99564a5d53e49921c38e09b318b205251ab315b7e6bbfaf5b28aac860be4c3e867116777c02122811f28596f5bc912a10a68f5e61e02ffe9c61b2035de1931ace1ce17", 0x64, 0x20}, {0x1, 0x4, &(0x7f0000000bc0)=')]\x00', &(0x7f0000000c00)="2d0e213edc51630926855f7e6d883ae4dd42a6b3cb8045f2dd6ff3fd0989f4e2e871cf3f87f1018154b9dee4ccc872712f810c92df296b1a2dd51e62e73741edbc6b5bd1c6338a9d2274804ada7421e72bb70880c684afa05776654a3c73191883ba0a895e28673f73d1fd55f1c9816194379bf52f3b1a3e03652d0085e02075550b986f8d92f989b07ac382dd26d4dd0dac0bdf89a6b6a60a33e578a1167b29523f2a39285ffa114fad8daaceb3770a9fa8620b70bf407a92f7eb7b88088413", 0xc0, 0x2}, {0x2, 0x401, &(0x7f0000000cc0)='syzkaller\x00', &(0x7f0000000d00)="4c220a35c57c7ab75b990ed37a2d941154ca6fb8d4b3fe65d5336cf2993c847b4604fa66aed025a23aa4362d27ff1d20ea0b2aca59f4a14fba6fee8f2284bff4ab3414e1cc29c91a983aa0927457e8d1fb91064e8cff82b969d57fe7058a00589caad774aab3bf80f5d1bfa8f48ff99608da4cf26d8e1a81d88a9b89f8c78993ad0680754360cc704782d977ea9f85e97495d03228847ec7f92540687af85053eba98254c4dd91f16c70ce9805e71b69b86c07dd5a9bcf83353e7633fdab420477bb8d7a50d3bb9a07ac71118aedc1", 0xcf, 0x30}, {0x1, 0xf, &(0x7f0000000e00)='\x00', &(0x7f0000000e40)="1b08cf096623d569f4eae32761575dbf501b6f25435c282f81f7ecbd47b4925c8ed144d505e81f06168433136f020d729391d8ced543901383df6fa8ae09d997410719ede67217b3ef99332cbff45b615ad1284689fa158f108598ab2d4d4c781cfabe153800302cecb5daca3613ca9345e9507753d23f5625000e121dc92aa2a93e51c426be4d4c6b9e74f35a2f9dcabf2f4023dfe0e7d1e15c9f2f60ab71db165465b6cc423cc348cf868a7574724de9", 0xb1, 0x1c}, {0x1, 0x200, &(0x7f0000000f00)='\x00', &(0x7f0000000f40)="2a6acc1ba606dae18827350ff06b60f67fb4c330f2a4cf31f2c58c46d5b38a667b9ae81529a512748bc98e38a1be35dfdf40613aefcf7dfda24cf6923c7e2414ff9363fced7493a124da3be525f97dd14f3cb2d5389ef7f12d2c34730afb96152f214866119583c0fcacdc260b9b7876384e00d2c45a019f9a84629fc61b15e0c60b756fbb972081d78c0ad56ece21904c7c089e443ceafe85ac5200e422ef28136e2bfb39d7e4fffc90444ba1825e4aceffd4677aca7dcbf17d29087f72beb7bffbd1c8b1a26f590800c26cfad4775007e005f1cb68caf9b9a0122a", 0xdc, 0xa}, {0x3, 0x400, &(0x7f0000001040)='\x00', &(0x7f0000001080)="438b187117dbae99afb6c6b710acd7fbb3be65468d2855762c0aa49ed1d1b96362238053cd4e1641b6e87a06e9ee463d57def82544755391fd8d588d02511a20d289be75449d10485632c6ff9d59d791b5269852d1c280dde7feac4dbc1ae6aeccb45a7c70fcbfa9be1b6470b1cffb7fb64df32b714100e8cf7ab66ca89f1ce3ae05b424f75d6bcc39c7b2dec4a83723924c5dcf4d0f4ca06b6ecf8138b62f", 0x9f, 0x10}]}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001300)={0xfc4, 0x0}, 0x8) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x5, 0x4}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000013c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000014c0)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x100}, [@cb_func={0x18, 0x2}, @jmp={0x5, 0x0, 0x1, 0x2, 0x7, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x6e}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000280)='GPL\x00', 0x7f, 0xc1, &(0x7f0000000700)=""/193, 0x40f00, 0x20, '\x00', r6, 0x1b, r7, 0x8, &(0x7f00000012c0)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, r8, 0x0, 0x3, &(0x7f0000001440)=[r9, 0xffffffffffffffff, r10, r2], &(0x7f0000001480)=[{0x4, 0x5, 0xc, 0x7}, {0x1, 0x1, 0x4}, {0x3, 0x3, 0x1, 0x1}], 0x10, 0x6}, 0x94) r11 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r11, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) 1.007488622s ago: executing program 4 (id=12267): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0xc00}, 0x20) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x4000080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x800) accept4(0xffffffffffffffff, &(0x7f0000000380)=@hci, &(0x7f0000000400)=0x80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a31000000001400038008"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x4000000) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.006602096s ago: executing program 4 (id=12268): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x23, &(0x7f0000000040), &(0x7f00000001c0)=0x18) (async, rerun: 64) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async, rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000020c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd26, 0x0, {{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0x0, 0x2}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3c}, 0x4d3, 0x33}, @in=@multicast2, {0x0, 0x0, 0xffffefffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffef, 0x3}, {0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x796}, 0x70bd2d, 0x0, 0x0, 0x0, 0x2, 0xc}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 957.695232ms ago: executing program 4 (id=12269): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r2, &(0x7f00000054c0), 0x3e, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffdfffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r3, 0x29, 0x24, &(0x7f0000000040), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 855.231858ms ago: executing program 1 (id=12270): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async) unshare(0x2a060400) getsockopt(r1, 0x0, 0xc, 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c2200001500010000000000fbdbdf250a00000004000000140001"], 0x225c}, 0x1, 0x0, 0x0, 0x20004855}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000005ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80002280}, 0xc, &(0x7f0000005a80)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4044084) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = socket$inet6(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async, rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="039d050000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="28000e0080000000080211000001080211000000505050505050000000000000000000000600010008000e8004000100080026006c09000008000c006400000008000d0000000000"], 0x64}}, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r8 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000380)={0x1d, r9, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) r10 = epoll_create(0x4f56) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000140)={0x9}) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r8, &(0x7f0000000280)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x3000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", ""]}, 0xfffffdb0}, 0x1, 0x0, 0x0, 0x400c004}, 0xc000) (async, rerun: 64) listen(r7, 0x0) r11 = socket$netlink(0x10, 0x3, 0x13) writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 759.862819ms ago: executing program 1 (id=12271): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x44, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}}, 0x24}}, 0x24040084) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0x6}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x48800}, 0x4050) 758.112179ms ago: executing program 0 (id=12272): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x12, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x0, 0x2, 0x6, 0x8, 0x2, 0x50, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x9a, &(0x7f0000000400)=""/154, 0x41000, 0x33, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xf, 0x8, 0x401}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000680)=[{0x0, 0x1}, {0x1, 0x5, 0x7, 0x2}, {0x4, 0x4, 0x10, 0x8}, {0x1, 0x4, 0x1, 0x2}, {0x5, 0x1, 0xb, 0x3}], 0x10, 0x400}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'vxcan0\x00', 0x0}) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002e00090027bd70b8030000000400000004001d0004001f"], 0x1c}, 0x1, 0x0, 0x0, 0x20048010}, 0x4800) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r9], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000427bd7000fbdbdf256b00000008000300", @ANYRES32=r9, @ANYBLOB="0a001a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00000a13f0c74bfd24ad98d64895843516d716000600ffffffffffa72e4d"], 0x4c}, 0x1, 0x0, 0x0, 0x22000000}, 0x4000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@ifindex=r2, r1, 0x15, 0x4, 0x0, @void, @value=r3}, 0x20) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000280), &(0x7f0000000500)=r11}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 746.332403ms ago: executing program 2 (id=12273): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000001880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/19, 0x13}, 0x2}], 0x1, 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x35}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x35}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 728.045012ms ago: executing program 4 (id=12274): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b707000000ff00004870000000000000400000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72f85304ef8d14f8bbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d3682a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd56eee5798041358a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cca6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed154be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9000000006a370e9eb56b3d790b98f2bd0db1e5de6a3040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce993c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436362dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73a20aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe601fb695a9769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=0xffffffffffffffff, 0x3d7bf7d5ab42a7d6, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000600)={r3, &(0x7f0000000500)='ip6tnl0\x00', 0x10040, &(0x7f0000000540)={@align=0x2, {0x2, 0x8, 0xfffffc00, 0xc}}, 0x9, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0xf}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@cgroup=r6, 0xffffffffffffffff, 0x34, 0x10, r3, @void, @value=r3, @void, @void, r5}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x86, 0x0, 0x2, 0x2e, @mcast1, @mcast2, 0x7800, 0x80, 0x5, 0x9}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000640)={r4, 0x7, 0x4, 0x8000}) sendmsg$can_j1939(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)="8b88e753313e97e3d417456c111ba24cf8daebbffa15016948bca8b554543cdb3906256d29401e05e1a9f962357e9fb6a7d9846bd6909c3518867b53efe2760a38d958074e583ea162636cd456ec61ae3531e1ad4cb2ab422eecd7a8b7dd8f356e96baf53acf", 0x66}, 0x1, 0x0, 0x0, 0x40001}, 0x9004) 552.152293ms ago: executing program 2 (id=12275): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x2, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) close(0x3) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) r2 = socket(0x2a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x10001, 0x7fff, 0x82, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=ANY=[@ANYRES32], 0x50) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket(0x2, 0x800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt(0xffffffffffffffff, 0xff, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000001c0)={'security\x00', 0x0, [0x24, 0x3, 0x92, 0x4, 0x10]}, &(0x7f0000000280)=0x54) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, r4, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010100000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) getsockname$packet(r2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) 536.422689ms ago: executing program 4 (id=12276): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x9b4, 0x0, 0x2, 0x0, &(0x7f0000000200)="80fa", 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r1, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a6ddf0000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d080006"], 0xe8}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001", 0x30}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000044000000eb00000000141001"], 0x3c}, 0x1, 0x0, 0x0, 0x800400d}, 0x8001) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x44, 0x9, "09f00008174488"}]}}}], 0x20}, 0x20002880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 518.445271ms ago: executing program 1 (id=12277): r0 = socket(0x2c, 0x2, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x2, @media='eth\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x80002}) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5}, 0x10) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001000030400000000fcffffff00000000", @ANYRES32=r6, @ANYBLOB="7fff00000000000070968124d3f8b152c6be9c63384ba2abc15211766c36f4"], 0x20}}, 0x0) (async) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000440)=0x30) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r11) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) recvmmsg(r13, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f0000001840)=""/4134, 0x1026}, {&(0x7f0000000000)=""/100, 0x64}, {&(0x7f00000005c0)=""/82, 0x52}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000080)=""/126, 0x7e}, {&(0x7f0000000980)=""/147, 0x93}, {&(0x7f0000003940)=""/4112, 0x1010}], 0x8}}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x10}], 0x4, 0x2030, 0x0) (async) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xc0, r12, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xc0}}, 0x4004) 393.082333ms ago: executing program 0 (id=12278): r0 = socket(0x1e, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r2, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xca2, 0x73}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x81}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xd0000000}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xf3}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x2}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xfff}]}, 0x60}, 0x1, 0x0, 0x0, 0x8800}, 0x800) 278.887031ms ago: executing program 4 (id=12279): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x170, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x1ff, 0x7fff, 0xa, 0x2, 0x1, 0xfffffffa, 0x6f2, 0x9, 0xb00, 0x17, 0xb, 0x1e, 0x8, 0x7, 0x4}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r9, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r8, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000100)={r1, &(0x7f0000000000)='\\-\x00', 0x8002, &(0x7f0000000040)={@align=0x7, {0x7, 0xe, 0x2a3897d8, 0x8}}, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x5}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r10, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r11, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}}, 0x20040894) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c030000", @ANYRES16=r11, @ANYBLOB="00022dbd7000fcdbdf253900000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x32c}, 0x1, 0x0, 0x0, 0x20048040}, 0x20044000) bpf$MAP_CREATE(0x0, 0x0, 0x48) 120.468825ms ago: executing program 0 (id=12280): r0 = socket(0x2a, 0x2, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000c80)=ANY=[], 0x268}, 0x1, 0x0, 0x0, 0x40000}, 0x4090) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) socket$alg(0x26, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000005c0)=[@op={0x18}, @iv={0x98, 0x117, 0x2, 0x7f, "473acdc571db15148867e232a9d8d12b8dc0ec2ea55eab652bbe762f805c648ee8dee1ba6e1da110a2d00579f17fef475b46c035b93a8f7df6742cecb8b04ce6aeebc3848e93ce79c5ea4105139e405c315d5791122038edce5380ca707f73636ce224e87a194edf38f8bf30a44bdc2fafce190bf67b6f4133c2e54ff81463"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x108, 0x117, 0x2, 0xf3, "a8d2c9c1e4fdcc410b2289a3d897a5bd43e50660458d70148814550888a9e7391d18cc01fb5c1a536b5c9f30caee49849ebf0063d31ecfa4c5124b40bfd4865dc160bc2fd7ac2fe344259b568cae9dee1ba41574884ea923aca81565ee4dc18182c13f6a1574b8e437cc30387b97dc35662ca1b0295cc74577795ad9b1291aa19cb4f9ed43e8c7082dfdfbcab91058e667e00c80db48d568c0b21640047e285db23e57ab396746b561d65cb2f11267fd8e632a1a53773c2881ad6249e241f582c8de45fbc295888d5d5d81ab022520c6f66417a16d60b1fd692f0e0d4ad99d703a7a91c2c4ca6099f3e8458f364bc9bfbc383e"}, @iv={0x68, 0x117, 0x2, 0x50, "b97777b5b49e732f4ab55f9d31ec060678a9e3d5e2c2abec9a3ebc8594aab6a45f8b1e36e6900d56d7c7f6f04d36c3e7fe7512e8d3891b204423ff715f4124ca61253dfcb802d38a126a31aef7d614c1"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x50, 0x117, 0x2, 0x39, "be7d4527d8ba07e07682a49a38829490fd223e679182ff79b997c25392514a59675fb4bfe0ee246607028c5d9d26d5227d722e91d265063d34"}], 0x2d0, 0x4000880}], 0x1, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r2, &(0x7f0000000480)=[{&(0x7f00000001c0)="e7", 0x1}], 0x1, 0x2, 0x80) pwrite64(r2, 0x0, 0x0, 0xda8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10200080}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000008060102000000000000000007000004050001000700000005000100070000000900020073797a3200000000c19004fe075d7a7682d223359fe32e598246a4c685771aeb6e7897e618f957e240d81ded3674fef95e5855a34f736031f850ea9270847fabe620e4979cb70f379c182c50a4fb6efa89972c9e10ded29b4c9c547f11ac23b4e11f2a42c42878cfa48247861c2c295b0c02d3ba5c4a9e15d7049156961b0c"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000046) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x20, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01062abd7000ffdbdf250600000006"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x20, 0x1, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x69}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x5800) setsockopt$inet_int(r4, 0x0, 