last executing test programs: 5.253823299s ago: executing program 1 (id=2321): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000010000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 5.032870911s ago: executing program 4 (id=2322): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x2014, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb27}, 0xffffffffffffff55) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x1406, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffffffffffee1, 0x1, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffffffffffd71, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r5, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r9, @ANYBLOB="ac1c4a7146917a55ffb95122d459ac10384a0e3d0ed4ee6fbf56f02a603bfe2452683191fc7e606c27f8041884daf4286aaab9ba590365636e75a54c56750d9cdb46a7c6b650960a63026a1ffa2afe49e64dae893d57a56b23ac373e5b7b11deeef8"], 0x20}}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="6000000010000304000300000000000000000002", @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB], 0x60}, 0x1, 0x600}, 0x8000) 4.14800412s ago: executing program 0 (id=2325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r3, r3, 0x2f}, 0x20) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000003c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup=r3, r4, 0x2f, 0x30, 0x4, @void, @void, @void, @value=r5}, 0x20) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xffffffffffffffb9) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in6={{0xa, 0x4e23, 0x80000000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}}, 0xa, 0x5}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x61, 0x57, &(0x7f0000000080)="2021a900dc9ee1fc24e16cb6d312ff57c487834927f4c4a483e0fc5d97b1c9bf5b3e627c7f12f7e08b8a876529d16e7a9b751c82cfc4614b21e285d315c68aae2a37c3ef1a0163e75e71d238f6a8b10cf6babafa5f099dc5fddce9bd6ef616f16f", &(0x7f0000000100)=""/87, 0x83, 0x0, 0xe4, 0x31, &(0x7f0000000180)="d4753cad9ab7cdc3072e70524f957ab53c71d4664de9052e4f9867162fde14f66c7f694f9811179358fc52c6c575e317688130fe809138a4acb8654b69ced94f255049a03076ec86925deceaf668dd3adaf96a0f131fba56ed0639d0c7fd7eba768afca13492c599274c629d4edb64383f43c7843d407a9b5590426e6bb62ba8854f84a327fb55504775e7047cad3656f7b12384fa8db08cbaed3001ed91787e214eddfb05dc10b2b1134599a5aa954d3ac2e5dfe34c14ce3813e9eb30fe7d58ec121d3edcef100f53fb2304e2a5c9febb95048a15a5bfe0a0bfcb5d4b538693f3d02b73", &(0x7f0000000280)="d73f3f754ad753798b8f1a70f5ab1ccb00f82343bedb87a9e3f6a610005b2b3227c180aa1bbaa95da13da6f840a332d149", 0x1, 0x0, 0x101}, 0x50) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x6, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r13, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x8, 0x80000001, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x2) r14 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r14, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r14, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r13, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000b000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYRES8=r6], 0x4c}}, 0x0) 2.835590473s ago: executing program 4 (id=2326): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x800000) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$FIOCLEX(r1, 0x5451) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000080)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r4, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x4090}, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000340)={r0, &(0x7f0000000240)='nl80211\x00', 0x28100, &(0x7f0000000280)={@align=0x2, {0x5, 0x5, 0x3c5c, 0x101}}, 0x5, &(0x7f00000002c0), &(0x7f0000000300)=0xa43c}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000380)={'pimreg\x00', @multicast}) recvmmsg$unix(r5, &(0x7f0000002d40)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000000800)=[{&(0x7f0000000440)=""/134, 0x86}, {&(0x7f0000000500)=""/202, 0xca}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f00000006c0)=""/81, 0x51}, {&(0x7f0000000740)=""/156, 0x9c}], 0x5, &(0x7f0000000880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000000940), 0x6e, &(0x7f0000001a80)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/50, 0x32}, {&(0x7f0000001a00)=""/106, 0x6a}], 0x3, &(0x7f0000001ac0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000001b40), 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001bc0)=""/9, 0x9}, {&(0x7f0000001c00)=""/221, 0xdd}, {&(0x7f0000001d00)=""/160, 0xa0}, {&(0x7f0000001dc0)=""/132, 0x84}, {&(0x7f0000001e80)=""/122, 0x7a}, {&(0x7f0000001f00)=""/42, 0x2a}], 0x6, &(0x7f0000001fc0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002000)=""/218, 0xda}, {&(0x7f0000002100)=""/201, 0xc9}, {&(0x7f0000002200)=""/35, 0x23}], 0x3}}, {{&(0x7f0000002280), 0x6e, &(0x7f0000002700)=[{&(0x7f0000002300)=""/215, 0xd7}, {&(0x7f0000002400)=""/127, 0x7f}, {&(0x7f0000002480)=""/214, 0xd6}, {&(0x7f0000002580)=""/139, 0x8b}, {&(0x7f0000002640)=""/142, 0x8e}], 0x5, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000027c0)=@abs, 0x6e, &(0x7f00000028c0)=[{&(0x7f0000002840)=""/67, 0x43}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f00000029c0)=@abs, 0x6e, &(0x7f0000002a40), 