last executing test programs: 12m38.800784131s ago: executing program 3 (id=8950): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x5}, [@printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb0}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x90) 12m38.673575145s ago: executing program 3 (id=9046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018010000252073250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006d0001000000000000000000003c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000180034801400"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0x0, 0x9}, {0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4080) 12m38.171050977s ago: executing program 3 (id=9054): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) syz_emit_ethernet(0x7c, &(0x7f0000000000)={@random="6c38d3990270", @empty, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x4, 0x1, 0x2}}, {@llc_tr={0x11, {@snap={0xab, 0x1, "e5", "02231e", 0xf7, "25bf5cee8d01b2cb61e97431665f58c03e5af4d86be3c23fd9dd714390ea137ca5d838328aab5e2618593400ae04289529ee294f8ef1b2e5a6f442df3237d59774257bfeb6a93924b884c805b72173cd6ee93665cdcd4610e0da0773abbb"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd3}]}, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) (async) syz_emit_ethernet(0x7c, &(0x7f0000000000)={@random="6c38d3990270", @empty, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x4, 0x1, 0x2}}, {@llc_tr={0x11, {@snap={0xab, 0x1, "e5", "02231e", 0xf7, "25bf5cee8d01b2cb61e97431665f58c03e5af4d86be3c23fd9dd714390ea137ca5d838328aab5e2618593400ae04289529ee294f8ef1b2e5a6f442df3237d59774257bfeb6a93924b884c805b72173cd6ee93665cdcd4610e0da0773abbb"}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd3}]}, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 12m38.122484108s ago: executing program 3 (id=9055): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x83}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4086}, 0x240020d4) (async) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x5b}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) 12m38.005739296s ago: executing program 3 (id=9056): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x5}, [@printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb8}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x90) 12m37.893960673s ago: executing program 3 (id=9059): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0x8, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff1, 0xfff1}}}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYRESOCT=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) recvmmsg(0xffffffffffffffff, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0xb7de}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000000880)=""/67, 0x43}], 0x2}, 0x1}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/43, 0x2b}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c80)=""/176, 0xb0}, {&(0x7f0000000d40)=""/65, 0x41}, {&(0x7f0000000dc0)=""/103, 0x67}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000ec0)=""/33, 0x21}], 0x1}, 0x10001}], 0x5, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe00000000008"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c00060000000000000000000800"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000600)=0x1) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003700e409000000000000020080"], 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYRES64, @ANYRES8=r4, @ANYRESOCT=r2, @ANYRES64=r6], 0x64}, 0x1, 0x0, 0x0, 0x480d4}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000100001000000000000000001060000000000001100010000000000000000000600000a00e7d9600900000000000000be2126e6bcc40bc525ebe02b1ea1619a3ba585a5bbe3bee6311fdbf5b83e1fde3cc7bf8c36d2554d6ee858cb035ca1289617c89eb726500a"], 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='ipvlan1\x00', 0xbdbd, 0x1, 0x2}) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 12m22.747552035s ago: executing program 32 (id=9059): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0x8, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff1, 0xfff1}}}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYRESOCT=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) recvmmsg(0xffffffffffffffff, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0xb7de}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000000880)=""/67, 0x43}], 0x2}, 0x1}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/43, 0x2b}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c80)=""/176, 0xb0}, {&(0x7f0000000d40)=""/65, 0x41}, {&(0x7f0000000dc0)=""/103, 0x67}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000ec0)=""/33, 0x21}], 0x1}, 0x10001}], 0x5, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe00000000008"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c00060000000000000000000800"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000600)=0x1) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003700e409000000000000020080"], 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYRES64, @ANYRES8=r4, @ANYRESOCT=r2, @ANYRES64=r6], 0x64}, 0x1, 0x0, 0x0, 0x480d4}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000100001000000000000000001060000000000001100010000000000000000000600000a00e7d9600900000000000000be2126e6bcc40bc525ebe02b1ea1619a3ba585a5bbe3bee6311fdbf5b83e1fde3cc7bf8c36d2554d6ee858cb035ca1289617c89eb726500a"], 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='ipvlan1\x00', 0xbdbd, 0x1, 0x2}) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 4m10.39279259s ago: executing program 4 (id=14418): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x5}, [@printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}], {0x95, 0x0, 0x0, 0xffffff85}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x90) 3m50.636113618s ago: executing program 4 (id=14420): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async, rerun: 32) r1 = epoll_create1(0x0) epoll_pwait(r1, 0xfffffffffffffffc, 0x0, 0x8000002, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x54}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x48) 3m50.518779705s ago: executing program 4 (id=14582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) 3m50.357670676s ago: executing program 4 (id=14585): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) sendmsg$inet(r0, &(0x7f00000052c0)={&(0x7f0000003fc0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000050c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x18}, 0x200040c4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3, 0x9}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}, {0x0, [0x0, 0x2e, 0x61, 0x2e, 0x5f]}}, 0x0, 0x4f, 0x0, 0x2}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000500)='GPL\x00', 0x5, 0x11, &(0x7f00000017c0)=""/4098}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x4, &(0x7f0000000b40)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000680)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff000) recvmmsg(r3, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x40000030, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x3) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000000100)={0x5f91, 0xc8, 0x8, 0x4, 0x4}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018008000100666962001c00028008000240000000020800014000000000080803400000002f0900010073797a30000000000900020073797a32"], 0x80}}, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) 3m49.262347849s ago: executing program 4 (id=14598): r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000009520e7ffffff0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x24}, 0x94) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0218000010000000000000000000000003000600000000000200000400000000000000000000000008001200000000000000000000000000170000000000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000000030005000000000002"], 0x80}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xe}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38}}) r4 = socket$inet(0x2, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) 3m48.221419586s ago: executing program 4 (id=14606): socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'dummy0\x00', 0x8000}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @mcast1, 0x4}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474804000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56da4dc46dc2767bbe00"}, 0x6c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r2, 0x800) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x90}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x200) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newqdisc={0x17c, 0x24, 0x4ee4e6a52ff56541, 0x170bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xd}, {0xffe5, 0x10}}, [@TCA_STAB={0x158, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xff, 0x571b, 0x65, 0x1, 0x5, 0x2, 0x4}}, {0xc, 0x2, [0x522, 0xf, 0x81, 0x0]}}, {{0x1c, 0x1, {0x9, 0x1, 0x3, 0x5, 0x0, 0x7fffffff, 0x4, 0x7}}, {0x12, 0x2, [0x0, 0x2, 0x8, 0x2, 0x8000, 0x158a, 0x0]}}, {{0x1c, 0x1, {0xfa, 0x80, 0x2, 0xfff, 0x0, 0x8, 0x47, 0x8}}, {0x14, 0x2, [0x5, 0x3, 0x8001, 0x9, 0x2, 0xfbd8, 0x6, 0x1]}}, {{0x1c, 0x1, {0x6, 0xa1, 0x7ff, 0x401, 0x3, 0x5, 0x8, 0x8}}, {0x14, 0x2, [0x8, 0x8, 0x8000, 0x8d9, 0x4, 0x200, 0x2, 0xff80]}}, {{0x1c, 0x1, {0x5, 0x9, 0x2, 0x1b47, 0x2, 0x81, 0x5, 0x3}}, {0xa, 0x2, [0xfff9, 0x101, 0xff]}}, {{0x1c, 0x1, {0xbd, 0x0, 0x2, 0x44, 0x0, 0x2, 0x9, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x55, 0x9, 0x81, 0xfff, 0x2, 0x8001, 0x9, 0x3}}, {0xa, 0x2, [0xfffd, 0x8, 0x8]}}, {{0x1c, 0x1, {0x5, 0x4c, 0x42, 0x8, 0x0, 0x0, 0xe0000, 0x3}}, {0xa, 0x2, [0x31b8, 0x9, 0x6]}}]}]}, 0x17c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x4000004, 0x20000001, 0x4, 0x2}, 0x1, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}}, 0x0) socket$unix(0x1, 0x2, 0x0) 3m32.564403664s ago: executing program 33 (id=14606): socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'dummy0\x00', 0x8000}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @mcast1, 0x4}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474804000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56da4dc46dc2767bbe00"}, 0x6c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r2, 0x800) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x90}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x200) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newqdisc={0x17c, 0x24, 0x4ee4e6a52ff56541, 0x170bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xd}, {0xffe5, 0x10}}, [@TCA_STAB={0x158, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xff, 0x571b, 0x65, 0x1, 0x5, 0x2, 0x4}}, {0xc, 0x2, [0x522, 0xf, 0x81, 0x0]}}, {{0x1c, 0x1, {0x9, 0x1, 0x3, 0x5, 0x0, 0x7fffffff, 0x4, 0x7}}, {0x12, 0x2, [0x0, 0x2, 0x8, 0x2, 0x8000, 0x158a, 0x0]}}, {{0x1c, 0x1, {0xfa, 0x80, 0x2, 0xfff, 0x0, 0x8, 0x47, 0x8}}, {0x14, 0x2, [0x5, 0x3, 0x8001, 0x9, 0x2, 0xfbd8, 0x6, 0x1]}}, {{0x1c, 0x1, {0x6, 0xa1, 0x7ff, 0x401, 0x3, 0x5, 0x8, 0x8}}, {0x14, 0x2, [0x8, 0x8, 0x8000, 0x8d9, 0x4, 0x200, 0x2, 0xff80]}}, {{0x1c, 0x1, {0x5, 0x9, 0x2, 0x1b47, 0x2, 0x81, 0x5, 0x3}}, {0xa, 0x2, [0xfff9, 0x101, 0xff]}}, {{0x1c, 0x1, {0xbd, 0x0, 0x2, 0x44, 0x0, 0x2, 0x9, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x55, 0x9, 0x81, 0xfff, 0x2, 0x8001, 0x9, 0x3}}, {0xa, 0x2, [0xfffd, 0x8, 0x8]}}, {{0x1c, 0x1, {0x5, 0x4c, 0x42, 0x8, 0x0, 0x0, 0xe0000, 0x3}}, {0xa, 0x2, [0x31b8, 0x9, 0x6]}}]}]}, 0x17c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x4000004, 0x20000001, 0x4, 0x2}, 0x1, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}}, 0x0) socket$unix(0x1, 0x2, 0x0) 4.616706511s ago: executing program 0 (id=16788): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000000c0)=0x7b, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x14}}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0xbdbf, 0x8, 0x6e, 0x5}, {0x1, 0xd, 0x8, 0x3}, {0x7, 0x83, 0x3, 0x6}, {0xffff, 0xae, 0x8, 0x1}]}, 0x10) (async) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)=@buf) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), r1) 4.458869874s ago: executing program 0 (id=16791): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffe, @loopback, 0x74ec}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xfffffffe}, 0x1c, 0x0, 0x4}}, {{0x0, 0x0, 0x0}}], 0x2, 0x240c089d) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0x9, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7f, 0x9, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14028010}, 0x20004000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r9, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) sendfile(r9, r10, 0x0, 0xffffffff000) recvmmsg(r9, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x40000030, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f00000001c0)=0x3) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xe, 0x8}, {0x8, 0xa}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x3ff, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_DELETE_ELEM(0x4, 0x0, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0x40, 0x0, 0x8, 0x3c, @loopback, @dev={0xfe, 0x80, '\x00', 0x30}, 0x8, 0x10, 0xc, 0x2}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex=r12, 0xd, 0x0, 0x200, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 3.500164242s ago: executing program 5 (id=16796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000001c0)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000100)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000a80)="683f0057950d7678de7263988b02ec9bdcc8", 0x12}], 0x3) 2.544744428s ago: executing program 1 (id=16801): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c0000080001"], 0x1c}}, 0xc000) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f00000002c0)={&(0x7f0000000140)=[{0x0, 0x0, 0x6, 0xbc5, 0x78, 0x80000000, 0x1ee4, 0x2}, {0x1, 0x0, 0x14, 0x9, 0x10001, 0x10000, 0xb, 0x3}], 0x2, 0x38, 0x0, 0xaf}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRESHEX=r1, @ANYBLOB="00f900"], 0x1c}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x812, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d00792984"], 0x4c}}, 0x0) 2.525176252s ago: executing program 6 (id=16802): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000004000000000000000000000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="000000eaffffe8aaa26a8b8b8e3f8ffaffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000001"], 0x48) (async) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="000000eaffffe8aaa26a8b8b8e3f8ffaffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000001"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = socket(0x2a, 0x2, 0xfffffffc) connect$bt_sco(r4, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000240), 0x4) (async) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000240), 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}]}, 0xa0}}, 0x20000000) (async) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}]}, 0xa0}}, 0x20000000) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000280)=0x7fff, 0x4) 2.370251611s ago: executing program 1 (id=16803): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000000", @ANYRES32, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000240)=0x14, 0x4) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 2.175864605s ago: executing program 6 (id=16805): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000380)={0x7, '\x00', {0xf1}, 0xe5}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000340)=0xa80, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800dae3927e29623f0c9393b01bf3b5d5a20000020000000f000000010000130900"], 0x0, 0x32}, 0x28) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) r5 = socket(0x23, 0x2, 0xfffffff9) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000002a40)={&(0x7f0000002700)={0x2, 0x4e21, @local}, 0x10, 0x0}, 0x819f68284167e03c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000001000000000000abbeffdbdf25077c0000080001800400dd800800038004000180"], 0x24}}, 0xc010) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000007b40)=@deltfilter={0x3844, 0x2d, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x10, 0x8}, {0x7, 0x4}, {0x6, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_matchall={{0xd}, {0x52c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x6}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xe}}, @TCA_MATCHALL_ACT={0x74, 0x2, [@m_sample={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x6, 0x6, 0x6, 0x10000}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1000, 0x9, 0x1, 0x7, 0x8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}]}, {0xa, 0x6, "cb8dfa1356d9"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_ACT={0x49c, 0x2, [@m_nat={0xe8, 0x1e, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x4, 0x6, 0x5af, 0xc7}, @broadcast, @private=0xa010101, 0xffffffff}}]}, {0x95, 0x6, "abec864cd42e4fb6378322c5eb73d36c61b5af5ad652021a3e4ff78525fe875a55cae9141993305ca32e0753846001848b2113e25a0ccd77ccee21b03658824771e3cf79bfd3eff8558a4ef76f4f124f1b45be75b4714b716eda31a5a102458bca2fe52b8ee4a50942f62b41ca6f13d96b0cfe74062940abd71da73c6ba9a677f794a60a7e165ea0d68cfd3acf566c2f87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7}}}}, @m_ct={0xa0, 0x18, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private1}, @TCA_CT_ZONE={0x6, 0x4, 0x101}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}]}, {0x44, 0x6, "27513107e98ce13f77a5e2a022b8b2f281f60b27a7b717a166871c932cfb0a272fa236433cd7d5677fae7efc2636ba5f575abf05cec00db88b4b16e4e3c7a271"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_bpf={0x98, 0x7, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x7, 0x3, 0x8, 0x9}}]}, {0x57, 0x6, "5585478ee7de27ae6d9d97b69495d83bfe997a727286d4d4050b912e62add16f130236afb50f94b274bb79a8c5419cacb5dfc0cf9932a43e9cdf5bc1ad2a42dd72b89b7c6b9da92cd099e1f7c80107b0ed7bc0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x88, 0x6, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4b, 0x6, "e81219e905ab8c1a943c0742839a07a8b2164598915451b69a18aa5fa3e674f5a1b25337dfe8844de8a21580e72819972c6a07d24d81e07a2e0d2fbb9d6ea7b0ca628ca74b0442"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0xe8, 0x5, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}]}, {0xad, 0x6, "09415d0c8d6de2091890d1125d61d140dae79a91341ba6c131199ef62290d7f2efca49cd5d7d2bf1bc66a5010243cd3393086a1f0c9b714380d2097871a91c8388c21085ee2b37cefcb33fe71e83ac3321a041fc2af1c4616a88b056e911fd8625d5894f006e920c5aa3f1421a62ae41ecdf9796b7b538a6e29e0935b50ab55a564bb3dae98b9d11e6e167829f19f6bff261577244496fa249d691ba19174333e9da68769f7be032f6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0xa8, 0x10, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x47c2, 0x1, 0x2, 0x4, 0x247c}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x800, 0x1, 0x6, 0x9, 0x1}, 0x200}}]}, {0x40, 0x6, "c07eb25915da90a4f634965b7ef5a0852ebffb6b1f25726220b9d167b03027de46b43a1d57e8c0edc5b2416e3914bb248e3e61834d136b3df3fb1120"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x60, 0x20, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x6, 0x4, 0x44be, 0xfffffff9}, 0xd}}]}, {0x10, 0x6, "9f70b3338d97d4fef5c2d5ff"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x7}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xfff1}}]}}, @TCA_CHAIN={0x8, 0xb, 0x9be}, @filter_kind_options=@f_route={{0xa}, {0x2a34, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x8, 0xe}}, @TCA_ROUTE4_IIF={0x8, 0x4, r9}, @TCA_ROUTE4_ACT={0x2a0c, 0x6, [@m_police={0x1558, 0x18, 0x0, 0x0, {{0xb}, {0x14d0, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffa, 0x2, 0x5, 0x148c040a, 0x6c, 0x5, 0x3ff, 0xfffffff1, 0x2, 0xcba, 0x7, 0x91, 0x874, 0x6, 0x0, 0x0, 0x7, 0x3, 0x3, 0x7, 0x7, 0x8, 0x7, 0x9, 0x800, 0x710, 0x1, 0x80000001, 0x8, 0x3, 0x98c, 0x1000, 0x5, 0xfffffff9, 0x1c, 0x9, 0x80000000, 0x0, 0x7, 0x3, 0x83c1, 0x4f, 0x7fffffff, 0x4, 0x3, 0x5, 0xe, 0x4, 0xf, 0xfff, 0xa, 0x4, 0x5, 0xfffffffa, 0x81, 0x3, 0x1, 0x7, 0x1, 0x0, 0xb, 0x1, 0x6, 0x2, 0x8, 0x5, 0x0, 0x6, 0x4, 0xdf, 0x9, 0xffffffff, 0x6, 0x8, 0x2, 0x1e, 0xfff, 0x4, 0x5, 0xffffffff, 0x8, 0x8, 0x1, 0x9ad6, 0x6, 0x1, 0xffff0000, 0x7, 0x3, 0x9, 0x1, 0x2, 0x5, 0x8, 0x5, 0x9, 0x5, 0x8, 0x2, 0x6, 0xfd07, 0x80000001, 0x2773, 0x2, 0x5, 0x200, 0x7, 0x46, 0xabe, 0x1, 0xae, 0x1, 0x72, 0x1, 0x9, 0x6c5b, 0x8, 0xff, 0xc6e, 0xfffffff9, 0x2, 0x2, 0x7fffffff, 0xffff, 0x80000001, 0x401, 0x0, 0x1, 0x9, 0xf11, 0x0, 0x8, 0x7fff, 0x5, 0x5, 0xfffffffb, 0x9, 0xfffffffa, 0x8, 0x3, 0x4499, 0x1985a81c, 0x9, 0x6, 0x5, 0x8, 0x4, 0x1, 0x3, 0x8, 0x2, 0x850, 0x4, 0x7, 0x2, 0x5, 0x2, 0x4, 0x7f, 0xffffffff, 0x1, 0x7f, 0x4, 0x62, 0x98c, 0x7fff, 0x3, 0x1, 0x28b2, 0x6, 0x3, 0x6, 0x0, 0x3, 0xa2b, 0x5, 0x80000001, 0x5, 0x10001, 0x9, 0xffff, 0x100, 0x6c, 0x5, 0x0, 0xfe, 0x2, 0x1f4a5e55, 0x3, 0x80000000, 0x400, 0x6, 0x9, 0x592e, 0x40, 0x1ff, 0x400, 0x1000, 0xfffffffb, 0x3, 0x2, 0x80, 0x5, 0x93, 0x401, 0x4, 0x3, 0x0, 0x2, 0x7, 0x54, 0x80, 0x1000, 0x6, 0x7, 0xff5, 0x84, 0x2, 0x4, 0x7fffffff, 0x5, 0x5, 0x0, 0x0, 0x6, 0x7, 0x0, 0x2359, 0x401, 0x2, 0x100, 0x4, 0x84de, 0xd8bf, 0x6, 0x3, 0x17, 0x4, 0x80e, 0x86f6, 0x7, 0x4, 0x6, 0xf3, 0x6, 0xa71a, 0xd, 0x5, 0x7ff, 0x7, 0x1000, 0x6, 0x0, 0x6, 0x410, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x3, 0x81, 0x185ec3db, 0x3, 0x1, 0x2, 0x10001, 0x6, 0x3ff, 0xffff, 0xd70, 0x34c638c9, 0x5, 0x8, 0x1ff, 0x9, 0xffffffeb, 0x3ff, 0xffffffc0, 0x800, 0x20598417, 0x1, 0x800, 0x8, 0x9, 0x2, 0x2441, 0x8, 0x81, 0x7, 0x1, 0x111, 0x8, 0xfffffff0, 0x800000, 0x800, 0x4, 0x3bd, 0x5, 0x5, 0x22, 0x10001, 0x3, 0xb, 0x0, 0x1000, 0x7, 0x9, 0x4af8347b, 0x0, 0x6, 0x755, 0x8, 0x1ff80, 0x2, 0x6, 0x8, 0x8, 0x1, 0x3, 0xfff, 0x1, 0x28459cf, 0x7, 0xd8, 0x200, 0x7, 0x1, 0xa, 0xe, 0x910, 0x0, 0x200, 0x1, 0xa, 0x2, 0x1, 0x2, 0x60, 0xe7c4, 0x5, 0x7, 0x5, 0x2, 0x7, 0x3, 0x5, 0x10, 0x7fff, 0x5, 0x8, 0x4, 0x0, 0x80000000, 0x8, 0x1, 0x1, 0xffff, 0x800, 0x8, 0x8, 0x3, 0xff, 0x9, 0x4, 0x4, 0xffffffff, 0x1800000, 0x9f8a, 0xe, 0x8, 0x8, 0x4, 0x2006, 0x6, 0x6, 0x8, 0x1, 0xffffffff, 0xffffffff, 0x0, 0xfffffff8, 0x10000, 0x8, 0x10000, 0x553, 0x10001, 0xa5, 0x1, 0xb359, 0x4, 0x1ff, 0x2, 0x7fff, 0x6, 0x5, 0x9, 0x2, 0x2, 0x0, 0xa, 0x0, 0x7, 0xffffffff, 0x1, 0x100, 0x3, 0x74, 0xffffffff, 0x4, 0x101, 0x5, 0x1, 0x2, 0x4, 0x1, 0x7, 0xffff, 0xc5, 0x5, 0x2, 0x1, 0x5, 0x6, 0x0, 0x491, 0x0, 0xe5a2, 0xfa, 