0xb, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001240)=ANY=[@ANYBLOB="84000000180001002cbd7000ffdbdf251d0107000c000b00040000a00300008015000100030000a006000000bac45f9ce14233bd0000000008000900", @ANYRES32, @ANYBLOB="0c000b00000000e0020000a015000200010000a0070300007f15f0386605000b0200000008000a00", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="08000500fe0601de08000e"], 0x84}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 0s ago: executing program 2 (id=12281): bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000080000400001a0000f7"], 0x50) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x119}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000100), 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x18, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000ffffffff4dc7cd8fc8cb7abb7ae022220000000700000018110000", @ANYRES32=0x1, @ANYRES32=r1], &(0x7f0000000540)='syzkaller\x00', 0x60b, 0x85, &(0x7f0000000580)=""/133, 0x40f00, 0x20, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x80000, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x9, 0x8, 0x10001}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000006c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000700)=[{0x1, 0x3, 0x1}, {0x5, 0x3, 0xb}, {0x4, 0x2, 0x4, 0x9}, {0x3, 0x2, 0x5, 0x9}, {0x2, 0x3, 0x6, 0xb}, {0x2, 0x1, 0x5, 0x6}], 0x10, 0x4}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'ip_vti0\x00', r2, 0x20, 0x80, 0x4, 0x1, {{0x8, 0x4, 0x2, 0x0, 0x20, 0x68, 0x0, 0xff, 0x29, 0x0, @private=0xa010100, @multicast2, {[@timestamp_addr={0x44, 0xc, 0xa5, 0x1, 0x3, [{@loopback, 0x9}]}]}}}}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="6cd2040000000000140003006e657464657673696d30000000000000200016801c00018018000c"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x4, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="188000000000000000000000000000008910060000000000950000000000000057563375494bb94acd0b7615b7644c683f04d7994de59bf97226da741c31d75f9eca587fb2dddb85e6ac8e416284c4ee18953ec1c6d26403fba08baf29a577151e10d811b85ad3d381fa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r5) kernel console output (not intermixed with test programs): syz.2.10889 Not tainted syzkaller #0 PREEMPT(full) [ 907.898259][T14195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 907.898272][T14195] Call Trace: [ 907.898281][T14195] [ 907.898289][T14195] dump_stack_lvl+0xe8/0x150 [ 907.898317][T14195] warn_alloc+0x249/0x340 [ 907.898341][T14195] ? __pfx_stack_trace_save+0x10/0x10 [ 907.898368][T14195] ? __pfx_warn_alloc+0x10/0x10 [ 907.898390][T14195] ? __kasan_kmalloc+0x93/0xb0 [ 907.898408][T14195] ? __kmalloc_cache_noprof+0x318/0x660 [ 907.898425][T14195] ? xskq_create+0x56/0x170 [ 907.898447][T14195] ? xsk_init_queue+0x8a/0xe0 [ 907.898464][T14195] ? xsk_setsockopt+0x52a/0x960 [ 907.898482][T14195] ? do_sock_setsockopt+0x17c/0x1b0 [ 907.898509][T14195] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 907.898530][T14195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.898550][T14195] __vmalloc_node_range_noprof+0x12c/0x1730 [ 907.898585][T14195] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 907.898606][T14195] ? __kasan_kmalloc+0x93/0xb0 [ 907.898630][T14195] vmalloc_user_noprof+0xad/0xe0 [ 907.898650][T14195] ? xskq_create+0xbf/0x170 [ 907.898667][T14195] xskq_create+0xbf/0x170 [ 907.898688][T14195] xsk_init_queue+0x8a/0xe0 [ 907.898704][T14195] xsk_setsockopt+0x52a/0x960 [ 907.898720][T14195] ? __pfx_xsk_setsockopt+0x10/0x10 [ 907.898735][T14195] ? __pfx_aa_sk_perm+0x10/0x10 [ 907.898759][T14195] ? lock_release+0x4b/0x3c0 [ 907.898782][T14195] ? aa_sock_opt_perm+0xff/0x1a0 [ 907.898799][T14195] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 907.898819][T14195] ? __pfx_xsk_setsockopt+0x10/0x10 [ 907.898836][T14195] do_sock_setsockopt+0x17c/0x1b0 [ 907.898858][T14195] __x64_sys_setsockopt+0x13d/0x1b0 [ 907.898877][T14195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.898895][T14195] do_syscall_64+0x174/0x580 [ 907.898918][T14195] ? trace_irq_disable+0x3b/0x140 [ 907.898940][T14195] ? clear_bhb_loop+0x40/0x90 [ 907.898957][T14195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.898972][T14195] RIP: 0033:0x7fa305f9ce59 [ 907.898988][T14195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.899001][T14195] RSP: 002b:00007fa306dc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 907.899021][T14195] RAX: ffffffffffffffda RBX: 00007fa306215fa0 RCX: 00007fa305f9ce59 [ 907.899034][T14195] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 907.899043][T14195] RBP: 00007fa306032e6f R08: 0000000000000004 R09: 0000000000000000 [ 907.899055][T14195] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 907.899066][T14195] R13: 00007fa306216038 R14: 00007fa306215fa0 R15: 00007ffd72c41028 [ 907.899087][T14195] [ 907.899094][T14195] Mem-Info: [ 908.184735][T14195] active_anon:14089 inactive_anon:0 isolated_anon:0 [ 908.184735][T14195] active_file:3194 inactive_file:40444 isolated_file:0 [ 908.184735][T14195] unevictable:768 dirty:133 writeback:0 [ 908.184735][T14195] slab_reclaimable:16117 slab_unreclaimable:232431 [ 908.184735][T14195] mapped:31595 shmem:3978 pagetables:1579 [ 908.184735][T14195] sec_pagetables:0 bounce:0 [ 908.184735][T14195] kernel_misc_reclaimable:0 [ 908.184735][T14195] free:1126265 free_pcp:41639 free_cma:0 [ 908.185154][T14199] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10890'. [ 908.300715][T14195] Node 0 active_anon:60356kB inactive_anon:0kB active_file:12776kB inactive_file:161572kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52652kB dirty:532kB writeback:0kB shmem:18276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:22972kB pagetables:5796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 908.350504][T14195] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:73728kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 908.384547][T14195] Node 0 DMA free:11244kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB [ 908.426245][T14195] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 908.432688][T14195] Node 0 DMA32 free:798016kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:62656kB inactive_anon:0kB active_file:12776kB inactive_file:161572kB unevictable:1536kB writepending:532kB zspages:0kB present:3129332kB managed:2552592kB mlocked:0kB bounce:0kB free_pcp:99124kB local_pcp:38836kB free_cma:0kB [ 908.484489][T14195] lowmem_reserve[]: 0 0 0 0 0 [ 908.492959][T14195] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:664kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:20kB free_cma:0kB [ 908.544502][T14195] lowmem_reserve[]: 0 0 0 0 0 [ 908.559905][T14223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10896'. [ 908.587746][T14195] Node 1 Normal free:3691956kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:63064kB local_pcp:30492kB free_cma:0kB [ 908.601490][T14223] 8021q: adding VLAN 0 to HW filter on device bond9 [ 908.636510][T14195] lowmem_reserve[]: 0 0 0 0 0 [ 908.641914][T14195] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11244kB [ 908.665412][T14195] Node 0 DMA32: 4206*4kB (UM) 8005*8kB (UM) 4938*16kB (UME) 249*32kB (UM) 44*64kB (ME) 87*128kB (UME) 591*256kB (UM) 368*512kB (UM) 202*1024kB (UME) 34*2048kB (U) 0*4096kB = 797984kB [ 908.684069][T14195] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 908.697288][T14195] Node 1 Normal: 10*4kB (UM) 14*8kB (UM) 13*16kB (UM) 12*32kB (UM) 18*64kB (UM) 17*128kB (UM) 12*256kB (UM) 11*512kB (UM) 9*1024kB (UM) 10*2048kB (U) 891*4096kB (UM) = 3692008kB [ 908.703664][T14228] bond9: (slave batadv2): Opening slave failed [ 908.715265][T14195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 908.715294][T14195] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 908.715308][T14195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 908.715321][T14195] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 908.715333][T14195] 45087 total pagecache pages [ 908.715341][T14195] 0 pages in swap cache [ 908.715347][T14195] Free swap = 124996kB [ 908.715354][T14195] Total swap = 124996kB [ 908.715362][T14195] 2097051 pages RAM [ 908.801012][T14231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10896'. [ 908.826554][T14195] 0 pages HighMem/MovableOnly [ 908.831406][T14195] 427122 pages reserved [ 908.837092][T14195] 0 pages cma reserved [ 908.923795][T14241] openvswitch: netlink: Flow actions attr not present in new flow. [ 908.952142][T14243] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 908.955487][T14245] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 909.002078][T14243] tunl0: entered promiscuous mode [ 909.023023][T14242] tunl0: left promiscuous mode [ 909.399934][T14283] xfrm0 speed is unknown, defaulting to 1000 [ 909.414470][T14283] lo speed is unknown, defaulting to 1000 [ 909.512402][T14272] netlink: 'syz.2.10916': attribute type 30 has an invalid length. [ 909.567466][ T8349] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.578032][ T8349] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.611973][ T8349] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.647123][ T8349] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.961508][ T5634] Bluetooth: hci5: link tx timeout [ 909.966867][ T5634] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 909.974970][ T5634] Bluetooth: hci5: link tx timeout [ 909.980439][ T5634] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 910.002397][T14328] netlink: 'syz.3.10932': attribute type 21 has an invalid length. [ 910.200901][T14327] tipc: Resetting bearer [ 910.528248][T14327] bridge0: port 3(vlan3) entered disabled state [ 910.873674][T14381] --map-set only usable from mangle table [ 910.915200][T14384] tipc: Enabled bearer , priority 0 [ 910.937630][T14384] syzkaller0: entered promiscuous mode [ 910.949551][T14384] syzkaller0: entered allmulticast mode [ 911.009083][T14384] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 911.037630][T14384] tipc: Resetting bearer [ 911.074839][T14383] tipc: Resetting bearer [ 911.129315][T14383] tipc: Disabling bearer [ 911.149999][T14399] Bluetooth: hci5: link tx timeout [ 911.156094][T14399] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 911.174779][T14418] tap0: tun_chr_ioctl cmd 1074025677 [ 911.180472][T14399] Bluetooth: hci5: link tx timeout [ 911.185619][T14399] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 911.186613][T14418] tap0: linktype set to 768 [ 911.431687][T14399] Bluetooth: hci5: link tx timeout [ 911.437432][T14399] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 911.503841][T14463] tipc: Resetting bearer [ 911.538500][T14463] syzkaller0: left promiscuous mode [ 911.544391][T14463] syzkaller0: left allmulticast mode [ 911.581748][T14463] tipc: Resetting bearer [ 911.850342][T14399] Bluetooth: hci5: link tx timeout [ 911.855514][T14399] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 912.008151][T14399] Bluetooth: hci5: command 0x0405 tx timeout [ 912.018549][T14409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 912.123607][T14513] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 912.159686][ T1132] tipc: Resetting bearer [ 912.273707][T14541] __nla_validate_parse: 10 callbacks suppressed [ 912.273727][T14541] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10970'. [ 912.458740][T14559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10975'. [ 912.460738][T14562] tipc: Resetting bearer [ 912.506457][T14562] syzkaller0: entered promiscuous mode [ 912.523753][T14562] syzkaller0: entered allmulticast mode [ 912.544383][T14561] tipc: Resetting bearer [ 912.574679][T14566] tipc: Enabled bearer , priority 0 [ 912.645590][T14566] syzkaller0: entered promiscuous mode [ 912.659599][T14566] syzkaller0: entered allmulticast mode [ 912.669843][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10980'. [ 912.686474][T14566] tipc: Resetting bearer [ 912.714907][T14569] tipc: Resetting bearer [ 912.814448][T14569] tipc: Disabling bearer [ 912.928869][T14590] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 913.000104][T14603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10990'. [ 913.002181][T14604] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10990'. [ 913.048006][T14399] Bluetooth: hci2: command 0x0401 tx timeout [ 913.082150][T14613] tipc: Resetting bearer [ 913.159829][T14612] tipc: Resetting bearer [ 913.179457][T14626] validate_nla: 1 callbacks suppressed [ 913.179473][T14626] netlink: 'syz.0.10996': attribute type 11 has an invalid length. [ 913.187438][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10995'. [ 913.193953][ T1132] tipc: Resetting bearer [ 913.225976][T14626] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10996'. [ 913.235514][T14617] netlink: 'syz.0.10996': attribute type 11 has an invalid length. [ 913.245008][T14620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10995'. [ 913.254983][T14617] netlink: 59 bytes leftover after parsing attributes in process `syz.0.10996'. [ 913.272526][T14628] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11000'. [ 913.297171][T14620] netlink: 'syz.2.10995': attribute type 4 has an invalid length. [ 913.309890][T14620] .`: renamed from bond0 [ 913.391532][T14645] netlink: 'syz.0.11004': attribute type 21 has an invalid length. [ 913.407275][T14645] IPv6: NLM_F_CREATE should be specified when creating new route [ 913.441856][T14650] netlink: 'syz.2.11007': attribute type 1 has an invalid length. [ 913.442479][T14652] No such timeout policy "syz1" [ 913.483126][T14653] veth0: entered promiscuous mode [ 913.577468][T14653] bond0: entered promiscuous mode [ 913.583566][T14653] bond_slave_0: entered promiscuous mode [ 913.597395][T14653] @0Ù: entered promiscuous mode [ 913.612159][T14636] bond0: left promiscuous mode [ 913.618542][T14636] bond_slave_0: left promiscuous mode [ 913.624563][T14636] @0Ù: left promiscuous mode [ 913.629824][T14636] veth0: left promiscuous mode [ 913.950194][T14684] syzkaller0: entered promiscuous mode [ 913.959885][T14684] syzkaller0: entered allmulticast mode [ 914.009724][T14688] netlink: 'syz.4.11019': attribute type 2 has an invalid length. [ 914.087600][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.100703][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.131325][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.143600][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.169213][T14709] netlink: 'syz.3.11024': attribute type 10 has an invalid length. [ 914.189422][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.203531][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.214972][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.228838][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.240731][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.271788][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.284819][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.297462][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.308961][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.383087][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.399154][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.411776][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.423530][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.439505][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.451053][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.462831][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.473982][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.485794][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.498250][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.514055][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.525307][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.537358][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.560475][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.586203][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.604055][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.630078][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.648937][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.664279][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.676613][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.688189][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.705093][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.739802][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.755389][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.805752][T14688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.999074][T14750] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 915.026290][T14748] netlink: 'syz.2.11035': attribute type 6 has an invalid length. [ 915.045423][T14753] xt_NFQUEUE: number of total queues is 0 [ 915.065673][T14755] set match dimension is over the limit! [ 915.118141][T14748] netlink: 'syz.2.11035': attribute type 6 has an invalid length. [ 915.143620][T14758] bond0: entered promiscuous mode [ 915.149465][T14758] bond_slave_0: entered promiscuous mode [ 915.155677][T14758] @0Ù: entered promiscuous mode [ 915.178738][T14758] bond0: left promiscuous mode [ 915.183692][T14758] bond_slave_0: left promiscuous mode [ 915.191275][T14758] @0Ù: left promiscuous mode [ 915.238579][T14762] netlink: 