0x0, &(0x7f0000002a80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000002b40), 0x6e, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/45, 0x2d}], 0x1, &(0x7f0000002c40)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}], 0x8, 0x40000000, &(0x7f0000002f40)={0x77359400}) ioctl$XFS_IOC_FSGROWFSRT(r25, 0x40105870, &(0x7f0000002f80)={0x8, 0x8}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000003080)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003040)={&(0x7f0000003000)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3a}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x70000000) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x1d) ioctl$TUNSETOWNER(r11, 0x400454cc, r14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r21, 0x8933, &(0x7f0000003100)={'batadv_slave_1\x00', 0x0}) getsockopt$inet6_mreq(r18, 0x29, 0x15, &(0x7f0000003140)={@private0, 0x0}, &(0x7f0000003180)=0x14) sendmsg$nl_route_sched(r15, &(0x7f0000006640)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000006600)={&(0x7f00000031c0)=@delchain={0x3418, 0x65, 0x0, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r29, {0x6, 0xfff2}, {0x5, 0x5}, {0xffe0, 0xc}}, [@filter_kind_options=@f_fw={{0x7}, {0x2100, 0x2, [@TCA_FW_POLICE={0x44c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xa}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc6, 0x4, 0x2, 0x5, 0xa, {0xa4, 0x0, 0x3, 0x189f, 0x0, 0x68a1}, {0xfe, 0x2, 0x1, 0xc, 0x2, 0x4}, 0x8, 0x2, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x200, 0x9, 0x7, 0x5, 0xa, 0x8, 0x0, 0x4, 0x7f, 0x1, 0x0, 0xfa, 0x3ff, 0x6, 0x80000001, 0x4, 0x1, 0x81, 0xb, 0x8, 0x30000000, 0x10, 0x3, 0x8, 0xfffffff9, 0x2, 0x95, 0xfffffffa, 0x7, 0xbe9, 0xc9, 0x7, 0x3, 0x10001, 0x2, 0x1, 0x4, 0x7fffffff, 0x7f, 0xe, 0x4, 0x4, 0x0, 0x4, 0x0, 0x2, 0x8, 0xd, 0x8, 0x4, 0x6bf3, 0x4, 0x9, 0x2, 0x5, 0x7b2, 0x0, 0x7, 0x9, 0x5, 0x2, 0x9, 0x9, 0xe, 0x1, 0x7fffffff, 0x7, 0x22d95c88, 0x9, 0xa, 0x4, 0x800, 0xa75, 0x7, 0xd, 0x8000, 0x4, 0x9, 0x100, 0x4, 0xff, 0x8, 0xffffffdf, 0x52479d29, 0x5, 0x80, 0x9, 0x6, 0x5, 0xe968, 0x6, 0x3, 0x9, 0x9, 0x6, 0x3, 0xe09b, 0x101, 0x6, 0x516, 0x6, 0x7cb7, 0xffff, 0x8, 0x8505, 0x2, 0x6, 0xff, 0x5, 0x8, 0x1ff, 0x10000, 0x9, 0xfffffff8, 0x6, 0x7, 0x1, 0x9, 0xff, 0x4, 0xa, 0x8, 0x3, 0xfffff800, 0x1, 0x7, 0xff, 0xffff, 0x2, 0x7, 0x800, 0x3, 0xa, 0x1, 0x2, 0x2, 0x4, 0x4, 0xfffffffb, 0x7, 0x2, 0xfffffffe, 0xeb, 0x47, 0x5, 0x8, 0xfffffffd, 0xd4, 0x100, 0x6, 0x800, 0x3, 0x9, 0x80000001, 0x200, 0x3, 0x1, 0x3, 0x5, 0xf7, 0x40, 0x10000, 0xcd6, 0x3, 0x7, 0xfffff000, 0xa, 0x9, 0x9, 0x6, 0xb, 0xb, 0x5, 0xa3, 0x4, 0x4, 0x7, 0x9, 0x40, 0x0, 0x400, 0x4, 0x5, 0xfffffffc, 0x0, 0xffff, 0x5, 0x6, 0x9, 0x4, 0x0, 0xea2e, 0x2, 0x6, 0x5, 0xfffffffa, 0x8, 0xdd1b, 0x19, 0xd8d, 0x4, 0x5, 0x7, 0x7e, 0x8, 0x80000000, 0x3, 0x62a, 0x10000, 0x0, 0x4, 0x4, 0x7ff, 0x8, 0x5, 0xb, 0x1, 0x8, 0x7ff, 0x1ff, 0x200, 0x6, 0x6, 0x8, 0x2, 0x5, 0x44, 0xa80, 0x3, 0xa4b8, 0x6, 0x0, 0x81, 0x7, 0x0, 0x6, 0x7, 0x4, 0x10001, 0x6006, 0x8000, 0x1, 0x0, 0x7ff, 0x10001, 0xf9f, 0x80000001, 0x3, 0x7, 0x7, 0x5, 0xffffff7f, 0xfffffff6, 0x6, 0x10000]}]}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_POLICE={0x85c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff8, 0x5, 0xfffffff8, 0x9a59, 0xced, {0x4, 0x0, 0x12f4, 0x3, 0x3, 0x80000000}, {0x4, 0x2, 0x4, 0x4, 0x7, 0x1}, 0xfffffffc, 0x10, 0x80000000}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7f}, @TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x7, 0x4, 0x2, 0x0, 0x8, 0x1, 0xa1, 0xca6b, 0x2, 0xfffffeff, 0x26e2, 0x0, 0x2, 0x7, 0x8, 0xffff, 0x92d6, 0x6, 0x3ff, 0x6, 0x3, 0x3b47e017, 0x0, 0x7, 0x7, 0xfffffffc, 0x100, 0x4, 0x3, 0x1ff, 0xfffff800, 0x4, 0x0, 0xe, 0x7fff, 0x9, 0x8, 0x2, 0x3, 0xfff, 0x2, 0x5, 0x6, 0xffff1a20, 0x9, 0x9, 0x4, 0xa, 0x455, 0x1c0, 0xf0c, 0x1, 0x6, 0x5, 0x3, 0x9d87, 0x1, 0x6, 0x80000001, 0x8, 0xd1, 0xe4, 0x3, 0x7ff, 0x6, 0xf5f, 0x10, 0x6, 0x40, 0x7f, 0xfffffc00, 0x5, 0x80000, 0x1, 0x4, 0x2, 0x1, 0x80, 0x4, 0x2, 0xe, 0x3, 0x7, 0x6, 0x6, 0x3b93, 0x551, 0xd, 0x1, 0x200, 0x698, 0xdf, 0x8ef, 0x9, 0xfb8e, 0x7f, 0x1, 0xe, 0x2, 0xe259, 0x400, 0x0, 0x400, 0x0, 0x1, 0x7fffffff, 0x9, 0x2, 0x0, 0x4fd68638, 0x0, 0x2, 0xc, 0xcfc, 0x1, 0x7e1, 0x4a6, 0x0, 0xd9e, 0xc7, 0x5, 0x4, 0x1, 0x1000, 0x5, 0x3, 0x7a30, 0x9, 0xffffffff, 0x1, 0x3, 0xffffffff, 0x3, 0xae6, 0x2, 0x100, 0x8000, 0x0, 0x9, 0x6, 0x5, 0xb7d, 0x0, 0xd5, 0x800, 0xfffffffc, 0x5, 0xfffffff3, 0x6, 0x9, 0x0, 0x7, 0xfffffff7, 0x7, 0x5, 0x0, 0x2, 0x8, 0x3, 0x5dc0, 0x40000, 0x4, 0x80000000, 0xfffffffe, 0x80, 0x1, 0x4, 0x0, 0x7, 0x4, 0x5, 0x3af, 0x2, 0x88, 0x1ff, 0xa0, 0x12, 0xc48d, 0x80000000, 0x1, 0x7fffffff, 0xa, 0x7, 0x3, 0xd8d, 0x5, 0x4, 0x9, 0x2, 0x9, 0x4, 0x0, 0xe9, 0xf, 0x6, 0x8, 0x4, 0x8, 0xfff, 0xe8e8, 0x3, 0x4b8, 0x101, 0x3, 0x1, 0x8, 0x4, 0x2, 0x0, 0x7, 0xc, 0x66, 0x5, 0x8, 0x1000, 0x3, 0x5, 0x89, 0x80000001, 0xd70, 0xfffffff9, 0x6, 0x4, 0x10, 0x7b6, 0xd, 0x6, 0x8, 0xfffffffd, 0x7, 0x7, 0x3, 0x5, 0x101, 0x1, 0x9, 0xb, 0x3, 0x38, 0x1, 0xab20, 0x0, 0x7, 0x84, 0x1, 0x4, 0x4, 0x401, 0x4, 0x2, 0x7, 0x9, 0xfff, 0x3, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0xe06, 0xa, 0xc0000000, 0xff, 0x97, 0x2, 0xf9, 0x9, 0x16b, 0xd, 0x5, 0x3, 0x4, 0x401, 0x80, 0x9, 