0x7, 0x3ff, 0x5, 0x2, 0x800, 0x1, 0x7, 0x2, 0x2, 0x0, 0xfff, 0x101, 0x8001, 0x4, 0x0, 0x4, 0x9, 0x6, 0x7, 0x7fff, 0x3, 0xdb, 0xb6, 0x128, 0x17, 0x5, 0xfffffffd, 0x5, 0x3, 0xcaea, 0x2, 0x1, 0x1000, 0x3, 0xfff, 0x8, 0x80000000, 0x0, 0x8, 0xfffff704, 0x91c, 0x7, 0x7, 0x2, 0x7, 0x7, 0x7, 0x4, 0xe, 0xfffffff8, 0x2, 0x8, 0x1, 0x4, 0xdb, 0x7, 0x10000, 0xd91, 0x5, 0x0, 0xfff, 0x10001, 0x0, 0x6, 0x0, 0x5, 0x1a, 0x2, 0x43, 0x2, 0x9, 0xa, 0x9, 0x4, 0x588a338b, 0x6, 0x0, 0xa, 0xf7c5, 0x78, 0x9, 0x35, 0xd, 0x1, 0xe, 0x401]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5e0}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffffffffff, 0x9, 0x3, 0xc26, {0x58, 0x2, 0x0, 0xfff4, 0xfff7, 0x5}, {0x4, 0xca2b4eb2f9553177, 0x7, 0x8, 0x3, 0x4}, 0x1e34, 0x1, 0xdcc2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0x6, 0xff, 0xb, 0x0, 0x42c, 0x7f, 0x0, 0x1, 0x4, 0x2, 0x0, 0xffffffff, 0x7, 0x2ad, 0x2, 0xb9, 0xfffffffb, 0x7, 0xffff, 0xbb8c, 0x1, 0xb01e, 0x5, 0x7, 0x10001, 0x101, 0x1, 0xfffffff7, 0x6, 0xfffffff7, 0x28, 0x4, 0x89, 0x6, 0x7, 0x8, 0xcf0, 0x0, 0x7, 0x1000, 0x81, 0xfffffe56, 0x9, 0x800, 0x5, 0x7, 0x6, 0x7ff, 0xe670, 0x2, 0x7, 0x2, 0x77c, 0x6, 0x9, 0x7182, 0x7, 0xec42, 0x40, 0x4, 0x0, 0x9, 0x3, 0xf144, 0x8c, 0x1, 0x6, 0x101, 0x9, 0x3, 0x685, 0xa9a, 0x1, 0x5, 0x0, 0x7f, 0x7, 0xffffffaa, 0x8, 0x8000, 0x200, 0x3, 0x9, 0x1, 0x7, 0x68ca, 0x7, 0x6, 0xe, 0x9, 0xe, 0x9, 0x3, 0x8, 0xfffff801, 0x8, 0x9, 0x0, 0x8000, 0x1, 0x7, 0x4, 0x0, 0x4, 0x0, 0x9, 0xfff, 0x1, 0x1, 0xfa, 0x4, 0x0, 0x5, 0x7ff, 0xcb, 0x8, 0x2, 0x372, 0x9, 0x5d, 0x9, 0xfffffffe, 0xfffffffa, 0x8, 0x6, 0x2, 0xc, 0x8, 0x3, 0x7, 0x1, 0xfffff000, 0xfffffffb, 0xd14d, 0x10, 0x4f5, 0x7, 0x1d3, 0x8, 0x0, 0xc, 0x10000, 0x5, 0x1, 0x2, 0x0, 0xd, 0x8001, 0x9, 0x6, 0x0, 0x6, 0x8, 0x101, 0xfff, 0x6, 0x8, 0x4, 0x5159, 0x7, 0x3, 0x400, 0x18661b98, 0x0, 0xacc, 0x6, 0x1, 0x8, 0x4, 0x7, 0xff, 0x6, 0x0, 0x3, 0x5, 0x200, 0x8, 0x3, 0xc4b, 0x8000, 0x7fffffff, 0x5, 0x4, 0x7, 0xc59, 0x8, 0x8, 0x9, 0x8, 0x6, 0x8000, 0x8, 0xffffff8b, 0x5, 0xffffffe1, 0x3, 0x5, 0x7, 0x3, 0x4, 0xe76, 0x7, 0x3, 0x8770, 0x6, 0x5d, 0x7, 0x5, 0xd2, 0x6, 0x6, 0x1, 0xff, 0xfffffffc, 0x7, 0x5, 0x5, 0xffff, 0x80, 0x4, 0x1, 0x2, 0x1, 0x26, 0x5, 0x6, 0x6, 0x4, 0xd, 0x9, 0x6, 0x3ef64c29, 0x0, 0x3, 0x1, 0xc04b, 0xfffffff7, 0x28d7, 0x7, 0x356, 0x9, 0xb, 0x3, 0x5, 0x2, 0x1000000, 0x5, 0x430d44e5, 0x28d, 0x4, 0x1df2aba7, 0x8, 0xf, 0x7, 0x4]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x9, 0x3317, 0x5, 0x2, 0x8000, 0x6, 0x3, 0x723b, 0x2, 0x4, 0x5, 0x4, 0x5, 0x5, 0xfffff801, 0x5, 0x5, 0x0, 0x9, 0xe0, 0xc, 0x7, 0xffff, 0xffffffff, 0x2, 0x8, 0x4, 0x4, 0x9ff, 0x0, 0x5, 0x101, 0x1, 0x90, 0x0, 0x80000000, 0x3, 0x6, 0x80000000, 0x8, 0x40, 0x6, 0x7fff, 0x4, 0x9, 0xfff, 0x0, 0x1, 0x70000000, 0x9, 0x1, 0x7, 0x1, 0x7f, 0x7, 0x7, 0x5, 0xff, 0x7ff, 0x0, 0x5, 0x80000000, 0x8000, 0x6, 0x7f, 0xfffff801, 0x8, 0x8, 0x9d6, 0x4, 0x5c13, 0x3, 0xe, 0x1ff, 0x3, 0x5, 0x0, 0x8001, 0x0, 0xee2, 0xffff, 0x4, 0xffff, 0xc1, 0x1, 0x2, 0xe3, 0x4, 0x6, 0x5, 0x40, 0xbce0, 0x20000000, 0x401, 0x6e, 0x280000, 0x40, 0xffffffff, 0x8, 0x4, 0x9, 0x8, 0xffffda58, 0x8, 0x2, 0x4, 0xe725, 0xffff, 0x0, 0x5, 0x78f, 0xc87, 0x1, 0x4, 0x8001, 0x3, 0x80d2, 0x2, 0xa9, 0x3e1, 0x7, 0x0, 0x2, 0x4, 0x800, 0x2, 0x8, 0x559, 0xf373, 0x800, 0x5, 0x9, 0x2, 0x0, 0x1, 0x0, 0x1000, 0x9, 0x0, 0x7f, 0x400, 0x10000, 0x8, 0xc, 0x2a, 0x7f, 0x1b, 0x7fff, 0xfffffff7, 0xb8, 0x7, 0x8001, 0x8, 0x40, 0x5, 0x4, 0x3, 0xffff, 0x2, 0x7, 0x280, 0x401, 0x14d2, 0x7, 0xfffffffd, 0x8, 0x5, 0x400, 0x2, 0x10, 0x5, 0xd, 0x401, 0xfc000000, 0xf34f56d5, 0x9, 0x3, 0x0, 0x0, 0x7, 0x80, 0x3, 0x5, 0x4, 0x3, 0x8, 0x0, 0xfffffffb, 0x7, 0x2, 0x7, 0x7, 0x1, 0xc5aa, 0xfffffffd, 0x8, 0x5, 0x2, 0x9, 0x92, 0xc7ee, 0x6, 0x9, 0x6668af53, 0x986, 0x10000, 0x1, 0xa, 0x7, 0x5, 0x0, 0xd, 0xe05, 0x2be, 0x8, 0x1ff, 0x1ff, 0x7, 0x0, 0x200, 0x2, 0x7, 0x7fffffff, 0x8, 0xbe, 0xb9, 0x23e, 0x5, 0xe, 0x40000, 0x0, 0x7, 0x2, 0x6, 0x81, 0x85, 0x2, 0xfffffbad, 0x2, 0x401, 0x0, 0x8001, 0x0, 0x0, 0x1, 0x6, 0x1, 0x5, 0x38, 0x5, 0x8, 0x8000, 0x6, 0x0, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x96, 0x8, 0x3, 0x3, 0x0, 0x4, 0x20c12f21, 0x894, 0x6dad, 0x800000, 0x0, 0x0, 0x5, 0x4, 0x4, 0x4, 0x8857, 0x0, 0x6786, 0xbd, 0x200, 0x3, 0x9, 0x5, 0x5, 0x7, 0x1000000, 0x7, 0x400, 0x8, 0x9, 0x0, 0x5, 0x400, 0x4, 0x0, 0x3ff, 0x5, 0x800, 0x6, 0x37e12f2f, 0x4, 0x8, 0x2, 0x3, 0x800, 0x3, 0x0, 0xfff, 0x9, 0xff, 0x2, 0x7ff, 0x1000, 0xfffffffa, 0x7fff, 0x7, 0x5, 0x7, 0x3, 0xff, 0x6, 0x42, 0x8, 0x3, 0xfffffffc, 0x9, 0xcb, 0x0, 0x4b, 0x1d8, 0x5, 0x6, 0x1, 0xb, 0x9, 0xfffffff7, 0xfff, 0x7, 0x6, 0x9, 0x9124, 0xee43, 0x9, 0x100, 0x5, 0x0, 0x5, 0x0, 0x400, 0x6, 0x800, 0x40, 0x7, 0x2, 0x2aa, 0x7fff, 0x8, 0x804b, 0x8000, 0xfffffff7, 0x5, 0x7, 0x7f, 0x9, 0x5, 0x1, 0x2, 0x6, 0x200, 0xb, 0x5, 0x4, 0x7, 0x7ff, 0x2, 0xfffffff8, 0x0, 0x33a, 0x40000, 0x6, 0xa90, 0x7, 0x0, 0x3, 0x8000, 0x7, 0x5, 0x400, 0x4, 0x800, 0x2, 0x7, 0xe, 0x5, 0xf951, 0x2, 0x7ff, 0x5, 0x1ff, 0x5, 0x143a, 0xff, 0xa, 0x1a97, 0x9, 0x5, 0xe, 0x3, 0x6, 0x3, 0xb, 0x2, 0xfc, 0x9, 0x4, 0x8, 0x3e2f, 0xa, 0x8, 0x0, 0xfffffff8, 0x1, 0x10000, 0xfffffffa, 0x3, 0x4, 0xe31a, 0x6, 0x0, 0x9, 0xfffffff3, 0x8, 0x0, 0x5, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x63, 0x7, 0x2, 0x8, 0xfffff6fe, 0x7ff, 0x6, 0x1066, 0x6, 0x408, 0x1c, 0x6, 0x2, 0x1, 0x13b394ee, 0xffffffff, 0x80000000, 0x2, 0xffffffff, 0x10001, 0xabbd, 0xf12, 0x7, 0x0, 0x7, 0x9cf, 0x563ef29e, 0xfffffff5, 0x6, 0x5, 0x5, 0x4, 0x6, 0xc0000000, 0x6, 0x3, 0xfff, 0x3, 0xfff, 0x7, 0x0, 0x401, 0x3, 0x2, 0xff, 0x5, 0x5, 0x4, 0x2, 0xfffffffc, 0x2, 0xcb47, 0x5, 0x2, 0x6, 0xfffffe00, 0x7fff, 0x9, 0x3, 0xea, 0x3, 0x9, 0x6, 0xf7, 0x5, 0x6, 0x101, 0xc61, 0x9, 0x6, 0x800, 0x4, 0x35, 0x6, 0x3, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x1ff, 0x4, 0x5, {0x8, 0x0, 0x3f, 0x6, 0x4, 0x7f}, {0x9, 0x2, 0x2, 0x4, 0x2, 0x1}, 0xffffffff, 0x1, 0x9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xbf4c}]]}, {0x5f, 0x6, "78979835ba182bbfaae011de34a989c9c995949892c2ab63de27f8bcfee0832ef2362ca43e3ca1b080d13c18f3b46ef86cb2cfadb7bac5f0688f821fa6e72ba1a04d159c792e4ff28fc9ee935a0705123a3705ca6eac3812242352"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0xdf97f22328611ffb, 0x3}}}}, @m_xt={0x30c, 0x10, 0x0, 0x0, {{0x7}, {0x2a8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xba, 0x6, {0x4, 'mangle\x00', 0x9, 0x800, "a5d24e581b1d60fc96d1ae3e6c0e2cb90ff3fbbcf9a85f8b8ef8a6e7f3f465121874891e79d0774e2ac51d90cb7aa966df9951595958f4d9b3571f685476cec7b131e44c6468fc00c11173d9075125b6142b2bf8cac9f3b2f40c5887f8367f05c496d28863a140cfea80240bf062660aa4ab6f6a47c7aa52e72633dec03acac5651350ab47fd3bc4fedf5c83a7a7cf88"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x11a, 0x6, {0x401, 'security\x00', 0x6, 0x5, "daeb8af684997b223352899b4d0aa92a7daf42638924e939b1109a335808ce2ac23a80a3a7b3d0fff0551674590fd0bb28fc69cd7ef1ba1724b95286ce9bdee62c3e1b60230bfa30ce1cfffa091da109ca478fe0cb646271044883b3a1c42e0cf2e52552df6f909390e03c6286608d0873cfa87fcdc8c05f086413dc86d55ee2e6800fa4ddb7170e59492a9d75bca97eff096277f83600c321db5a3ad5e67b6355ff64692703673415dc840684acc22029fff9d0d772e6a9695f854ed1b27a4f15f876c09401f0c078b16d54fb340a499de804a9a317ca61c9d29ed2f569116465c7d20aa0feabe197b9f816ee4b644d"}}, @TCA_IPT_TARG={0x98, 0x6, {0x3, 'nat\x00', 0x9, 0x101, "4ee55283a4e381c8252ad9887321450eaf5926034430bd45d7d373bf1147d5253587c761a9cd9814db36c061eedebfdf496351d12d6d0928c7073c6ef8a9208844e122a6a6d8f86ef93c7e3342da948e72fe89fabdaf5a010e2fdb41cf11fe8d03768794566bdca13967b1ff1202"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x3e, 0x6, "8aa1beb76c5171ec859b62345a50fb69e4e1348a439c3f629dff8be73d1621a953918779cb7ab9c9bc711cc565bed4157382ebb0c093a0bedd22"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x144, 0x1f, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x4}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x200}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xffffffff, 0x7, 0x4, 0x9f, 0x1000}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}]}, {0xdd, 0x6, "bc33882828c8cfea176abd395f2d099431dc8459fd64aa39ac8b84329b22763d28972f8ac3e46f6429eb80b6a9f58bf88408b3fd24ccc3de67eb1ce570c94a4770f4dc278c534a379e2aa0fb853f5581c986e4db3ea7e5a60aa92de0564b9f8726f2d744283dfa86acafe1c3fb34f55265f5afe472104d9c138e85a174211cc573f1a439dac0becd0c847d33a6a626ce20577be1a2d36459cd66056d3a30831b91c525571e531509f1f4153256d1729725fc3fa48fca8f23a09040b484254c97575b553a303a8c9779064fbf6621451947bccac8027e97b66e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x1060, 0x7, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x66259}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf5731}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88fb}]}, {0x1004, 0x6, "76bd26ecd4004c5f943c6db4aa6ded17cdd596868fc96ae105358af73edf7c86353fdd4dd7c1e7daba2c6d5ac2261b7d5db3e561a4ab86beb1237ef4c9a9eeeec06dd7944f3c4f2a7f5d32a46d574f14af5ca52b31ab52a8e7b18ef6a190b2028c05253f13c6f7ccf1ecab50512d6f224c9e23990ddfc56210db9814a6870aa7e8ef64236a4d00c3379910e990d827b5af409a1a61900408cf3dcf26e8536a8be8e182dd4cf35964c442fc36524d21bca810301a0089c01a1abf1c109064c04aa760eb435f151ea4de4d1f067855be8c2abf957dd1ae7f7a2e93d043af5676d06760955e1e8ded42c5579a3ee514345bf508c548c05c3c00cc55f27ce58d88a72301e82947680acc3973f43d9ffe0b426417207dcb009441da26a2348d66a1763ff59d6570a634281a6463938c6fbb00df33a48886834c6b0d564fe498eabe4a07219755c5ce9606755b180aed4db1a1ece53a9a73b7276b10f0267decdd4c2b3c3caff063d0d6f3a36cf1e4786b1697decaad0ae51d6f25ad48374ad7771f466675db1e1fb98ea6260c0f8e660b7dba8b5a00b2bf7edb8565acbb2cae04caccef890059e86e14813c75e3f5f408abe66d8bb4e7371a595ed2ff728052e3134714c7644524f17ed54d71908ea7b560ffef372b7a66ffa55e5862736b9dd0b013c75bfa22144ab5ce3a95b4155cf712419869df2c158d1036bca43afd958573d8f16a6e595811472c117bd73782912acac664e96d010799a48553fd4d2d40ca42c79984c124465d07bcc407ee4deac7b77f3144900fe331bf2a6273eac324e6c9427d08dca67f411fc46527f92137bc2312a6c1b2858be761460b4e72e7b7ff285e13d10e9bc017bca87ea4d0eadaf41901d2c23fbacdb2dc282d642fc3f4f24cd6bb1884cbccf82a511aa3fa71f3f47dfa4cd680c9a57740c9a401d93755fa3e2763ef50ee0fa95be297512884fd19792894b532053b16fb33cb6c8486a60b37eb93cac8ae2fe74b4a7d4fc3adc10660e538607125e9548fb0e5863716b25c48ef535b96c866c3ddf7684b0444c5855f5362765bb21853840c09bb9d69c783fa221b472b206ef1d579b8db8d4bb7421ce921846fe2182b62ec2e8b679c42dbd22ab2a749831fab77f2a55a75a2ebcdf5015c16566fa4c08b9a8d07b644c3ba2e181590631dfd26f717c5a059fef87fdcd107c6c938e2800e75b6e20d86aadfe025fbcf081b905720d43a49ee70f2fa633f7f909c0f2f02f1e34bb231378b50340f9e3833e5eef5cd408bc1f09f7ff4d27f7a449e0717370581a1fe3be4303dfc9f91a29c4f60acec9be2afee27e9f6e72361fe6207167ab94b08143e06d02955b6d8851802dc2eb96824afe4f09d3de901999dafe61e54949382c8273bcd086cd5c156802ab3907a9bc073ed43946ce8a3f0061b14a4eb288ab395fa090e9274e953bb5ec9c79a8ff9efffafa614adf186d7037f4679cdc4d4eb392e715ffe56e44d67a86160ee79d47dbc331dfd42ca0a562c0d49297d03da6511f84653ff9451fc7f2aa12572fb214fa264ae57055398f741a5f02e33e29c51c336df72d1704640601fda800f91894cee649eb174a6440f69d110b534dd74d288762e3b35c1fdc440b5e36c36bfb6ea3aff1cfe43cf66532e471617ae202fb4768514854836508857ea1e4937fc6ba89a2073a15450a36044282736c1f3f8ea5496a6261155faf57099221fd32337f0d9ff18faea2a28781740e6b5b857e7cc5472d8e2e914a5191d697cde48a6af377c3a1a304a02b9ac412026a2f3591f9c9aab423dd2944b9240f42abd00cdbfdcdb19f82288ba099e85c199dfc3ce5a65748656b14c998451a0b1ae2dc5184123afe6f077bfe48f44bf8d92b5ef9e5f5ab4d3e67946311e65ecf4730c06756c266a55bdcbb353f6c7573143f4a97e05ddec0c2b3152276fe0236214e103ad9a77df0eee218fba92caaf423706e3fbbf15b38ba77a849f58eb58ecf0bb2c2682ce482a62fc31371e131ab05aa3f8d14cbda17fc2d72d5be4f6b64c443c0ec5e6d00e757d94611a3e17518fcc9e57acb34db521ca5282794b736960b87f57962d41d8c589a18a50d48b927fc82410b66ee922108a692ff9c961abfd2edb82f8e3a8bdf3f1ccb4688feab82581b4e3c947ae73616a582de9945b489080d38f8f3cce8bc1953924f6f549f4480ba4774cd6d31ae1ea21783f938eb7889dc8992bf20a4a6423949b4e32210086cf02c1599a094aebb3f8e495a5e5c5e940222f8b5fd348f7675261e921248000995e34912801207364503f9ca6b22521f8de84a36e048c9221d822d8ff735f69dce1a5d798d3a6506ded787308fa7310a32580b7787c49d088e9448ef584f8a1156ebf078c93c68e7d619082339d3ebcd5cd9f1a20ef214fd6c72ac653269ca67a781eaa17a907ede74f04a75a9e362c10dc30e1f8a2b254d23ff8c788b4447915ec5ccb68b6b70700be628715144175ecfee3c6a1a8e93e0fce38954cf8a8c214ddfcb2ad592ed279390304f1e6d4d76eb8b04e72e1cfe603bea8d04ad98370c742c6877a916432e7a68e1feb66e21767dec8ae3cafd233dcd44ca1b7aace9d3e551f80f8477c22470ca841684f8a7d6418a871901743651bfefb9e42e706eb8c347c4e28f97e8b343ae6ad7b6219aabe992cf46d041b1896ed0b483b2c73be01bbacdf09e38ae2446d72a6299f240d96a1f9e7fb48ba96c82dd107b8c78706c693c4df122c4f2f4ace1a63f3e1796cae1ce42b2df6e9845931b487498acf81b17e4ba4f70dfb4c8128ef9aa67688b0887d25b922f7b8f60e770997720ae16d32f3d7f0f6ac2d59ce56df51b2e1a135354213df9ab0e0190331f6819b2fc49b19e5cf2f844327ab153c291d8b0244edfe23a2e383bbcfac66da54411b4276a175c665649c27029a398538f444b3393cf01fd8f4c85256eed372f762aa7ee5ab3c789536985ebf5d9c0bcd160263a7fd79c04d0329b53b6eeffb75372b20750c3147e2f01f0379aebd49e890f98b7886be1bc4b81cb3ba13c45930dcf770aa254f35e502c788e5053a0e2c9ed7f2b510879ae79fe95347ae77e0bba4c82a26f41058fa94f046336e8eacc377ed7eb1c828f51e23b25a24b781acb73c8874e212cbe2ae0d2c4d6a4ed499cd5b3a6eabc7603522baa983a01d25a300ef0d05e065922d55be8dc84725e386eb1191e61b8593b2ab4f6c3f7db54213e5d5d5ab83b7a4f5499f73613e5e7b94b4291fd9ec9a68b8fff01ea592fd7340037d4427a8bf661dcdba8c8aa9b6fb6a82aee0516f867da5a75d064e7cd5d9324cc0a9892d4e284dea40aa805a57ad36fa0c77ebf3d2a91f3f37df819dcf2bd5a01a0eab26bcda7572fb5c5787b4a8f3ff661e00f7e3c4e29654d1eee97c6c661a33697dfc3fc984a33e4a81e5a2ba53781c42d987120417e421b29abbc1da86afe448a68ff366a61bdfe666768eba1f2123f453a78a0db8c98aac34ab4f6d8a4a055ef3693dfda544461d31e659f1685a339ea21fa0acf7d61b114866003bdfe20888ae2dad830c152b9d3466e58a974a298f321376068c145107485e1053b48ea4d919ece1185792bd7cbc6ec8845d76d9b64f1831d4892076965de5988f301cfdb3ee5b9d19b45df6fd1af2132563dba9f3cdd8303d8cd7f0b14580b72e0402f5b8c1bfa27a54969e0a34a84a2cb983ffa24abe62903c2d85f18b9a5d89a3b7953c3c860cb7794fc37a062db30b55f32c1c539825df7d58f6b72b04ed8ffc351ba994a16daa2946337cd4882302a45a5ee7a3baec5ea1796c91a06fb915b2b6239a2884c38b9a4e7d8072f857cda89cb248f0a408b4b4a9459521d4658a30574d44695fd9d2efa8e98e25e26999551a4490d67a2859c15e61fad845abb2224551a349c76ed691fa9ea3f74da00f687eb9fa3ebfb4476babfe7fe5e2ddc5463c1254b52723cf002005973bb6edbd162b7b228ae115d7377b4418a073f0743c99fe4d9962e31482964dc400abba315d8c566c5fb6bbd23b6e067a9e3717b72653e9afd4326b5e924a64b9f96b643e191693dcd346525525a402dd88eaea5d118e59ab25026357dadba0e62fe915f23dccd66f28d7efc5b66a6e690d04a1f30fd23854c512fe42ad38e58060e2ff5811aa156d191b1e1352874d82f8a962554f6504e714f1e23949e123ecebf71cef0fbe2e0e8efa2ee3cad12dff1e41242d6dc3ab5d6ead7e7e27af069d1dd57d598a97754d3c4d23bc69437ad878a24fd0b38984c28c1543adfc00a8e2e07afffe2b3e882b2b5ccb86bbb3ad395fb92827bf4dc7608a32255b634a9164f5749dfde76a3165fc4034dc998bcc3a438a2378081c8a6f8cc8debb1b7d9976fef96559ce7037a06d3a0edbeb9da8952a01e79a13661404990c3ac7e8670c3ae183c2af0150e21bc34a39f773e452ac1709be19ccbdefacc9b55fa9e7e221bf4c506e47d3eb45a8c357d6ec785071fdcbc879460e3a80c5cbc5f0a322ad67895b212a05ceb9c6052cf6508a199de92a011710045a0763d72cbb9573a9f092812a42d61bd94f084ea676821f67ced2ae874980c0a6a5fa6b959ab1a8338d4c342dd14d792099dffef5938cfcd71d6632a10a64798ea5400aefa9f74d039cc04e619ba4f42a1270277c7974e52668914852998fb1b54fd9b0b0efe766d538341f32b786d1c37196b80592e6d905a8dfb2395bfecd5535af9bc4d51224858219f21cad2479934cad60e9b421a0197d7871bba9ac879e1f138168db10a0d68a419fe3ca105018cd6053c34e54a572e6e6f11dbf4809ec13a49843e61a3917797c8d6305c6d54548df7a8ede8c96242cfac1333cc5abe1d239de0ba76b5882c61471a886fad7d264a6df7b86982b12282806c173d85058b8699a389855e3d57e56e39566562a1aeee3371e7e10ba17accd1a6b15a0e7aa32fa2d500ace5cfa07b402989c3bbd8c7d142342855f6812a2f75a39cec45c4c58eda511f4d63a34bc9ec615a0637624a31259250dbd4ad5501eb8f8c3f1f45a2efa84195fb3bec74a557d406f889f70e35e67abded3b1370237526056e4f4946fce046583100d890c45fd88b6b48964ca82ece8e8927b67ff5a92946c7dd702170f39762d621da0c16058ecbba8d8c6264a3fdd3462cb5383c4a0580cf2cf9ddf2eeb85e9aab7ef044bdb65babd30741d79a0d878c3b3c5e4b3c018877dcef1cfb76c426c99a814bda2f9bb9895931b1973a618198257f62a5c3f7290210d3de76940ecb54e80931e6309898423daa13bd32ce5718fc8c7272a6eec547f23e70a9bacec7d28f79d386b1a6bda5c74d3efdbbe8527f647ad6b0580cb12e34af80c43dfe8322881167a2b527b63d49315135e1a9c617fefd71ee7a0de26a4be7e877a3f14ba80663a67d249fbcedfca43627da0fb9b7e1a8c9af8dcc7c02f2f446b4ef3025d87063f84376423aed0058e746ec498f280e72bef3ee608ed30422ea5d57295e0369518274ebc2d3960a8e9733e8cb3ea1289863209b2f27c6d5d27a0d7fb2ec49a370487a2f657dfddb6413397337d6cc2af5fcfb785376488126524b93e76ea9c4836dfd6d06d3c00101b9e2fa121630db3258d2f5ea3682034b32f9adb8228ba58e138ca400a83e039db9e3a2d8e415ac167790f81c9d28e0fee45d3171300aba64143b58d74b329c46bc784298b78144d2398fa9f5630853d470ccde666f080790dc2ddae07c5e9b5af9eecbe66805e3aaa3e80edc654b42c4b7eae97b2f145556e2e017d063450bfad61bf"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_ROUTE4_POLICE={0x14, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x248}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xa}}, @filter_kind_options=@f_route={{0xa}, {0x870, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xd}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffef}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xf, 0x8}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xb3}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x5}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff4, 0xfff3}}, @TCA_ROUTE4_POLICE={0x834, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x2, 0x5, 0x1, 0x400, 0x8, 0x10001, 0x301, 0xd, 0x6, 0x80000000, 0x7, 0x4, 0x8, 0x9, 0x0, 0x9e, 0xcbf3, 0x5, 0x6, 0x80000001, 0x6, 0xe020, 0x9, 0x4, 0x9, 0x7, 0x3ff, 0x3, 0x7f, 0x264d7b6, 0x4, 0x7, 0x10, 0x1, 0x9, 0x7, 0x8000, 0x9, 0x80, 0x5, 0x3, 0x3, 0x6, 0x7, 0x17f5, 0x9, 0xa5, 0xffffffd2, 0x9, 0x0, 0x1, 0x8, 0x2, 0x9, 0x9, 0x3, 0x9, 0x7ff, 0x7, 0x7, 0xf, 0x6, 0x5, 0x6, 0x1, 0x5, 0xb, 0x8f53, 0xbe31, 0xd3a7, 0x1, 0x7, 0x3, 0xffff, 0x7, 0x1, 0x9000000, 0x5, 0x5, 0x3, 0x1, 0xe9b, 0x81, 0x1ff, 0x2, 0x2, 0xe, 0x7fffffff, 0x6, 0x3, 0xff, 0x3ff, 0x3, 0xfffffffc, 0xa, 0x9, 0x5, 0x4, 0xfffffffe, 0x7, 0xbaeac06, 0xeb, 0xffffffff, 0x5, 0x8, 0x4, 0x4, 0xda19, 0x2, 0x7, 0x1, 0xac78, 0xfffffff7, 0x7, 0x8, 0xb0, 0x18c8, 0x9, 0x1, 0x6, 0x8748, 0x452f3e7a, 0x4, 0x46af, 0x8, 0x3a, 0x6, 0x6, 0x8000, 0x2, 0x99, 0x5, 0x9e2, 0x7, 0x3, 0x7, 0x9, 0x0, 0x5, 0xea, 0x7fffffff, 0x43d, 0x1, 0x2, 0x1, 0x3, 0x4, 0x8, 0x8000, 0x3, 0xa7, 0xff, 0x8a, 0x10000, 0xfffffffa, 0x0, 0x1, 0x8, 0x4, 0x0, 0xf5ac0000, 0x1c6, 0x8, 0x0, 0xa36, 0x5, 0x2, 0x6, 0x200, 0x0, 0x1, 0xffffffff, 0x1, 0x4, 0x3000, 0x4, 0x6, 0x5594dccf, 0x7925, 0x4, 0x3, 0xfffffffc, 0xffffffff, 0x4, 0x634, 0x5, 0x0, 0x2, 0x10000000, 0x7, 0xe1d4, 0x8, 0x7, 0x4, 0xdf, 0x9, 0x9, 0xd9, 0x7, 0x2c000000, 0x0, 0xfa09, 0x7, 0x5, 0x8b, 0xffffffff, 0xfffffffa, 0x0, 0x10001, 0x2, 0x0, 0x1000, 0x6d, 0xfffffffc, 0x1, 0x2, 0x5, 0x80000001, 0x4, 0x7fffffff, 0x0, 0x1, 0xf601, 0x4, 0x42b3a45c, 0x9, 0x2c0c, 0x8, 0x9, 0x8, 0x2, 0x6, 0x6, 0x200, 0x2, 0x7f, 0x4c22, 0x5, 0x2, 0x101, 0x7, 0x2, 0x7fffffff, 0x573ed179, 0x8, 0x0, 0x2, 0x6, 0x10000, 0xd51, 0x1ff, 0xd4, 0x40, 0xe25]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x2, 0x10000, 0x40, 0x6b1fdc0, 0x8, 0x2, 0xc7, 0x1, 0xec, 0x7, 0x40, 0x8, 0x5, 0x0, 0x8001, 0x1, 0x8, 0x6efc, 0x2, 0x2, 0xfff, 0x1, 0xffff8000, 0x6, 0x5, 0x2, 0x8, 0x5f54, 0x2, 0x4, 0x1, 0x0, 0xe, 0x3, 0xb3d, 0x101, 0x69, 0x1ff, 0x0, 0x6, 0x4, 0x5, 0xf, 0x4, 0x100, 0x4, 0x5, 0x5, 0x7fffffff, 0x9, 0x7, 0x2c4, 0xffffffff, 0xfffffff8, 0x4, 0x3, 0xa, 0x3, 0x8, 0x80, 0x7, 0xfffffbf6, 0x1000, 0x4, 0x8, 0x7b0, 0x7, 0xfffffffc, 0x7, 0x7fff, 0x0, 0x0, 0x80000001, 0x7, 0x8, 0x5, 0x6, 0x2, 0x5, 0x1, 0x9, 0xa9, 0x2, 0x1, 0x10001, 0x9, 0x4, 0x8, 0xf246, 0x10001, 0x8, 0x5af, 0x3, 0x4, 0x0, 0xfffffffa, 0x7, 0x7fffffff, 0x0, 0xf, 0xffffff5f, 0x0, 0x40, 0xe3, 0x8, 0x5, 0x0, 0x7, 0x0, 0xf63, 0x4, 0x4, 0x5, 0x6, 0x3, 0xfb1, 0x92, 0x101, 0x3, 0x8, 0x4, 0xff, 0x4756, 0x6, 0x1885, 0x2b2, 0x1, 0x5f9, 0xffffffff, 0xd, 0x7, 0x4, 0x4, 0x8000, 0x5152, 0x8, 0x81, 0x7fff, 0xb, 0x90, 0x2, 0x9, 0x400, 0x48b, 0x6, 0x7ff, 0x8001, 0x4, 0x400, 0xb45, 0x6, 0x8, 0x8, 0x5, 0x7fffffff, 0x400, 0x8, 0x6, 0x8, 0x8, 0x85ca, 0x5, 0x3, 0x8, 0xfffff4af, 0x3ff, 0x8, 0x3, 0x6, 0x1cc, 0x100, 0x2, 0x7, 0x3, 0x6, 0x1, 0x9, 0x3, 0xe6, 0x0, 0x6, 0x0, 0xfffffffa, 0xfffff314, 0xda25, 0x4, 0x92e, 0xf, 0x8001, 0x3, 0x6, 0x486, 0x3, 0x4, 0x7, 0xfde, 0x4, 0x9, 0x3, 0x15b, 0x0, 0x10000, 0x6, 0x7, 0x7, 0x2, 0x200, 0x5, 0x7, 0x5, 0xffff, 0xd, 0x3ff, 0x1, 0x3, 0xd, 0x2, 0x9, 0x200, 0x799, 0x5, 0x8, 0x1, 0x9, 0x400, 0xff, 0xe1, 0xfffffffd, 0x7, 0x7, 0xe4, 0x3, 0x9, 0x2, 0x3, 0xd9eb, 0x7, 0xd7, 0x437, 0x9eaf, 0x7, 0xfff, 0x6, 0xf, 0xffff0001, 0xcf, 0x5d5, 0x10, 0x8, 0x7fff, 0x3, 0x8, 0x3, 0x6a, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x2e8d}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x80}}, @TCA_RATE={0x6, 0x5, {0x12, 0x2c}}]}, 0x3844}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r11, 0x0) r12 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x94}]}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2.003127412s ago: executing program 2 (id=16806): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) 1.842954458s ago: executing program 2 (id=16807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x2, 0x400122a0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/217, 0xd9}], 0x1}}], 0x1, 0x40000100, 0x0) 1.520879744s ago: executing program 0 (id=16808): socket$kcm(0xa, 0x922000000003, 0x11) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) unshare(0x6020400) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) (async) unshare(0x6020400) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) (async) 1.400283151s ago: executing program 6 (id=16809): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001d40)=""/4056, 0xfd8}, {&(0x7f0000002d80)=""/4126, 0x101e}, {&(0x7f0000000040)=""/57, 0x39}, {&(0x7f0000004700)=""/4066, 0xfe2}, {&(0x7f0000001000)=""/172, 0xac}, {&(0x7f0000000080)=""/175, 0xaf}, {&(0x7f00000002c0)=""/113, 0x71}, {&(0x7f0000000500)=""/107, 0x6b}], 0x8}, 0x32120) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) sendmmsg$sock(r1, &(0x7f0000000f00)=[{{&(0x7f0000000200)=@phonet={0x23, 0x9, 0x0, 0x5}, 0x80, 0x0}}], 0x1, 0x200088d0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x400, 