'syz.0.11039': attribute type 1 has an invalid length. [ 915.242397][T14769] xfrm0 speed is unknown, defaulting to 1000 [ 915.263029][T14769] lo speed is unknown, defaulting to 1000 [ 915.557725][T14795] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input13 [ 916.096221][ T1132] vlan3: left allmulticast mode [ 916.101563][ T1132] geneve0: left allmulticast mode [ 916.107228][ T1132] vlan3: left promiscuous mode [ 916.112085][ T1132] geneve0: left promiscuous mode [ 916.117519][ T1132] bridge0: port 3(vlan3) entered disabled state [ 916.138062][ T1132] dvmrp8: left allmulticast mode [ 916.370731][ T1132] bond8 (unregistering): (slave ip6gretap0): Releasing active interface [ 916.518582][ T1132] bond3 (unregistering): (slave gretap2): Releasing active interface [ 916.568710][ T1132] bond11 (unregistering): (slave bridge5): Releasing backup interface [ 916.580456][ T1132] bond12 (unregistering): (slave bridge6): Releasing backup interface [ 916.588856][ T1132] bridge6 (unregistering): left promiscuous mode [ 916.601495][ T1132] bond1 (unregistering): Released all slaves [ 916.612123][ T1132] bond2 (unregistering): Released all slaves [ 916.622904][ T1132] bond3 (unregistering): Released all slaves [ 916.632784][ T1132] bond4 (unregistering): Released all slaves [ 916.642545][ T1132] bond5 (unregistering): Released all slaves [ 916.653840][ T1132] bond6 (unregistering): Released all slaves [ 916.673705][ T1132] bond7 (unregistering): Released all slaves [ 916.684902][ T1132] bond8 (unregistering): Released all slaves [ 916.697023][ T1132] bond9 (unregistering): Released all slaves [ 916.706878][ T1132] bond10 (unregistering): Released all slaves [ 916.716445][ T1132] bond11 (unregistering): Released all slaves [ 916.732033][ T1132] bond12 (unregistering): Released all slaves [ 916.744514][ T1132] bond13 (unregistering): Released all slaves [ 916.799589][ T1132] tipc: Left network mode [ 917.421555][ T1132] hsr_slave_0: left promiscuous mode [ 917.428595][ T1132] hsr_slave_1: left promiscuous mode [ 917.439416][ T1132] veth1_macvtap: left promiscuous mode [ 917.444989][ T1132] veth0_macvtap: left promiscuous mode [ 917.451009][ T1132] veth1_vlan: left promiscuous mode [ 917.457040][ T1132] veth0_vlan: left promiscuous mode [ 918.043048][ T1132] team0 (unregistering): Port device veth3 removed [ 918.130500][ T56] smc: removing ib device uyz0 [ 918.161257][ T1242] uyz0: Port: 1 Link DOWN [ 918.177108][ T56] smbdirect: ib_dev[uyz0] removed [ 918.296911][T14774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 918.767543][T14906] __nla_validate_parse: 16 callbacks suppressed [ 918.767567][T14906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11059'. [ 918.801045][T14906] openvswitch: netlink: Invalid VLAN frame [ 919.239823][T14897] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 919.277889][T14897] syzkaller0: entered promiscuous mode [ 919.294062][T14897] syzkaller0: entered allmulticast mode [ 919.339703][T14923] tipc: Cannot configure node identity twice [ 919.476815][T14926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11061'. [ 919.503538][T14931] tipc: Enabling of bearer rejected, already enabled [ 919.557559][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11062'. [ 919.575148][T14938] syzkaller1: entered promiscuous mode [ 919.593990][T14937] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 919.623921][T14938] syzkaller1: entered allmulticast mode [ 919.658417][T14940] RDS: rds_bind could not find a transport for fe88::104, load rds_tcp or rds_rdma? [ 919.755063][T14945] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11066'. [ 919.980677][T14963] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11069'. [ 920.031647][T14965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11069'. [ 920.237594][T14980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11072'. [ 920.553231][T14984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11073'. [ 920.584534][T14992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11068'. [ 920.960612][T15019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11078'. [ 921.218158][ T1132] IPVS: stop unused estimator thread 0... [ 921.282808][T15046] syzkaller0: entered promiscuous mode [ 921.324019][T15046] syzkaller0: entered allmulticast mode [ 921.603643][T15078] nbd: nbd4 already in use [ 921.622892][T15078] block nbd4: NBD_DISCONNECT [ 921.650745][T15078] block nbd4: Send disconnect failed -32 [ 921.695687][T15078] block nbd4: shutting down sockets [ 921.741243][T15096] Cannot find del_set index 3 as target [ 922.158239][T15128] netlink: 'syz.4.11096': attribute type 13 has an invalid length. [ 922.183291][T15128] netlink: 'syz.4.11096': attribute type 17 has an invalid length. [ 922.844663][T15128] sit0: left promiscuous mode [ 922.910952][T15128] 8021q: adding VLAN 0 to HW filter on device team0 [ 922.941070][T15128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 923.042856][T15128] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 923.060775][T15128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 923.083112][T15128] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 923.104871][ T35] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 923.144744][ T35] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 923.207517][ T35] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 923.237175][ T35] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 923.258164][ T35] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 923.274527][ T35] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 923.301733][ T35] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 923.333000][ T35] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 923.414539][T15202] netlink: 'syz.4.11107': attribute type 16 has an invalid length. [ 923.427001][T15185] syzkaller0: entered promiscuous mode [ 923.436407][T15185] syzkaller0: entered allmulticast mode [ 923.983045][T15254] netlink: 'syz.3.11115': attribute type 39 has an invalid length. [ 924.211016][T15266] __nla_validate_parse: 10 callbacks suppressed [ 924.211035][T15266] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11117'. [ 924.277637][T15244] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11112'. [ 924.521346][T15293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11121'. [ 925.061699][T15292] wg1: left promiscuous mode [ 925.076035][T15292] wg1: left allmulticast mode [ 925.273380][T15292] veth0_to_bond: left promiscuous mode [ 925.286109][T15292] veth0_to_bond: left allmulticast mode [ 925.494665][T15292] veth1_to_hsr: left promiscuous mode [ 925.686041][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 926.406283][T15292] bond2: left promiscuous mode [ 926.411297][T15292] veth5: left promiscuous mode [ 926.441484][T15292] vlan2: left allmulticast mode [ 926.446910][T15292] bond0: left allmulticast mode [ 926.452442][T15292] geneve0: left promiscuous mode [ 926.458649][T15292] macvlan2: left promiscuous mode [ 926.467135][T15292] ip6gre2: left promiscuous mode [ 926.472402][T15292] ip6gre2: left allmulticast mode [ 926.488042][T15292] vlan3: left promiscuous mode [ 926.493031][T15292] bond4: left promiscuous mode [ 926.498312][T15292] vlan3: left allmulticast mode [ 926.503595][T15292] bond4: left allmulticast mode [ 926.513285][T15292] bond6: left promiscuous mode [ 926.523111][T15292] bond6: left allmulticast mode [ 926.531220][T15292] ip6gre4: left promiscuous mode [ 926.536590][T15292] ip6gre4: left allmulticast mode [ 926.570061][T15292] bond7: left promiscuous mode [ 926.625142][ T35] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 926.637954][ T35] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.650831][ T35] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 926.691351][ T35] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.692619][T15343] openvswitch: netlink: Missing valid actions attribute. [ 926.715881][ T35] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 926.745249][T15351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11129'. [ 926.746251][ T35] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.779867][T15343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 926.812313][ T35] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 926.841095][ T35] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.842486][T15362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11131'. [ 926.866539][T15334] xfrm0 speed is unknown, defaulting to 1000 [ 926.873473][T15334] lo speed is unknown, defaulting to 1000 [ 927.220897][T15390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11136'. [ 927.234212][T15391] syzkaller0: entered promiscuous mode [ 927.251993][T15391] syzkaller0: entered allmulticast mode [ 927.432749][T15406] netlink: 'syz.4.11139': attribute type 1 has an invalid length. [ 927.470982][T15406] netlink: 'syz.4.11139': attribute type 3 has an invalid length. [ 927.502416][T15406] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11139'. [ 927.552107][T15406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11139'. [ 927.707466][T15424] netlink: 'syz.2.11144': attribute type 1 has an invalid length. [ 927.760397][T15424] bond0: entered promiscuous mode [ 927.770868][T15424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 927.811627][T15439] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11145'. [ 927.974999][T15436] syzkaller1: entered promiscuous mode [ 928.006712][T15436] syzkaller1: entered allmulticast mode [ 928.052726][T15459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11148'. [ 928.478907][T15480] veth1: entered promiscuous mode [ 928.500487][T15480] vlan3: entered promiscuous mode [ 928.610023][T15497] syzkaller0: entered allmulticast mode [ 928.870977][T15531] netlink: 'syz.1.11164': attribute type 1 has an invalid length. [ 928.907961][T15531] 8021q: adding VLAN 0 to HW filter on device bond14 [ 928.944919][T15529] xfrm0 speed is unknown, defaulting to 1000 [ 928.983002][T15531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.993152][T15531] bond14: (slave batadv0): making interface the new active one [ 929.001809][T15531] bond14: (slave batadv0): Enslaving as an active interface with an up link [ 929.014990][T15529] lo speed is unknown, defaulting to 1000 [ 929.084012][T15541] nbd: device at index 64 is going down [ 929.100044][T15531] bond14 (unregistering): (slave batadv0): Releasing active interface [ 929.142720][T15531] bond14 (unregistering): Released all slaves [ 929.248188][T13419] udevd[13419]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 929.281115][T15556] sch_tbf: burst 88 is lower than device veth11 mtu (1514) ! [ 929.293177][T13419] udevd[13419]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 929.829640][T15604] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 929.843584][T15604] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 929.949250][T15610] __nla_validate_parse: 7 callbacks suppressed [ 929.949272][T15610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11176'. [ 929.972489][T15610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11176'. [ 929.984519][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11177'. [ 930.152827][T15629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11179'. [ 930.172690][T15629] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11179'. [ 930.270734][T15633] netlink: 'syz.3.11178': attribute type 22 has an invalid length. [ 930.279261][T15633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11178'. [ 930.296763][T15633] netlink: 'syz.3.11178': attribute type 22 has an invalid length. [ 930.305029][T15633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11178'. [ 932.295869][T15566] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 932.433490][T15674] netlink: 2452 bytes leftover after parsing attributes in process `syz.4.11189'. [ 932.494775][T15680] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 932.562859][T15684] netlink: 'syz.2.11194': attribute type 4 has an invalid length. [ 932.618314][T15684] netlink: 'syz.2.11194': attribute type 4 has an invalid length. [ 932.674658][T15689] netlink: 'syz.0.11196': attribute type 1 has an invalid length. [ 932.691406][T15684] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11194'. [ 932.694279][T15689] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11196'. [ 932.815302][T15693] netlink: 'syz.0.11196': attribute type 39 has an invalid length. [ 933.608857][T15696] veth13: entered allmulticast mode [ 933.857932][T15729] IPVS: ip_vs_edit_dest(): server weight less than zero [ 933.902224][T15735] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 933.998417][T15740] ipip0: entered promiscuous mode [ 934.112497][T15755] syzkaller0: entered promiscuous mode [ 934.125934][T15755] syzkaller0: entered allmulticast mode [ 934.313685][T15773] netlink: 'syz.3.11223': attribute type 11 has an invalid length. [ 934.416422][T15781] netlink: 'syz.3.11224': attribute type 4 has an invalid length. [ 934.537066][T15790] 8021q: adding VLAN 0 to HW filter on device bond10 [ 934.557260][T15790] bond10: (slave veth7): Enslaving as an active interface with an up link [ 934.638206][T15792] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 934.793452][T15812] netlink: 'syz.3.11232': attribute type 1 has an invalid length. [ 934.803783][T15812] netlink: 'syz.3.11232': attribute type 3 has an invalid length. [ 934.994202][T15823] xfrm0 speed is unknown, defaulting to 1000 [ 935.009710][T15823] lo speed is unknown, defaulting to 1000 [ 935.202629][T15849] netlink: 'syz.4.11242': attribute type 1 has an invalid length. [ 935.218816][T15851] syzkaller0: entered promiscuous mode [ 935.230779][T15851] syzkaller0: entered allmulticast mode [ 935.252474][T15849] bond14: entered allmulticast mode [ 935.329032][T15849] bond14: (slave ip6gretap1): making interface the new active one [ 935.339067][T15849] ip6gretap1: entered allmulticast mode [ 935.345691][T15849] bond14: (slave ip6gretap1): Enslaving as an active interface with an up link [ 935.363052][T15868] netlink: 'syz.1.11245': attribute type 10 has an invalid length. [ 935.677136][T15883] __nla_validate_parse: 13 callbacks suppressed [ 935.677157][T15883] netlink: 96 bytes leftover after parsing attributes in process `syz.4.11251'. [ 935.938441][T15883] vlan4: entered allmulticast mode [ 935.944888][T15883] gretap0: entered allmulticast mode [ 936.174371][T15934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 936.249702][T15949] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11264'. [ 936.270628][T15949] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11264'. [ 936.271243][T15952] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11265'. [ 936.362201][T15965] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11265'. [ 936.362951][T15963] netlink: 320 bytes leftover after parsing attributes in process `syz.1.11267'. [ 936.463222][T15975] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.11269'. [ 936.678752][T15987] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11273'. [ 936.725213][T15991] bond14: option tlb_dynamic_lb: invalid value (115) [ 936.738379][T15991] bond14 (unregistering): Released all slaves [ 936.799779][T15995] batadv_slave_1: entered promiscuous mode [ 937.001798][T16010] netlink: 7 bytes leftover after parsing attributes in process `syz.4.11277'. [ 937.084604][T16015] 8021q: adding VLAN 0 to HW filter on device .