0x1, 0x7fffffff, 0xfff, 0xaf20, 0x9d8, 0xf70a, 0x40, 0x5db40000, 0x12f, 0x0, 0x0, 0x8, 0x4, 0x101, 0x4, 0x5, 0xc, 0x1ff, 0x0, 0xe6ba, 0x800, 0x23, 0xe, 0x7, 0x6, 0xff, 0xa, 0x6, 0x1ca88430, 0x5, 0x4, 0x400, 0xfffffff6, 0x2a3e, 0xfffffe52, 0x1, 0x1ff, 0x3, 0x5, 0x8001, 0x9, 0x0, 0x1ff, 0x401, 0x8, 0x6, 0x6d4, 0x4, 0x7, 0x401, 0xff, 0xff, 0x81, 0x1, 0x7, 0x7, 0x10000, 0x2, 0xa, 0xc, 0x3, 0x9, 0x3, 0x7f, 0x8, 0x2c, 0x8c0, 0x8, 0x8, 0x0, 0x9, 0x0, 0x5, 0x0, 0x43, 0xd, 0x0, 0x4, 0x9, 0x8, 0x1, 0x3, 0x6, 0x6, 0x7f, 0x3, 0x2, 0x7, 0x5, 0x7, 0xe437, 0x4, 0x81, 0x9, 0x8, 0x101, 0x7ff, 0xdfca, 0x16, 0x101, 0xf, 0xb, 0x2, 0xffffffae, 0x15, 0x101, 0xd, 0x4, 0x3, 0x8, 0x3, 0x0, 0xb, 0xfc, 0x10000, 0x4, 0x100, 0x80000000, 0xf, 0x9, 0x2, 0x1, 0x101, 0x2e, 0x5, 0x5, 0x6, 0x7, 0x0, 0xffffffff, 0x1, 0x26f9, 0x5, 0x5, 0x1, 0x6, 0x3, 0x2, 0x7, 0x1192, 0x10001, 0x5d2, 0x5, 0x3, 0x2173, 0xff, 0x3, 0x1, 0x0, 0x80, 0xfffff3c1, 0x24, 0xd, 0x1, 0xb22, 0x6, 0x4609, 0x8, 0x7ff, 0x3, 0x9c0, 0x8, 0x93, 0x2, 0xfc1, 0x5903, 0x45, 0x4, 0x7, 0x1266bc88, 0xb744, 0xc, 0x8, 0x2, 0x2, 0x0, 0x1c, 0x9, 0x8000, 0x8000, 0xd3, 0x5, 0xa, 0x80000000, 0xcc, 0x7ff, 0x7ff, 0x6, 0x8, 0x5, 0x3, 0x4, 0x0, 0x0, 0x9, 0x4, 0x5, 0x6, 0x2b93b121, 0xfff, 0x1000, 0x2d796cc4, 0x6f535127, 0xffffffff, 0x40, 0x3ff, 0xffff, 0x2, 0xfffffff7, 0x4, 0xb, 0x9, 0x2, 0x8, 0x6, 0x609b, 0x6, 0x8, 0xffff8000, 0x10001, 0x1, 0xfffffffd, 0xa, 0x6, 0x7ff, 0xff, 0x183, 0x1, 0x2, 0x9, 0x1, 0x2, 0x9, 0x8, 0x2, 0xffffffff, 0xfff, 0x6]}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0xffff}}, @TCA_FW_POLICE={0x103c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x824}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1ff, 0x1000, 0x8, 0x7, 0x4f9, 0xa, 0x0, 0x9, 0x5, 0x4c, 0x26400, 0x5, 0x7, 0x3, 0x8000, 0x1, 0x175c, 0x9, 0x4, 0x3, 0x3, 0x800, 0x3, 0x8, 0x3ff, 0x0, 0x9, 0x7fff, 0x5, 0xfffffffb, 0x9, 0x40, 0x1, 0x4, 0x9, 0x5, 0x7, 0x9d8, 0x0, 0x0, 0x4, 0x101, 0x7, 0xe83, 0xfffffff2, 0x3, 0x78d2, 0xa, 0x7, 0x0, 0x10, 0x4, 0x5, 0xc00, 0x2, 0x7fff, 0x4b0, 0x3, 0x3, 0xc03a, 0x6, 0x800, 0x0, 0x0, 0x0, 0x5, 0x3, 0x101, 0x0, 0x6, 0x6, 0x2, 0x6, 0x500, 0x8, 0x5, 0x10001, 0x3, 0x2, 0x3ea, 0x2, 0x103, 0x1, 0x7ff, 0x2, 0x80000001, 0x8000, 0x1, 0x7fff, 0xffffff11, 0x1000, 0x46f5, 0x0, 0xe1, 0xfb35, 0x8000, 0x6, 0x7, 0xffff, 0x7ff, 0x0, 0x5f, 0x1, 0x401, 0x1e, 0x2, 0x8, 0x3, 0xc1f, 0xd, 0xf, 0x6, 0x4, 0x0, 0x6, 0x4, 0x9, 0x5, 0x55f, 0x6, 0x87, 0x9, 0x81, 0xc, 0x9, 0x44, 0x5, 0xfffffffc, 0x2, 0x7fff, 0x6, 0x5, 0x1, 0x1, 0x1ff, 0x2, 0xcf30, 0x8, 0x401, 0x2e7, 0xa, 0x200, 0x75, 0x4, 0x5, 0xf4bb, 0x11fc3699, 0x9, 0x1, 0x1ff, 0x2, 0x7, 0x80, 0xfff, 0x3a, 0x6, 0x7f, 0xfffffbff, 0x323491c1, 0x7, 0x666b, 0x8, 0x7, 0x8, 0x0, 0xb67d, 0xfffffffc, 0x7, 0x3, 0x9, 0x3, 0x1, 0x8, 0xfb, 0xca, 0x7fff, 0x7, 0x1, 0x0, 0x3, 0x10000, 0xf0000000, 0x5, 0x0, 0x18000000, 0x7a, 0x530c, 0x80000000, 0x7fffffff, 0x0, 0x1000000, 0xff, 0x8, 0x0, 0xc, 0x2, 0xa7aa, 0x0, 0x8, 0x12, 0x5, 0xdb11, 0x0, 0x3bf1, 0x8, 0x4, 0x0, 0x8, 0xfffffe2d, 0x4, 0x2, 0xb, 0x1, 0x38000, 0x8, 0x3, 0x1, 0x6, 0x7, 0x9, 0x4, 0x3, 0x4, 0x1, 0xfffffffe, 0x5, 0xb, 0xc2, 0xfffffeff, 0x100, 0x4, 0x7, 0x2, 0x80, 0x8, 0x1ff, 0xc37, 0x100, 0x0, 0x101, 0x5, 0x5, 0x51, 0x120000, 0x101, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x16850d22, 0xe0, 0x1ff, 0xa, 0xe, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff9, 0xe, 0x7, 0x77e9, 0x1, 0x7e, 0x80000001, 0x2, 0xfffffffb, 0xbd7, 0x101, 0x4, 0x5, 0xfffffffa, 0x40, 0xff, 0x5, 0x2, 0x2, 0x5, 0xad, 0xfcee, 0x0, 0x7, 0x50d, 0xfffffffc, 0x8001, 0x5, 0x7, 0x401, 0x1000, 0xfffc0000, 0x5, 0x6, 0x6, 0x8, 0x7f, 0x7f, 0xffffff94, 0x6, 0x0, 0x2, 0x7, 0x6, 0x5, 0x2, 0xc8c, 0x80, 0xfffffff8, 0x3, 0x5, 0x8, 0x8001, 0x7, 0x3, 0x7, 0xaa9, 0x90000000, 0x5, 0x4, 0x1, 0x101, 0x2, 0x2, 0x80000000, 0x7, 0x7fffffff, 0x1, 0x7, 0x3, 0x1, 0x355, 0x8ac9, 0x8, 0x9, 0x4, 0x28, 0xc, 0x1ff, 0x3ff, 0x7, 0x7, 0x6, 0x3, 0x3, 0x8, 0x3, 0xffff0826, 0x7fff, 0x3, 0x7ff, 0x8, 0x8, 0x5, 0x2cf867ef, 0x100, 0x8, 0x2, 0x1, 0x870, 0x1, 0x4, 0x5ba798d1, 0x6, 0x5, 0x6, 0xffffff80, 0xd, 0x4, 0x0, 0x8, 0xc4, 0x7, 0x4, 0x8, 0x200, 0x1ff, 0xfff, 0x5, 0x2, 0x7, 0x3f, 0xfffffffc, 0x5, 0x5, 0x5, 0x8, 0x7, 0x8, 0x9, 0xb510, 0x44b, 0x7, 0x7, 0xf25, 0x5, 0x7, 0x1, 0x4, 0x4, 0xfffffffd, 0x4, 0x1ff, 0x80000001, 0x9d, 0x1, 0x4, 0x75df, 0x2ae, 0x2, 0x4, 0x200, 0x6, 0xf8, 0xae7, 0x4ed, 0x58, 0x4, 0x0, 0xfffffff8, 0x7, 0xbb7, 0x6, 0x1, 0x7, 0x9b5, 0x9, 0x3, 0x80, 0x2, 0x4efd, 0x3, 0x6, 0xffffffff, 0x7, 0x4, 0x4, 0x5, 0x7f, 0x9, 0xb, 0x5, 0x5, 0x1, 0xf, 0x31f, 0xffff0000, 0x80, 0x8, 0x1, 0x6, 0x8, 0x8, 0x4, 0x759076c3, 0x3, 0x3, 0x7, 0x10, 0x4, 0x8453, 0xffff0001, 0x7fa5, 0x9, 0x1165, 0x3, 0x7, 0x0, 0x6, 0x10, 0x80000001, 0x8001, 0xe, 0x71, 0xfffffdb0, 0x8, 0x9, 0x9, 0x4, 0x9, 0x5, 0x5, 0x0, 0x8, 0x5d, 0xfffffffd, 0x7, 0x8000, 0x9, 0x9, 0xf, 0x80000001, 0xd7, 0x3ff, 0x7, 0x1, 0x4, 0x7ff, 0xf, 0xc833, 0x707, 0x0, 0xffff, 0x3, 0x6, 0x400, 0x8, 0x6, 0xffff, 0x4, 0x3, 0x81, 0x100, 0x8, 0xb3c, 0xc]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7f}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x2, 0x200, 0x7, 0x2, 0xc06c9408, 0x6, 0xd, 0x10001, 0xca, 0x4, 0x8, 0x8000, 0x3, 0x7ff, 0xc, 0x7, 0xc86, 0x2, 0x9, 0x6, 0x81, 0x8, 0xe, 0x8001, 0x5, 