0x400, 0x240, 0x240, 0x0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x128, 0x150, 0x0, {0x7a00000010000000}, [@common=@srh={{0x30}, {0x2b, 0x0, 0x2, 0xa, 0xda, 0x2880, 0x4000}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'pimreg0\x00', 'dvmrp0\x00', {}, {}, 0xff, 0xf}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@broadcast, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) 1.390446395s ago: executing program 5 (id=16810): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x4c, 0x0, 0x0, 0x7}, {0x80000006}]}, 0xfffffec0) 1.321741064s ago: executing program 1 (id=16811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x78, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x78}}, 0x0) 1.24792448s ago: executing program 1 (id=16812): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x16}]}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f0000000000)='\\:\'\x00', 0x2, &(0x7f0000000040)={@_ha_fsid={[0x2, 0x3]}, {0x6, 0x7, 0x2, 0x65f6}}, 0x4, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xe}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) syz_emit_ethernet(0x3e, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x5, 0x1}, {0xa, 0x7ff0}, {0xa, 0x4}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x6000000}, 0x80) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x33, 0xff, 0x64}, 0x2c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) 1.219084173s ago: executing program 2 (id=16813): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007b108a000000000004000000000000e59500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 1.097278142s ago: executing program 5 (id=16814): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r1, 0x89e1, &(0x7f0000000000)={@loopback, @remote}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000600000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) 1.053675644s ago: executing program 6 (id=16815): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c000180140001564e83051e8bba5055b6cefd658008000100e000000108000200ac1414000c00028005000100000000000600034000040000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740000000027306f6ce66eb93a654553c67ee61fdc02c8787ceae0865bc7e9a391dc40a3532a95e588284e16b8b253ba4defcfe84afe2dc1538b1a8efd9a5c41964b9b2a645abcad20a14f6e3f5f63f443dafdd8abb409f4fff3369284071264b9e549222f1863db97226f8dd27088a7fa84690a3c4aa6deafc9aff64fe5abd9f8f53b89b4b559838eefe67c58f51bd6eada7c48c798b"], 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4) 1.04488669s ago: executing program 2 (id=16816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xe4e}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) socket(0xa, 0x3, 0x3a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000019c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf2555000000080001005100000008000300", @ANYRES32=r3], 0x24}}, 0x240040c0) close(0x4) 899.066757ms ago: executing program 0 (id=16817): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)="02", 0x1}, {&(0x7f0000000000)="02a76bd20f", 0x5}], 0x2, 0x0, 0x0, 0x4000080}, 0x4050000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r3, 0x100000000) close(0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000c80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010046bd7000020000000c000000180001801400020076657468305f746f5f626f6e6400000018000380140003800c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) 894.681753ms ago: executing program 1 (id=16818): r0 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000140081044e81f782db46b904021d000025000000040000a118000200ff02000100000e1208000f0100810401a80316ea1f000b40032a5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc0000000000000080bb9ad809d5e1cace81b341139fe3cd4032ecedb12d1d2eb0c0ed0bffa29954e5413f017fe491", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000a28000000020a010200000000000000080a0000060900010073797a310000000008000240000000018c000000020b010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63feffffffd47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb2c5643c9b3e855dda3416a970a7c1e6b48a4cd2cd8379a97e705b010000000900010073797a0a030000000000000000000a0000020800044000000002140000001100010000000000000000000100000a"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r3, @ANYBLOB="665ec91aeb439c5f32cd03056e15139ce28e008d414f83e3d3ffed049b447d303690e265d93c287f2bbe5eb6e4c9fa94ae449cdfcf", @ANYRES16=r3], 0x138}, 0x1, 0x0, 0x0, 0x4c845}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x2b, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x3, 'nq\x00', 0x29, 0x5, 0xf}, {@multicast2, 0x4e20, 0x0, 0xffff4381, 0x9, 0xfffffffb}}, 0x44) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0xf0, 0xffffffff, 0x310, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x33, @ipv4=@empty, @ipv4=@rand_addr=0x64010102}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) 893.039076ms ago: executing program 5 (id=16819): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@local, @in=@rand_addr=0x64010102, 0x4e22, 0x4, 0x4e22, 0x7, 0xa, 0x0, 0x80, 0x73}, {0x7b1, 0x3, 0x4, 0xffffffff, 0x80000001, 0x3, 0x1, 0x69}, {0x9, 0x9, 0x8}, 0x53, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@multicast1, 0x4d4, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3507, 0x1, 0x0, 0x6, 0x0, 0xff, 0xf6}}, 0xe8) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write(r0, &(0x7f0000000040)="07000000010006", 0x7) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4}, 0x18) (async) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x1, {0x0, 0x0, 0x4}}, 0x18) r5 = socket(0x18, 0x0, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x6, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8}, @TCA_FQ_FLOW_REFILL_DELAY={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x2}]}}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, {0x10, 0x2, [0x0, 0x0, 0xffff, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, {0x4}}]}]}, 0x148}}, 0x0) (async) getsockopt$nfc_llcp(r5, 0x111, 0x0, 0x0, 0x90aa62107f0000) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x44, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x24000044) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r9) 676.1659ms ago: executing program 2 (id=16820): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010000000000fcdbdf251200000018000180140002007665746830000000000000000800000008"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r0 = socket$inet6(0xa, 0x6, 0x3bd614) r1 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xc0) (async) r2 = socket$inet6(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}]}]}], {0x14}}, 0x98}}, 0x4) (async) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00010000009f18f494756fcde7572f104e2729aa8f84a5f07a7bbdaf8f2679c9e5aa000000000000000000000000000000000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x2040080}, 0x4000000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) (async) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 675.7655ms ago: executing program 6 (id=16821): socket$nl_generic(0x11, 0x3, 0x10) (async) r0 = socket$nl_generic(0x11, 0x3, 0x10) socket$kcm(0x21, 0x2, 0xa) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000240)={r2, r2, 0x0, 0x1, &(0x7f0000000000)="ee", 0x6, 0x1, 0xb57, 0x3, 0xd, 0x1, 0x9, 'syz1\x00'}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x800, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x3}}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x800, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x3}}}}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 474.591528ms ago: executing program 1 (id=16822): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000100)={'nat\x00', 0x0, 0x0, 0x0, [0x91a, 0x8, 0x1, 0x11f63845, 0x0, 0x4]}, &(0x7f0000000200)=0x78) (async) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r4, 0x25, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100003052bbd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001000001c00128009000100626f6e64000000000c000280050001000500000008000a00", @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 392.613995ms ago: executing program 0 (id=16823): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, &(0x7f0000000680)="6e396043c7f73cdb24daad17f83ce74b34cd63b8facb5c284d61010075bfdbc35cfe8116ba2125d355b852159de6df41715a3e9d41970b39c9293403d0e740dd1fd8e8b590936714c68252a41c8876cefdd8a3b4e05edd64fafd10e7ab0feabc0e", 0x0, 0x0, 0x2}, 0x50) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, &(0x7f0000000280)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="120000001a000700000000000000f8ff0220206aa33800fc000006008283b23f532560cbc810c000670a93e291ff384d3ee165bdc2c9eb34bbd7fb1a9ef21f1abb1283c07b374dc4d7fd8821ca1d652b2cc791f2a0c87c7ad10ad4ed339a4309bd01ed5e52527a638e7d2e2a34ba961ad817d9e86d58bb"], 0x1c}}, 0x20000000) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="88020000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x48040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000006112400000000000950009001a000000009f1ab51f340299c19e4eab39367f4060f36d6f99c6dc3bb27595340e78453c1a9b659186808fdb47ac8e391561b9fc7eb23d32b200298906db8fd801d674613eed535bf92730b3df1e87958184d5ee8be3b51a08f1eb609243463673700a69d758532844207a5e7242383247742f6daeacdb3e8c72bbabb9aaaadf9a25d2"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 333.178482ms ago: executing program 6 (id=16824): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x11, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x179) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x10000, 0xbf, &(0x7f000000cf3d)=""/191, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x452202, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2703020059", 0x5}], 0x1}, 0x48000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "bbaeb286287dcf3e", "51dbda65f8ebf9de276880c9c23547d74fca736cb2b3b71295adff5cfbf02f71", "9675df08", "4936754361571648"}, 0x38) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r4, @ANYRESOCT=r2, @ANYRESHEX=r1], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x0) recvfrom(r5, &(0x7f0000002800)=""/4065, 0xfe1, 0x20017, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket(0x21, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x8, 0xfff1}, {0x3, 0x8}, {0xb, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) close(r6) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0xffffffffffffffb1, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xb}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 305.831145ms ago: executing program 2 (id=16825): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000340), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000340), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r2}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500f90700004085000000a50000009500000500000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x0, 0x28, 0x0, &(0x7f0000000380)="40f0538ef047ddaf5e1c260155117f8e6eb67f2562c6a474efe6c3c46cf3b7fd4c95461868305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1bfffffe}, 0x50) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51, 0x1, [{0x3, 0x8f2e}]}}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000100)=0x3, 0x4) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000100)=0x3, 0x4) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000100085060000903db73c91d13ad87a00", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x20000000) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r8}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) socket$igmp(0x2, 0x3, 0x2) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r9, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$inet(0x2, 0x3, 0x2) (async) r10 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r10, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) setsockopt$inet_mreqsrc(r10, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00'}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 257.655844ms ago: executing program 5 (id=16826): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_EMATCHES={0x54, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e4}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x24}, {0x7d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x8}, {0x8000, 0x7fffffff, 0x3, 0x1}}}]}]}]}}]}, 0x88}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00118008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x43, 0x9, 0xffffffff, 0x25dfdbfb, {0x2}, [@typed={0x4, 0x11f}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 254.716826ms ago: executing program 0 (id=16827): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x34}}, 0x0) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x33, 0x4, 0x64}, 0x2c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x8000, 0x7, 0x81, 0x7, {{0x6, 0x4, 0x2, 0x21, 0x18, 0x66, 0x0, 0x1, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) r7 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r7, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r7, 0xda8c) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r10, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0xa}]}]}]}]}, 0x2c}}, 0x0) (async, rerun: 64) accept4(r7, &(0x7f0000000340)=@nfc, 0x0, 0x0) (async, rerun: 64) write$cgroup_devices(r6, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x1d, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @jmp={0x5, 0x0, 0x6, 0x6, 0xb, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x5843, 0xaa, &(0x7f00000004c0)=""/170, 0x41000, 0x28, '\x00', r5, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x105, 0x80000000, 0xd}, 0x10, 0x0, r1, 0x0, &(0x7f0000000680)=[r0, r0, r0, r6, r0, r0, r0, r0, r0], 0x0, 0x10, 0x5}, 0x94) (async) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 5 (id=16828): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x9c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000001a80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a40)={&(0x7f0000000700)={0x1318, r6, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x7e}}}}, [@NL80211_ATTR_FRAME_MATCH={0xb6, 0x5b, "fb23a1847db99436e700dd2ae5bc2ac701ca5c3602041f43935545fe6d8aad9ca9d14e508428e8308804d09a7b5d20c2a38d1101ac2aa108720379efc31fc16a79ec95d1af36c4bcae0c98d44d781b2a92e2f7235b6b019eaaf78ed56376015ff28740e71766f31c0f3b8b1546a3fb45e05d8f576616181de7459b07f4447aed60eaf2234a286ffe5907d178bf9fdbb05987ec87dadcf2014cdadb1a2b3a7ed876fc84b93d8a7878c2f2a696c159bdaef689"}, @NL80211_ATTR_FRAME_MATCH={0x21, 0x5b, "1ae72c216c5597901871e4ab155d07059020c3edf61ca82f01b84c79ac"}, @NL80211_ATTR_FRAME_MATCH={0xdf, 0x5b, "2e3f384b85a1876e9ee7f61f3e57f9d55796dde53a1e447cdd7416f112520d1052e20eeb3b1b09a9e03ac19d3ab75be5f623cc5501133f794007b63e0420ec997b5ea485365c09358442bafdf35707870f17f5a1e4a7fba28fdb9ba083a9727e1c38ddd2c3ed2942828e151ea28813ed208c021a5acb9349da1db35083ef440fc96ee70df90bd719e041f08785ca801d1b25b8c6eb996139b61e9eeebfec34a02a2323577eacf82352e50ae935f9acdb9e18fa9f3a29b7282f02a8dc3c1431b6e164ef0857819f1bd85ec2dfca52b1e59d9c29e7e1dbf1ad6e8ac6"}, @NL80211_ATTR_FRAME_MATCH={0x53, 0x5b, "e7f14279e64a98d87ea165c81a137209be2c4593dba91882ac86325648d99cd3953d089ece72b3686a28bacabce6eb8b3f0f7f087d95e654a8092130ae781897beb5906ac285ae2c39c9cc2b6dc1c8"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x11}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0xd, 0x5b, "f08fd8f2ed57771e36"}, @NL80211_ATTR_FRAME_MATCH={0x46, 0x5b, "fdc32fe888439ea089b3aa5d8240650d58c4e6ce948c905e19438daf8a5995d8d34a020433603db2235e33f41bc872b97e82074420ae82348ed9086c4a739880e399"}, @NL80211_ATTR_FRAME_MATCH={0x7c, 0x5b, "aafc9f8cedc2664e05d85d15c18bf0c627aca8b106085a21b6d807f5024c1ee8136af2b43e30ff015e74e12c49cf7e8c76afa51790f6db0e8d0e62008a61ce99b717a97896205bc6a34dc0e12849ca39a7813ba0fe3f5a3aaa3524e5d01003c2ad51d9a0044fade3852f3fdac7b3fccca27b432e0757c176"}]}, 0x1318}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRESDEC=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r0], 0x50}}, 0x4000040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r10) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB="05"], 0x10) close(r11) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r13, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r12, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r14}, &(0x7f0000000500), &(0x7f0000000540)=r10}, 0x19) sendmsg$inet(r9, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) recvmsg(r8, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10002) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001006cb3e310005009b2d905500000000", @ANYRES32=r5, @ANYBLOB="850b0100009804001e00240073fcf88bdd9cbfeffc4b91a69d0070d44e43487b10a846ebf69f0000"], 0x40}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) kernel console output (not intermixed with test programs): 8878] bond12 (unregistering): (slave bridge13): Releasing backup interface [ 1570.832763][ T8878] bridge13 (unregistering): left allmulticast mode [ 1571.078367][ T8878] bond13 (unregistering): (slave bridge15): Releasing backup interface [ 1571.087125][ T8878] bridge15 (unregistering): left allmulticast mode [ 1571.411880][ T8878] bond14 (unregistering): (slave bridge17): Releasing backup interface [ 1571.420515][ T8878] bridge17 (unregistering): left promiscuous mode [ 1571.427495][ T8878] bridge17 (unregistering): left allmulticast mode [ 1571.529014][ T8878] bond16 (unregistering): (slave bridge18): Releasing backup interface [ 1571.537525][ T8878] bridge18 (unregistering): left promiscuous mode [ 1571.544227][ T8878] bridge18 (unregistering): left allmulticast mode [ 1571.741226][ T8878] bond17 (unregistering): (slave bridge19): Releasing backup interface [ 1571.755745][ T8878] bridge19 (unregistering): left promiscuous mode [ 1571.765073][ T8878] bridge19 (unregistering): left allmulticast mode [ 1571.952384][ T8878] bond18 (unregistering): (slave bridge20): Releasing backup interface [ 1571.960703][ T8878] bridge20 (unregistering): left promiscuous mode [ 1571.967170][ T8878] bridge20 (unregistering): left allmulticast mode [ 1572.191776][ T8878] bond19 (unregistering): (slave bridge21): Releasing backup interface [ 1572.200246][ T8878] bridge21 (unregistering): left promiscuous mode [ 1572.206708][ T8878] bridge21 (unregistering): left allmulticast mode [ 1572.286878][ T8878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1572.300652][ T8878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1572.310962][ T8878] bond0 (unregistering): (slave team0): Releasing backup interface [ 1572.320249][ T8878] bond0 (unregistering): Released all slaves [ 1572.331182][ T8878] bond1 (unregistering): Released all slaves [ 1572.346056][ T8878] bond2 (unregistering): Released all slaves [ 1572.360665][ T8878] bond3 (unregistering): Released all slaves [ 1572.421666][ T8878] bond4 (unregistering): Released all slaves [ 1572.439049][ T8878] bond5 (unregistering): Released all slaves [ 1572.456635][ T8878] bond6 (unregistering): Released all slaves [ 1572.473514][ T8878] bond7 (unregistering): Released all slaves [ 1572.503916][ T8878] bond8 (unregistering): Released all slaves [ 1572.532448][ T8878] bond9 (unregistering): Released all slaves [ 1572.549140][ T8878] bond10 (unregistering): Released all slaves [ 1572.567721][ T8878] bond11 (unregistering): (slave lo): Releasing backup interface [ 1572.576025][ T8878] bond11 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1572.587616][ T8878] bond11 (unregistering): Released all slaves [ 1572.643382][ T8878] bond12 (unregistering): Released all slaves [ 1572.659035][ T8878] bond13 (unregistering): Released all slaves [ 1572.674162][ T8878] bond14 (unregistering): Released all slaves [ 1572.693249][ T8878] bond15 (unregistering): Released all slaves [ 1572.723541][ T8878] bond16 (unregistering): Released all slaves [ 1572.754119][ T8878] bond17 (unregistering): Released all slaves [ 1572.769029][ T8878] bond18 (unregistering): Released all slaves [ 1572.784185][ T8878] bond19 (unregistering): Released all slaves [ 1572.799986][ T8878] bond20 (unregistering): Released all slaves [ 1572.858928][T23744] bond0: (slave bond_slave_0): Releasing backup interface [ 1572.975342][T23763] netlink: 164 bytes leftover after parsing attributes in process `syz.1.15191'. [ 1573.089836][T23744] bond_slave_0: entered promiscuous mode [ 1573.096468][T23744] bond_slave_0: entered allmulticast mode [ 1573.906203][T23545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.914980][T23545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.978859][T23545] bridge_slave_0: entered allmulticast mode [ 1573.999496][T23545] bridge_slave_0: entered promiscuous mode [ 1574.025067][T23545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.032601][T23545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.039925][T23545] bridge_slave_1: entered allmulticast mode [ 1574.047794][T23545] bridge_slave_1: entered promiscuous mode [ 1574.461786][T23545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1574.480078][T23545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1574.666748][T23545] team0: Port device team_slave_0 added [ 1574.675622][T23545] team0: Port device team_slave_1 added [ 1574.787272][T23545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1574.794291][T23545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1574.927887][T23824] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15201'. [ 1574.951035][T23545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1575.064272][T23545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1575.071290][T23545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1575.113982][T23830] netlink: 'syz.5.15203': attribute type 1 has an invalid length. [ 1575.166012][T23545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1575.303848][T23545] hsr_slave_0: entered promiscuous mode [ 1575.310738][T23545] hsr_slave_1: entered promiscuous mode [ 1575.435297][T23840] netlink: 48 bytes leftover after parsing attributes in process `syz.5.15204'. [ 1575.476478][T23840] netlink: 48 bytes leftover after parsing attributes in process `syz.5.15204'. [ 1575.606602][ T5288] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1577.242477][T23809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1577.287382][T23545] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1577.380627][T23545] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1577.410792][T23545] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1577.498978][T23545] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1577.535447][T23545] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1577.564808][T23861] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15208'. [ 1577.613146][T23545] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1577.658768][T23545] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1577.734894][T23545] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1578.018875][T23883] syzkaller1: entered promiscuous mode [ 1578.077459][T23883] syzkaller1: entered allmulticast mode [ 1578.371522][T23545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1578.431102][T23545] 8021q: adding VLAN 0 to HW filter on device team0 [ 1578.445542][ T8892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.452849][ T8892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1578.530317][T23906] netlink: 168 bytes leftover after parsing attributes in process `syz.2.15220'. [ 1578.565722][ T8892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.573063][ T8892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1578.789972][T23914] netlink: 496 bytes leftover after parsing attributes in process `syz.5.15222'. [ 1578.898442][T23918] IPv6: NLM_F_CREATE should be specified when creating new route [ 1579.482153][T23938] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 1580.036023][T23962] netlink: 148 bytes leftover after parsing attributes in process `syz.6.15233'. [ 1580.277459][T23967] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15234'. [ 1580.402929][T23975] : entered promiscuous mode [ 1580.431766][T23545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1580.634963][T23981] netlink: 'syz.1.15239': attribute type 1 has an invalid length. [ 1580.655512][T23982] netlink: 'syz.1.15239': attribute type 1 has an invalid length. [ 1580.710613][T23978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15237'. [ 1580.805572][T23545] veth0_vlan: entered promiscuous mode [ 1580.911296][T23545] veth1_vlan: entered promiscuous mode [ 1581.062378][T23545] veth0_macvtap: entered promiscuous mode [ 1581.134676][T23545] veth1_macvtap: entered promiscuous mode [ 1581.255498][T23545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1581.375748][T23545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1581.419194][T24017] netlink: 'syz.6.15245': attribute type 2 has an invalid length. [ 1581.465031][ T8885] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.493627][ T8885] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.544658][ T8885] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.583632][ T8885] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.638704][T24019] netlink: 404 bytes leftover after parsing attributes in process `syz.5.15246'. [ 1581.647899][T24019] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15246'. [ 1581.656966][T24019] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15246'. [ 1581.666032][T24019] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15246'. [ 1581.698383][T24025] netlink: 40 bytes leftover after parsing attributes in process `syz.6.15248'. [ 1582.278635][ T8884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1582.301073][ T8884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.427710][ T8889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1582.444418][ T8889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1583.334119][T24085] netlink: 'syz.0.15258': attribute type 13 has an invalid length. [ 1583.426910][T10208] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1583.482953][T10208] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1583.498692][T10208] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1583.512455][T10208] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1583.527803][T10208] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1583.738690][T24095] __nla_validate_parse: 1 callbacks suppressed [ 1583.738709][T24095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15264'. [ 1583.833718][T24095] macvlan2: entered allmulticast mode [ 1583.848742][T24095] dummy0: entered allmulticast mode [ 1583.995541][T24074] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1584.554133][T24084] wg1 speed is unknown, defaulting to 1000 [ 1584.642758][T10208] Bluetooth: hci0: command 0x080f tx timeout [ 1584.918233][T24150] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15275'. [ 1584.927349][T24150] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15275'. [ 1585.041902][T24152] netlink: 52 bytes leftover after parsing attributes in process `syz.2.15276'. [ 1585.051039][T24152] netlink: 52 bytes leftover after parsing attributes in process `syz.2.15276'. [ 1585.065813][T24152] netlink: 52 bytes leftover after parsing attributes in process `syz.2.15276'. [ 1585.242437][T24084] lo speed is unknown, defaulting to 1000 [ 1585.242726][T24161] tipc: Started in network mode [ 1585.253219][T24161] tipc: Node identity ac14140f, cluster identity 4711 [ 1585.331048][T24161] tipc: New replicast peer: 255.255.255.255 [ 1585.337667][T24161] tipc: Enabled bearer , priority 10 [ 1585.476047][T24171] tap0: tun_chr_ioctl cmd 1074025672 [ 1585.481501][T24171] tap0: ignored: set checksum disabled [ 1585.617146][T10208] Bluetooth: hci2: command tx timeout [ 1585.680612][T24179] netlink: 'syz.0.15281': attribute type 11 has an invalid length. [ 1585.720055][T24177] Bluetooth: MGMT ver 1.23 [ 1586.489074][T22583] tipc: Node number set to 2886997007 [ 1586.606512][T24215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15288'. [ 1586.631101][T24215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15288'. [ 1586.660420][T10208] Bluetooth: hci0: command 0x080f tx timeout [ 1586.669935][T24215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15288'. [ 1586.679347][T24215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15288'. [ 1587.110721][T24231] netlink: 'syz.6.15291': attribute type 1 has an invalid length. [ 1587.282865][T24231] bond3: (slave ip6gretap1): making interface the new active one [ 1587.292672][T24231] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1587.300560][T24231] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1587.342372][T24231] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1587.352198][T24084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1587.369592][T24084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1587.377167][T24084] bridge_slave_0: entered allmulticast mode [ 1587.386966][T24084] bridge_slave_0: entered promiscuous mode [ 1587.449338][T24084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.456631][T24084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.526476][T24084] bridge_slave_1: entered allmulticast mode [ 1587.659713][T24084] bridge_slave_1: entered promiscuous mode [ 1587.696982][T10208] Bluetooth: hci2: command tx timeout [ 1587.733075][T24271] netlink: 'syz.6.15299': attribute type 2 has an invalid length. [ 1587.908287][T24084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1587.921220][T24084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1588.024644][T24084] team0: Port device team_slave_0 added [ 1588.033512][T24084] team0: Port device team_slave_1 added [ 1588.153063][T24084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1588.178963][T24084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1588.289253][T24084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1588.301423][T24289] lo: entered allmulticast mode [ 1588.307459][T24084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1588.314599][T24084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1588.378888][T24084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1588.411648][T24295] netlink: 'syz.6.15307': attribute type 1 has an invalid length. [ 1588.424104][T24289] lo: left allmulticast mode [ 1588.515930][T24295] xt_hashlimit: size too large, truncated to 1048576 [ 1588.625750][T24296] bond4: (slave geneve2): making interface the new active one [ 1588.633997][T24296] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1588.656789][T24303] erspan0: entered allmulticast mode [ 1588.712502][T24084] hsr_slave_0: entered promiscuous mode [ 1588.728475][T24084] hsr_slave_1: entered promiscuous mode [ 1588.735063][T24084] debugfs: 'hsr0' already exists in 'hsr' [ 1588.743020][T24084] Cannot create hsr debugfs directory [ 1588.767358][ T8892] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1588.792055][T24310] tipc: Enabling of bearer rejected, already enabled [ 1588.806228][ T8892] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1588.815106][ T8892] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1588.824686][ T8892] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1589.050138][T24330] macvlan0: entered promiscuous mode [ 1589.059114][T24330] __nla_validate_parse: 33 callbacks suppressed [ 1589.059134][T24330] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15315'. [ 1589.243501][T24336] netlink: 'syz.1.15317': attribute type 24 has an invalid length. [ 1589.314210][T24340] netlink: 'syz.1.15317': attribute type 24 has an invalid length. [ 1589.382834][T24338] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1589.400781][T24345] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15320'. [ 1589.487091][T24345] netlink: 792 bytes leftover after parsing attributes in process `syz.6.15320'. [ 1589.758924][T24362] tipc: Failed to remove unknown binding: 66,0,0/0:3892676283/3892676285 [ 1589.789320][T24362] tipc: Failed to remove unknown binding: 66,0,0/0:3892676283/3892676284 [ 1589.814100][T24362] tipc: Failed to remove unknown binding: 66,0,0/0:3892676283/3892676285 [ 1589.833306][T10208] Bluetooth: hci2: command tx timeout [ 1589.835741][T24362] tipc: Failed to remove unknown binding: 66,0,0/0:3892676283/3892676284 [ 1590.068175][T24378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15331'. [ 1590.190245][T24385] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1590.410911][T24392] syzkaller1: entered promiscuous mode [ 1590.416482][T24392] syzkaller1: entered allmulticast mode [ 1590.863290][T24415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15344'. [ 1590.965360][T24422] netlink: 'syz.6.15345': attribute type 1 has an invalid length. [ 1590.974539][T24423] netlink: 96 bytes leftover after parsing attributes in process `syz.2.15344'. [ 1591.062897][T24422] bond5: entered promiscuous mode [ 1591.072829][T24422] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1591.127014][T24422] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15345'. [ 1591.145667][T24422] bond5: entered allmulticast mode [ 1591.194239][T24432] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15347'. [ 1591.210720][T24422] bond5: (slave bridge4): making interface the new active one [ 1591.220921][T24422] bridge4: entered promiscuous mode [ 1591.226415][T24422] bridge4: entered allmulticast mode [ 1591.234946][T24422] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 1591.510845][T24084] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1591.525880][T24084] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1591.534711][T24084] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1591.551199][T24084] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1591.628695][T24084] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1591.647715][T24084] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1591.656558][T24084] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1591.667446][T24084] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1591.750453][T24445] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 1591.759808][T24445] bond1: option packets_per_slave: allowed values 0 - 65535 [ 1591.770300][T24445] bond1 (unregistering): Released all slaves [ 1591.853301][T24454] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1591.868118][T24454] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1591.890479][T24458] ip6erspan0: entered allmulticast mode [ 1591.914821][T10208] Bluetooth: hci2: command tx timeout [ 1592.164036][T24084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1592.186076][T24084] 8021q: adding VLAN 0 to HW filter on device team0 [ 1592.204502][T22360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1592.211676][T22360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1592.271749][ T8889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1592.278997][ T8889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1592.750707][T24497] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15358'. [ 1593.217709][T24515] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 1593.584557][T24533] syzkaller1: entered promiscuous mode [ 1593.590103][T24533] syzkaller1: entered allmulticast mode [ 1593.644531][T24534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15370'. [ 1593.756420][T24534] team1: entered promiscuous mode [ 1593.761835][T24534] team1: entered allmulticast mode [ 1593.853804][T24084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1594.169718][T24561] __nla_validate_parse: 1 callbacks suppressed [ 1594.169736][T24561] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15377'. [ 1594.248887][T24561] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15377'. [ 1594.327507][T24561] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15377'. [ 1594.380120][T24561] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15377'. [ 1594.465535][T24561] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15377'. [ 1594.544840][T24561] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15377'. [ 1594.642137][T24084] veth0_vlan: entered promiscuous mode [ 1594.715816][T24084] veth1_vlan: entered promiscuous mode [ 1594.767098][T24084] veth0_macvtap: entered promiscuous mode [ 1594.883899][T24591] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15384'. [ 1594.960176][T24084] veth1_macvtap: entered promiscuous mode [ 1594.980576][T24084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1595.034354][T24084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1595.097011][ T8885] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.105842][ T8885] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.212787][ T8885] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.264461][ T8885] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.291199][T24598] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15386'. [ 1595.335314][T24600] tipc: Enabling of bearer rejected, failed to enable media [ 1595.429798][T24600] netem: change failed [ 1595.511291][ T8873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1595.548080][ T8873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1595.645171][T24609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15390'. [ 1595.693049][T24614] netlink: 104 bytes leftover after parsing attributes in process `syz.6.15392'. [ 1595.733736][ T8884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1595.741620][ T8884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1595.756265][T24614] geneve3: entered promiscuous mode [ 1595.761804][T24614] geneve3: entered allmulticast mode [ 1595.787305][ T8873] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1595.822210][ T8889] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1595.831100][ T8889] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1595.867103][ T8889] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1596.098741][T24630] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1596.427234][T24647] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1596.442116][T24647] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1596.451765][T24647] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1596.508890][T24647] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1596.537281][T24647] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1596.954229][T24662] syzkaller0: entered promiscuous mode [ 1596.972078][T24662] syzkaller0: entered allmulticast mode [ 1597.712253][T24691] macvlan0: left promiscuous mode [ 1597.721237][T24691] netlink: 'syz.2.15413': attribute type 2 has an invalid length. [ 1597.738171][T24641] wg1 speed is unknown, defaulting to 1000 [ 1597.888297][T24706] vlan2: entered allmulticast mode [ 1597.893493][T24706] bond0: entered allmulticast mode [ 1597.898639][T24706] bond_slave_0: entered allmulticast mode [ 1597.904409][T24706] bond_slave_1: entered allmulticast mode [ 1598.138463][T24711] bridge4: entered promiscuous mode [ 1598.163003][T24711] bridge4: entered allmulticast mode [ 1598.217887][T24711] team0: Port device bridge4 added [ 1598.243642][T24718] bridge0: port 3(team0) entered blocking state [ 1598.273712][T24718] bridge0: port 3(team0) entered disabled state [ 1598.280304][T24718] team0: entered allmulticast mode [ 1598.285491][T24718] team_slave_0: entered allmulticast mode [ 1598.291309][T24718] team_slave_1: entered allmulticast mode [ 1598.299943][T24718] team0: entered promiscuous mode [ 1598.322959][T24718] team_slave_0: entered promiscuous mode [ 1598.328991][T24718] team_slave_1: entered promiscuous mode [ 1598.336193][T24718] bridge0: port 3(team0) entered blocking state [ 1598.342640][T24718] bridge0: port 3(team0) entered forwarding state [ 1598.430726][T24641] lo speed is unknown, defaulting to 1000 [ 1598.604773][T24647] Bluetooth: hci4: command tx timeout [ 1599.234014][T24641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1599.241535][T24641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1599.249540][T24641] bridge_slave_0: entered allmulticast mode [ 1599.260149][T24641] bridge_slave_0: entered promiscuous mode [ 1599.269511][T24641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1599.276973][T24641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1599.284311][T24641] bridge_slave_1: entered allmulticast mode [ 1599.293257][T24641] bridge_slave_1: entered promiscuous mode [ 1599.332991][T24641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1599.374023][T24641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1599.402217][T24647] block nbd7: Receive control failed (result -32) [ 1599.517592][T24641] team0: Port device team_slave_0 added [ 1599.528361][T24768] IPv6: NLM_F_CREATE should be specified when creating new route [ 1599.545145][T24641] team0: Port device team_slave_1 added [ 1599.688513][T24641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1599.696259][T24641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1599.795851][T24641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1599.821895][T24641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1599.831767][T24641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1599.922276][T24641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1599.992612][T24788] vlan2: entered allmulticast mode [ 1599.997822][T24788] bond0: entered allmulticast mode [ 1600.002972][T24788] bond_slave_0: entered allmulticast mode [ 1600.009189][T24788] bond_slave_1: entered allmulticast mode [ 1600.053123][T24788] __nla_validate_parse: 4 callbacks suppressed [ 1600.053143][T24788] netlink: 14 bytes leftover after parsing attributes in process `syz.2.15444'. [ 1600.103159][T24641] hsr_slave_0: entered promiscuous mode [ 1600.109940][T24641] hsr_slave_1: entered promiscuous mode [ 1600.116440][T24641] debugfs: 'hsr0' already exists in 'hsr' [ 1600.122228][T24641] Cannot create hsr debugfs directory [ 1600.243430][T24788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1600.256942][T24788] bond_slave_0: left allmulticast mode [ 1600.264161][T24788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1600.274030][T24788] bond_slave_1: left allmulticast mode [ 1600.280595][T24788] bond0 (unregistering): Released all slaves [ 1600.357342][T24800] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.15448'. [ 1600.368552][T24800] veth0_to_bond: default FDB implementation only supports local addresses [ 1600.377767][T24798] netlink: 'syz.6.15447': attribute type 1 has an invalid length. [ 1600.430516][T24798] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1600.448959][T24803] batadv1: entered allmulticast mode [ 1600.652967][T24811] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1600.677669][T24808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15450'. [ 1600.686789][T24808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15450'. [ 1600.699262][T24812] netlink: 'syz.6.15451': attribute type 12 has an invalid length. [ 1600.766598][T24647] Bluetooth: hci4: command tx timeout [ 1601.029180][T24823] netlink: 40 bytes leftover after parsing attributes in process `syz.6.15454'. [ 1601.746344][T24850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15460'. [ 1601.785597][T24850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15460'. [ 1601.794917][T24856] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15462'. [ 1602.009175][T24870] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15464'. [ 1602.305185][T24887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1602.486059][T24899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15474'. [ 1602.596431][T24903] gretap1: entered promiscuous mode [ 1602.602621][T24903] batman_adv: batadv0: Adding interface: gretap1 [ 1602.609057][T24903] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 1602.681945][T24903] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1602.739800][T24910] 8021q: VLANs not supported on lo [ 1602.871124][T24647] Bluetooth: hci4: command tx timeout [ 1602.950133][T24641] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1602.966036][T24641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1603.019561][T24641] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1603.063212][T24641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1603.076881][T24924] netlink: 'syz.5.15481': attribute type 1 has an invalid length. [ 1603.102720][T24641] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1603.121084][T24924] netlink: 'syz.5.15481': attribute type 1 has an invalid length. [ 1603.128971][T24924] netlink: 'syz.5.15481': attribute type 1 has an invalid length. [ 