` [ 937.123372][T16020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11283'. [ 940.113754][T16021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 940.377993][T16078] tipc: Enabled bearer , priority 0 [ 940.486717][T16078] syzkaller0: entered promiscuous mode [ 940.501083][T16078] syzkaller0: entered allmulticast mode [ 940.509424][T16078] tipc: Resetting bearer [ 940.517568][T16099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 940.547154][T16077] tipc: Resetting bearer [ 940.623948][T16104] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 940.655143][T16077] tipc: Disabling bearer [ 940.679632][T16099] macsec1: entered promiscuous mode [ 940.684909][T16099] bridge0: entered promiscuous mode [ 940.739118][T16111] netlink: 'syz.2.11301': attribute type 1 has an invalid length. [ 940.752795][T16111] __nla_validate_parse: 6 callbacks suppressed [ 940.752813][T16111] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.11301'. [ 940.780847][T16112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11304'. [ 940.880750][T16126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11307'. [ 940.890286][T16127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11306'. [ 940.915340][T16112] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11304'. [ 940.959803][T16120] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 940.969143][T16128] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 941.017089][T16126] block nbd4: server does not support multiple connections per device. [ 941.028237][T16126] block nbd4: shutting down sockets [ 941.109649][ T29] audit: type=1804 audit(1782129209.327:38): pid=16140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.11311" name="/newroot/408/cgroup.controllers" dev="tmpfs" ino=2110 res=1 errno=0 [ 941.138188][ T29] audit: type=1800 audit(1782129209.327:39): pid=16140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11311" name="cgroup.controllers" dev="tmpfs" ino=2110 res=0 errno=0 [ 941.161924][T16146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11312'. [ 941.172149][T16146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11312'. [ 941.181981][T16146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11312'. [ 941.191487][T16146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11312'. [ 941.251617][T16153] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.11314'. [ 941.575535][T16182] xt_limit: Overflow, try lower: 324382443/0 [ 942.002679][T16223] netlink: 'syz.3.11332': attribute type 1 has an invalid length. [ 942.011744][T16223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 942.160246][T16225] tipc: Resetting bearer [ 942.177100][T16224] tipc: Resetting bearer [ 942.373290][T16251] netlink: 'syz.1.11340': attribute type 22 has an invalid length. [ 942.468457][ T8347] tipc: Resetting bearer [ 942.878982][T16278] syzkaller0: entered promiscuous mode [ 942.891527][T16278] syzkaller0: entered allmulticast mode [ 943.233567][T16307] sctp: [Deprecated]: syz.3.11354 (pid 16307) Use of struct sctp_assoc_value in delayed_ack socket option. [ 943.233567][T16307] Use struct sctp_sack_info instead [ 943.377686][T16321] xfrm0 speed is unknown, defaulting to 1000 [ 943.403014][T16321] lo speed is unknown, defaulting to 1000 [ 943.434071][T16330] tipc: Enabling of bearer rejected, failed to enable media [ 943.836166][T16360] netlink: 'syz.2.11369': attribute type 2 has an invalid length. [ 943.896859][T16361] Bluetooth: MGMT ver 1.23 [ 943.905805][T16361] Bluetooth: hci1: too big key_count value 29096 [ 944.245407][T16390] tipc: Enabling of bearer rejected, failed to enable media [ 944.294455][T16394] (: renamed from bridge_slave_0 [ 944.714927][ T29] audit: type=1107 audit(1782129212.927:40): pid=16424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='‹j(ðJœÉHBt»0ßì ]HD)ÛåêSÛº¼#êFóÚP๡¡ÌÉ­)ïnçD’Îy¬Ñ žHùÂôÉì' [ 944.832430][T16422] RDS: rds_bind could not find a transport for fe88::104, load rds_tcp or rds_rdma? [ 944.986202][T16434] bridge3: port 1(erspan0) entered disabled state [ 945.094073][T16434] bridge0: port 1(team0) entered disabled state [ 945.100594][T16434] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.354888][T16434] tipc: Resetting bearer [ 945.461510][ T8333] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 945.489116][ T8333] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.521986][ T8333] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 945.560573][ T8333] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.605126][ T8333] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 945.627653][ T8333] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.639949][ T8333] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 945.655191][ T8333] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.687746][T16468] macvlan2: left promiscuous mode [ 945.693594][T16468] bond9: left promiscuous mode [ 945.718265][T16468] bond9: left allmulticast mode [ 945.729027][T16468] bond10: left promiscuous mode [ 945.737819][T16468] vti1: left promiscuous mode [ 945.744376][T16468] gretap2: left promiscuous mode [ 945.752494][T16468] bridge5: left promiscuous mode [ 945.761808][T16468] bridge5: left allmulticast mode [ 945.783499][T16468] geneve4: left promiscuous mode [ 945.789198][T16468] veth13: left allmulticast mode [ 945.800792][T16468] bond14: left allmulticast mode [ 945.816141][T16468] ip6gretap1: left allmulticast mode [ 946.040957][T16500] netlink: 'syz.1.11400': attribute type 1 has an invalid length. [ 946.051839][T16482] syzkaller0: entered promiscuous mode [ 946.070541][T16482] syzkaller0: entered allmulticast mode [ 946.148570][T16517] __nla_validate_parse: 19 callbacks suppressed [ 946.149934][T16517] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11401'. [ 946.254419][T16525] ip6gre2: entered promiscuous mode [ 946.270811][T16525] ip6gre2: entered allmulticast mode [ 946.509633][T16517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11401'. [ 946.730354][T16563] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11411'. [ 946.864955][T16580] ipt_ECN: cannot use operation on non-tcp rule [ 946.898831][T16583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11415'. [ 946.958707][T16583] bond9: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 946.979178][T16583] bond9 (unregistering): Released all slaves [ 947.014595][T16592] netlink: 'syz.3.11419': attribute type 1 has an invalid length. [ 947.038705][T16592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 947.511247][T16639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11433'. [ 947.832662][T16648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11436'. [ 948.042140][T16668] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 948.075315][T16668] syzkaller0: entered promiscuous mode [ 948.082003][T16668] syzkaller0: entered allmulticast mode [ 948.108325][T16673] sctp: [Deprecated]: syz.4.11442 (pid 16673) Use of int in max_burst socket option. [ 948.108325][T16673] Use struct sctp_assoc_value instead [ 948.125207][T16668] tipc: Enabled bearer , priority 0 [ 948.125328][T16676] sctp: [Deprecated]: syz.4.11442 (pid 16676) Use of int in max_burst socket option. [ 948.125328][T16676] Use struct sctp_assoc_value instead [ 948.160555][T16666] tipc: Resetting bearer [ 948.186503][T16666] tipc: Disabling bearer [ 948.321396][T16693] netlink: set zone limit has 4 unknown bytes [ 948.342534][T16696] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 948.372299][T16693] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 948.385239][T16693] bond9 (unregistering): Released all slaves [ 948.412079][T16694] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 948.426412][T16694] bond9 (unregistering): Released all slaves [ 948.464659][T16704] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.11452'. [ 948.474443][T16704] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 948.579328][T16714] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 948.589896][T16716] sch_tbf: peakrate 7 is lower than or equals to rate 8445517701446515487 ! [ 948.632224][T16719] netlink: 'syz.4.11457': attribute type 1 has an invalid length. [ 948.642774][T16721] netlink: 'syz.1.11458': attribute type 1 has an invalid length. [ 948.651520][T16721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11458'. [ 948.655292][T16719] 8021q: adding VLAN 0 to HW filter on device bond15 [ 948.795929][T16734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11462'. [ 948.844531][T16736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11463'. [ 948.895546][T16746] netlink: 'syz.3.11466': attribute type 6 has an invalid length. [ 948.942393][T16750] "syz.1.11468" (16750) uses obsolete ecb(arc4) skcipher [ 948.942689][T16749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 949.157561][T16759] netlink: 'syz.1.11472': attribute type 1 has an invalid length. [ 949.202159][T16772] SET target dimension over the limit! [ 949.266587][T16775] syzkaller0: entered promiscuous mode [ 949.272259][T16775] syzkaller0: entered allmulticast mode [ 949.278923][T16778] bridge0: entered allmulticast mode [ 949.341815][T16778] bridge0: port 1(team0) entered disabled state [ 949.349823][T16778] bridge_slave_1: left allmulticast mode [ 949.355567][T16778] bridge_slave_1: left promiscuous mode [ 949.361589][T16778] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.561593][T16787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.571808][T16787] team0: left promiscuous mode [ 949.582896][T16787] team_slave_0: left promiscuous mode [ 949.589362][T16787] team_slave_1: left promiscuous mode [ 949.595690][T16787] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.642319][T16787] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 949.654149][T16787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 949.669983][T16787] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 949.779648][T16814] netlink: 'syz.0.11488': attribute type 3 has an invalid length. [ 949.930572][T16821] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 949.971575][T16821] bond6 (unregistering): Released all slaves [ 949.982508][T16839] xt_l2tp: missing protocol rule (udp|l2tpip) [ 949.992800][T16826] netlink: 'syz.0.11488': attribute type 5 has an invalid length. [ 950.022438][T16836] bond6: option lacp_rate: invalid value (128) [ 950.039120][T16836] bond6 (unregistering): Released all slaves [ 950.063366][T16841] batadv_slave_1: entered promiscuous mode [ 950.139296][T16818] batadv_slave_1: left promiscuous mode [ 950.313757][T16867] xt_hashlimit: size too large, truncated to 1048576 [ 950.441490][T16863] bond16: entered promiscuous mode [ 950.450470][T16863] bond16: entered allmulticast mode [ 950.456202][T16863] 8021q: adding VLAN 0 to HW filter on device bond16 [ 950.589074][T16891] tipc: Resetting bearer [ 950.652843][T16895] tipc: Resetting bearer [ 950.730053][T16894] tipc: Resetting bearer [ 950.819953][ T47] tipc: Resetting bearer [ 951.229598][T16955] netlink: 'syz.4.11531': attribute type 4 has an invalid length. [ 951.268812][T16955] netlink: 'syz.4.11531': attribute type 4 has an invalid length. [ 951.342516][T16967] syzkaller0: entered promiscuous mode [ 951.370042][T16967] syzkaller0: entered allmulticast mode [ 951.412019][T16967] __nla_validate_parse: 22 callbacks suppressed [ 951.412040][T16967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11534'. [ 951.434169][T16967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11534'. [ 951.524797][T16981] netlink: 840 bytes leftover after parsing attributes in process `syz.1.11538'. [ 951.535390][T16981] netlink: 'syz.1.11538': attribute type 2 has an invalid length. [ 951.590533][T16986] netlink: 204 bytes leftover after parsing attributes in process `syz.1.11540'. [ 951.656011][T16988] netlink: 136 bytes leftover after parsing attributes in process `syz.0.11541'. [ 951.680894][T16988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11541'. [ 951.713639][T16988] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11541'. [ 951.737409][T16992] netlink: 'syz.3.11543': attribute type 1 has an invalid length. [ 951.813988][T17003] bond11: entered promiscuous mode [ 951.837660][T17003] bond11: entered allmulticast mode [ 951.843493][T17003] 8021q: adding VLAN 0 to HW filter on device bond11 [ 951.858701][T17005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11545'. [ 951.940966][T17005] nbd: must specify at least one socket [ 951.997832][T17005] block nbd1: NBD_DISCONNECT [ 952.023487][T17005] block nbd1: Send disconnect failed -32 [ 952.081717][T17012] netlink: 92 bytes leftover after parsing attributes in process `syz.0.11546'. [ 952.128898][ T47] pim6reg: left allmulticast mode [ 952.347800][ T47] bond7 (unregistering): (slave ip6gretap2): Releasing active interface [ 952.384203][ T47] bond8 (unregistering): (slave ip6gre2): Releasing backup interface [ 952.402814][ T47] ip6gre2 (unregistering): left promiscuous mode [ 952.717201][ T47] bond1 (unregistering): Released all slaves [ 952.747667][ T47] bond2 (unregistering): Released all slaves [ 952.772447][ T47] bond3 (unregistering): Released all slaves [ 952.806019][ T5624] Bluetooth: hci5: command 0x0405 tx timeout [ 952.812810][ T47] bond4 (unregistering): Released all slaves [ 952.840679][ T47] bond5 (unregistering): Released all slaves [ 952.869883][ T47] bond0 (unregistering): Released all slaves [ 952.882687][ T47] bond6 (unregistering): (slave veth7): Releasing active interface [ 952.902476][ T47] bond6 (unregistering): Released all slaves [ 952.929887][ T47] bond7 (unregistering): Released all slaves [ 952.948615][ T47] bond8 (unregistering): Released all slaves [ 953.001859][T17015] syzkaller0: entered promiscuous mode [ 953.009980][T17015] syzkaller0: entered allmulticast mode [ 953.153732][ T47] : left promiscuous mode [ 953.222230][T17037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11554'. [ 953.243732][ T47] tipc: Disabling bearer [ 953.266917][ T47] tipc: Left network mode [ 953.395630][T17049] hsr_slave_0: left promiscuous mode [ 953.409353][T17049] hsr_slave_1: left promiscuous mode [ 953.881481][T17089] xt_CT: You must specify a L4 protocol and not use inversions on it [ 953.977289][ T47] hsr_slave_0: left promiscuous mode [ 953.994167][ T47] veth1_vlan: left promiscuous mode [ 954.000951][ T47] veth0_vlan: left promiscuous mode [ 954.152921][T19097] bridge0: entered promiscuous mode [ 954.165986][ T9885] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.199541][ T9885] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.221187][ T9885] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.270485][ T9885] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.292695][T17113] netlink: 'syz.3.11576': attribute type 18 has an invalid length. [ 954.294876][T17111] ip6gre2: entered promiscuous mode [ 954.310110][T17111] ip6gre2: entered allmulticast mode [ 954.353762][ T47] IPVS: stop unused estimator thread 0... [ 954.436092][T17115] syzkaller0: entered promiscuous mode [ 954.441702][T17115] syzkaller0: entered allmulticast mode [ 954.545211][T17122] sctp: [Deprecated]: syz.3.11579 (pid 17122) Use of struct sctp_assoc_value in delayed_ack socket option. [ 954.545211][T17122] Use struct sctp_sack_info instead [ 954.588900][T17131] Cannot find set identified by id 65535 to match [ 954.905111][T17175] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.637130][T17193] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.648807][T17193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.677625][T17193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 955.688988][T17193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 955.702035][T17193] veth1_macvtap: left promiscuous mode [ 955.708930][T17193] veth0_macvtap: left promiscuous mode [ 955.715437][T17193] veth0_macvtap: entered promiscuous mode [ 955.722623][T17193] veth1_macvtap: entered promiscuous mode [ 955.732234][T17193] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 955.740667][T17193] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 955.749226][T17193] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 955.758950][T17193] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 955.767261][T17193] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 955.804738][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.815156][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.824522][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.835449][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.606208][T14399] Bluetooth: hci5: command 0x0405 tx timeout [ 957.673600][T17146] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 957.798593][T17214] __nla_validate_parse: 25 callbacks suppressed [ 957.798609][T17214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11603'. [ 957.894167][T17219] netlink: 136 bytes leftover after parsing attributes in process `syz.2.11606'. [ 957.929939][T17219] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 958.078866][T17235] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11611'. [ 958.359261][T17250] xt_CT: No such helper "netbios-ns" [ 958.368505][T17254] netlink: 'syz.4.11615': attribute type 1 has an invalid length. [ 958.544726][T17278] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11621'. [ 958.867765][T17300] bridge7: entered promiscuous mode [ 958.898885][T17300] bridge7: entered allmulticast mode [ 958.937839][T17300] team0: Port device bridge7 added [ 959.136316][T17295] bridge8: entered promiscuous mode [ 959.145541][T17295] bridge8: entered allmulticast mode [ 959.157477][T17295] team0: Port device bridge8 added [ 959.341403][T17336] netlink: 572 bytes leftover after parsing attributes in process `syz.0.11637'. [ 959.430813][T17342] tipc: Resetting bearer [ 959.472221][T17340] tipc: Resetting bearer [ 959.578660][T17352] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11643'. [ 959.612899][T17352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11643'. [ 959.628045][ T56] tipc: Resetting bearer [ 959.638212][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11643'. [ 959.715014][T17352] bond16: (slave tunl0): Device is not bonding slave [ 959.725445][T17352] bond16: option active_slave: invalid value (tunl0) [ 959.736441][T17352] bond16 (unregistering): Released all slaves [ 959.902705][T17379] netlink: 'syz.3.11651': attribute type 1 has an invalid length. [ 962.940174][T17382] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 963.045170][T17415] bond17: down delay (5) is not a multiple of miimon (2), value rounded to 4 ms [ 963.066505][T17415] bond17: entered promiscuous mode [ 963.086089][T17427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11664'. [ 963.097186][T17427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11664'. [ 963.131758][T17427] netlink: 'syz.2.11664': attribute type 4 has an invalid length. [ 963.165124][T17427] syzkaller0: entered promiscuous mode [ 963.170924][T17427] syzkaller0: entered allmulticast mode [ 963.226904][T17423] block nbd1: server