0x5, 0x1, 0x9ff1, 0x9, 0x5, 0x5, 0x8, 0x6, 0xea, 0x8db8, 0x0, 0x7, 0x80000000, 0x9, 0x932, 0x8000, 0x0, 0x3, 0x2, 0x8, 0x5, 0x5, 0x4, 0xa, 0x76d, 0x5, 0x6, 0x6, 0x85, 0x6, 0xfffffff7, 0x10, 0xfffffffa, 0x80, 0x2, 0x1, 0x9, 0x49, 0x3, 0x9, 0x5, 0xffff0000, 0xd, 0x10000, 0x20, 0xbb, 0x14f4, 0xfffff639, 0x3, 0x0, 0x1c24277d, 0x8, 0x41, 0xffffffff, 0xd, 0x2, 0xffff7c31, 0x5, 0xdfd0, 0x7fffffff, 0x0, 0x6, 0x5, 0x1, 0xa, 0x15d2, 0x1, 0x29d, 0x5056, 0x845, 0x9, 0x9, 0x3, 0x3, 0x9, 0x5, 0x9, 0x400, 0x8, 0x7, 0x5, 0x7383, 0x7, 0x7, 0xfff, 0x9, 0x3, 0x81, 0x8, 0x4, 0x8, 0x4, 0x60, 0xcfd9, 0x4, 0x1, 0x8, 0x5, 0xf9, 0x0, 0x6, 0x8, 0xeb, 0x4, 0x200, 0x9, 0x0, 0x89, 0x4, 0x4, 0x7fffffff, 0x40, 0x6, 0x101, 0x3, 0x4, 0x8, 0x4, 0x7, 0x3, 0xfff, 0x3, 0xa, 0x8, 0x7, 0x1, 0x80000001, 0x9, 0x6, 0x7, 0x8, 0x4, 0x7, 0x6, 0x44a, 0xffff0000, 0x89, 0xfffffffd, 0x1, 0xb9, 0x3, 0x6, 0x5, 0x8, 0xb5c, 0x482, 0x7e, 0x40, 0x7, 0x8, 0x8, 0x9, 0x5, 0x40c, 0x16f2, 0x80000000, 0xe, 0x5, 0x800, 0xab59, 0x0, 0x5, 0xfffffffa, 0xffffffff, 0x0, 0x5, 0xf, 0x2, 0xfffeffff, 0x16, 0x3, 0x9, 0x2, 0x4, 0xcf, 0x3ff, 0x45fb, 0x7, 0x0, 0x71cc9523, 0x1, 0x9, 0x2, 0x81, 0x3, 0x7, 0xff, 0x6, 0x3ff, 0x9, 0x4, 0x5, 0x40, 0x9, 0x1, 0xfc, 0x6, 0x2, 0x1, 0x80000000, 0x2, 0x5, 0x61, 0x8001, 0xfffffffb, 0x10000, 0x6, 0x4, 0x80, 0x7fff, 0x7, 0x9, 0x8, 0x2, 0x1, 0x5, 0x6, 0x2, 0x0, 0x1, 0x1000, 0xb4a6, 0x9, 0x401, 0xb, 0x3, 0x7, 0xe8, 0xf43f]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x40, 0x7, 0x6, 0xffff0000, 0x4, 0x7fff, 0x7f, 0x4, 0x9, 0x6, 0x0, 0x6, 0x2, 0x5, 0x40, 0x0, 0x7f, 0x7, 0x8, 0x6, 0x7, 0xfffffffa, 0x4, 0x9, 0x3, 0xc8f0, 0x8, 0x2, 0x800, 0xb, 0x7, 0x4, 0xfff, 0x7fffffff, 0xfffffff8, 0x10, 0x5, 0x2000000, 0x80000001, 0x7f, 0x7ff, 0x7, 0x1, 0x9, 0x800, 0x8, 0x10, 0x1ff, 0x1, 0x2, 0x2, 0x0, 0xf, 0x5, 0x0, 0x7, 0x80000000, 0xdbe, 0x5, 0x4, 0x45, 0x6, 0x4, 0x80000000, 0x6, 0x3, 0x80, 0xbd, 0x4, 0x7b, 0x4, 0x6, 0x8000, 0xf8, 0x2, 0x0, 0x3, 0x2, 0x7, 0x3, 0x8000, 0xb537, 0x55f8, 0x80000001, 0x5, 0x6, 0x5, 0xa5, 0x120ab27e, 0x3, 0x8, 0x81, 0x81, 0xf, 0xbdd, 0x1, 0xfffffff8, 0xd21a, 0x5, 0x79c80, 0x529, 0x2, 0xd616, 0x5, 0x9, 0xfff, 0x40, 0x4d, 0x2, 0xfffffff9, 0x1ff, 0x8001, 0x4, 0x4725, 0x6144, 0xfffffff8, 0x2, 0x6, 0x3, 0xe953, 0xf4, 0x6, 0xeffc, 0x2, 0x4, 0x101, 0x401, 0xfffff001, 0x40, 0xb, 0x9, 0x8, 0x5, 0x6, 0x9, 0x7fff, 0x9, 0x4, 0x8c78, 0x9, 0x7, 0xd, 0xb1, 0x4, 0x9, 0x2, 0x100, 0x3, 0x5, 0xff, 0x2, 0x7, 0x6, 0xf515, 0xc, 0x7, 0x7, 0x8, 0x9, 0x6a65, 0x9, 0x6, 0x8, 0x1, 0x473, 0x6, 0x3, 0x4, 0x1, 0x1, 0x401, 0x7, 0x7, 0x7, 0x4, 0xe0, 0x5, 0xfffffffd, 0x0, 0x10000, 0x9, 0xf7c7, 0x3ff, 0xfffffff7, 0xfff, 0x1, 0x4ee6, 0x0, 0x6, 0x0, 0x2, 0x400, 0x2, 0x8001, 0x1, 0x1a19, 0x80000000, 0x2, 0x5, 0xd7, 0x3, 0x6, 0xfffffff8, 0x4, 0x4, 0x0, 0x1, 0x3, 0x1, 0x6, 0xcd05, 0x0, 0x2, 0x5, 0x9, 0x1, 0x80000001, 0xfffffff8, 0x2, 0x8, 0x1, 0x2625, 0x7, 0x7f, 0x4, 0x39, 0x3, 0x1000, 0xaee4, 0x9, 0xb, 0x6, 0x9, 0x0, 0x389f351c, 0x200, 0x6, 0x2, 0x2, 0xfffffffa, 0x2, 0x2, 0x8, 0x1, 0x97b, 0x1043, 0x4, 0x7f, 0x7ff, 0xb7, 0x6, 0x5, 0xe, 0x3, 0x9, 0x67]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x49}]}, @TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3bb2cdc, 0x5, 0xfffffffd, 0x2, 0x8, 0x2, 0x7, 0x6c9f, 0x10000, 0x26, 0xb0000, 0x1ff, 0xb, 0xfff, 0x3, 0x4, 0x1, 0x3, 0xf, 0x130, 0x3, 0x5, 0x8, 0x100, 0x6, 0x7, 0x3, 0x12000000, 0x8001, 0x8, 0x7, 0x3, 0x1, 0x6, 0xfa4, 0x5, 0x7f, 0x7, 0x6, 0xfffff5cf, 0x95f, 0xfffffb02, 0xfffffffe, 0x0, 0xffff, 0x6, 0x3, 0x2, 0x8, 0x2, 0x8, 0x3, 0x7, 0x0, 0x3, 0x7fff, 0x66, 0x7, 0x2, 0x1, 0x7fffffff, 0x1, 0x2, 0x1ff, 0x0, 0xfff, 0x80000001, 0xcd5e, 0x1, 0x8, 0x81, 0x8, 0x6, 0x3, 0x0, 0x6, 0x684, 0x7ff, 0x7cacf03f, 0xffff, 0x7, 0x0, 0x8, 0xff800000, 0xe, 0x8, 0x0, 0xe, 0x1, 0x3, 0xfa5b, 0x10000, 0x4, 0xa4a3, 0xc, 0x4, 0x80000001, 0x4, 0x800, 0x1, 0x3, 0x804, 0xfffffff7, 0x1ff, 0x3, 0x3, 0x124, 0x5, 0x3, 0x7ff, 0xffa, 0xb38, 0x9, 0x1, 0x7ff, 0x400, 0x3, 0x10001, 0xfffffffc, 0xfffffffd, 0x5, 0x4, 0x1, 0x6, 0x2, 0x101, 0x67, 0x81, 0x2, 0x13, 0x0, 0x1, 0x10000, 0xc0d, 0x6, 0x354c, 0x1512, 0x9, 0x8, 0x6, 0x4ec9, 0x10001, 0x100, 0x0, 0x3ff, 0x2, 0x1, 0xfa, 0xb, 0x0, 0xfffeffff, 0xa, 0xffff, 0x7fffffff, 0x3, 0xffff, 0x3, 0x4, 0x5, 0x2, 0x0, 0xffffffff, 0x1, 0x6, 0x9, 0x8, 0x9, 0x7, 0x0, 0xd4, 0x8, 0x9, 0x0, 0x1, 0x4, 0x4, 0x9, 0x101, 0x9, 0x4, 0x5, 0x1, 0x7, 0xfff, 0x8001, 0x2, 0x1, 0x7f, 0x1ff, 0x2, 0x2f, 0x1, 0xa433, 0x800, 0x77, 0x8001, 0x9, 0x82a, 0x7, 0x9, 0x400, 0x167, 0x1, 0x7, 0x0, 0x0, 0x80000000, 0x1, 0x1, 0x9, 0x8, 0x3, 0xc3, 0x5, 0xe7, 0x401, 0x7fffffff, 0x5, 0x3, 0x0, 0x7fffffff, 0x5, 0x2, 0x0, 0x4c, 0xfff, 0xffffffff, 0x2, 0x7d, 0x2, 0xe29, 0x84, 0x3, 0x401, 0x5, 0x3, 0x2, 0xffff, 0x8001, 0x1, 0x6, 0x80, 0x8, 0xfffffe01, 0x4, 0x7, 0x2, 0x6, 0x6, 0x3, 0x3, 0xdfac, 0x6, 0x7fffffff, 0x2, 0x4]}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xff, 0xff, 0x1000001ff, 0xffffffff]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_FD={0x8, 0x6, r17}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @filter_kind_options=@f_route={{0xa}, {0x1280, 0x2, [@TCA_ROUTE4_POLICE={0x38, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3bed}, @TCA_POLICE_RESULT={0x8, 0x5, 0x800}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x2f}, @TCA_ROUTE4_TO={0x8, 