1603.153115][T24924] netlink: 'syz.5.15481': attribute type 2 has an invalid length. [ 1603.172499][T24641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1603.285316][T24641] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1603.324230][T24641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1603.519382][T24934] syzkaller1: entered promiscuous mode [ 1603.525547][T24934] syzkaller1: entered allmulticast mode [ 1603.965605][T24641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1604.002256][T24965] syzkaller0: entered promiscuous mode [ 1604.007796][T24965] syzkaller0: entered allmulticast mode [ 1604.028502][T24965] xt_cgroup: path and classid specified [ 1604.302912][T24641] 8021q: adding VLAN 0 to HW filter on device team0 [ 1604.360577][ T8892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1604.367865][ T8892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1604.392784][ T8889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.399999][ T8889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1604.472302][T24641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1605.008197][T24647] Bluetooth: hci4: command tx timeout [ 1605.083966][T25017] __nla_validate_parse: 7 callbacks suppressed [ 1605.083989][T25017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15506'. [ 1605.126996][T25017] netlink: 224 bytes leftover after parsing attributes in process `syz.2.15506'. [ 1605.143638][T25017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15506'. [ 1605.144343][T24641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1605.258008][T24641] veth0_vlan: entered promiscuous mode [ 1605.299753][T24641] veth1_vlan: entered promiscuous mode [ 1605.339068][T25017] x_tables: duplicate underflow at hook 1 [ 1605.345378][T25022] netlink: 'syz.6.15508': attribute type 1 has an invalid length. [ 1605.359586][T25024] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15509'. [ 1605.453478][T24641] veth0_macvtap: entered promiscuous mode [ 1605.506560][T25029] netlink: 'syz.0.15510': attribute type 1 has an invalid length. [ 1605.519924][T24641] veth1_macvtap: entered promiscuous mode [ 1605.543747][T24641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1605.555721][T24641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1605.572537][T25029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15510'. [ 1605.595162][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.608824][T25029] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 1605.689073][ T8873] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.714144][ T8873] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.736090][ T8873] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.808095][T25038] netlink: 216 bytes leftover after parsing attributes in process `syz.0.15514'. [ 1605.910432][T25038] tipc: Enabling of bearer rejected, failed to enable media [ 1605.938775][ T8873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1605.953526][ T8873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1605.994673][ T8873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1606.027013][ T8873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1606.130186][T25046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15516'. [ 1606.139228][T25046] netlink: 'syz.0.15516': attribute type 5 has an invalid length. [ 1606.178799][T25046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15516'. [ 1607.177642][T25046] geneve2: entered promiscuous mode [ 1607.182948][T25046] geneve2: entered allmulticast mode [ 1607.192249][T25055] netlink: 72 bytes leftover after parsing attributes in process `syz.2.15519'. [ 1607.243192][T25057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15518'. [ 1607.260672][ T8873] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1607.269387][ T8873] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1607.307202][ T8873] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1607.316140][ T8873] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1607.686489][T25072] syzkaller0: entered promiscuous mode [ 1607.692052][T25072] syzkaller0: entered allmulticast mode [ 1608.473278][T25109] netlink: 'syz.0.15535': attribute type 1 has an invalid length. [ 1608.854435][T25125] netlink: 'syz.1.15541': attribute type 1 has an invalid length. [ 1611.814250][T25109] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1611.915213][T25138] __nla_validate_parse: 4 callbacks suppressed [ 1611.915234][T25138] netlink: 244 bytes leftover after parsing attributes in process `syz.6.15543'. [ 1612.021168][T25141] bridge0: port 4(syz_tun) entered blocking state [ 1612.027839][T25141] bridge0: port 4(syz_tun) entered disabled state [ 1612.034542][T25141] syz_tun: entered allmulticast mode [ 1612.101568][T25141] syz_tun: entered promiscuous mode [ 1612.110367][T25141] bridge0: port 4(syz_tun) entered blocking state [ 1612.116930][T25141] bridge0: port 4(syz_tun) entered forwarding state [ 1612.198644][T25146] IPv6: NLM_F_CREATE should be specified when creating new route [ 1612.405952][T25159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15551'. [ 1612.604944][T25159] syz_tun: left allmulticast mode [ 1612.610061][T25159] syz_tun: left promiscuous mode [ 1612.613489][T25167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15553'. [ 1612.615585][T25159] bridge0: port 4(syz_tun) entered disabled state [ 1612.633447][T25159] team0: left allmulticast mode [ 1612.638356][T25159] team_slave_0: left allmulticast mode [ 1612.643848][T25159] team_slave_1: left allmulticast mode [ 1612.652430][T25159] team0: left promiscuous mode [ 1612.657253][T25159] team_slave_0: left promiscuous mode [ 1612.662852][T25159] team_slave_1: left promiscuous mode [ 1612.668859][T25159] bridge0: port 3(team0) entered disabled state [ 1612.678425][T25159] bridge_slave_1: left allmulticast mode [ 1612.684138][T25159] bridge_slave_1: left promiscuous mode [ 1612.689959][T25159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.748216][T25159] bridge_slave_0: left allmulticast mode [ 1612.753953][T25159] bridge_slave_0: left promiscuous mode [ 1612.759728][T25159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.190079][T25190] xt_hashlimit: overflow, try lower: 3/0 [ 1613.342235][T25188] netlink: 140 bytes leftover after parsing attributes in process `syz.6.15555'. [ 1614.303128][T25219] netlink: 'syz.2.15567': attribute type 1 has an invalid length. [ 1614.409557][T25222] netlink: 'syz.6.15566': attribute type 1 has an invalid length. [ 1614.548583][T25225] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15566'. [ 1614.671483][T25232] netlink: 'syz.1.15571': attribute type 4 has an invalid length. [ 1614.732027][T25210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1614.752150][T25210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1614.985635][T25222] bond7: entered promiscuous mode [ 1614.991042][T25222] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1615.000436][T25225] bond7: entered allmulticast mode [ 1615.021858][T25239] bond7: (slave bridge5): making interface the new active one [ 1615.048127][T25239] bridge5: entered promiscuous mode [ 1615.053629][T25239] bridge5: entered allmulticast mode [ 1615.070674][T25239] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 1615.091098][ T8886] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.100608][ T8886] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 1615.113743][ T8886] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.122860][ T8886] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 1615.222090][ T8886] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.261254][ T8886] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 1615.271050][ T8886] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.279968][ T8886] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 1615.333154][T25249] netem: change failed [ 1615.894945][T25292] netlink: 616 bytes leftover after parsing attributes in process `syz.0.15587'. [ 1615.946708][T25292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15587'. [ 1615.979617][T25292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15587'. [ 1616.199090][T25300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.206756][T25300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1616.356418][T25300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1616.409262][T25300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1616.685592][T25314] tipc: Enabling of bearer rejected, already enabled [ 1616.694663][ T8884] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.715084][ T8884] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.736540][ T8884] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.755500][ T8884] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.060423][T25342] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15600'. [ 1617.091794][T25347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15604'. [ 1617.175432][T25350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15605'. [ 1617.177996][T25349] C: renamed from lo [ 1617.211840][T25349] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1617.538062][T25368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15612'. [ 1617.660496][T25362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.668412][T25362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.337985][T25362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1618.374593][T25362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1619.050395][ T8887] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.061605][ T8887] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.070556][ T8887] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.079559][ T8887] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.181856][T25386] netlink: 'syz.6.15615': attribute type 10 has an invalid length. [ 1619.211476][T25386] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1619.223304][T25386] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1619.306058][T25386] netlink: 'syz.6.15615': attribute type 39 has an invalid length. [ 1619.936456][T25427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15626'. [ 1620.023731][T25432] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15628'. [ 1620.111936][T25436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15629'. [ 1620.260179][T25445] bridge_slave_1: left allmulticast mode [ 1620.265984][T25445] bridge_slave_1: left promiscuous mode [ 1620.274257][T25445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1620.303926][T25448] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15633'. [ 1620.371864][T25445] bridge_slave_0: left allmulticast mode [ 1620.378136][T25445] bridge_slave_0: left promiscuous mode [ 1620.384121][T25445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1620.613901][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1620.628711][ T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1620.642304][ T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1620.652770][ T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1620.790475][T25467] bridge0: port 4(veth0_to_bridge) entered blocking state [ 1620.797741][T25467] bridge0: port 4(veth0_to_bridge) entered disabled state [ 1620.805127][T25467] veth0_to_bridge: entered allmulticast mode [ 1620.812946][T25467] veth0_to_bridge: entered promiscuous mode [ 1620.855222][T25467] netlink: 92 bytes leftover after parsing attributes in process `syz.6.15637'. [ 1621.041746][T25481] netlink: 'syz.2.15642': attribute type 23 has an invalid length. [ 1621.095165][T25481] team0: Port device team_slave_0 removed [ 1621.103568][T25481] team0: Port device team_slave_1 removed [ 1621.110826][T25481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1621.142283][T25485] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1621.159684][T25481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1621.178204][T25481] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1621.253966][T25487] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 1621.288375][T25487] bond1 (unregistering): Released all slaves [ 1621.367418][T25489] bridge0: entered promiscuous mode [ 1621.373717][T25489] bridge0: entered allmulticast mode [ 1621.799223][T25518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15647'. [ 1622.111870][T25531] netlink: 64 bytes leftover after parsing attributes in process `syz.6.15652'. [ 1622.123366][T25531] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1622.183574][T25537] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15654'. [ 1622.320746][T25548] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1622.341900][T25550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1622.351881][T25550] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15655'. [ 1622.473908][T25545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15658'. [ 1622.591775][T25556] netlink: 'syz.6.15660': attribute type 10 has an invalid length. [ 1622.600240][T25556] netlink: 396 bytes leftover after parsing attributes in process `syz.6.15660'. [ 1622.684651][T25559] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1622.766233][T25567] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15662'. [ 1623.121513][T25579] netlink: 'syz.0.15666': attribute type 4 has an invalid length. [ 1623.129482][T25579] netlink: 17 bytes leftover after parsing attributes in process `syz.0.15666'. [ 1623.555011][T25594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15671'. [ 1623.572690][T25588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15670'. [ 1623.885316][T25605] netlink: 32 bytes leftover after parsing attributes in process `syz.6.15673'. [ 1624.068610][T25618] FAULT_INJECTION: forcing a failure. [ 1624.068610][T25618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1624.081835][T25618] CPU: 1 UID: 0 PID: 25618 Comm: syz.0.15679 Not tainted syzkaller #0 PREEMPT(full) [ 1624.081866][T25618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1624.081876][T25618] Call Trace: [ 1624.081884][T25618] [ 1624.081890][T25618] dump_stack_lvl+0xe8/0x150 [ 1624.081912][T25618] should_fail_ex+0x412/0x560 [ 1624.081934][T25618] _copy_to_user+0x31/0xb0 [ 1624.081955][T25618] simple_read_from_buffer+0xe1/0x170 [ 1624.081976][T25618] proc_fail_nth_read+0x1bb/0x230 [ 1624.081996][T25618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1624.082016][T25618] ? rw_verify_area+0x2a6/0x4d0 [ 1624.082034][T25618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1624.082072][T25618] vfs_read+0x20c/0xa70 [ 1624.082097][T25618] ? __pfx___mutex_lock+0x10/0x10 [ 1624.082118][T25618] ? __pfx_vfs_read+0x10/0x10 [ 1624.082140][T25618] ? __fget_files+0x2a/0x420 [ 1624.082162][T25618] ? __fget_files+0x3a0/0x420 [ 1624.082179][T25618] ? __fget_files+0x2a/0x420 [ 1624.082203][T25618] ksys_read+0x150/0x270 [ 1624.082226][T25618] ? __pfx_ksys_read+0x10/0x10 [ 1624.082254][T25618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.082270][T25618] do_syscall_64+0x15f/0xf80 [ 1624.082289][T25618] ? trace_irq_disable+0x3b/0x140 [ 1624.082312][T25618] ? clear_bhb_loop+0x40/0x90 [ 1624.082331][T25618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.082346][T25618] RIP: 0033:0x7f82ded5d60e [ 1624.082360][T25618] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1624.082373][T25618] RSP: 002b:00007f82dfc02fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1624.082390][T25618] RAX: ffffffffffffffda RBX: 00007f82dfc036c0 RCX: 00007f82ded5d60e [ 1624.082401][T25618] RDX: 000000000000000f RSI: 00007f82dfc030a0 RDI: 0000000000000005 [ 1624.082411][T25618] RBP: 00007f82dfc03090 R08: 0000000000000000 R09: 0000000000000000 [ 1624.082420][T25618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1624.082429][T25618] R13: 00007f82df016038 R14: 00007f82df015fa0 R15: 00007ffc8fcdbae8 [ 1624.082453][T25618] [ 1624.529899][T25624] netlink: 'syz.1.15681': attribute type 13 has an invalid length. [ 1624.537976][T25624] netlink: 'syz.1.15681': attribute type 27 has an invalid length. [ 1624.884426][T25644] syzkaller0: entered promiscuous mode [ 1624.917136][T25644] syzkaller0: entered allmulticast mode [ 1625.065843][T10208] Bluetooth: hci3: command 0x0406 tx timeout [ 1625.244522][T25666] netlink: 'syz.6.15695': attribute type 49 has an invalid length. [ 1625.514026][T25680] netlink: 'syz.1.15698': attribute type 1 has an invalid length. [ 1625.799637][T25698] netlink: 'syz.6.15705': attribute type 1 has an invalid length. [ 1625.824328][T25701] netlink: 'syz.5.15706': attribute type 10 has an invalid length. [ 1625.855285][T25698] bond8: entered promiscuous mode [ 1625.860873][T25698] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1625.869799][T25701] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 1625.910608][T25698] bond8: entered allmulticast mode [ 1626.028498][T25698] bond8: (slave bridge6): making interface the new active one [ 1626.036191][T25698] bridge6: entered promiscuous mode [ 1626.041633][T25698] bridge6: entered allmulticast mode [ 1626.048718][T25698] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 1626.247951][T25712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1626.555918][T25742] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1626.556376][T25724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1626.946177][T25754] netlink: 'syz.0.15719': attribute type 1 has an invalid length. [ 1627.017934][T25754] bond1: entered promiscuous mode [ 1627.023462][T25754] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1627.040178][T25754] bond1: entered allmulticast mode [ 1627.060411][T25754] bond1: (slave bridge0): making interface the new active one [ 1627.092775][T25754] bridge0: entered promiscuous mode [ 1627.098382][T25754] bridge0: entered allmulticast mode [ 1627.105847][T25754] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 1627.226711][T25766] netlink: 'syz.6.15721': attribute type 1 has an invalid length. [ 1627.384578][T25770] can: request_module (can-proto-0) failed. [ 1627.672674][T25780] __nla_validate_parse: 9 callbacks suppressed [ 1627.672695][T25780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15724'. [ 1627.720531][T25785] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1627.748223][T25783] bond2: entered promiscuous mode [ 1627.754079][T25785] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.15727'. [ 1627.833717][T25783] macvlan2: entered promiscuous mode [ 1627.850716][T25783] macvlan2: entered allmulticast mode [ 1627.880833][T25788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1627.996167][T25796] netlink: 'syz.6.15731': attribute type 1 has an invalid length. [ 1628.014583][T25796] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15731'. [ 1628.082253][T25798] netlink: 32 bytes leftover after parsing attributes in process `syz.5.15733'. [ 1628.497419][ T8884] bond0: (slave bond_slave_1): interface is now down [ 1628.509223][T25819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1628.516719][ T8884] bond0: (slave netdevsim1): interface is now down [ 1628.628393][T25819] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15739'. [ 1628.755768][T25830] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15743'. [ 1628.849093][T25837] netlink: 'syz.5.15746': attribute type 83 has an invalid length. [ 1628.858148][T25839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15745'. [ 1628.868894][T25837] netlink: 'syz.5.15746': attribute type 11 has an invalid length. [ 1629.029414][T25381] IPVS: starting estimator thread 0... [ 1629.226392][T25858] can: request_module (can-proto-5) failed. [ 1629.263128][T25859] can: request_module (can-proto-5) failed. [ 1629.326964][T25846] IPVS: using max 29 ests per chain, 69600 per kthread [ 1629.390839][T25870] netlink: 'syz.6.15755': attribute type 3 has an invalid length. [ 1629.411817][T25870] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15755'. [ 1629.532693][T25879] syzkaller0: entered promiscuous mode [ 1629.599490][T25879] syzkaller0: entered allmulticast mode [ 1629.684582][T25886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15761'. [ 1630.014256][T25894] netlink: 9 bytes leftover after parsing attributes in process `syz.2.15764'. [ 1630.025733][T25894] 0·: renamed from hsr0 [ 1630.035470][T25894] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1630.045706][T25894] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1630.127178][T25894] 0·: entered allmulticast mode [ 1630.132137][T25894] hsr_slave_0: entered allmulticast mode [ 1630.137830][T25894] hsr_slave_1: entered allmulticast mode [ 1630.226871][T25894] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1630.246465][T25904] xt_connbytes: Forcing CT accounting to be enabled [ 1630.332093][T25911] netlink: 'syz.5.15767': attribute type 1 has an invalid length. [ 1630.568175][T25904] bond1: (slave geneve2): making interface the new active one [ 1630.582126][T25904] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1630.606422][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1630.622870][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1630.637613][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1630.654485][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1631.012058][T25881] syz.6.15759 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1631.023665][T25881] CPU: 0 UID: 0 PID: 25881 Comm: syz.6.15759 Not tainted syzkaller #0 PREEMPT(full) [ 1631.023704][T25881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1631.023715][T25881] Call Trace: [ 1631.023723][T25881] [ 1631.023735][T25881] dump_stack_lvl+0xe8/0x150 [ 1631.023760][T25881] dump_header+0xd3/0x4c0 [ 1631.023787][T25881] oom_kill_process+0x3ab/0x970 [ 1631.023813][T25881] out_of_memory+0x106c/0x1410 [ 1631.023832][T25881] ? try_charge_memcg+0xbb9/0x1570 [ 1631.023859][T25881] ? __pfx___mutex_lock+0x10/0x10 [ 1631.023886][T25881] ? __pfx_out_of_memory+0x10/0x10 [ 1631.023905][T25881] ? do_raw_spin_unlock+0xf5/0x210 [ 1631.023943][T25881] try_charge_memcg+0xc77/0x1570 [ 1631.023982][T25881] ? __pfx_try_charge_memcg+0x10/0x10 [ 1631.024004][T25881] ? percpu_ref_tryget+0x15/0x180 [ 1631.024044][T25881] ? charge_memcg+0x23/0x2b0 [ 1631.024075][T25881] charge_memcg+0x1a2/0x2b0 [ 1631.024100][T25881] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 