does not support multiple connections per device. [ 963.251962][T17423] block nbd1: shutting down sockets [ 963.256464][T17443] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11665'. [ 963.325628][T17440] syzkaller1: entered promiscuous mode [ 963.345523][T17440] syzkaller1: entered allmulticast mode [ 963.362887][T17442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11668'. [ 963.403514][T17450] xfrm0 speed is unknown, defaulting to 1000 [ 963.413881][T17450] lo speed is unknown, defaulting to 1000 [ 963.422288][T17453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 963.455582][T17453] bond18: option lacp_active: invalid value (8) [ 963.485336][T17453] bond18 (unregistering): Released all slaves [ 963.721150][T17468] netlink: 'syz.4.11675': attribute type 1 has an invalid length. [ 963.772583][T17468] bond18: (slave bridge9): making interface the new active one [ 963.781752][T17468] bond18: (slave bridge9): Enslaving as an active interface with an up link [ 963.799861][T17468] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11675'. [ 963.810319][T17468] bond18: entered promiscuous mode [ 963.816368][T17468] bridge9: entered promiscuous mode [ 963.828129][T17468] bond18: entered allmulticast mode [ 963.836323][T17468] bridge9: entered allmulticast mode [ 963.972559][T17477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.999550][T17477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 964.034311][T17477] batadv_slave_1: left promiscuous mode [ 964.040869][T17477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.058708][T17477] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 964.069493][T17477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 964.084466][T17477] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 964.154772][T17492] tipc: Resetting bearer [ 964.178113][ T8347] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.185391][ T8347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.212399][ T8347] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.219615][ T8347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.293641][T17490] tipc: Resetting bearer [ 964.424166][T17509] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11686'. [ 964.809746][T17541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11694'. [ 964.838873][T17541] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11694'. [ 964.849757][T17541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11694'. [ 964.859530][T17541] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11694'. [ 965.347330][ T8347] tipc: Resetting bearer [ 965.396027][T17570] 8021q: adding VLAN 0 to HW filter on device bond6 [ 965.475000][T17573] bond6: entered promiscuous mode [ 965.495955][T17573] bond6: entered allmulticast mode [ 965.540252][T17573] 8021q: adding VLAN 0 to HW filter on device bond6 [ 965.555496][T17573] team0: Port device bond6 added [ 965.602374][T17576] team0: Port device bond6 removed [ 965.627613][T17576] bond6 (unregistering): Released all slaves [ 965.724807][T14399] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 965.736624][T14399] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 965.745095][T14399] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 965.756652][T14399] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 965.764942][T14399] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 965.827919][T17592] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.881582][T17592] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.982395][T17592] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.014768][T17592] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.159218][T17592] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.186366][T17592] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.283530][T17592] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.327332][T17592] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.379371][T17590] xfrm0 speed is unknown, defaulting to 1000 [ 966.386404][T17590] lo speed is unknown, defaulting to 1000 [ 966.424833][ T1132] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 966.442830][ T1132] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.471583][ T1132] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 966.494210][ T1132] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.524906][ T8347] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 966.533688][ T8347] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.579993][ T8347] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 966.588676][ T8347] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.879064][ T9885] bond0 (unregistering): Released all slaves [ 966.888010][ T9885] bond1 (unregistering): Released all slaves [ 966.911822][ T9885] bond2 (unregistering): (slave veth5): Releasing backup interface [ 966.921283][ T9885] bond2 (unregistering): Released all slaves [ 966.931565][ T9885] bond3 (unregistering): Released all slaves [ 966.943378][ T9885] bond4 (unregistering): Released all slaves [ 966.952984][ T9885] bond5 (unregistering): Released all slaves [ 966.963011][ T9885] bond6 (unregistering): Released all slaves [ 966.979893][ T9885] bond7 (unregistering): Released all slaves [ 966.991570][ T9885] bond8 (unregistering): Released all slaves [ 967.121446][T17590] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.130397][T17590] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.137999][T17590] bridge_slave_0: entered allmulticast mode [ 967.146079][T17590] bridge_slave_0: entered promiscuous mode [ 967.154721][T17590] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.162633][T17590] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.170548][T17590] bridge_slave_1: entered allmulticast mode [ 967.178622][T17590] bridge_slave_1: entered promiscuous mode [ 967.220859][T17590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 967.259740][T17590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 967.297929][ T9885] tipc: Left network mode [ 967.358343][ T9885] IPVS: stopping master sync thread 14590 ... [ 967.381202][T17590] team0: Port device team_slave_0 added [ 967.428764][T17590] team0: Port device team_slave_1 added [ 967.808112][T17693] tipc: Resetting bearer [ 967.839981][T17590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.850373][T14399] Bluetooth: hci3: command tx timeout [ 967.879122][T17590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.922181][T17590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.959319][T17711] ip6gretap0: entered promiscuous mode [ 967.995062][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 968.040531][T17590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.051030][T17590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.085511][T17590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.095514][T17727] netlink: 'syz.4.11733': attribute type 1 has an invalid length. [ 968.113225][T17722] __nla_validate_parse: 5 callbacks suppressed [ 968.113245][T17722] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11731'. [ 968.156947][T17727] bond19: (slave veth15): Enslaving as an active interface with a down link [ 968.171912][T17730] netlink: 'syz.3.11734': attribute type 1 has an invalid length. [ 968.220510][T17727] bond19: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 968.269027][T17732] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11734'. [ 968.285647][T17732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.294313][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.302508][T17590] hsr_slave_0: entered promiscuous mode [ 968.311620][T17732] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11734'. [ 968.314080][T17590] hsr_slave_1: entered promiscuous mode [ 968.333027][T17726] IPv6: sit3: Disabled Multicast RS [ 968.787534][T17767] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11743'. [ 968.871269][ T9885] hsr_slave_0: left promiscuous mode [ 968.885203][ T9885] hsr_slave_1: left promiscuous mode [ 969.019776][T17758] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11738'. [ 969.040748][T17786] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 969.242164][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 969.501666][T17819] ÿÿÿÿÿÿ: renamed from batadv_slave_1 [ 969.584070][ T9885] IPVS: stop unused estimator thread 0... [ 969.666815][T17590] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 969.709230][T17590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 969.751122][T17590] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 969.812144][T17590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 969.858537][T17590] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 969.892725][T17590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 969.915247][T17590] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 969.928032][T14399] Bluetooth: hci3: command tx timeout [ 969.956182][T17590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 969.956802][T17853] x_tables: duplicate underflow at hook 1 [ 969.981483][T17857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11755'. [ 970.016547][T17851] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 970.017696][T17857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11755'. [ 970.077601][T17866] netlink: 'syz.3.11755': attribute type 3 has an invalid length. [ 970.294104][T17590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.338972][T17590] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.382598][ T9885] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.389774][ T9885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 970.433985][ T9885] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.441202][ T9885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 970.452568][T17890] mac80211_hwsim hwsim144 syzkaller0: entered promiscuous mode [ 970.468820][T17890] mac80211_hwsim hwsim144 syzkaller0: entered allmulticast mode [ 970.545593][T17898] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11763'. [ 970.588002][T17902] syzkaller1: entered promiscuous mode [ 970.593775][T17902] syzkaller1: entered allmulticast mode [ 971.220184][T17945] xfrm0 speed is unknown, defaulting to 1000 [ 971.253761][T17952] netlink: 76 bytes leftover after parsing attributes in process `syz.2.11771'. [ 971.287869][T17945] lo speed is unknown, defaulting to 1000 [ 971.312695][T17590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 971.427660][T17590] veth0_vlan: entered promiscuous mode [ 971.485183][T17590] veth1_vlan: entered promiscuous mode [ 971.581381][T17590] veth0_macvtap: entered promiscuous mode [ 971.620771][T17590] veth1_macvtap: entered promiscuous mode [ 971.623992][T17963] netlink: 'syz.2.11772': attribute type 1 has an invalid length. [ 971.660190][T17963] netlink: 'syz.2.11772': attribute type 1 has an invalid length. [ 971.681344][T17966] ip6tnl2: entered allmulticast mode [ 971.707279][T17963] geneve3: entered promiscuous mode [ 971.721905][T17963] geneve3: entered allmulticast mode [ 971.756911][T17590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 971.780211][T17590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 971.832913][ T47] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.934968][T17977] dvmrp0: entered allmulticast mode [ 971.949997][ T47] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.979195][ T47] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.005935][T14399] Bluetooth: hci3: command tx timeout [ 972.045486][ T47] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.286790][T18013] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 972.363872][ T9885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.382696][ T9885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.417281][ T8331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.436474][ T8331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.383779][T18049] xfrm0 speed is unknown, defaulting to 1000 [ 973.398341][T18049] lo speed is unknown, defaulting to 1000 [ 973.753209][T18082] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 973.843623][T18082] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 973.880770][T18099] netlink: 88 bytes leftover after parsing attributes in process `syz.0.11798'. [ 973.902462][T18099] syzkaller1: entered promiscuous mode [ 973.921610][T18099] syzkaller1: entered allmulticast mode [ 973.995134][T18082] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 974.086604][T14399] Bluetooth: hci3: command tx timeout [ 974.106595][T18082] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 974.240770][ T8333] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 974.263628][ T8352] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 974.286821][T18115] netlink: 'syz.1.11803': attribute type 13 has an invalid length. [ 974.317402][ T8352] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 974.462885][ T8352] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 974.509356][T18123] netlink: 'syz.2.11806': attribute type 13 has an invalid length. [ 974.537640][T18125] netlink: 108 bytes leftover after parsing attributes in process `syz.4.11807'. [ 974.697826][T18146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11813'. [ 974.739224][T18137] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11811'. [ 974.762824][T18137] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11811'. [ 974.781598][T18137] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11811'. [ 974.798722][T18137] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11811'. [ 974.800268][T18157] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 974.813668][T18137] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11811'. [ 974.827235][T18157] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 974.829226][T18155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11818'. [ 974.844954][T18137] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11811'. [ 974.863275][T18161] netlink: 'syz.4.11818': attribute type 2 has an invalid length. [ 974.869121][T18137] bridge5: port 1(erspan0) entered disabled state [ 974.872157][T18161] netlink: 'syz.4.11818': attribute type 2 has an invalid length. [ 974.887256][T18161] netlink: 'syz.4.11818': attribute type 2 has an invalid length. [ 974.896605][T18161] netlink: 'syz.4.11818': attribute type 2 has an invalid length. [ 974.904904][T18161] netlink: 'syz.4.11818': attribute type 2 has an invalid length. [ 974.947911][T18155] bond20: Invalid ad_actor_system MAC address. [ 974.954237][T18155] bond20: option ad_actor_system: invalid value (7) [ 974.962833][T18155] bond20 (unregistering): Released all slaves [ 975.030852][T18168] gretap4: entered allmulticast mode [ 975.051868][T18168] bond12: (slave gretap4): making interface the new active one [ 975.064333][T18168] bond12: (slave gretap4): Enslaving as an active interface with an up link [ 975.130176][T18174] bond16: Removing last arp target with arp_interval on [ 975.168527][T18182] validate_nla: 2 callbacks suppressed [ 975.168544][T18182] netlink: 'syz.3.11824': attribute type 1 has an invalid length. [ 975.318032][T18196] netlink: 'syz.1.11826': attribute type 1 has an invalid length. [ 975.333843][T18196] netlink: 'syz.1.11826': attribute type 1 has an invalid length. [ 975.342038][T18194] bridge3: entered promiscuous mode [ 975.342086][T18194] bridge3: entered allmulticast mode [ 975.362378][T18193] xfrm0 speed is unknown, defaulting to 1000 [ 975.447932][T18192] syzkaller0: entered promiscuous mode [ 975.453601][T18192] syzkaller0: entered allmulticast mode [ 975.462384][T18193] lo speed is unknown, defaulting to 1000 [ 975.552128][T18209] netlink: 'syz.2.11831': attribute type 1 has an invalid length. [ 975.691906][T18214] SET target dimension over the limit! [ 976.043745][T14399] Bluetooth: hci5: link tx timeout [ 976.044513][T18254] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 976.048977][T14399] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 976.120449][T18254] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 976.259122][T18262] x_tables: duplicate underflow at hook 1 [ 976.278501][T18254] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 976.386735][T18254] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 976.512604][T18279] xfrm0 speed is unknown, defaulting to 1000 [ 976.522419][ T8333] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.533379][T18279] lo speed is unknown, defaulting to 1000 [ 976.544343][ T8333] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.583311][ T8333] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.636270][ T8331] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.961293][T18320] sctp: [Deprecated]: syz.1.11860 (pid 18320) Use of int in max_burst socket option. [ 976.961293][T18320] Use struct sctp_assoc_value instead [ 976.987894][T18324] syzkaller1: entered promiscuous mode [ 976.994258][T18324] syzkaller1: entered allmulticast mode [ 977.081502][T18328] xfrm0 speed is unknown, defaulting to 1000 [ 977.116843][T18328] lo speed is unknown, defaulting to 1000 [ 977.984175][T18397] netlink: 'syz.1.11880': attribute type 4 has an invalid length. [ 978.063122][T18398] netlink: 'syz.3.11879': attribute