0x2, 0xd5}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffff, 0xb}}, @TCA_ROUTE4_POLICE={0xc3c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x400}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x3, 0x1, 0x11, 0x6, 0x7, 0x8281, 0x5, 0x8, 0x8, 0x1, 0x401, 0x3, 0x5c62, 0xffff, 0x3, 0x5, 0x7, 0x3ff, 0x1a00, 0x6, 0x5, 0x9, 0x3, 0xfffffff3, 0xfffff382, 0x4, 0x2, 0xc, 0xfffffffe, 0x9, 0x4, 0x6, 0x5, 0x2, 0xce7, 0x2, 0x8, 0x2800, 0xa2, 0x3, 0xea0, 0x6, 0x7f, 0x4, 0x3, 0xde6, 0x5, 0x1, 0x7, 0x8000, 0x7f5d427f, 0x10001, 0x5, 0xfffffff9, 0xf, 0x3, 0xfff, 0x1, 0x3, 0x100, 0x7, 0xfffff000, 0x0, 0x1ff, 0x4, 0x3, 0x6, 0x943b, 0x8, 0x200, 0xd95, 0x9, 0x7, 0x4, 0xd8e7, 0x3, 0x197c, 0x400, 0xcdb1, 0x4, 0xfa00, 0x5, 0x7, 0x69cb, 0x27897d6f, 0x3, 0xf9, 0xb, 0x7, 0xffffffff, 0x0, 0x8001, 0x7ff, 0x2, 0x2, 0xbf, 0x7f, 0x4, 0xfffffff8, 0xddcc, 0x5, 0x7, 0x9, 0x6, 0x101, 0xfffffff6, 0x2, 0x200, 0xdfa1, 0xefd8, 0x0, 0x80000001, 0xe, 0xffff, 0x3, 0x6, 0x7, 0x8001, 0x9, 0x9, 0x1, 0x401, 0xa, 0x5, 0x6, 0x6, 0x6, 0x80, 0x3, 0x7, 0x9, 0x9, 0x7, 0x5, 0x1f17, 0x9, 0x3, 0x2, 0xcf0, 0x7ff, 0xdc, 0x6, 0x1ff, 0x8, 0x7fff, 0x4, 0x10000, 0x1, 0x5f, 0x6, 0x0, 0xb01, 0x8, 0x9, 0xff, 0x1, 0x9, 0x6707, 0x696, 0x2, 0x6, 0x4, 0x3, 0x6, 0x2, 0x6, 0x1ff, 0x9, 0x471, 0x1, 0x4, 0xffff, 0x1, 0x4, 0x4, 0x7, 0x7, 0x3, 0x50d2, 0x800, 0xb7a1, 0x6, 0xffff0001, 0x4, 0x8, 0x100, 0x1, 0x2, 0xe, 0x2, 0x10000, 0xffffff59, 0x3, 0xfffffff9, 0x2ef, 0x4, 0x5, 0x5, 0xffff, 0x5, 0x1, 0x80000000, 0x1, 0x9edb, 0x10000, 0x1ff, 0x36a684aa, 0x2, 0xbcf7, 0x40, 0x5, 0x3d5e03ae, 0xfffffffa, 0x6, 0x2, 0xf50, 0x1, 0xd54d, 0x3f6, 0x9, 0x7, 0x0, 0x9, 0x1ff, 0x400, 0x8, 0x32c5, 0x5, 0x8001, 0x1, 0x100, 0x2, 0x8, 0x7fff, 0x86d4, 0x5, 0x5, 0x8, 0x1000, 0x0, 0x6, 0x100, 0xa1, 0x9, 0x7, 0x74000000, 0x1ff, 0x2, 0x6, 0x4, 0x389b, 0x4, 0x1, 0x8, 0x40]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x400, 0x3ff, 0x0, 0x80000001, 0x4, 0x34, 0x8001, 0x8, 0x800, 0xffffa26c, 0x7, 0xfffffe01, 0xee96, 0x5, 0xfd85, 0x1, 0x4a7, 0x20f4, 0x47e1e43d, 0x5, 0x2, 0xab9e, 0x4715, 0x1f8e, 0x40, 0x10001, 0x3, 0x1, 0x1, 0x3, 0x200, 0x6, 0x8, 0x7, 0x6, 0x6, 0xa, 0x10000, 0x401, 0x99e, 0xb9f, 0x15, 0x9, 0xfffffff2, 0x5, 0x4, 0x73, 0xfffffffd, 0x6, 0x80, 0x2, 0x17c9, 0x1, 0xfffffff7, 0x7, 0xffff, 0xff, 0x3, 0x79, 0x0, 0x0, 0x400, 0x3, 0x7, 0x8, 0x980, 0xffff, 0x2, 0x4, 0x2, 0x7, 0x7, 0x4, 0x6, 0x7, 0xc2, 0x5, 0x1, 0x41e, 0x7fffffff, 0x7f, 0x0, 0x4, 0x4, 0x0, 0x7d6, 0x5, 0x80000001, 0x0, 0x8, 0x1, 0x2, 0xfffffff8, 0xfff, 0x8, 0x0, 0x2, 0x200, 0x7, 0x200, 0x1, 0x200, 0x4, 0x5, 0x0, 0x5, 0x800, 0x3, 0xeb, 0x1, 0x4, 0x4, 0x5200, 0x3, 0x10001, 0x1, 0x3, 0x200, 0x80000000, 0x7c5a, 0x2, 0x80000000, 0x8, 0x80, 0xfffffff7, 0x40, 0x9, 0x0, 0x9, 0x3, 0x7, 0x7f, 0x6784, 0xffff, 0xa, 0x10001, 0x3, 0xfffffffb, 0x800, 0x9, 0x7, 0xffff, 0x7, 0x3, 0x1ff, 0x5, 0x9, 0x0, 0x3, 0xf3d, 0x9, 0xfffffff9, 0x200, 0x1, 0x7, 0x4263, 0x8001, 0x3, 0x40, 0x0, 0x8, 0xffffff80, 0x5f, 0x7, 0x0, 0x5, 0x800, 0xffffe27c, 0x5, 0x8, 0x5, 0xfffffff8, 0x4, 0xcc80, 0xfffffff4, 0x8, 0x2, 0x0, 0x96f, 0x7fb, 0x1, 0x6, 0x612, 0xdb, 0x7, 0x8, 0x9, 0xf, 0x7, 0x7, 0x200, 0xfffffffa, 0x7fff, 0x2, 0x3, 0x5, 0x0, 0x4, 0x10001, 0xd6, 0x400, 0x6, 0x3, 0x198fa909, 0xfffffffe, 0x1600000, 0x2, 0x0, 0x1, 0x2, 0x0, 0x2, 0x1, 0x7fffffff, 0x7fffffff, 0x4, 0x6, 0x9e8e, 0x0, 0x5, 0x2, 0x4, 0x8, 0x3ff, 0x8, 0xd, 0x6, 0x26a, 0x7, 0x8, 0x10000, 0x6, 0xfb, 0x3, 0x0, 0x2, 0x5, 0x800, 0x8, 0xffff, 0x7fff, 0x2, 0x401, 0xa, 0x7, 0x2, 0x7, 0x400, 0xc, 0x3, 0x7263, 0x7, 0x10001, 0x0, 0xfffffffe]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x6, 0x1, 0x2, 0xffff, 0x7, 0x1ff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x0, 0x1ff, 0x8, 0x775769c3, 0x5, 0x8, 0x7, 0x0, 0x5, 0x400, 0x7, 0x8, 0x5, 0x8, 0xd, 0x8, 0x2d2, 0x9, 0x6, 0x8, 0x0, 0x1e, 0x745, 0xe3, 0x99c, 0x6, 0x2, 0x4, 0xd4c, 0x5, 0x0, 0x7b, 0x69720, 0x200, 0x4982, 0x9, 0x3, 0x189, 0x6, 0xfffffff7, 0x6, 0x80000001, 0x8000, 0xf4, 0x1, 0x6, 0x37f80, 0x291, 0x1, 0x8, 0x4, 0x4dc, 0x1, 0x10, 0x7, 0x8, 0x88ce, 0x3, 0x7, 0x400000, 0x8f, 0x81, 0x4a45, 0x6, 0x3, 0x1000, 0x4, 0x6, 0x3, 0x6c, 0xc, 0x0, 0xfffffff7, 0x4, 0x7, 0x3e1, 0x6, 0x2, 0xffffffff, 0xaabde06, 0x887, 0x2, 0xf, 0x40, 0x401, 0x1, 0x4, 0x3, 0x1, 0x9c7, 0x8, 0x4283a803, 0x8, 0x80, 0x2, 0x8, 0x6, 0x5, 0x70, 0x2, 0x1, 0x2ad, 0x2, 0x9, 0x4, 0x1, 0x5, 0xc8000000, 0x5, 0x9, 0x400, 0x1, 0x3ff, 0x6, 0x18, 0xea, 0x7, 0x0, 0x4, 0x2, 0x8, 0xff, 0x8001, 0x93c, 0x3fc0000, 0xf, 0x200, 0x400, 0x8001, 0x6, 0x5, 0x151bb226, 0x0, 0xfffffff4, 0x2, 0x3ff, 0x6, 0x38, 0xd, 0x9, 0x1, 0x0, 0x9, 0x7, 0xffffffc0, 0x2, 0xd33, 0x9, 0x89, 0x2, 0xa, 0xfffffffe, 0x0, 0x6, 0x9, 0x9, 0xc9, 0x945e, 0x6, 0x6, 0x7c29dfae, 0x1000, 0x5, 0x6, 0x8, 0x9, 0x7, 0x3, 0xffffffff, 0x7, 0x5, 0xe, 0x1, 0x3, 0x8, 0x1ff, 0xe, 0x1, 0x5, 0x0, 0x0, 0x5, 0xdf8, 0x9, 0x8, 0x3, 0x7, 0x80000000, 0x1f0d, 0xffff, 0xff, 0x800, 0x4, 0x1, 0x0, 0x3, 0x7, 0xff, 0x3, 0x3ff, 0x3, 0x3, 0x7fffffff, 0xfff, 0xfffff801, 0x6, 0x4, 0xffff, 0xd1, 0x80, 0x8000, 0x0, 0x9, 0x9, 0xa7, 0x7, 0x28, 0x7, 0x3, 0x4, 0x81, 0x6, 0x3ff, 0x40, 0x7d, 0xff8000, 0xffff, 0xffffffff, 0x5fd, 0x1, 0x7, 0xfff, 0x4, 0x35, 0x8, 0x2, 0x65, 0x1, 0xfff, 0x2, 0x9574, 0x6, 0xbf38, 