1631.024123][T25881] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 1631.024149][T25881] __swap_cache_prepare_and_add+0xdc/0x700 [ 1631.024175][T25881] ? page_rmappable_folio+0x9a/0x170 [ 1631.024249][T25881] swap_cache_alloc_folio+0xf1/0x240 [ 1631.024281][T25881] swap_cluster_readahead+0x355/0x670 [ 1631.024321][T25881] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1631.024352][T25881] ? get_vma_policy+0x27b/0x3c0 [ 1631.024379][T25881] swapin_readahead+0x196/0xc50 [ 1631.024402][T25881] ? swap_table_get+0x1e/0x260 [ 1631.024424][T25881] ? __pfx_swapin_readahead+0x10/0x10 [ 1631.024445][T25881] ? swap_table_get+0x1e/0x260 [ 1631.024462][T25881] ? swap_table_get+0x1e/0x260 [ 1631.024478][T25881] ? swap_table_get+0x1e/0x260 [ 1631.024496][T25881] ? swap_table_get+0x216/0x260 [ 1631.024515][T25881] ? swap_cache_get_folio+0x2e4/0x2f0 [ 1631.024538][T25881] do_swap_page+0x555/0x5120 [ 1631.024561][T25881] ? __pte_offset_map+0x29/0x240 [ 1631.024582][T25881] ? __pte_offset_map+0x29/0x240 [ 1631.024634][T25881] ? do_swap_page+0x128/0x5120 [ 1631.024662][T25881] ? __pfx_do_swap_page+0x10/0x10 [ 1631.024689][T25881] ? __pte_offset_map+0x1ae/0x240 [ 1631.024711][T25881] ? pte_offset_map_rw_nolock+0xea/0x160 [ 1631.024734][T25881] handle_mm_fault+0x12d2/0x3170 [ 1631.024766][T25881] ? handle_mm_fault+0xee/0x3170 [ 1631.024791][T25881] ? __pfx_handle_mm_fault+0x10/0x10 [ 1631.024809][T25881] ? lock_vma_under_rcu+0x45a/0x500 [ 1631.024831][T25881] ? __pfx___sys_bpf+0x10/0x10 [ 1631.024874][T25881] do_user_addr_fault+0xa73/0x1340 [ 1631.024897][T25881] ? rcu_is_watching+0x15/0xb0 [ 1631.024917][T25881] ? trace_page_fault_user+0x84/0x1e0 [ 1631.024937][T25881] exc_page_fault+0x6a/0xc0 [ 1631.024957][T25881] asm_exc_page_fault+0x26/0x30 [ 1631.024974][T25881] RIP: 0033:0x7f32e939cdeb [ 1631.024990][T25881] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 1631.025003][T25881] RSP: 002b:00007f32ea254028 EFLAGS: 00010217 [ 1631.025018][T25881] RAX: 000000000000000c RBX: 00007f32e9615fa0 RCX: ffffffffffffffe8 [ 1631.025030][T25881] RDX: 0000000000000048 RSI: 0000200000000640 RDI: 0000000000000000 [ 1631.025040][T25881] RBP: 00007f32e9432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1631.025051][T25881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1631.025065][T25881] R13: 00007f32e9616038 R14: 00007f32e9615fa0 R15: 00007ffdf96839d8 [ 1631.025092][T25881] [ 1631.025099][T25881] memory: usage 307200kB, limit 307200kB, failcnt 162 [ 1631.060079][ T8892] bond0: (slave bond_slave_1): interface is now down [ 1631.064678][T25881] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 1631.071879][ T8892] bond0: (slave netdevsim1): interface is now down [ 1631.074617][T25881] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 1631.074638][T25881] Memory cgroup stats for /syz6 [ 1631.648177][T25922] bond0: Removing last ns target with arp_interval on [ 1631.765717][T25881] : [ 1631.765850][T25881] cache 0 [ 1631.855377][T25881] rss 28672 [ 1631.875070][T25881] rss_huge 0 [ 1631.916008][T25881] shmem 0 [ 1631.932603][T25881] mapped_file 0 [ 1631.951925][T25881] dirty 0 [ 1631.968259][T25881] writeback 0 [ 1631.997877][T25881] workingset_refault_anon 15 [ 1632.015912][T25881] workingset_refault_file 0 [ 1632.025192][T25936] netlink: 'syz.1.15773': attribute type 1 has an invalid length. [ 1632.037472][T25881] swap 159744 [ 1632.044174][T25881] swapcached 262144 [ 1632.062699][T25881] pgpgin 15555 [ 1632.069830][T25881] pgpgout 15545 [ 1632.078270][T25881] pgfault 33018 [ 1632.081902][T25881] pgmajfault 12 [ 1632.085525][T25881] inactive_anon 36864 [ 1632.090540][T25881] active_anon 0 [ 1632.094123][T25881] inactive_file 0 [ 1632.098521][T25881] active_file 0 [ 1632.102278][T25881] unevictable 0 [ 1632.105837][T25881] hierarchical_memory_limit 314572800 [ 1632.119591][T25881] hierarchical_memsw_limit 9223372036854771712 [ 1632.133543][ T8886] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1632.189630][T25881] total_cache 0 [ 1632.205533][T25881] total_rss 28672 [ 1632.219268][T25881] total_rss_huge 0 [ 1632.243171][T25881] total_shmem 0 [ 1632.253551][T25881] total_mapped_file 0 [ 1632.318201][T25881] total_dirty 0 [ 1632.348996][T25881] total_writeback 0 [ 1632.378429][T25927] macvlan2: entered promiscuous mode [ 1632.384253][T25881] total_workingset_refault_anon 15 [ 1632.425524][T25881] total_workingset_refault_file 0 [ 1632.432398][T25927] macvlan2: entered allmulticast mode [ 1632.458416][T25881] total_swap 159744 [ 1632.478339][T25927] bond1: entered promiscuous mode [ 1632.481784][T25881] total_swapcached 262144 [ 1632.519395][T25881] total_pgpgin 15555 [ 1632.537005][T25881] total_pgpgout 15545 [ 1632.550856][T25881] total_pgfault 33018 [ 1632.560045][T25927] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1632.579349][T25881] total_pgmajfault 12 [ 1632.631706][T25881] total_inactive_anon 36864 [ 1632.651176][T25881] total_active_anon 0 [ 1632.675954][T25881] total_inactive_file 0 [ 1632.698892][T25927] bond1: left promiscuous mode [ 1632.704485][T25881] total_active_file 0 [ 1632.723582][T25881] total_unevictable 0 [ 1632.752474][T25881] anon_cost 0 [ 1632.773305][T25881] file_cost 0 [ 1632.792751][T25881] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.15759,pid=25880,uid=0 [ 1632.846290][T25881] Memory cgroup out of memory: Killed process 25881 (syz.6.15759) total-vm:102424kB, anon-rss:1276kB, file-rss:22932kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1632.973343][ T8886] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1632.985830][ T8887] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1633.016567][ T8887] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1633.220220][T25974] __nla_validate_parse: 1 callbacks suppressed [ 1633.220239][T25974] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15780'. [ 1633.326438][T25981] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.15782'. [ 1633.353747][T25982] erspan0: entered promiscuous mode [ 1633.363562][T25982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15783'. [ 1633.649420][T25997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15788'. [ 1633.719926][T25999] netlink: 76 bytes leftover after parsing attributes in process `syz.0.15789'. [ 1633.952850][ T8890] bond0: (slave bond_slave_1): interface is now down [ 1633.959619][ T8890] bond0: (slave netdevsim1): interface is now down [ 1633.988860][T26001] syzkaller1: entered promiscuous mode [ 1634.009358][T26001] syzkaller1: entered allmulticast mode [ 1634.245854][T26014] bond2 (unregistering): Released all slaves [ 1634.845971][T26048] netlink: 'syz.1.15801': attribute type 1 has an invalid length. [ 1634.932989][T26051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15801'. [ 1635.062390][T26054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15803'. [ 1635.178816][T26048] bond2: entered promiscuous mode [ 1635.184521][T26048] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1635.214609][T26051] bond2: entered allmulticast mode [ 1635.222919][T26060] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15804'. [ 1635.320743][T26057] bond2: (slave bridge1): making interface the new active one [ 1635.329024][T26057] bridge1: entered promiscuous mode [ 1635.334726][T26057] bridge1: entered allmulticast mode [ 1635.341916][T26057] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1635.413552][T26069] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15806'. [ 1635.617175][T24647] Bluetooth: hci4: command tx timeout [ 1635.894519][T26092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15815'. [ 1636.016084][T26090] dvmrp0: entered allmulticast mode [ 1636.056022][T26092] openvswitch: netlink: Message has 8 unknown bytes. [ 1636.062788][T26092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1636.115666][T26097] can: request_module (can-proto-0) failed. [ 1636.397512][T26117] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1636.540231][T26117] macvlan3: entered promiscuous mode [ 1636.589917][T26117] bond9: entered promiscuous mode [ 1636.604901][T26117] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1636.623604][ T8886] bond0: (slave bond_slave_1): interface is now down [ 1636.630454][ T8886] bond0: (slave netdevsim1): interface is now down [ 1636.650569][T26117] bond9: left promiscuous mode [ 1636.695409][T26138] netlink: 'syz.5.15830': attribute type 3 has an invalid length. [ 1636.717960][T26138] netlink: 'syz.5.15830': attribute type 1 has an invalid length. [ 1636.799655][T26144] netlink: 'syz.5.15832': attribute type 1 has an invalid length. [ 1636.994094][T26151] openvswitch: netlink: Duplicate key (type 2). [ 1637.010254][T26153] tipc: Enabling of bearer rejected, failed to enable media [ 1637.066353][T26153] syzkaller1: entered promiscuous mode [ 1637.073383][T26153] syzkaller1: entered allmulticast mode [ 1637.220723][T26160] vlan2: entered allmulticast mode [ 1637.226140][T26160] bond0: entered allmulticast mode [ 1637.232354][T26160] bond_slave_1: entered allmulticast mode [ 1637.238687][T26160] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 1637.253579][T26160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1637.314932][T26160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1637.322787][T26165] netlink: 'syz.1.15840': attribute type 1 has an invalid length. [ 1637.334928][T26160] bond_slave_1: left allmulticast mode [ 1637.359317][T26160] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1637.391097][T26160] netdevsim netdevsim6 netdevsim1: left allmulticast mode [ 1637.416881][T26160] bond0 (unregistering): Released all slaves [ 1637.677984][T26181] netlink: 'syz.1.15846': attribute type 1 has an invalid length. [ 1638.235694][T26212] __nla_validate_parse: 18 callbacks suppressed [ 1638.235717][T26212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15854'. [ 1638.389237][T26214] netlink: 'syz.5.15855': attribute type 10 has an invalid length. [ 1638.525045][T26223] netlink: 164 bytes leftover after parsing attributes in process `syz.2.15857'. [ 1638.535849][T26223] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.15857'. [ 1638.578872][T26228] netlink: 'syz.5.15858': attribute type 1 has an invalid length. [ 1638.613490][T26228] bond2: entered promiscuous mode [ 1638.619424][T26228] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1638.633840][T26228] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15858'. [ 1638.643423][T26228] bond2: entered allmulticast mode [ 1638.667973][T26228] bond2: (slave bridge1): making interface the new active one [ 1638.678585][T26228] bridge1: entered promiscuous mode [ 1638.685201][T26228] bridge1: entered allmulticast mode [ 1638.693411][T26228] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1638.797953][T26237] netlink: 244 bytes leftover after parsing attributes in process `syz.2.15861'. [ 1638.859118][T26237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15861'. [ 1638.868124][T26237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15861'. [ 1639.000565][T26249] netlink: 'syz.2.15865': attribute type 12 has an invalid length. [ 1639.084302][T26249] bond1: option primary_reselect: invalid value (255) [ 1639.100636][T26249] bond1 (unregistering): Released all slaves [ 1639.554667][T26270] syzkaller0: entered promiscuous mode [ 1639.560248][T26270] syzkaller0: entered allmulticast mode [ 1639.634117][T26239] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1639.708865][T26281] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15872'. [ 1639.813556][T26289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15874'. [ 1639.850482][T26278] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15871'. [ 1643.089551][T26312] openvswitch: netlink: Key type 30 is not supported [ 1643.410909][T26329] lo: Caught tx_queue_len zero misconfig [ 1643.650049][T26349] netdevsim netdevsim6: Direct firmware load for .. failed with error -2 [ 1643.663659][T26349] netdevsim netdevsim6: Falling back to sysfs fallback for: .. [ 1643.745821][T26355] ±ÿ: renamed from team_slave_1 [ 1643.926080][T26362] __nla_validate_parse: 3 callbacks suppressed [ 1643.926101][T26362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15894'. [ 1643.978722][T26362] netlink: 144 bytes leftover after parsing attributes in process `syz.1.15894'. [ 1644.100834][T26370] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15897'. [ 1646.345843][T26328] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1646.556419][T26403] openvswitch: netlink: Flow key attr not present in new flow. [ 1646.591006][T26405] netlink: 44 bytes leftover after parsing attributes in process `syz.0.15907'. [ 1646.652849][T26410] netlink: 'syz.6.15909': attribute type 1 has an invalid length. [ 1646.732951][T26413] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15909'. [ 1646.749863][T26413] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15909'. [ 1646.769837][T26417] IPVS: Error connecting to the multicast addr [ 1646.781406][T26419] netlink: 'syz.1.15912': attribute type 4 has an invalid length. [ 1646.827816][T26417] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15911'. [ 1646.881678][T26413] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15909'. [ 1646.890929][T26413] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15909'. [ 1646.924185][T26410] bond0: (slave bridge8): making interface the new active one [ 1646.933162][T26410] bond0: (slave bridge8): Enslaving as an active interface with an up link [ 1646.955664][T26433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15915'. [ 1646.964827][T26433] bridge_slave_1: left allmulticast mode [ 1646.970586][T26433] bridge_slave_1: left promiscuous mode [ 1646.976355][T26433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1647.009998][T26433] bridge_slave_0: left allmulticast mode [ 1647.047082][T26433] bridge_slave_0: left promiscuous mode [ 1647.052998][T26433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1647.728727][T26469] netlink: 'syz.0.15920': attribute type 24 has an invalid length. [ 1648.143002][T26463] bridge0: entered promiscuous mode [ 1648.157690][T26463] bridge0: entered allmulticast mode [ 1648.236585][T26486] netlink: 'syz.6.15933': attribute type 1 has an invalid length. [ 1648.273061][T26486] bond10: entered promiscuous mode [ 1648.278396][T26486] bond10: entered allmulticast mode [ 1648.284185][T26486] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1648.303140][T26486] macvlan3: entered promiscuous mode [ 1648.308584][T26486] macvlan3: entered allmulticast mode [ 1648.316128][T26486] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1648.650687][T26501] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1648.945319][T26523] netlink: 'syz.0.15944': attribute type 11 has an invalid length. [ 1649.083135][T26536] __nla_validate_parse: 6 callbacks suppressed [ 1649.083157][T26536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15947'. [ 1649.143791][T26538] netlink: 44 bytes leftover after parsing attributes in process `syz.5.15948'. [ 1649.220669][T26541] netlink: 256 bytes leftover after parsing attributes in process `syz.6.15950'. [ 1649.486528][T26555] netlink: 'syz.0.15954': attribute type 21 has an invalid length. [ 1649.661209][T26569] netlink: 'syz.6.15959': attribute type 1 has an invalid length. [ 1649.798560][T26578] netlink: 44 bytes leftover after parsing attributes in process `syz.1.15961'. [ 1649.852796][T26584] x_tables: duplicate underflow at hook 2 [ 1650.025428][ T29] audit: type=1804 audit(1777719870.635:12): pid=26593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.15963" name="/newroot/172/cgroup.controllers" dev="tmpfs" ino=888 res=1 errno=0 [ 1650.096977][ T29] audit: type=1800 audit(1777719870.635:13): pid=26593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.15963" name="cgroup.controllers" dev="tmpfs" ino=888 res=0 errno=0 [ 1650.504058][T26608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15971'. [ 1650.652677][T26615] netlink: 84 bytes leftover after parsing attributes in process `syz.2.15973'. [ 1650.748892][T26618] IPv6: NLM_F_CREATE should be specified when creating new route [ 1650.757280][T26618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1651.089180][T26642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15981'. [ 1651.101866][T26642] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1651.387326][T26653] dummy0: left allmulticast mode [ 1651.454452][T26657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1651.495300][T26659] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15989'. [ 1651.700312][T26666] netlink: 140 bytes leftover after parsing attributes in process `syz.5.15991'. [ 1652.594414][ T8873] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1652.604370][ T8873] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1652.613495][ T8873] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1652.622537][ T8873] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1652.631534][ T8873] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1652.640535][ T8873] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1652.649603][ T8873] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1652.658515][ T8873] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1652.697217][ T8873] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1652.706352][ T8873] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1652.715261][ T8873] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1652.724254][ T8873] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1652.967549][T26725] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16007'. [ 1653.095402][T26739] netlink: 'syz.6.16013': attribute type 4 has an invalid length. [ 1653.837483][T26782] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1653.932560][T26785] netlink: 'syz.6.16027': attribute type 1 has an invalid length. [ 1653.990204][T26785] netlink: 'syz.6.16027': attribute type 11 has an invalid length. [ 1653.998193][T26785] netlink: 'syz.6.16027': attribute type 4 has an invalid length. [ 1654.162549][T26801] __nla_validate_parse: 7 callbacks suppressed [ 1654.162571][T26801] netlink: 36 bytes leftover after parsing attributes in process `syz.5.16034'. [ 1654.178333][T26802] netlink: 36 bytes leftover after parsing attributes in process `syz.5.16034'. [ 1654.196319][T26806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16035'. [ 1654.634533][T26824] sctp: [Deprecated]: syz.5.16043 (pid 26824) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1654.634533][T26824] Use struct sctp_sack_info instead [ 1654.888049][T26831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16046'. [ 1654.975022][T26834] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16048'. [ 1655.241152][T26843] netlink: 'syz.0.16051': attribute type 1 has an invalid length. [ 1655.260710][T26840] bond4: option mode: invalid value (133) [ 1655.269606][T26840] bond4 (unregistering): Released all slaves [ 1655.358883][T26847] netlink: 32 bytes leftover after parsing attributes in process `syz.5.16052'. [ 1655.367993][T26849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16051'. [ 1655.382050][T26843] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1655.392999][T26843] netlink: 'syz.0.16051': attribute type 3 has an invalid length. [ 1655.403474][T26843] netlink: 'syz.0.16051': attribute type 4 has an invalid length. [ 1655.411366][T26843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16051'. [ 1655.421694][T26843] netlink: 14 bytes leftover after parsing attributes in process `syz.0.16051'. [ 1655.517575][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1655.525478][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1655.743837][T26866] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16058'. [ 1655.973635][T26882] netdevsim netdevsim2: Direct firmware load for r1 failed with error -2 [ 1655.983262][T26882] netdevsim netdevsim2: Falling back to sysfs fallback for: r1 [ 1656.014812][T26885] SET target dimension over the limit! [ 1656.087161][T26889] bond3 (unregistering): Released all slaves [ 1656.717739][T26913] netlink: ct family unspecified [ 1656.782044][T26919] netlink: 'syz.5.16076': attribute type 1 has an invalid length. [ 1657.156905][T26937] netlink: 'syz.0.16081': attribute type 30 has an invalid length. [ 1657.174416][T22360] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1657.203442][T22360] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1657.275733][T22360] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1657.285326][T22360] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1657.552361][T26955] ip6tnl0: Caught tx_queue_len zero misconfig [ 1657.928102][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1657.949725][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1658.156355][T26996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1658.768980][T27014] batadv1: entered allmulticast mode [ 1659.045287][T27021] syz_tun: entered allmulticast mode [ 1659.160411][T27025] netlink: 'syz.5.16107': attribute type 2 has an invalid length. [ 1659.382849][T27032] bond1: invalid ARP target 0.0.0.0 specified for addition [ 1659.390375][T27032] bond1: option arp_ip_target: invalid value (0) [ 1659.398899][T27032] bond1 (unregistering): Released all slaves [ 1659.432960][T27036] ip6gre1: entered allmulticast mode [ 1659.824558][T27058] openvswitch: netlink: Message has 1 unknown bytes. [ 1659.831364][T27058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1660.016016][T27062] netlink: 'syz.5.16122': attribute type 1 has an invalid length. [ 1660.095227][T27062] bond3: entered promiscuous mode [ 1660.102217][T27062] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1660.176121][T27062] __nla_validate_parse: 82 callbacks suppressed [ 1660.176144][T27062] netlink: 28 bytes leftover after parsing attributes in process `syz.5.16122'. [ 1660.196028][T27062] bond3: entered allmulticast mode [ 1660.217460][T27062] bond3: (slave bridge2): making interface the new active one [ 1660.225196][T27062] bridge2: entered promiscuous mode [ 1660.231251][T27062] bridge2: entered allmulticast mode [ 1660.241284][T27062] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 1660.736797][T10208] Bluetooth: hci1: command 0x0406 tx timeout [ 1660.991437][T27103] netlink: 'syz.2.16130': attribute type 12 has an invalid length. [ 1662.088268][T27134] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20004 [ 1662.095622][T27134] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20002 [ 1663.323041][T27085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1663.530974][T27141] netlink: 'syz.1.16136': attribute type 1 has an invalid length. [ 1663.617709][T27138] netlink: 1068 bytes leftover after parsing attributes in process `syz.6.16138'. [ 1663.638235][T27149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16136'. [ 1663.689416][T27141] bond4: entered promiscuous mode [ 1663.695388][T27141] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1663.759021][T27155] bond4: (slave bridge0): making interface the new active one [ 1663.798404][T27160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16141'. [ 1663.837288][T27155] bridge0: entered promiscuous mode [ 1663.844408][T27155] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 1663.853197][T27160] xt_hashlimit: size too large, truncated to 1048576 [ 1663.915405][T27149] bond4: entered allmulticast mode [ 1663.920608][T27149] bridge0: entered allmulticast mode [ 1663.931479][T27157] veth0_to_bond: entered allmulticast mode [ 1664.237325][T27175] xt_l2tp: v2 doesn't support IP mode [ 1664.371016][T27178] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16149'. [ 1664.413873][T27181] netlink: 212088 bytes leftover after parsing attributes in process `syz.6.16150'. [ 1664.454620][T27185] netlink: 212088 bytes leftover after parsing attributes in process `syz.6.16150'. [ 1664.541824][T27190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16153'. [ 1664.700277][T27198] can: request_module (can-proto-3) failed. [ 1664.765715][T27206] netlink: 'syz.0.16158': attribute type 1 has an invalid length. [ 1664.912671][T27206] bond4: entered promiscuous mode [ 1664.929599][T27206] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1664.940042][T27213] xt_ecn: cannot match TCP bits for non-tcp packets [ 1664.945972][T27206] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16158'. [ 1664.955874][T27206] bond4: entered allmulticast mode [ 1664.977288][T27206] bond4: (slave bridge5): making interface the new active one [ 1664.984835][T27206] bridge5: entered promiscuous mode [ 1664.990268][T27206] bridge5: entered allmulticast mode [ 1664.997914][T27206] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 1665.221796][T27226] netlink: 76 bytes leftover after parsing attributes in process `syz.6.16166'. [ 1665.237525][T27230] netlink: 9 bytes leftover after parsing attributes in process `syz.0.16167'. [ 1665.237663][T27230] 0·: renamed from hsr0 [ 1665.264190][T27230] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1665.274423][T27230] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1665.284841][T27230] 0·: entered allmulticast mode [ 1665.289754][T27230] hsr_slave_0: entered allmulticast mode [ 1665.295427][T27230] hsr_slave_1: entered allmulticast mode [ 1665.303246][T27230] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1665.365394][T27230] netlink: 144 bytes leftover after parsing attributes in process `syz.0.16167'. [ 1665.391853][T27226] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16166'. [ 1665.604388][T27241] netlink: 16215 bytes leftover after parsing attributes in process `syz.6.16170'. [ 1665.629621][T24647] block nbd8: Receive control failed (result -32) [ 1665.826904][T27257] netlink: 'syz.5.16173': attribute type 10 has an invalid length. [ 1665.984134][T27262] netlink: 'syz.0.16178': attribute type 1 has an invalid length. [ 1666.066400][T27265] netlink: 'syz.0.16179': attribute type 32 has an invalid length. [ 1666.146316][T27268] bridge_slave_0: entered allmulticast mode [ 1666.412541][T27282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16185'. [ 1666.424483][T27282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16185'. [ 1666.482066][T27287] netlink: 'syz.2.16187': attribute type 49 has an invalid length. [ 1666.811614][T27309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16194'. [ 1666.860934][T27309] macvlan2: entered allmulticast mode [ 1666.872826][T27309] dummy0: entered allmulticast mode [ 1666.927641][T27317] netlink: 'syz.6.16198': attribute type 1 has an invalid length. [ 1666.942507][T27317] nbd: error processing sock list [ 1667.139527][T27330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1667.154310][T27330] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16200'. [ 1667.322688][T27339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16202'. [ 1667.425327][T27343] block nbd2: NBD_DISCONNECT [ 1667.430111][T27343] block nbd2: Send disconnect failed -32 [ 1667.435788][T27343] block nbd2: shutting down sockets [ 1667.653884][T27355] netlink: 'syz.5.16206': attribute type 21 has an invalid length. [ 1667.662441][T27355] netlink: 'syz.5.16206': attribute type 22 has an invalid length. [ 1667.670397][T27355] netlink: 'syz.5.16206': attribute type 23 has an invalid length. [ 1667.701554][T27358] netlink: 'syz.0.16205': attribute type 17 has an invalid length. [ 1667.789437][T27358] gretap0: entered promiscuous mode [ 1667.854069][T27358] gretap0: left promiscuous mode [ 1667.880155][T27367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1667.972126][T27369] dvmrp0: entered allmulticast mode [ 1669.111321][T27430] syzkaller0: entered promiscuous mode [ 1669.116867][T27430] syzkaller0: entered allmulticast mode [ 1669.194068][T27432] C: renamed from lo [ 1669.200611][T27432] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1669.305974][T27443] bond6: entered promiscuous mode [ 1669.312026][T27443] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1669.347555][T27443] bond6: entered allmulticast mode [ 1669.396200][T27443] bond6: (slave bridge6): making interface the new active one [ 1669.403747][T27443] bridge6: entered promiscuous mode [ 1669.409183][T27443] bridge6: entered allmulticast mode [ 1669.416322][T27443] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 1669.451372][T27450] bond3: entered promiscuous mode [ 1669.456489][T27450] bond3: entered allmulticast mode [ 1669.755546][T27466] openvswitch: netlink: Missing valid actions attribute. [ 1669.762694][T27466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1669.789052][T27468] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1669.796373][T27468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1670.570919][T27493] validate_nla: 5 callbacks suppressed [ 1670.570940][T27493] netlink: 'syz.1.16243': attribute type 1 has an invalid length. [ 1670.627471][T27493] bond5: entered promiscuous mode [ 1670.639048][T27493] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1670.646687][T27498] __nla_validate_parse: 18 callbacks suppressed [ 1670.646710][T27498] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16244'. [ 1670.680081][T27493] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16243'. [ 1670.689398][T27493] bond5: entered allmulticast mode [ 1670.713836][T27493] bond5: (slave bridge3): making interface the new active one [ 1670.722870][T27493] bridge3: entered promiscuous mode [ 1670.728967][T27493] bridge3: entered allmulticast mode [ 1670.736291][T27493] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 1670.836270][T27503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16246'. [ 1670.966112][T27511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16249'. [ 1670.988394][T27512] netlink: 'syz.1.16248': attribute type 13 has an invalid length. [ 1670.998127][T27511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16249'. [ 1671.031595][T27511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16249'. [ 1671.059487][T27511] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16249'. [ 1671.358059][T27529] netlink: 'syz.2.16253': attribute type 11 has an invalid length. [ 1671.366046][T27529] netlink: 228 bytes leftover after parsing attributes in process `syz.2.16253'. [ 1671.547067][T27544] netlink: 108 bytes leftover after parsing attributes in process `syz.2.16257'. [ 1671.556518][T27544] netem: unknown loss type 8 [ 1671.562409][T27544] netem: change failed [ 1671.846981][T27554] batman_adv: batadv0: Adding interface: dummy0 [ 1671.853303][T27554] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1671.878606][T27554] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1671.971107][T27554] macvlan2: mtu less than device minimum [ 1672.252531][T27589] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16269'. [ 1672.699882][T27618] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1672.819590][T27624] x_tables: duplicate underflow at hook 2 [ 1672.901067][T27630] xt_TCPMSS: Only works on TCP SYN packets [ 1672.920046][T27629] netlink: 'syz.2.16285': attribute type 2 has an invalid length. [ 1673.027049][T27637] netlink: 'syz.1.16287': attribute type 64 has an invalid length. [ 1673.204791][T27647] bond0: entered promiscuous mode [ 1673.209961][T27647] bond_slave_0: entered promiscuous mode [ 1673.215859][T27647] bond_slave_1: entered promiscuous mode [ 1673.239676][T27647] bond0: left promiscuous mode [ 1673.244861][T27647] bond_slave_0: left promiscuous mode [ 1673.250673][T27647] bond_slave_1: left promiscuous mode [ 1673.600478][T27657] syzkaller0: entered promiscuous mode [ 1673.619455][T27657] syzkaller0: entered allmulticast mode [ 1673.646205][T27658] netlink: 'syz.2.16293': attribute type 5 has an invalid length. [ 1674.021788][T27672] netlink: 'syz.5.16297': attribute type 21 has an invalid length. [ 1674.191673][T27676] netlink: 'syz.6.16300': attribute type 1 has an invalid length. [ 1674.232389][T27676] bond12 (unregistering): Released all slaves [ 1674.604945][T27690] lo: Caught tx_queue_len zero misconfig [ 1674.994412][T27699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1675.039199][T27700] netlink: 'syz.6.16308': attribute type 1 has an invalid length. [ 1675.145134][T27709] 1·: renamed from c0· (while UP) [ 1675.216266][T27709] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 1675.367458][T27726] syzkaller1: entered promiscuous mode [ 1675.374422][T27726] syzkaller1: entered allmulticast mode [ 1675.668805][T27739] __nla_validate_parse: 18 callbacks suppressed [ 1675.668828][T27739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16320'. [ 1675.725073][T27739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16320'. [ 1676.003092][T27758] netlink: 'syz.6.16326': attribute type 1 has an invalid length. [ 1676.010987][T27758] netlink: 16179 bytes leftover after parsing attributes in process `syz.6.16326'. [ 1676.493854][T27783] netlink: 'syz.5.16333': attribute type 1 has an invalid length. [ 1676.502482][T27783] netlink: 'syz.5.16333': attribute type 4 has an invalid length. [ 1676.510336][T27783] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.16333'. [ 1676.702196][T27792] netlink: 156 bytes leftover after parsing attributes in process `syz.5.16335'. [ 1676.819283][T27798] netlink: 'syz.1.16337': attribute type 11 has an invalid length. [ 1676.838029][T27798] netlink: 228 bytes leftover after parsing attributes in process `syz.1.16337'. [ 1677.360259][T27820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16344'. [ 1677.429627][T27821] netlink: 184 bytes leftover after parsing attributes in process `syz.5.16343'. [ 1677.439493][T27821] openvswitch: netlink: Flow actions attr not present in new flow. [ 1677.661087][T27828] GUP no longer grows the stack in syz.2.16347 (27828): 200000003000-20000000a000 (200000001000) [ 1677.673104][T27828] CPU: 0 UID: 0 PID: 27828 Comm: syz.2.16347 Not tainted syzkaller #0 PREEMPT(full) [ 1677.673135][T27828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1677.673150][T27828] Call Trace: [ 1677.673159][T27828] [ 1677.673169][T27828] dump_stack_lvl+0xe8/0x150 [ 1677.673201][T27828] __get_user_pages+0x2378/0x2720 [ 1677.673234][T27828] ? __gup_longterm_locked+0xc4e/0x1630 [ 1677.673280][T27828] ? __gup_longterm_locked+0xc4e/0x1630 [ 1677.673318][T27828] ? down_read_killable+0x1bb/0x340 [ 1677.673358][T27828] __gup_longterm_locked+0xdcf/0x1630 [ 1677.673390][T27828] ? lock_acquire+0x106/0x350 [ 1677.673434][T27828] gup_fast_fallback+0x1d84/0x20d0 [ 1677.673497][T27828] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1677.673527][T27828] ? is_valid_gup_args+0x11f/0x200 [ 1677.673555][T27828] ? get_user_pages_fast+0x4d/0xb0 [ 1677.673584][T27828] __iov_iter_get_pages_alloc+0x370/0xa10 [ 1677.673625][T27828] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1677.673662][T27828] iov_iter_get_pages2+0x5e/0xa0 [ 1677.673697][T27828] __se_sys_vmsplice+0x7c7/0x1620 [ 1677.673749][T27828] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 1677.673779][T27828] ? __pfx_futex_wait+0x10/0x10 [ 1677.673823][T27828] ? lockdep_hardirqs_on+0x7a/0x110 [ 1677.673899][T27828] ? __fget_files+0x2a/0x420 [ 1677.673939][T27828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1677.673962][T27828] do_syscall_64+0x15f/0xf80 [ 1677.674008][T27828] ? clear_bhb_loop+0x40/0x90 [ 1677.674036][T27828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1677.674058][T27828] RIP: 0033:0x7f8a8439cdd9 [ 1677.674079][T27828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1677.674098][T27828] RSP: 002b:00007f8a85273028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1677.674123][T27828] RAX: ffffffffffffffda RBX: 00007f8a84615fa0 RCX: 00007f8a8439cdd9 [ 1677.674139][T27828] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1677.674153][T27828] RBP: 00007f8a84432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1677.674168][T27828] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1677.674182][T27828] R13: 00007f8a84616038 R14: 00007f8a84615fa0 R15: 00007ffd3f6c5488 [ 1677.674219][T27828] [ 1678.307058][T27846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16354'. [ 1678.403511][T27849] netem: change failed [ 1678.505013][T27856] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.16357'. [ 1678.804780][ T8887] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1678.813800][ T8887] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1678.828405][ T8889] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1678.854764][ T8889] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1679.533777][T27898] netlink: 'syz.6.16370': attribute type 6 has an invalid length. [ 1679.817457][T27912] netlink: 'syz.6.16374': attribute type 1 has an invalid length. [ 1680.525266][T27952] netlink: 'syz.6.16386': attribute type 15 has an invalid length. [ 1680.593544][T27953] can: request_module (can-proto-0) failed. [ 1680.601821][T27942] ip6tnl0: Caught tx_queue_len zero misconfig [ 1680.803483][T27958] __nla_validate_parse: 5 callbacks suppressed [ 1680.803503][T27958] netlink: 348 bytes leftover after parsing attributes in process `syz.5.16389'. [ 1680.820623][T27958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1681.037533][T27971] netlink: 'syz.0.16393': attribute type 33 has an invalid length. [ 1681.192050][T27971] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1681.215344][T27971] bond7 (unregistering): Released all slaves [ 1681.516623][T27997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16400'. [ 1681.525726][T27997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16400'. [ 1681.582992][T27999] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16401'. [ 1681.594452][T27999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16401'. [ 1681.834637][T28009] xt_hashlimit: size too large, truncated to 1048576 [ 1681.850478][T28011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16406'. [ 1681.920924][T28011] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1681.928319][T28011] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1681.935628][T28011] netlink: 184 bytes leftover after parsing attributes in process `syz.2.16406'. [ 1682.396937][T28041] gtp0: entered promiscuous mode [ 1682.401971][T28041] gtp0: entered allmulticast mode [ 1682.429508][T28042] netlink: 'syz.0.16413': attribute type 15 has an invalid length. [ 1682.467599][T28042] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16413'. [ 1682.544106][T28047] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16417'. [ 1682.805493][T28051] block nbd0: NBD_DISCONNECT [ 1682.823039][T28051] block nbd0: Send disconnect failed -32 [ 1682.828855][T28051] block nbd0: shutting down sockets [ 1683.164788][T28074] netlink: 44 bytes leftover after parsing attributes in process `syz.6.16427'. [ 1683.293769][T28082] IPv6: sit1: Disabled Multicast RS [ 1683.309967][T28082] sit1: entered allmulticast mode [ 1683.443068][T28081] IPv6: sit1: Disabled Multicast RS [ 1683.494781][T28081] sit1: entered allmulticast mode [ 1683.628173][T28101] netlink: 'syz.0.16435': attribute type 2 has an invalid length. [ 1683.661405][T28100] netlink: 'syz.0.16435': attribute type 29 has an invalid length. [ 1683.728941][T28100] netlink: 'syz.0.16435': attribute type 29 has an invalid length. [ 1683.737328][T28100] netlink: 'syz.0.16435': attribute type 29 has an invalid length. [ 1683.745837][T28100] netlink: 'syz.0.16435': attribute type 29 has an invalid length. [ 1683.754003][T28100] netlink: 'syz.0.16435': attribute type 29 has an invalid length. [ 1683.763466][T28100] netlink: 'syz.0.16435': attribute type 29 has an invalid length. [ 1683.801698][T28100] netlink: 'syz.0.16435': attribute type 29 has an invalid length. [ 1684.063292][T28091] syzkaller1: entered promiscuous mode [ 1684.068927][T28091] syzkaller1: entered allmulticast mode [ 1684.475269][T28135] wg1 speed is unknown, defaulting to 1000 [ 1684.864292][T28135] lo speed is unknown, defaulting to 1000 [ 1685.602584][T28169] bond12: Unable to set peer notification delay as MII monitoring is disabled [ 1685.674082][T28169] bond12 (unregistering): Released all slaves [ 1686.282420][T22583] hid-generic 0005:10CF:0003.000B: item fetching failed at offset 1/2 [ 1686.291373][T22583] hid-generic 0005:10CF:0003.000B: probe with driver hid-generic failed with error -22 [ 1686.763690][T28182] validate_nla: 1 callbacks suppressed [ 1686.763710][T28182] netlink: 'syz.6.16456': attribute type 30 has an invalid length. [ 1686.850291][T28184] __nla_validate_parse: 3 callbacks suppressed [ 1686.850315][T28184] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16458'. [ 1687.959903][T28154] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1688.232824][T28201] syzkaller1: entered promiscuous mode [ 1688.238375][T28201] syzkaller1: entered allmulticast mode [ 1688.251590][T28203] x_tables: unsorted entry at hook 2 [ 1688.358005][T28209] xt_hashlimit: size too large, truncated to 1048576 [ 1688.442616][T28212] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16467'. [ 1688.993322][T28228] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1689.033730][T28228] xt_hashlimit: size too large, truncated to 1048576 [ 1689.058765][T28232] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16473'. [ 1689.162345][ T8890] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1689.172675][T28232] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16473'. [ 1689.204942][ T8873] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1689.214367][ T8873] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1689.223137][ T8873] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1689.262348][T28232] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16473'. [ 1689.310721][T28243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16478'. [ 1689.498105][T28248] openvswitch: netlink: IP tunnel dst address not specified [ 1689.621960][T28260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16481'. [ 1689.663962][T28258] netlink: 'syz.2.16484': attribute type 16 has an invalid length. [ 1689.672052][T28258] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16484'. [ 1689.681299][T28260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16481'. [ 1689.683147][T28261] syzkaller1: entered promiscuous mode [ 1689.712152][T28261] syzkaller1: entered allmulticast mode [ 1690.338660][T28296] netlink: 20 bytes leftover after parsing attributes in process `syz.6.16497'. [ 1690.359451][T28294] ip6erspan1: entered allmulticast mode [ 1691.286436][T28349] syzkaller1: entered promiscuous mode [ 1691.328804][T28349] syzkaller1: entered allmulticast mode [ 1691.425902][T28368] IPVS: set_ctl: invalid protocol: 98 172.30.1.3:20004 [ 1691.751513][T28388] netlink: 'syz.5.16524': attribute type 7 has an invalid length. [ 1691.791259][T28392] netlink: 'syz.0.16525': attribute type 5 has an invalid length. [ 1691.933266][T28397] vlan1: entered promiscuous mode [ 1691.938555][T28397] vlan1: entered allmulticast mode [ 1691.943716][T28397] veth0_vlan: entered allmulticast mode [ 1691.997214][T28397] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1692.099718][T28400] syzkaller0: entered promiscuous mode [ 1692.105362][T28400] syzkaller0: entered allmulticast mode [ 1692.248940][T28397] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 1692.259002][T28397] bond7 (unregistering): Released all slaves [ 1692.278566][T28410] netlink: 'syz.6.16530': attribute type 22 has an invalid length. [ 1692.288046][T28410] __nla_validate_parse: 6 callbacks suppressed [ 1692.288065][T28410] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16530'. [ 1692.694761][T28410] netlink: 'syz.6.16530': attribute type 22 has an invalid length. [ 1692.705334][T28410] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16530'. [ 1692.916550][T28435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16537'. [ 1692.948437][T28437] netlink: 32 bytes leftover after parsing attributes in process `syz.5.16538'. [ 1693.282084][T28447] xt_CT: No such helper "pptp" [ 1693.356389][ T8890] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1693.389291][ T8890] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1693.419035][T28462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16546'. [ 1693.424029][ T8890] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1693.428091][T28462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16546'. [ 1693.482593][ T8890] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1693.538652][T28466] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.16547'. [ 1693.549114][T28462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16546'. [ 1693.559833][T28462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16546'. [ 1693.573137][ T8886] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1693.581938][ T8886] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1693.590922][ T8886] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1693.599687][ T8886] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1693.610741][T28462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16546'. [ 1693.764471][T28473] netlink: 'syz.0.16549': attribute type 9 has an invalid length. [ 1694.068368][T28487] netlink: 'syz.2.16555': attribute type 10 has an invalid length. [ 1694.087154][T28487] syz_tun: entered promiscuous mode [ 1694.269283][T28499] netlink: 'syz.2.16558': attribute type 10 has an invalid length. [ 1694.288355][T28499] team0: Device veth1_virt_wifi failed to register rx_handler [ 1694.313006][T28501] sctp: [Deprecated]: syz.5.16560 (pid 28501) Use of int in max_burst socket option deprecated. [ 1694.313006][T28501] Use struct sctp_assoc_value instead [ 1694.344350][T28499] netlink: 'syz.2.16558': attribute type 10 has an invalid length. [ 1694.393367][T28499] team0: Device veth1_virt_wifi failed to register rx_handler [ 1694.407410][ T8886] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1694.454483][ T8886] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1694.475669][ T8886] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1694.494649][ T8886] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1694.539768][ C0] bridge0: received packet on 1¾x9ÿ with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1694.792864][T28515] syzkaller0: entered promiscuous mode [ 1694.808556][T28515] syzkaller0: entered allmulticast mode [ 1694.822934][T28522] xt_TCPMSS: Only works on TCP SYN packets [ 1694.951183][T28531] ipt_ECN: cannot use operation on non-tcp rule [ 1695.847836][T28569] vlan2: entered allmulticast mode [ 1695.853077][T28569] bond0: entered allmulticast mode [ 1696.604645][T28604] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1696.624939][T28613] netlink: 'syz.1.16601': attribute type 2 has an invalid length. [ 1696.668360][T28617] netlink: 'syz.6.16600': attribute type 1 has an invalid length. [ 1696.700533][T28604] macvlan4: entered promiscuous mode [ 1696.705958][T28604] macvlan4: entered allmulticast mode [ 1696.737836][T10208] Bluetooth: hci4: command 0x0405 tx timeout [ 1696.782669][T28624] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 1696.835456][T28617] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1696.925452][T28627] bond12: (slave veth3): Enslaving as an active interface with a down link [ 1696.970660][T28631] netlink: 'syz.1.16604': attribute type 4 has an invalid length. [ 1697.052713][T28631] .