type 83 has an invalid length. [ 978.069855][T18404] tipc: Enabling of bearer rejected, already enabled [ 978.089666][ T5624] Bluetooth: hci5: command 0x0405 tx timeout [ 978.108243][T18404] tipc: Resetting bearer [ 978.174902][T18411] syzkaller1: entered promiscuous mode [ 978.195271][T18411] syzkaller1: entered allmulticast mode [ 978.285146][T18422] netlink: 'syz.1.11887': attribute type 1 has an invalid length. [ 978.301587][T18424] netlink: 'syz.1.11887': attribute type 1 has an invalid length. [ 978.357433][T18434] syzkaller1: entered promiscuous mode [ 978.372463][T18434] syzkaller1: entered allmulticast mode [ 979.122109][T18524] netlink: 'syz.1.11905': attribute type 7 has an invalid length. [ 979.243085][T18537] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 979.687192][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 979.695232][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 979.702934][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 979.712465][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 979.722188][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 980.100976][ T9885] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 980.141244][ T9885] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.223800][T18572] xfrm0 speed is unknown, defaulting to 1000 [ 980.261652][ T9885] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 980.281785][T18611] __nla_validate_parse: 32 callbacks suppressed [ 980.281807][T18611] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.11918'. [ 980.298658][T18611] netlink: Unknown conntrack attr (0) [ 980.307911][ T9885] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.339300][T18572] lo speed is unknown, defaulting to 1000 [ 980.366012][T18620] tap0: tun_chr_ioctl cmd 1074025673 [ 980.390848][T18615] tap0: tun_chr_ioctl cmd 1074025677 [ 980.409052][T18615] tap0: linktype set to 787 [ 980.425559][ T9885] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 980.438186][ T9885] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.502538][T18626] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11922'. [ 980.522118][T18629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11919'. [ 980.542170][T18620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11919'. [ 980.552961][ T9885] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 980.576963][T18615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11919'. [ 980.580173][ T9885] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.605513][T18635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11925'. [ 980.616523][T18635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11925'. [ 980.775484][ T9885] vlan3: left allmulticast mode [ 980.783848][ T9885] mac80211_hwsim hwsim135 wlan0: left allmulticast mode [ 980.791244][ T9885] bridge0: port 3(vlan3) entered disabled state [ 980.830277][ T9885] dvmrp6: left allmulticast mode [ 980.843524][ T9885] pimreg: left allmulticast mode [ 981.089937][ T9885] bond14 (unregistering): (slave ip6gretap1): Releasing active interface [ 981.228013][ T9885] bond10 (unregistering): (slave vti1): Releasing backup interface [ 981.346750][ T9885] bond13 (unregistering): (slave gretap2): Releasing active interface [ 981.381906][ T9885] bond6 (unregistering): (slave geneve3): Releasing active interface [ 981.413174][T18685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11932'. [ 981.441241][ T9885] team0: Port device bridge7 removed [ 981.451476][ T9885] team0: Port device bridge8 removed [ 981.460391][ T9885] bond18 (unregistering): (slave bridge9): Releasing active interface [ 981.469204][ T9885] bridge9 (unregistering): left promiscuous mode [ 981.475900][ T9885] bridge9 (unregistering): left allmulticast mode [ 981.486105][ T9885] bond1 (unregistering): Released all slaves [ 981.495627][ T9885] bond2 (unregistering): Released all slaves [ 981.507250][ T9885] bond3 (unregistering): Released all slaves [ 981.517209][ T9885] bond4 (unregistering): Released all slaves [ 981.528428][ T9885] bond5 (unregistering): (slave veth5): Releasing active interface [ 981.540821][ T9885] bond5 (unregistering): Released all slaves [ 981.552955][ T9885] bond6 (unregistering): Released all slaves [ 981.563834][ T9885] bond7 (unregistering): (slave veth7): Releasing active interface [ 981.572968][ T9885] bond7 (unregistering): Released all slaves [ 981.582660][ T9885] bond8 (unregistering): Released all slaves [ 981.598332][ T9885] bond9 (unregistering): Released all slaves [ 981.611316][ T9885] bond10 (unregistering): Released all slaves [ 981.623151][ T9885] bond11 (unregistering): Released all slaves [ 981.633980][ T9885] bond12 (unregistering): Released all slaves [ 981.644292][ T9885] bond13 (unregistering): Released all slaves [ 981.654774][ T9885] bond0 (unregistering): (slave veth9): Releasing active interface [ 981.664134][ T9885] bond0 (unregistering): Released all slaves [ 981.674604][ T9885] bond14 (unregistering): Released all slaves [ 981.685194][ T9885] bond15 (unregistering): Released all slaves [ 981.705888][ T9885] bond16 (unregistering): Released all slaves [ 981.715646][ T9885] bond17 (unregistering): Released all slaves [ 981.725874][ T9885] bond18 (unregistering): Released all slaves [ 981.737252][ T9885] bond19 (unregistering): (slave veth15): Releasing active interface [ 981.747725][ T9885] bond19 (unregistering): Released all slaves [ 981.767016][ T5624] Bluetooth: hci4: command tx timeout [ 981.788259][T18664] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 981.815322][ T9] team_slave_0: entered promiscuous mode [ 981.821092][ T9] team_slave_1: entered promiscuous mode [ 981.888553][T18691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11933'. [ 981.905203][ T9885] tipc: Left network mode [ 981.933309][T18695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 982.122470][T18712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11938'. [ 982.145208][T18572] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.174728][T18572] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.185082][T18572] bridge_slave_0: entered allmulticast mode [ 982.204527][T18572] bridge_slave_0: entered promiscuous mode [ 982.288945][T18712] 8021q: adding VLAN 0 to HW filter on device bond17 [ 982.313966][T18572] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.321491][T18572] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.329271][T18572] bridge_slave_1: entered allmulticast mode [ 982.340434][T18572] bridge_slave_1: entered promiscuous mode [ 982.364388][T18730] bond17: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 982.421192][T18712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 982.459737][T18734] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.475661][T18572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 982.493730][T18572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 982.592473][T18572] team0: Port device team_slave_0 added [ 982.599311][T18750] netlink: 'syz.1.11944': attribute type 1 has an invalid length. [ 982.615136][T18572] team0: Port device team_slave_1 added [ 982.701834][T18750] 8021q: adding VLAN 0 to HW filter on device bond18 [ 982.781302][T18572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.810766][T18572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 982.863561][T18572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.889293][T18572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 982.907108][T18572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 982.948313][T18572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 983.071817][T18572] hsr_slave_0: entered promiscuous mode [ 983.087546][T18572] hsr_slave_1: entered promiscuous mode [ 983.121699][T18572] debugfs: 'hsr0' already exists in 'hsr' [ 983.135857][T18572] Cannot create hsr debugfs directory [ 983.151440][T18779] syzkaller0: entered promiscuous mode [ 983.169007][T18779] syzkaller0: entered allmulticast mode [ 983.230563][ T9885] hsr_slave_0: left promiscuous mode [ 983.246406][ T9885] hsr_slave_1: left promiscuous mode [ 983.262764][ T9885] veth1_macvtap: left promiscuous mode [ 983.275873][ T9885] veth0_macvtap: left promiscuous mode [ 983.846221][ T5624] Bluetooth: hci4: command tx timeout [ 984.096330][ T9885] IPVS: stop unused estimator thread 0... [ 984.104858][T18852] tipc: Resetting bearer [ 984.147517][T18852] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 40 [ 984.189742][T18851] tipc: Resetting bearer [ 984.204326][T18858] 8021q: VLANs not supported on syzkaller1 [ 984.290649][ T9885] pim6reg: left allmulticast mode [ 984.297503][ T9885] dvmrp8: left allmulticast mode [ 984.543389][ T9885] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 984.551864][ T9885] bridge4 (unregistering): left promiscuous mode [ 984.565175][ T9885] bond0 (unregistering): (slave bridge8): Releasing backup interface [ 984.575011][ T9885] bridge8 (unregistering): left promiscuous mode [ 984.585013][ T9885] bond1 (unregistering): (slave veth3): Releasing backup interface [ 984.592983][ T9885] veth3: left promiscuous mode [ 984.598717][ T9885] bond1 (unregistering): Released all slaves [ 984.609315][ T9885] bond2 (unregistering): Released all slaves [ 984.621330][ T9885] bond3 (unregistering): Released all slaves [ 984.632247][ T9885] bond4 (unregistering): Released all slaves [ 984.643619][ T9885] bond5 (unregistering): Released all slaves [ 984.655904][ T9885] bond6 (unregistering): (slave veth1): Releasing active interface [ 984.665574][ T9885] bond6 (unregistering): (slave veth5): Releasing active interface [ 984.675093][ T9885] bond6 (unregistering): Released all slaves [ 984.684734][ T9885] bond7 (unregistering): Released all slaves [ 984.694649][ T9885] bond8 (unregistering): (slave bond9): Releasing backup interface [ 984.703399][ T9885] bond8 (unregistering): Released all slaves [ 984.712723][ T9885] bond9 (unregistering): Released all slaves [ 984.722133][ T9885] bond0 (unregistering): Released all slaves [ 984.735154][ T9885] bond10 (unregistering): Released all slaves [ 984.816659][T18890] veth11: entered allmulticast mode [ 984.844681][ T9885] tipc: Left network mode [ 984.852588][T18890] bond13 (unregistering): Released all slaves [ 985.074201][ T8342] tipc: Resetting bearer [ 985.460159][T18942] __nla_validate_parse: 5 callbacks suppressed [ 985.460179][T18942] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11985'. [ 985.601082][T18951] netlink: 'syz.1.11986': attribute type 1 has an invalid length. [ 985.637374][T18951] 8021q: adding VLAN 0 to HW filter on device bond19 [ 985.811781][T18955] netlink: 'syz.1.11986': attribute type 10 has an invalid length. [ 985.819818][T18955] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11986'. [ 985.862523][T18953] bond19: (slave veth9): Enslaving as a backup interface with a down link [ 985.875187][T18954] bond19: (slave dummy0): Enslaving as a backup interface with an up link [ 985.887852][T18955] dummy0: entered promiscuous mode [ 985.896829][T18955] bond19: (slave dummy0): Releasing backup interface [ 985.926157][ T5624] Bluetooth: hci4: command tx timeout [ 985.967797][T18959] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11988'. [ 986.033339][T18964] tipc: Resetting bearer [ 986.064050][ T9885] IPVS: stop unused estimator thread 0... [ 986.323888][T18958] tipc: Resetting bearer [ 987.127805][ T9885] tipc: Resetting bearer [ 987.522733][T18887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 987.535076][T18572] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 987.558658][T18572] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 987.581651][T18572] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 987.604262][T18572] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 987.640671][T18572] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 987.659084][T18572] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 987.670004][T18991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11992'. [ 987.748794][T18572] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 987.759056][T18572] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 987.774634][T19000] bond6: entered promiscuous mode [ 987.780090][T19000] bond6: entered allmulticast mode [ 987.789121][ T8347] veth7: left allmulticast mode [ 987.806793][ T8347] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 987.818738][ T8347] bond14 (unregistering): (slave ip6erspan0): Releasing active interface [ 987.874838][ T8347] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 987.899055][ T8347] bond9 (unregistering): (slave geneve4): Releasing active interface [ 987.937383][ T8347] bond2 (unregistering): (slave bridge2): Removing an active aggregator [ 987.946416][ T8347] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 987.954575][ T8347] bond2 (unregistering): (slave bridge2): the permanent HWaddr of slave - 62:69:e0:2a:59:b2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 987.977173][ T8347] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 987.993835][ T8347] bond1 (unregistering): Released all slaves [ 988.003902][ T8347] bond2 (unregistering): Released all slaves [ 988.016600][ T5624] Bluetooth: hci4: command tx timeout [ 988.022890][ T8347] bond0 (unregistering): Released all slaves [ 988.032688][ T8347] bond3 (unregistering): Released all slaves [ 988.049760][ T8347] bond4 (unregistering): Released all slaves [ 988.059481][ T8347] bond5 (unregistering): Released all slaves [ 988.069063][ T8347] bond6 (unregistering): Released all slaves [ 988.079576][ T8347] bond7 (unregistering): Released all slaves [ 988.090656][ T8347] bond8 (unregistering): Released all slaves [ 988.104020][ T8347] bond9 (unregistering): Released all slaves [ 988.115309][ T8347] bond10 (unregistering): Released all slaves [ 988.124990][ T8347] bond11 (unregistering): Released all slaves [ 988.134924][ T8347] bond12 (unregistering): Released all slaves [ 988.146592][ T8347] bond13 (unregistering): Released all slaves [ 988.157154][ T8347] bond14 (unregistering): Released all slaves [ 988.174719][ T8347] bond15 (unregistering): Released all slaves [ 988.319001][T19017] netlink: 'syz.1.11995': attribute type 12 has an invalid length. [ 988.378502][ T8347] tipc: Disabling bearer [ 988.399620][ T8347] tipc: Left network mode [ 988.413585][T19018] xfrm0 speed is unknown, defaulting to 1000 [ 988.426865][T18572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.439418][ T8347] IPVS: stopping backup sync thread 2558 ... [ 988.449182][T19018] lo speed is unknown, defaulting to 1000 [ 988.449625][T19025] syzkaller1: entered promiscuous mode [ 988.492217][T19025] syzkaller1: entered allmulticast mode [ 988.551699][T18572] 8021q: adding VLAN 0 to HW filter on device team0 [ 988.567763][T19037] tipc: Resetting bearer [ 988.624657][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.631864][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.663770][T19039] tipc: Resetting bearer [ 988.694255][ T8342] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.701459][ T8342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.714292][T19049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12003'. [ 988.794070][T19053] tipc: Enabling of bearer rejected, failed to enable media [ 989.200693][ T47] tipc: Resetting bearer [ 989.243979][T19081] netlink: 136 bytes leftover after parsing attributes in process `syz.0.12011'. [ 989.264838][T19077] xfrm0 speed is unknown, defaulting to 1000 [ 989.288534][T19077] lo speed is unknown, defaulting to 1000 [ 989.303436][ T8347] batman_adv: 60ªX¹¦À: Removing interface: dummy0 [ 989.389377][T19087] netlink: 34 bytes leftover after parsing attributes in process `syz.2.12013'. [ 989.407386][T19088] netlink: 34 bytes leftover after parsing attributes in process `syz.2.12013'. [ 989.419884][T19087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12013'. [ 989.433847][T19087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12013'. [ 989.570338][T19091] geneve2: entered promiscuous mode [ 989.575660][T19091] geneve2: entered allmulticast mode [ 989.616764][T18572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 989.822454][ T8347] IPVS: stop unused estimator thread 0... [ 989.981220][T18572] veth0_vlan: entered promiscuous mode [ 990.009230][T18572] veth1_vlan: entered promiscuous mode [ 990.125458][T18572] veth0_macvtap: entered promiscuous mode [ 990.152825][T19127] bond20: option tlb_dynamic_lb: invalid value (5) [ 990.162093][T19127] bond20 (unregistering): Released all slaves [ 990.181596][T18572] veth1_macvtap: entered promiscuous mode [ 990.210567][T18572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 990.254347][T18572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 990.315467][ T8340] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.353695][ T8340] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.384697][ T8340] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.405221][T19145] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 990.416970][ T8342] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.499492][T19148] No such timeout policy "syz1" [ 990.516867][T19149] __nla_validate_parse: 2 callbacks suppressed [ 