0x1]}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r30}, @TCA_ROUTE4_ACT={0x5e8, 0x6, [@m_skbmod={0xa0, 0x3, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}]}, {0x3b, 0x6, "ed80ea36a9e53c8fced350e95ec135775a8c1cc2327198f0ecb25cb303efeff4a93e13efb32c01684324ca9e4b8b9943d3b9b2b82dddae"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x330, 0x1e, 0x0, 0x0, {{0x7}, {0x274, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0xf9, 0x6, {0x5, 'security\x00', 0x3, 0x0, "5daa70da09c5d301eb8f430ca83a20601a405fc9f1957e26714aedb57d67bc45d8abc5f70da8cdb8a57653051e8a4f26975b332597c5695c69df77a7327dfeac059392b4d6a44ed983716609666505963290219671677e19bb2f60d2e8ca8f9d28cdc448f23125e0bc17ea42f379e8917596de37b378ef0cca0a232ab79c21c633a8d2cb3133d5c7c7dff8e1a69b8248aaf6ac8927b971710748b0e7ac905ef3cc83a07348ed569711962bab79124b463ecfbd056da0e1dd03740c345534a77cf219407fb9f89a125f83329cfa3786"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x11c, 0x6, {0x2, 'raw\x00', 0x5, 0x7, "32f80ef6102c5610ff083148c25f28934634ceefd6b807da6c204b53f36f27f3bb74ec81cf78cb841e9fee419fa2ead83cbc875bdf5c873ec20db132927637254014bd7df7b31e3e04c92ecb8a566427113cccbad086466f0b58c6492836f965f3d1716b48ecef75f68b7a7855c28a5a87278f06216415e014318fd104a4ef4490afc4ce9e51b45d986d6c6dd267504faf293f828cc9574ad5a4c0f18a4e6ae506323b26d40463db63bbe2250d052c9e5886f241e503d40fab7375f93598f310745cade483b8473dbcf289d229e35f9df3b48ad313dbfc59da30144544da52a5fa667a3a945caa2907c069f0a1804fee5206"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8}]}, {0x97, 0x6, "d1b002b3813ee843b53657c3ad429cc59ae3b8bae9769f0ef9e5b20171afc322ccf1c48bfc38efbd73771d3ad9bef3f5753c0bf882392c804eb25285bcda2547cf3e47e882eb68e5c3e78e5b8d6f16545f149c8b5ed09bf80644d455a82d3c4a29af87a11863c5edc0eba45d6d3aa6975f50ff504e7a4052cd672f61af673ba575aa05c70df776eedcfa0d17801476fc7a54a5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_bpf={0x148, 0x20, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x495, 0xc3, 0x8, 0x0, 0x3}}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0xd574, 0x40, 0xf, 0x7}, {0x2, 0x6, 0x26, 0x3ff}, {0x7, 0x1f, 0x2, 0x8}, {0x0, 0x1, 0x3, 0x8}, {0xeae8, 0x0, 0x7, 0x7}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_FD={0x8, 0x5, r28}]}, {0xca, 0x6, "26536745e44dbdf92e3f3b12c42b603516b64afada94888ab8a934d7262de5062ab5fe3e41eff165198e8aee8a400cee7a67825c385a832e9c2ff0b88b0e3432b400438371a08f899fefe120888315ef9430e336b69260485821b4fea4f825c14e8e820bb2b4f389ebfeb936c50c5cedf8a82735ede09803355803a62bc68d36091e79f11cf6160435aa721e69ba3cbcd3477f51803352bcf5eba80ad7d6a065a36837d75f0145e407b8cec23987720150ea58c796bcd4c9665d40d344ed896de6b126cecb1a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xcc, 0x14, 0x0, 0x0, {{0x7}, {0x80, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_PARMS={0x18, 0x1, {0x27, 0x5, 0x0, 0xb0, 0x8}}, @TCA_CT_LABELS={0x14, 0x7, "54beb8af6bde24c269f283bd4c45fb24"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_MARK={0x8, 0x5, 0x5}]}, {0x25, 0x6, "9e8ed2592cf54557532d1be62c480162a2aeee42e45687df2f661a27403d8ab05e"}, {0xc}, {0xc, 0x8, {0x4, 0x3}}}}]}]}}, @TCA_CHAIN={0x8}]}, 0x3418}, 0x1, 0x0, 0x0, 0x40000}, 0x4008859) r31 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000006680)={0xffffffffffffffff, 0x9, 0x18}, 0xc) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r31, 0x400c6615, &(0x7f00000066c0)) openat$cgroup_ro(r22, &(0x7f0000006700)='blkio.bfq.empty_time\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000067c0)={{r26, 0xffffffffffffffff}, &(0x7f0000006740), &(0x7f0000006780)=r16}, 0x20) getsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000006a00)={@rand_addr, @local, 0x0}, &(0x7f0000006a40)=0xc) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r24, 0x4058587a, &(0x7f0000006c40)={{r8, &(0x7f0000006a80)='\xc4&#+\'{\x00', 0x4000, &(0x7f0000006ac0)={@align=0x5, {0x5, 0x6, 0x4, 0x7}}, 0x7, &(0x7f0000006b00), &(0x7f0000006b40)=0x7f}, {[0x4, 0xac3, 0xf99, 0x3ff]}, 0x9, 0x9d, &(0x7f0000006b80)=""/157}) r35 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000007000)={0x18, 0x22, &(0x7f0000006cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r23}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000006e00)='GPL\x00', 0x0, 0xeb, &(0x7f0000006e40)=""/235, 0x40f00, 0x40, '\x00', r29, 0x0, r27, 0x8, &(0x7f0000006f40)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000006f80)={0x0, 0xd, 0x8000, 0x428d}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000006fc0)=[r13, r5, r19, r8], 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000007140)={0xf, 0x2f, &(0x7f0000006800)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xad}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r27}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x38}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @map_val={0x18, 0x5, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x6, 0x2, 0x0, r21, 0x0, 0x0, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r32}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x449f1b7a}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x3e}], &(0x7f0000006980)='GPL\x00', 0x3, 0x34, &(0x7f00000069c0)=""/52, 0x40f00, 