`¹: renamed from bond0 [ 1697.071202][T28635] tipc: Trying to set illegal importance in message [ 1697.200981][T28639] macvlan2: entered promiscuous mode [ 1697.206572][T28639] macvlan2: entered allmulticast mode [ 1697.214914][T28639] bond0: entered promiscuous mode [ 1697.223796][T28639] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1697.248290][T28639] bond0: left promiscuous mode [ 1697.306705][T28646] __nla_validate_parse: 12 callbacks suppressed [ 1697.306726][T28646] netlink: 72 bytes leftover after parsing attributes in process `syz.6.16609'. [ 1698.290022][T28666] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.16617'. [ 1698.613364][T28683] netlink: 48 bytes leftover after parsing attributes in process `syz.5.16623'. [ 1698.632473][T28685] xt_hashlimit: overflow, rate too high: 0 [ 1698.642562][T28685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16622'. [ 1698.651630][T28685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16622'. [ 1698.660887][T28685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16622'. [ 1698.717731][T28685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16622'. [ 1698.820127][T28691] netlink: 40 bytes leftover after parsing attributes in process `syz.5.16626'. [ 1698.839511][T28692] netlink: 'syz.1.16627': attribute type 1 has an invalid length. [ 1698.889278][T28694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16628'. [ 1698.977975][T28701] netlink: 'syz.6.16630': attribute type 2 has an invalid length. [ 1698.985882][T28701] netlink: 'syz.6.16630': attribute type 1 has an invalid length. [ 1698.994908][T28699] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16630'. [ 1699.943395][T28747] C: entered promiscuous mode [ 1699.949061][T28747] netlink: 'syz.6.16644': attribute type 2 has an invalid length. [ 1699.957089][T28747] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1700.084204][T28756] ip6t_rpfilter: unknown options [ 1700.173671][T28765] netlink: 'syz.1.16646': attribute type 16 has an invalid length. [ 1700.226975][T28765] netlink: 'syz.1.16646': attribute type 17 has an invalid length. [ 1700.342290][T28765] 8021q: adding VLAN 0 to HW filter on device .`¹ [ 1700.352477][T28765] 8021q: adding VLAN 0 to HW filter on device team0 [ 1700.368930][T28765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1700.440399][T28765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1700.450203][T28765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1700.463668][T28765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1700.474069][T28765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1700.566497][T28765] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1700.587590][T28765] veth1_vlan: left promiscuous mode [ 1700.594268][T28765] veth0_vlan: left promiscuous mode [ 1700.602307][T28765] veth0_vlan: entered promiscuous mode [ 1700.611809][T28765] veth1_vlan: entered promiscuous mode [ 1700.634030][T28765] veth1_macvtap: left promiscuous mode [ 1700.640833][T28765] veth0_macvtap: left promiscuous mode [ 1700.647881][T28765] veth0_macvtap: entered promiscuous mode [ 1700.655059][T28765] veth1_macvtap: entered promiscuous mode [ 1700.667631][T28765] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1700.676479][T28765] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1700.684924][T28765] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1700.693428][T28765] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1700.703908][T28765] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1700.726048][T28765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1700.735916][T28765] bond2: left promiscuous mode [ 1700.741341][T28765] bridge1: left promiscuous mode [ 1700.749779][T28765] bond2: left allmulticast mode [ 1700.754798][T28765] bridge1: left allmulticast mode [ 1700.762460][T28765] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1700.775812][T28765] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1700.786589][T28765] bond4: left promiscuous mode [ 1700.792378][T28765] bridge0: left promiscuous mode [ 1700.798655][T28765] bond4: left allmulticast mode [ 1700.803553][T28765] bridge0: left allmulticast mode [ 1700.810947][T28765] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1700.821524][T28765] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1700.832023][T28765] bond5: left promiscuous mode [ 1700.838630][T28765] bridge3: left promiscuous mode [ 1700.843994][T28765] bond5: left allmulticast mode [ 1700.849984][T28765] bridge3: left allmulticast mode [ 1700.856326][T28765] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1700.870604][T28765] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1700.993454][ T8890] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.024597][ T8890] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.047810][ T8890] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.056638][ T8890] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.318492][ T8873] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1701.326397][ T8873] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1701.368858][T28802] xt_cgroup: xt_cgroup: no path or classid specified [ 1701.436940][T22602] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1701.539208][T22602] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1701.593090][T28821] netlink: 'syz.6.16666': attribute type 21 has an invalid length. [ 1701.654699][T28821] bond13: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1701.673814][T28821] bond13 (unregistering): Released all slaves [ 1701.700793][T28775] Bluetooth: hci5: command 0x0406 tx timeout [ 1701.743506][T22602] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1702.290977][T28864] netlink: 'syz.5.16681': attribute type 1 has an invalid length. [ 1702.327067][T28867] __nla_validate_parse: 5 callbacks suppressed [ 1702.327094][T28867] netlink: 96 bytes leftover after parsing attributes in process `syz.2.16679'. [ 1702.339561][T24647] Bluetooth: hci4: command 0x0405 tx timeout [ 1702.372399][T28864] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1702.457754][T28867] vlan3: entered allmulticast mode [ 1702.462958][T28867] gretap0: entered allmulticast mode [ 1702.600947][T28875] IPv6: sit1: Disabled Multicast RS [ 1702.625915][T28881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16688'. [ 1702.635253][T28881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16688'. [ 1702.656410][T28881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16688'. [ 1702.688218][T28875] mac80211_hwsim hwsim110 syzkaller0: entered promiscuous mode [ 1702.703411][T28875] mac80211_hwsim hwsim110 syzkaller0: entered allmulticast mode [ 1702.722678][T28874] tipc: Started in network mode [ 1702.727649][T28874] tipc: Node identity 080211000001, cluster identity 4711 [ 1702.737824][T28874] tipc: Enabled bearer , priority 0 [ 1702.765671][T28874] tipc: Enabling of bearer rejected, already enabled [ 1702.822468][T28874] tipc: Enabling of bearer rejected, already enabled [ 1702.877871][T28874] tipc: Enabling of bearer rejected, already enabled [ 1702.895586][T28874] tipc: Enabling of bearer rejected, already enabled [ 1702.911094][T28889] syzkaller0: entered promiscuous mode [ 1702.921059][T28889] syzkaller0: entered allmulticast mode [ 1702.942010][T28874] tipc: Enabling of bearer rejected, already enabled [ 1702.952559][T28887] netlink: 'syz.2.16689': attribute type 29 has an invalid length. [ 1702.962075][T28887] netlink: 'syz.2.16689': attribute type 29 has an invalid length. [ 1702.987640][T28874] tipc: Enabling of bearer rejected, already enabled [ 1703.028588][T28874] tipc: Enabling of bearer rejected, already enabled [ 1703.049274][T28874] tipc: Enabling of bearer rejected, already enabled [ 1703.071478][T28874] tipc: Enabling of bearer rejected, already enabled [ 1703.084086][T28874] tipc: Enabling of bearer rejected, already enabled [ 1703.097942][T28874] tipc: Enabling of bearer rejected, already enabled [ 1703.111529][T28874] tipc: Enabling of bearer rejected, already enabled [ 1703.123337][T28874] tipc: Enabling of bearer rejected, already enabled [ 1703.133180][T28874] tipc: Enabling of bearer rejected, already enabled [ 1703.234870][T28897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16692'. [ 1703.250708][T28874] tipc: Enabling of bearer rejected, already enabled [ 1703.261134][T28874] tipc: Enabling of bearer rejected, already enabled [ 1703.269980][T28874] tipc: Enabling of bearer rejected, already enabled [ 1703.318945][T28897] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1703.339034][T28874] tipc: Enabling of bearer rejected, already enabled [ 1703.604246][T28915] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.16697'. [ 1703.706980][T28919] netlink: 'syz.1.16699': attribute type 9 has an invalid length. [ 1703.730022][T28921] netlink: 'syz.5.16700': attribute type 32 has an invalid length. [ 1703.738098][T28921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16700'. [ 1703.769085][T28921] bond6: Setting coupled_control to off (0) [ 1703.850707][T28927] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16702'. [ 1703.860865][T22578] tipc: Node number set to 134418688 [ 1703.869057][T28927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16702'. [ 1704.003066][T28929] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1704.143560][T28949] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 1704.487611][T28969] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16711'. [ 1705.051338][T29001] netlink: 'syz.6.16724': attribute type 1 has an invalid length. [ 1705.068309][T29001] netlink: 'syz.6.16724': attribute type 1 has an invalid length. [ 1705.077708][T29001] netlink: 'syz.6.16724': attribute type 2 has an invalid length. [ 1705.259776][T29008] netlink: 'syz.0.16726': attribute type 21 has an invalid length. [ 1705.314488][T29013] openvswitch: netlink: IP tunnel dst address not specified [ 1705.349461][T29013] tipc: Started in network mode [ 1705.369004][T29013] tipc: Node identity ac141441, cluster identity 4711 [ 1705.385827][T29013] tipc: Enabled bearer , priority 10 [ 1705.407747][T29017] bridge8: entered promiscuous mode [ 1705.413310][T29017] bridge8: entered allmulticast mode [ 1705.422351][T29017] vcan0: entered allmulticast mode [ 1705.436578][T29017] pim6reg: entered allmulticast mode [ 1705.454920][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1705.646797][T29028] bridge13: entered promiscuous mode [ 1705.652233][T29028] bridge13: entered allmulticast mode [ 1705.836425][T29039] netlink: 'syz.5.16736': attribute type 1 has an invalid length. [ 1705.879087][T29039] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1705.919529][T29045] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1705.949955][T29045] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 1706.029372][T29045] bond7: (slave vcan1): Error -95 calling set_mac_address [ 1706.090132][T29056] bond0: (slave bond_slave_1): Enslaving as an active interface with a down link [ 1706.497154][T25381] tipc: Node number set to 2886997057 [ 1706.828144][T24647] Bluetooth: hci2: command 0x0406 tx timeout [ 1706.915833][T29106] : entered promiscuous mode [ 1706.974301][T29109] sctp: [Deprecated]: syz.0.16762 (pid 29109) Use of int in maxseg socket option. [ 1706.974301][T29109] Use struct sctp_assoc_value instead [ 1707.030919][T29110] bridge: RTM_NEWNEIGH with invalid ether address [ 1707.329588][T29128] batadv0: entered promiscuous mode [ 1707.464795][T29128] macsec1: entered promiscuous mode [ 1707.471460][T29128] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1707.480130][T29137] __nla_validate_parse: 13 callbacks suppressed [ 1707.480149][T29137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16769'. [ 1707.481041][T29128] batadv0: left promiscuous mode [ 1707.519528][T29125] geneve4: entered promiscuous mode [ 1707.532946][T29137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16769'. [ 1707.994365][T29152] validate_nla: 2 callbacks suppressed [ 1707.994384][T29152] netlink: 'syz.0.16775': attribute type 1 has an invalid length. [ 1708.039164][T29152] bond8: entered promiscuous mode [ 1708.044733][T29152] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1708.072981][T29151] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1708.080548][T29151] bond8: (slave vti0): The slave device specified does not support setting the MAC address [ 1708.090570][T29151] bond8: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1708.104185][T29151] bond8: (slave vti0): making interface the new active one [ 1708.111482][T29151] vti0: entered promiscuous mode [ 1708.139773][T29151] bond8: (slave vti0): Enslaving as an active interface with an up link [ 1708.223252][T29158] veth1_macvtap: entered allmulticast mode [ 1708.230809][T29162] netlink: 'syz.6.16776': attribute type 1 has an invalid length. [ 1708.255225][T29159] netlink: 'syz.6.16776': attribute type 1 has an invalid length. [ 1708.302712][T29162] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1708.309248][T29159] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1708.438083][T29159] veth1_macvtap: left allmulticast mode [ 1708.612756][T29181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16780'. [ 1708.843325][T29197] IPVS: length: 233 != 24 [ 1708.974699][T29199] netlink: 'syz.5.16786': attribute type 1 has an invalid length. [ 1709.055119][T29199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1709.075138][T29216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16790'. [ 1709.142615][T29210] netlink: 'syz.1.16790': attribute type 10 has an invalid length. [ 1709.197107][T29210] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16790'. [ 1709.282474][T29226] netlink: 14 bytes leftover after parsing attributes in process `syz.5.16786'. [ 1709.339291][T29207] bond1: (slave veth1): Enslaving as an active interface with a down link [ 1709.439006][T29199] bond1: (slave dummy0): making interface the new active one [ 1709.484246][T29199] dummy0: entered promiscuous mode [ 1709.489871][T29199] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1709.955089][T29246] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16794'. [ 1710.010241][T29246] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16794'. [ 1710.048914][T29244] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16794'. [ 1710.065356][T29244] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16794'. [ 1710.521009][T29268] FAULT_INJECTION: forcing a failure. [ 1710.521009][T29268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1710.549363][T29268] CPU: 1 UID: 0 PID: 29268 Comm: syz.1.16800 Not tainted syzkaller #0 PREEMPT(full) [ 1710.549404][T29268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1710.549423][T29268] Call Trace: [ 1710.549431][T29268] [ 1710.549441][T29268] dump_stack_lvl+0xe8/0x150 [ 1710.549470][T29268] should_fail_ex+0x412/0x560 [ 1710.549501][T29268] _copy_from_iter+0x1d3/0x1670 [ 1710.549531][T29268] ? rcu_is_watching+0x15/0xb0 [ 1710.549560][T29268] ? __pfx__copy_from_iter+0x10/0x10 [ 1710.549594][T29268] ? netlink_sendmsg+0x650/0xb40 [ 1710.549617][T29268] ? skb_put+0x11b/0x210 [ 1710.549645][T29268] netlink_sendmsg+0x6c0/0xb40 [ 1710.549682][T29268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1710.549711][T29268] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1710.549739][T29268] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1710.549769][T29268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1710.549793][T29268] sock_write_iter+0x49b/0x4f0 [ 1710.549826][T29268] ? __pfx_sock_write_iter+0x10/0x10 [ 1710.549880][T29268] do_iter_readv_writev+0x619/0x8c0 [ 1710.549934][T29268] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1710.549980][T29268] ? bpf_lsm_file_permission+0x9/0x20 [ 1710.550010][T29268] ? security_file_permission+0x75/0x260 [ 1710.550035][T29268] ? rw_verify_area+0x255/0x4d0 [ 1710.550069][T29268] vfs_writev+0x33c/0x990 [ 1710.550103][T29268] ? __pfx_vfs_writev+0x10/0x10 [ 1710.550143][T29268] ? __fget_files+0x2a/0x420 [ 1710.550174][T29268] ? __fget_files+0x3a0/0x420 [ 1710.550198][T29268] ? __fget_files+0x2a/0x420 [ 1710.550234][T29268] do_writev+0x154/0x2e0 [ 1710.550261][T29268] ? __pfx_do_writev+0x10/0x10 [ 1710.550294][T29268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.550318][T29268] do_syscall_64+0x15f/0xf80 [ 1710.550345][T29268] ? trace_irq_disable+0x3b/0x140 [ 1710.550377][T29268] ? clear_bhb_loop+0x40/0x90 [ 1710.550404][T29268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.550425][T29268] RIP: 0033:0x7f6a30b9cdd9 [ 1710.550446][T29268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1710.550465][T29268] RSP: 002b:00007f6a3198a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1710.550487][T29268] RAX: ffffffffffffffda RBX: 00007f6a30e15fa0 RCX: 00007f6a30b9cdd9 [ 1710.550504][T29268] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000004 [ 1710.550517][T29268] RBP: 00007f6a3198a090 R08: 0000000000000000 R09: 0000000000000000 [ 1710.550531][T29268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1710.550545][T29268] R13: 00007f6a30e16038 R14: 00007f6a30e15fa0 R15: 00007ffc6b92aae8 [ 1710.550581][T29268] [ 1711.503819][T29293] 1·: renamed from c0· [ 1711.517379][T29293] 1·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1711.536236][T29293] 1·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1711.549932][T29293] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 1712.337073][T29313] ip6t_srh: unknown srh invflags 4000 [ 1712.465298][T22583] IPVS: starting estimator thread 0... [ 1712.478642][T29330] netlink: 'syz.6.16815': attribute type 2 has an invalid length. [ 1712.557063][T29332] IPVS: using max 29 ests per chain, 69600 per kthread [ 1712.674040][T29337] netlink: 'syz.1.16818': attribute type 2 has an invalid length. [ 1712.681939][T29337] netlink: 'syz.1.16818': attribute type 11 has an invalid length. [ 1712.689891][T29337] __nla_validate_parse: 6 callbacks suppressed [ 1712.689935][T29337] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16818'. [ 1712.847866][T29337] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.16818'. [ 1712.898189][T29350] netlink: 27 bytes leftover after parsing attributes in process `syz.2.16820'. [ 1712.934782][T22578] hid-generic 0005:0B57:0003.000C: item fetching failed at offset 0/1 [ 1712.946370][T22578] hid-generic 0005:0B57:0003.000C: probe with driver hid-generic failed with error -22 [ 1713.045517][T29356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16823'. [ 1713.152915][T29361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16822'. [ 1713.243640][T29365] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 1713.268276][T29360] bond6 (unregistering): Released all slaves [ 1713.295059][T29365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1713.353913][T29373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16825'. [ 1713.477596][ T8878] unregister_netdevice: waiting for bond11 to become free. Usage count = 2 [ 1713.494754][T29373] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1713.696147][T29392] netlink: 48 bytes leftover after parsing attributes in process `syz.5.16828'. [ 1713.763036][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1714.029537][ T13] bond1: (slave veth1): link status definitely up, 10000 Mbps full duplex [ 1723.163220][ T13] dummy0: left promiscuous mode