990.516885][T19149] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12027'. [ 990.543047][T15921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.560249][T15921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.627890][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.661654][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.733533][T19158] netlink: 'syz.0.12030': attribute type 6 has an invalid length. [ 990.751851][T19158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12030'. [ 990.786734][T19158] netlink: 'syz.0.12030': attribute type 1 has an invalid length. [ 990.804859][T19158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 990.933943][T19173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12034'. [ 990.972619][T19170] tipc: Enabling of bearer rejected, failed to enable media [ 991.521571][ T29] audit: type=1107 audit(1782129259.737:41): pid=19218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 991.556748][T19224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12045'. [ 991.740679][T19238] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 991.748974][T19241] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12048'. [ 991.758669][T19239] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 991.834508][T19243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12050'. [ 991.848712][T19241] netlink: 'syz.3.12048': attribute type 1 has an invalid length. [ 991.868396][T19241] netlink: 'syz.3.12048': attribute type 1 has an invalid length. [ 991.897366][T19244] sctp: [Deprecated]: syz.1.12049 (pid 19244) Use of struct sctp_assoc_value in delayed_ack socket option. [ 991.897366][T19244] Use struct sctp_sack_info instead [ 991.907125][T19249] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12051'. [ 992.083556][T19266] netlink: 'syz.3.12058': attribute type 268 has an invalid length. [ 992.164404][T19270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12059'. [ 992.180440][T19278] xt_CT: You must specify a L4 protocol and not use inversions on it [ 992.204189][T19270] netlink: 'syz.2.12059': attribute type 4 has an invalid length. [ 992.212020][T19281] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12063'. [ 992.237802][T19279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12060'. [ 992.356241][T19279] veth3: entered allmulticast mode [ 992.376609][T19291] bond0: (slave bond_slave_0): Releasing backup interface [ 992.663353][T19309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 992.689724][T19309] netlink: 'syz.1.12072': attribute type 10 has an invalid length. [ 992.882218][T19331] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 992.930145][T19335] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 993.270184][T19348] 8021q: adding VLAN 0 to HW filter on device bond14 [ 993.304550][T19348] bond13: (slave bond14): Enslaving as an active interface with an up link [ 993.345048][T19353] Bluetooth: MGMT ver 1.23 [ 993.366434][T19349] 8021q: adding VLAN 0 to HW filter on device bond13 [ 993.551278][T19375] netlink: zone id is out of range [ 993.572427][T19375] netlink: zone id is out of range [ 993.586993][T19375] netlink: zone id is out of range [ 993.593896][T19375] netlink: zone id is out of range [ 993.600259][T19375] netlink: zone id is out of range [ 993.616583][T19375] netlink: zone id is out of range [ 993.637360][T19382] netlink: 'syz.4.12093': attribute type 1 has an invalid length. [ 993.638671][T19375] netlink: zone id is out of range [ 993.658927][T19382] netlink: 'syz.4.12093': attribute type 2 has an invalid length. [ 993.821939][ T4939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 993.829769][ T4939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 993.837846][ T4939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 993.849895][ T4939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 993.858665][ T4939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 994.392814][T19400] xfrm0 speed is unknown, defaulting to 1000 [ 994.427978][T19400] lo speed is unknown, defaulting to 1000 [ 994.563809][ T8342] erspan0: left allmulticast mode [ 994.577597][ T8342] erspan0: left promiscuous mode [ 994.588836][ T8342] bridge3: port 1(erspan0) entered disabled state [ 994.684405][ T8342] bond12 (unregistering): (slave geneve2): Releasing active interface [ 994.701366][ T8342] bond7 (unregistering): (slave bridge1): Releasing backup interface [ 994.709676][ T8342] bridge1 (unregistering): left promiscuous mode [ 994.716487][ T8342] bridge1 (unregistering): left allmulticast mode [ 994.734905][ T8342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 994.744819][ T8342] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 994.753689][ T8342] bond0 (unregistering): Released all slaves [ 994.761672][ T8342] bond1 (unregistering): Released all slaves [ 994.774850][ T8342] bond2 (unregistering): Released all slaves [ 994.784172][ T8342] bond3 (unregistering): Released all slaves [ 994.793510][ T8342] bond4 (unregistering): Released all slaves [ 994.803303][ T8342] bond5 (unregistering): (slave bond6): Releasing backup interface [ 994.812392][ T8342] bond5 (unregistering): Released all slaves [ 994.829042][ T8342] bond6 (unregistering): Released all slaves [ 994.840449][ T8342] bond7 (unregistering): Released all slaves [ 994.849506][ T8342] bond8 (unregistering): Released all slaves [ 994.861020][ T8342] bond9 (unregistering): Released all slaves [ 994.870131][ T8342] bond10 (unregistering): Released all slaves [ 994.879377][ T8342] bond11 (unregistering): Released all slaves [ 994.893208][ T8342] bond12 (unregistering): Released all slaves [ 994.910856][ T8342] bond13 (unregistering): Released all slaves [ 994.920896][ T8342] bond14 (unregistering): Released all slaves [ 994.930492][ T8342] bond15 (unregistering): Released all slaves [ 994.939677][ T8342] bond16 (unregistering): Released all slaves [ 994.949295][ T8342] bond17 (unregistering): Released all slaves [ 994.958545][ T8342] bond18 (unregistering): Released all slaves [ 994.968560][ T8342] bond19 (unregistering): (slave veth9): Releasing backup interface [ 994.978046][ T8342] bond19 (unregistering): Released all slaves [ 995.050102][ T8342] tipc: Disabling bearer [ 995.056370][ T8342] tipc: Disabling bearer [ 995.062519][ T8342] tipc: Left network mode [ 995.137225][T19400] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.144524][T19400] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.152157][T19400] bridge_slave_0: entered allmulticast mode [ 995.159830][T19400] bridge_slave_0: entered promiscuous mode [ 995.168099][T19400] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.175316][T19400] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.182788][T19400] bridge_slave_1: entered allmulticast mode [ 995.189792][T19400] bridge_slave_1: entered promiscuous mode [ 995.248491][T19400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.262203][T19400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.285618][T19400] team0: Port device team_slave_0 added [ 995.294079][T19400] team0: Port device team_slave_1 added [ 995.313409][T19400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.320572][T19400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.347172][T19400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.362534][T19400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 995.369894][T19400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.396284][T19400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 995.423933][T19400] hsr_slave_0: entered promiscuous mode [ 995.431160][T19400] hsr_slave_1: entered promiscuous mode [ 995.437665][T19400] debugfs: 'hsr0' already exists in 'hsr' [ 995.443441][T19400] Cannot create hsr debugfs directory [ 995.859676][ T8342] hsr_slave_0: left promiscuous mode [ 995.865414][ T8342] hsr_slave_1: left promiscuous mode [ 995.926755][ T4939] Bluetooth: hci0: command tx timeout [ 995.973936][ T8342] team_slave_1 (unregistering): left allmulticast mode [ 995.998939][ T8342] team0 (unregistering): Port device team_slave_1 removed [ 996.011631][ T8342] team_slave_0 (unregistering): left allmulticast mode [ 996.019770][ T8342] team0 (unregistering): Port device team_slave_0 removed [ 996.282604][ T8342] IPVS: stop unused estimator thread 0... [ 996.663501][T19388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 996.676782][T19400] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 996.708623][T19400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 996.739353][T19400] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 996.775133][T19400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 996.788354][T19400] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 996.816452][T19400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 996.836953][T19481] __nla_validate_parse: 16 callbacks suppressed [ 996.836975][T19481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12107'. [ 996.930987][T19481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 996.946842][T19400] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 996.961483][T19400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 996.980265][T19492] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 997.222314][T19530] netlink: 'syz.2.12117': attribute type 1 has an invalid length. [ 997.270012][T19530] bond7: entered promiscuous mode [ 997.275628][T19530] 8021q: adding VLAN 0 to HW filter on device bond7 [ 997.287440][T19538] tipc: Started in network mode [ 997.292798][T19538] tipc: Node identity 1abc542b7c81, cluster identity 4711 [ 997.300481][T19538] tipc: Enabled bearer , priority 0 [ 997.311613][T19400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.351656][T19530] bond7: (slave veth9): making interface the new active one [ 997.367508][T19530] veth9: entered promiscuous mode [ 997.377545][T19530] bond7: (slave veth9): Enslaving as an active interface with an up link [ 997.392496][T19538] syzkaller0: entered promiscuous mode [ 997.408975][T19538] syzkaller0: entered allmulticast mode [ 997.443759][T19400] 8021q: adding VLAN 0 to HW filter on device team0 [ 997.471189][T19538] tipc: Resetting bearer [ 997.488725][T19554] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12123'. [ 997.510404][T19536] tipc: Resetting bearer [ 997.534799][T19536] tipc: Disabling bearer [ 997.554750][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.562030][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.573205][T19560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12126'. [ 997.603098][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.610281][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.968940][T19400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 998.007343][ T4939] Bluetooth: hci0: command tx timeout [ 998.021154][T19400] veth0_vlan: entered promiscuous mode [ 998.037510][T19400] veth1_vlan: entered promiscuous mode [ 998.064563][T19400] veth0_macvtap: entered promiscuous mode [ 998.074578][T19400] veth1_macvtap: entered promiscuous mode [ 998.100398][T19400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 998.114407][T19400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 998.130157][T15921] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.151299][ T8331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.160519][ T8331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.175228][ T8331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.221012][ T8331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.236795][ T8331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.262404][ T8331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.278752][ T8331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.086280][ T4939] Bluetooth: hci0: command tx timeout [ 1002.166219][ T4939] Bluetooth: hci0: command tx timeout [ 1043.797047][T19646] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12128'. [ 1043.805300][T19651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12131'. [ 1043.819137][T19651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12131'. [ 1043.833200][T19646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12128'. [ 1043.854461][T19646] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12128'. [ 1044.014000][T19676] net_ratelimit: 410 callbacks suppressed [ 1044.014024][T19676] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 1044.090506][T19685] openvswitch: netlink: IPv4 tun info is not correct [ 1044.222902][T19699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.286587][T19706] vlan0: entered promiscuous mode [ 1044.298305][T19708] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1044.360872][T19713] netlink: 'syz.4.12148': attribute type 5 has an invalid length. [ 1044.363849][T19716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12150'. [ 1044.387173][T19716] bond0: (slave wlan0): making interface the new active one [ 1044.395023][T19716] mac80211_hwsim hwsim143 wlan0: entered promiscuous mode [ 1044.405263][T19716] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 1044.438935][T19719] syzkaller0: entered promiscuous mode [ 1044.444766][T19719] syzkaller0: entered allmulticast mode [ 1044.463373][T19722] netlink: 'syz.2.12152': attribute type 5 has an invalid length. [ 1044.733702][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1044.743224][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1044.751123][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1044.760230][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1044.769447][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1044.880543][T19748] x_tables: unsorted entry at hook 2 [ 1044.940634][ T7672] syz_tun (unregistering): left promiscuous mode [ 1044.947857][T19752] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1045.037544][T19757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12162'. [ 1045.060523][T19760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12163'. [ 1045.160939][T19764] netlink: 'syz.1.12164': attribute type 1 has an invalid length. [ 1045.167760][T19767] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12162'. [ 1045.200576][T19760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.284322][T19774] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12165'. [ 1045.352819][T19760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1045.367537][T19760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1045.444576][T19769] ipvlan2: entered allmulticast mode [ 1045.459919][T19769] dummy0: entered allmulticast mode [ 1045.474650][T19775] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1045.489542][T19775] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1045.500504][T19775] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1045.511781][ T8331] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.529235][ T8331] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.547871][ T8331] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.565138][ T8331] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.588442][T19736] xfrm0 speed is unknown, defaulting to 1000 [ 1045.602358][T19736] lo speed is unknown, defaulting to 1000 [ 1045.624629][T19786] xfrm0 speed is unknown, defaulting to 1000 [ 1045.700474][T19798] netlink: 'syz.4.12166': attribute type 1 has an invalid length. [ 1045.746819][T19786] lo speed is unknown, defaulting to 1000 [ 1046.243631][T19822] syzkaller0: entered promiscuous mode [ 1046.254940][T19822] syzkaller0: entered allmulticast mode [ 1046.274931][T19822] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1046.283830][T19736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.291142][T19736] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.298812][T19736] bridge_slave_0: entered allmulticast mode [ 1046.305606][T19736] bridge_slave_0: entered promiscuous mode [ 1046.313859][T19736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.321271][T19736] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.335769][T19736] bridge_slave_1: entered allmulticast mode [ 1046.343633][T19736] bridge_slave_1: entered promiscuous mode [ 1046.485984][T19736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.538620][T19736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.561482][T19851] netlink: 'syz.0.12183': attribute type 10 has an invalid length. [ 1046.607648][T19854] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 1046.630488][T19736] team0: Port device team_slave_0 added [ 1046.642788][T19736] team0: Port device team_slave_1 added [ 1046.681272][T19736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1046.698488][T19736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1046.801384][T19736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1046.812118][ T4939] Bluetooth: hci1: command tx timeout [ 1046.961162][T19885] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1046.983080][T19885] bond1 (unregistering): Released all slaves [ 1046.997885][T19736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.004936][T19736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.031513][T19736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.088225][T19736] hsr_slave_0: entered promiscuous mode [ 1047.094849][T19736] hsr_slave_1: entered promiscuous mode [ 1047.108256][T19736] debugfs: 'hsr0' already exists in 'hsr' [ 1047.114160][T19736] Cannot create hsr debugfs directory [ 1047.121335][T19897] Bluetooth: MGMT ver 1.23 [ 1047.247575][T19903] tipc: Enabled bearer , priority 0 [ 1047.261177][T19903] syzkaller0: entered promiscuous mode [ 1047.266990][T19903] syzkaller0: entered allmulticast mode [ 1047.275373][T19736] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1047.290309][T19902] tipc: Resetting bearer [ 1047.301760][T19902] tipc: Disabling bearer [ 1047.331441][T19736] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1047.383667][T19736] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1047.452119][T19736] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1047.588790][T19736] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1047.604020][T19736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1047.616162][T19736] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1047.628580][T19736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1047.638100][T19736] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1047.653406][T19736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1047.671322][T19736] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1047.683989][T19736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1047.829228][T19736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1047.863757][T19736] 8021q: adding VLAN 0 to HW filter on device team0 [ 1047.879001][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.886171][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1047.928891][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.936054][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.232869][T19977] netlink: 'syz.4.12212': attribute type 4 has an invalid length. [ 1048.287019][T19981] batman_adv: batadv0: Adding interface: dummy0 [ 1048.301788][T19981] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.355138][T19981] batman_adv: batadv0: Interface activated: dummy0 [ 1048.384140][T19987] batadv0: mtu less than device minimum [ 1048.402905][T19987] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1048.413993][T19987] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1048.424865][T19987] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1048.435557][T19987] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1048.446393][T19987] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1048.457084][T19987] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1048.565099][T19989] xfrm0 speed is unknown, defaulting to 1000 [ 1048.580471][T19993] netlink: 'syz.3.12214': attribute type 28 has an invalid length. [ 1048.607299][T19989] lo speed is unknown, defaulting to 1000 [ 1048.619394][T19993] tipc: New replicast peer: 255.255.255.255 [ 1048.633423][T19993] tipc: Enabled bearer , priority 5 [ 1048.708157][T19736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.774707][T19736] veth0_vlan: entered promiscuous mode [ 1048.835524][T19736] veth1_vlan: entered promiscuous mode [ 1048.885952][ T4939] Bluetooth: hci1: command tx timeout [ 1049.087437][T19736] veth0_macvtap: entered promiscuous mode [ 1049.104683][T19736] veth1_macvtap: entered promiscuous mode [ 1049.139320][T20017] syzkaller0: entered promiscuous mode [ 1049.161434][T20017] syzkaller0: entered allmulticast mode [ 1049.197213][T20022] tipc: Started in network mode [ 1049.202154][T20022] tipc: Node identity 3278ce9e92a9, cluster identity 4711 [ 1049.222844][T20022] tipc: Enabled bearer , priority 0 [ 1049.244982][T20017] IPVS: set_ctl: invalid protocol: 4130 172.20.20.170:20001 [ 1049.260609][T20031] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1049.285361][T20017] tipc: Resetting bearer [ 1049.331881][T20017] tipc: Disabling bearer [ 1049.352949][T19736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1049.393831][T19736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1049.427087][T15920] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.447815][T15920] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.479937][T15920] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.514843][T15920] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.575041][T20061] net_ratelimit: 13 callbacks suppressed [ 1049.575058][T20061] openvswitch: netlink: Actions may not be safe on all matching packets [ 1049.637682][ T9988] tipc: Node number set to 3627264548 [ 1049.690660][ T8342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.711729][ T8342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.737907][T20073] __nla_validate_parse: 9 callbacks suppressed [ 1049.737925][T20073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12236'. [ 1049.786369][T15921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.799516][T15921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.837816][T20073] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1049.852251][T20073] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12236'. [ 1049.987705][T20086] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12240'. [ 1050.013740][T20089] x_tables: duplicate underflow at hook 1 [ 1050.016265][T20086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12240'. [ 1050.031358][T20092] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12238'. [ 1050.072082][T20086] veth3: entered allmulticast mode [ 1050.197793][T20100] bridge0: port 3(vlan2) entered blocking state [ 1050.212447][T20100] bridge0: port 3(vlan2) entered disabled state [ 1050.216254][T20097] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1050.231903][T20100] vlan2: entered allmulticast mode [ 1050.240814][ T9988] IPVS: starting estimator thread 0... [ 1050.247586][T20100] geneve0: entered allmulticast mode [ 1050.264485][T20100] vlan2: entered promiscuous mode [ 1050.276901][T20100] geneve0: entered promiscuous mode [ 1050.346762][T20104] IPVS: using max 68 ests per chain, 163200 per kthread [ 1050.357102][T20111] tipc: Can't bind to reserved service type 1 [ 1050.421021][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1050.430812][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1050.440613][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1050.454149][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1050.461887][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1050.534856][T20127] block nbd0: reconnected socket [ 1050.534873][ T4939] block nbd0: Receive control failed (result -107) [ 1050.560061][T20127] netlink: 'syz.1.12250': attribute type 13 has an invalid length. [ 1050.678133][T20133] netlink: 'syz.0.12251': attribute type 9 has an invalid length. [ 1050.694913][T20133] netlink: 186364 bytes leftover after parsing attributes in process `syz.0.12251'. [ 1050.965908][ T4939] Bluetooth: hci1: command tx timeout [ 1051.020247][T20115] xfrm0 speed is unknown, defaulting to 1000 [ 1051.028979][T20115] lo speed is unknown, defaulting to 1000 [ 1051.220746][T20166] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12258'. [ 1051.232349][T20167] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12258'. [ 1051.423476][T20176] x_tables: duplicate underflow at hook 2 [ 1051.430698][T20173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12260'. [ 1051.441869][T20176] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.12259'. [ 1051.646643][T20187] tipc: Enabled bearer , priority 0 [ 1051.701181][T20187] syzkaller0: entered promiscuous mode [ 1051.708319][T20187] syzkaller0: entered allmulticast mode [ 1051.714858][T20187] tipc: Resetting bearer [ 1051.740860][T20186] tipc: Resetting bearer [ 1051.951438][T20186] tipc: Disabling bearer [ 1052.060851][T20115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.069521][T20115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.077829][T20115] bridge_slave_0: entered allmulticast mode [ 1052.084984][T20115] bridge_slave_0: entered promiscuous mode [ 1052.093649][T20115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.101184][T20115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.116309][T20115] bridge_slave_1: entered allmulticast mode [ 1052.124304][T20115] bridge_slave_1: entered promiscuous mode [ 1052.231157][T20115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.265478][T20115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.315177][T20115] team0: Port device team_slave_0 added [ 1052.340440][T20238] netlink: 'syz.1.12277': attribute type 1 has an invalid length. [ 1052.353327][T20115] team0: Port device team_slave_1 added [ 1052.445952][T20238] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1052.454503][T20115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.484850][T20115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.525979][ T4939] Bluetooth: hci2: command tx timeout [ 1052.545779][T20115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.574868][T20249] bond0: (slave bond_slave_1): Releasing backup interface [ 1052.604920][T20115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1052.633270][T20115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.710358][T20115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1052.743172][T20251] syzkaller0: entered promiscuous mode [ 1052.749582][T20251] syzkaller0: entered allmulticast mode [ 1052.831025][ T1132] ------------[ cut here ]------------ [ 1052.836590][ T1132] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band [ 1052.850397][ T1132] WARNING: net/mac80211/tx.c:757 at ieee80211_tx_h_rate_ctrl+0xbd5/0x1760, CPU#0: kworker/u8:7/1132 [ 1052.861347][ T1132] Modules linked in: [ 1052.865269][ T1132] CPU: 0 UID: 0 PID: 1132 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 1052.874808][ T1132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1052.884930][ T1132] Workqueue: events_unbound cfg80211_wiphy_work [ 1052.886112][T20115] hsr_slave_0: entered promiscuous mode [ 1052.891349][ T1132] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 1052.903339][ T1132] Code: bf 09 00 00 48 8b 44 24 10 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 08 b8 a3 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 dd 01 00 00 e8 a5 b3 a3 f6 48 [ 1052.921397][T20115] hsr_slave_1: entered promiscuous mode [ 1052.923011][ T1132] RSP: 0018:ffffc900057874a0 EFLAGS: 00010293 [ 1052.934621][ T1132] RAX: ffffffff8b224258 RBX: ffffffff90430cd0 RCX: 0000000000000005 [ 1052.942676][ T1132] RDX: ffff88806a8fd704 RSI: ffff88805012d998 RDI: ffffffff90430cd0 [ 1052.945354][T20115] debugfs: 'hsr0' already exists in 'hsr' [ 1052.950696][ T1132] RBP: ffffc90005787610 R08: ffff88803cc52abf R09: 1ffff1100798a557 [ 1052.950714][ T1132] R10: dffffc0000000000 R11: ffffed100798a558 R12: ffff88806a8fd704 [ 1052.950725][ T1132] R13: 0000000000000001 R14: ffff88805012d998 R15: dffffc0000000000 [ 1052.950735][ T1132] FS: 0000000000000000(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 1052.950748][ T1132] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1052.950766][ T1132] CR2: 00007f0959dadac0 CR3: 00000000482de000 CR4: 00000000003526f0 [ 1052.950780][ T1132] Call Trace: [ 1052.950789][ T1132] [ 1052.950803][ T1132] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1053.015833][T20115] Cannot create hsr debugfs directory [ 1053.016473][ T1132] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 1053.028015][ T1132] invoke_tx_handlers_late+0xb5/0x1830 [ 1053.033511][ T1132] ? sta_info_get+0x2ec/0x300 [ 1053.038499][ T1132] ? invoke_tx_handlers_early+0xa30/0x1cf0 [ 1053.044342][ T1132] ieee80211_tx+0x2d7/0x4b0 [ 1053.048942][ T1132] ? __pfx_ieee80211_tx+0x10/0x10 [ 1053.053996][ T1132] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 1053.059603][ T1132] ? ieee80211_xmit+0x2e5/0x3c0 [ 1053.064477][ T1132] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 1053.070551][ T1132] __ieee80211_tx_skb_tid_band+0x50f/0x680 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1053.076409][ T1132] ? ieee80211_scan_state_send_probe+0x4e6/0xa00 [ 1053.082850][ T1132] ieee80211_scan_state_send_probe+0x5b3/0xa00 [ 1053.089120][ T1132] ieee80211_scan_work+0x488/0x1ab0 [ 1053.094350][ T1132] cfg80211_wiphy_work+0x29e/0x420 [ 1053.099564][ T1132] ? process_scheduled_works+0xa20/0x14e0 [ 1053.105322][ T1132] process_scheduled_works+0xa8e/0x14e0 [ 1053.110967][ T1132] ? __pfx_process_scheduled_works+0x10/0x10 [ 1053.117006][ T1132] ? do_raw_spin_lock+0x12b/0x2f0 [ 1053.122140][ T1132] ? assign_work+0x3cf/0x5d0 [ 1053.126813][ T1132] worker_thread+0xa47/0xfb0 [ 1053.131433][ T1132] ? __kthread_parkme+0x71/0x1f0 [ 1053.136454][ T1132] kthread+0x388/0x470 [ 1053.140550][ T1132] ? __pfx_worker_thread+0x10/0x10 [ 1053.145760][ T1132] ? __pfx_kthread+0x10/0x10 [ 1053.150367][ T1132] ret_from_fork+0x514/0xb70 [ 1053.155032][ T1132] ? __pfx_ret_from_fork+0x10/0x10 [ 1053.160221][ T1132] ? __switch_to+0xc89/0x1420 [ 1053.164928][ T1132] ? __pfx_kthread+0x10/0x10 [ 1053.169584][ T1132] ret_from_fork_asm+0x1a/0x30 [ 1053.174375][ T1132] [ 1053.177503][ T1132] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1053.184796][ T1132] CPU: 0 UID: 0 PID: 1132 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 1053.194350][ T1132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1053.204424][ T1132] Workqueue: events_unbound cfg80211_wiphy_work [ 1053.210700][ T1132] Call Trace: [ 1053.214006][ T1132] [ 1053.216974][ T1132] vpanic+0x56c/0xa60 [ 1053.220990][ T1132] ? __pfx__printk+0x10/0x10 [ 1053.225576][ T1132] ? __pfx_vpanic+0x10/0x10 [ 1053.230061][ T1132] ? is_bpf_text_address+0x292/0x2b0 [ 1053.235338][ T1132] ? is_bpf_text_address+0x26/0x2b0 [ 1053.240652][ T1132] panic+0xc5/0xd0 [ 1053.244389][ T1132] ? __pfx_panic+0x10/0x10 [ 1053.248808][ T1132] ? ret_from_fork_asm+0x1a/0x30 [ 1053.253905][ T1132] __warn+0x315/0x4c0 [ 1053.257960][ T1132] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 1053.263751][ T1132] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 1053.269551][ T1132] __report_bug+0x331/0x530 [ 1053.274147][ T1132] ? arch_stack_walk+0x11b/0x150 [ 1053.279438][ T1132] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 1053.285262][ T1132] ? __pfx___report_bug+0x10/0x10 [ 1053.290372][ T1132] ? stack_depot_save_flags+0x33/0x800 [ 1053.295850][ T1132] report_bug_entry+0x19a/0x290 [ 1053.300698][ T1132] ? ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 1053.306491][ T1132] ? ieee80211_tx_h_rate_ctrl+0xc4b/0x1760 [ 1053.312301][ T1132] handle_bug+0xce/0x200 [ 1053.316534][ T1132] exc_invalid_op+0x1a/0x50 [ 1053.321021][ T1132] asm_exc_invalid_op+0x1a/0x20 [ 1053.325870][ T1132] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 1053.332315][ T1132] Code: bf 09 00 00 48 8b 44 24 10 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 08 b8 a3 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 dd 01 00 00 e8 a5 b3 a3 f6 48 [ 1053.352190][ T1132] RSP: 0018:ffffc900057874a0 EFLAGS: 00010293 [ 1053.358263][ T1132] RAX: ffffffff8b224258 RBX: ffffffff90430cd0 RCX: 0000000000000005 [ 1053.366244][ T1132] RDX: ffff88806a8fd704 RSI: ffff88805012d998 RDI: ffffffff90430cd0 [ 1053.374225][ T1132] RBP: ffffc90005787610 R08: ffff88803cc52abf R09: 1ffff1100798a557 [ 1053.382190][ T1132] R10: dffffc0000000000 R11: ffffed100798a558 R12: ffff88806a8fd704 [ 1053.390256][ T1132] R13: 0000000000000001 R14: ffff88805012d998 R15: dffffc0000000000 [ 1053.398242][ T1132] ? ieee80211_tx_h_rate_ctrl+0xc38/0x1760 [ 1053.404066][ T1132] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1053.410169][ T1132] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 1053.416331][ T1132] invoke_tx_handlers_late+0xb5/0x1830 [ 1053.421797][ T1132] ? sta_info_get+0x2ec/0x300 [ 1053.426467][ T1132] ? invoke_tx_handlers_early+0xa30/0x1cf0 [ 1053.432350][ T1132] ieee80211_tx+0x2d7/0x4b0 [ 1053.437015][ T1132] ? __pfx_ieee80211_tx+0x10/0x10 [ 1053.442029][ T1132] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 1053.447499][ T1132] ? ieee80211_xmit+0x2e5/0x3c0 [ 1053.452336][ T1132] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 1053.458310][ T1132] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 1053.464102][ T1132] ? ieee80211_scan_state_send_probe+0x4e6/0xa00 [ 1053.470418][ T1132] ieee80211_scan_state_send_probe+0x5b3/0xa00 [ 1053.476584][ T1132] ieee80211_scan_work+0x488/0x1ab0 [ 1053.481776][ T1132] cfg80211_wiphy_work+0x29e/0x420 [ 1053.486891][ T1132] ? process_scheduled_works+0xa20/0x14e0 [ 1053.492691][ T1132] process_scheduled_works+0xa8e/0x14e0 [ 1053.498233][ T1132] ? __pfx_process_scheduled_works+0x10/0x10 [ 1053.504195][ T1132] ? do_raw_spin_lock+0x12b/0x2f0 [ 1053.509219][ T1132] ? assign_work+0x3cf/0x5d0 [ 1053.513794][ T1132] worker_thread+0xa47/0xfb0 [ 1053.518377][ T1132] ? __kthread_parkme+0x71/0x1f0 [ 1053.523304][ T1132] kthread+0x388/0x470 [ 1053.527354][ T1132] ? __pfx_worker_thread+0x10/0x10 [ 1053.532451][ T1132] ? __pfx_kthread+0x10/0x10 [ 1053.537027][ T1132] ret_from_fork+0x514/0xb70 [ 1053.541615][ T1132] ? __pfx_ret_from_fork+0x10/0x10 [ 1053.546711][ T1132] ? __switch_to+0xc89/0x1420 [ 1053.551381][ T1132] ? __pfx_kthread+0x10/0x10 [ 1053.555955][ T1132] ret_from_fork_asm+0x1a/0x30 [ 1053.560710][ T1132] [ 1053.564018][ T1132] Kernel Offset: disabled [ 1053.568325][ T1132] Rebooting in 86400 seconds..