0x2, '\x00', r33, @cgroup_device, r34, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r35, 0x6, 0x0, &(0x7f00000070c0)=[{0x4, 0x1, 0x6, 0x5}, {0x0, 0x5, 0xc, 0xb}, {0x0, 0x5, 0xe, 0x8}, {0x5, 0x4, 0x1}, {0x4, 0x4, 0x5, 0x9}, {0x0, 0x3, 0xd, 0x5}], 0x10, 0x7}, 0x94) r36 = syz_genetlink_get_family_id$l2tp(&(0x7f0000007240), r20) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000007300)={&(0x7f0000007200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000072c0)={&(0x7f0000007280)={0x34, r36, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5f85}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x400}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80) 2.829498592s ago: executing program 1 (id=2327): socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="890d", 0x2}], 0x1) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x7ffffffe, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) 2.745290564s ago: executing program 2 (id=2330): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000010028bd7000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="104e0600016a03002c001280110001006272696467655f736c6176650000000014000580060002"], 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x4522f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) 2.61447728s ago: executing program 4 (id=2331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0900000004000000080000000a"], 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$inet6(0xa, 0x5, 0x800) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x410, 0xffffffff, 0x148, 0x148, 0x0, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@remote, [0xff000000, 0xff, 0xff000000, 0xffffffff], 0x4e20, 0x8, 0x5, 0x4e20, 0x8, 0x8}}, @common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x8ba, 0x43, 0x2}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0x4, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xc, 0x1}}, @common=@frag={{0x30}, {[0x97, 0x2], 0x4, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) r7 = openat$cgroup_int(r5, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r10, &(0x7f0000001640)={@void, @void, @ipv6=@udp={0xd, 0x6, "6ff169", 0x8, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {0x4e25, 0x4e21, 0x8}}}}, 0x30) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x808, 0x12) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000c, 0x12, r11, 0x0) write$cgroup_int(r7, &(0x7f0000000440)=0x51e, 0x12) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xd0, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 2.568972297s ago: executing program 0 (id=2332): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x43c37000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRESOCT=r5, @ANYRES32=r6], 0x28}}, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r8 = socket(0x25, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a000000180000000000000070078822d155130bebd4db00"/34, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="30000000ee57d238757b25f9adb9e39d80bb7180195f59ee2206598b4864986c88711fe101eac54ff5ac53473008dbd2292bf942ad9781300fb7cc84698f78772944e412471d9d3f21c9d9b9db02aa72089f2bb848903827f15fe2445bfa3a5720d6", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x40004}, 0x0) shutdown(r1, 0x0) shutdown(r1, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newtfilter={0x50, 0x2c, 0x601, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0xfff1, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @local}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff1, 0xb}}]}}]}, 0x50}}, 0x0) 2.505922177s ago: executing program 2 (id=2333): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x41, 0x409, 0x5fffc, 0x14, {0x1}, [@nested={0x4, 0x48}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x10, 0x0, 0x1, [@typed={0x6, 0xa, 0x0, 0x0, @str='{\x00'}, @typed={0x8, 0xa6, 0x0, 0x0, @u32}]}]}, @typed={0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x240980c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) openat$cgroup_ro(r6, &(0x7f00000004c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f00000004c0)=ANY=[], 0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x154}}, 0x404c004) 2.432238636s ago: executing program 1 (id=2334): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000029c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) readv(r3, &(0x7f0000001700)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r6, 0x14}, 0x80, 0x0}}], 0x1, 0x20000081) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macsec0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6, @local}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r7, {0x5, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040054) 2.311254879s ago: executing program 4 (id=2335): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x503, 0x70bd28, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x440b0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xb}, {0xfff1, 0x1}, {0x9, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x800) sendmmsg(r0, &(0x7f0000003b80)=[{{&(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x2, @local, 'virt_wifi0\x00'}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000380)="7f811ba702cd4f0411c096ed2c32b53d43ddfb451cb212302c437e46d43f2e662dda8f0d6038aed848d52133644e07ec2a40bc67a5553a10f2a69ba0a961efdd4100fbc100de1faa1c01541700b4f63595ebbce8cc85ca72ca6867521210dd85b7af5d77b71cf852c1bcb3db153209616783c91f4f115e024535e81df30c8bdf95a6fce19004ab65fd126530130f4d1a129456ed130e586c51f93dff32868ef2f13a8002b1483d9e1e5023f1d144abcd2aa42c5fd905963b97", 0xb9}, {&(0x7f0000000680)="0f5f0aa469b24ef3096512f27da3a525cb23c5e84910c57d2f4adc35638c2faa96119fcd4b1136a5c4be03599d126a56f078f61cb08ead6089fc4084ccccbbe6e522dc25ffbfdf80bf3f355d2d08cfc2d7d311f5320f9a1d1e73459e57c6d53847009d3f62e1ec5a74a0c1f74b64efe355dd411d26cb4e4f355e55dece56325c11ab825ff93a820a5e2b4640f8e20751f8972f6df1d5607ca78d7a885b77095fe43a9d0f5026d6b151248337689d537d41451c38a408070e5830b61731cb1c0f3570a90b2dcf29fe6a715859955fc067", 0xd0}, {&(0x7f0000000780)="77621354420c6f311370280b2c06250e42c67ce4dcf7bf955459b2ac10df6bfe05c7c6c7b2b2484c884746e1cfcd53f48d88f14633230b9d4e8b96247f6387cadf6a05316eea6b5121734b6b77bccdfd87733a6443f73cdd29d33291ebede706c739b9b576e5e2ba02481478eb1640fe0151594414548896de5c658d2a82948163393b210ea6a693891b74b0eecc486e9db58f907849edf5bc0bf5f3340b44c83e12cf11875c82cf61c2c2794604d3c77a3e8b0a5b03191fe5631f33fa540c2239636eefaba7d7507f07a1b30f7bed50aeef0c7d6249f6918b", 0xd9}, {&(0x7f0000000880)="36929977e1ed4b6bf2646455af7be6e328bc6fac4912341568460608feed52ff815e3d5dd34ce937ce53a4824bff30ff69c8c7021b785dd454212b194d15c5400ce0fd5ba42e8265b161c2325fbcc005be21bcf0b6b5253d7ecfab9a0e44fa21f601d7b5", 0x64}, {&(0x7f0000000900)="109644810ee28474b4188cee675f8666e7c17396d04e34d97c7f860ae8101cc92877514fa82e231031c4717bdaf702babb66be2280d9536b054a30c20e28a67db81e1aeac32d44a5369c898c38eb15882f2a", 0x52}, {&(0x7f0000000980)="102dc1997c119131b8ad7a0cbfc3262258493a9f8946ab12144f4975d54560dc6c742c186abffaf07809ebeb9458439eebb21e06181c313221f843efaeeadc357d87d6638be28de382be8a299bd58f95e8521e2aab362fd9dac2d9a6df92255ba0136aca3806fe8dd31560834bc69be5d75520af102ce19d560ecef495f999e57a2e0682f801f835f3f0d8da7ce29cb474c51f2424467e0dab", 0x99}, {&(0x7f0000000b40)="b6d5e4fa9bfc103e46043ef495bfbd3396ae85c3000061095767abe3e22b39507b089ddba34144db8d3c6666c973daa9f331a4aa778eea99ae05af962c7228d5de53cba1cfebb0bf0ba94e5485141efbe0a612a39fb5401d4f803bd29283b12ddf8e2be843003736bfb4234052c9129fcd24957907ae37021abfe9267ddb5a5902e883f96b76296622aaa8bb97b273fe4cae106e176a9d415a2cd12dd8fe8e26cc10496125c65e8bf92d11fb9ae72d", 0xaf}, {&(0x7f0000000a80)="0583a5954cae8d01a51f37e6a402e1d02111307080a1bec96c6eae0baac71f343bd39d254f961aedb0db2ab7394ec469259924536ca2f047f61a95c5db0c5b99", 0x40}], 0x8, &(0x7f0000001f00)=[{0xa0, 0x118, 0x10, "da258d714c734cce05bf5ab700632481ed182faabdfc41d14d00401cee22fa513f4988ac9d946c5d1a5295557e6651f137c530d3512a98124e037288ca4ca0de455335f0ff6eecaad461036262871d628db1ce0cce79cb5e20bc8665e68149f6881a031d4f1a00c4fd7a9c6d4a19ec1be116fee551a625006d3a24737328fd662955b6bebe60faf735f6"}, {0x98, 0x1, 0x10, "06c9d5257a9db784b01fd8e26894c47e2fcc6208a4208ae8dad441aea4553f81de26472fca1f4af2bf06b74ce68000397a31f2b207e1694661c3e68f42cd212736c6fc483b194919eec1412b3caa52805fe92a83f55d3899bdc27981b2878bb3f209d7096ab066130fe6d818bf603220366e1b890f54a4cf7306bc9f97084b4475068a6b7e7c37"}, {0xa0, 0x10f, 0x0, "6c1b2bdf1c67a087dbd215e588aaf48c44c64eee8e93128bb4d6c20409d8121f0dc699ab2395db7ecf99e10214be351fa9a7633ecffc4a7bf770c8fd4682b74ab514ca03d23368fda1363450711344b3ab6578a2c8a0c27f6df88cc8d464b029080fb3085c7a1b90d58ce5989823d49e1589be76cba7e04c193ff842849d674d20ec15838ed9d1cee9"}, {0x50, 0x108, 0x3, "050516e15739af9c8b3271b601c41166d3bfb7de2adc92658eac037e65a988ebdb054372012c9481c2b6e6f3fa92f6c1dd15f34fcb9992e78d35ac983aa6"}, {0xe0, 0x111, 0xe47c, "b2cb3a0e5aa78b4feb5bbe54ace1ad37143bc0f5f8a6b14427cdd00789ec023e73f81a8a27fff9ebca5ad56e4050008f706597d2642ee1d0c521ff26818879f1eba7da8b29fbea2c4ae1fee6dba9fce9d0230867e9a1ae70010b40e6544ee2c3f57961a7c66250e963aba22ec43e17d0b78ad203ecfd2472b1854ed4c9bcce2d974901e3def3bad888af404ab761e6b2b39c91da00a93bc06fc6c68c548442f735a177eb46942e34911a260d720ee2be24d485d397cc8562ebd2065e6432e08a775d654c57f121f8f8561f00"}, {0x48, 0x104, 0x616, "e09b51c589a43975fec4b37f518623abfce24508c880bb187430ae458d35cc32342d5766bc010ea1dec6167b13b11daf425bfd99"}, {0xc0, 0x111, 0x9, "439bd2dcbe8e2713a0ea1b1d2a3b5a6a97d36a9bf12ebfb3ff86ae1263a416c13a17070528ef9f392b1265c3d06c21f15a5278a98bd9749151fa5557409f39e1c2450a41300612181873df77ad375da76b1098148b2bc9556d2e74f699817df2d720ac9c5b1466fea13cd2b6b120549dac4e849b345d74b15b725d98ef717205458c5e7245538f7405c07a353dfd9584b99009a7c8a012b962a1dd05b5ba42dfa92c02e32354f4c52d73389e89a5"}, {0xe0, 0x0, 0x0, "77779436ddd50815f8b4a065f0e2e8d5a7605ce600d940e109ecb5b7c0c633eae95d424fffbc3b7f2631d33cebf525c9a630cedb058ab33d1f5f03b5417d5f72f3bac207a31dcb1b92f509565edee6300a837c320de3be43b8f9d81f2e376a6b91a579497207f92f7ecc6bc468eb5da814b3ae927d70ef7997668cd3aaef925d9b3873d19ef8fcac48238f60109097e0ff40431c3464b2e82a88cd1e035fee12b4492d5333d57053e9a1cf39e0a09d782e08c86549fe1e987a69bd32f51bdcab15f56e07d4a51ae0012463cd4eaa1c"}, {0xa0, 0x6, 0x1a14ec00, "454eef50794429c9e21edeac0685c5d0effb1783d5aedc0285cc180b2b4354ce31a8626bc47db8453b8b87ca3de60852f6d0139ea40edd37c0b4fbcfd03c50a63a9a49bb5a14f978dbd9e91cca5b7c7d4c1ab72de093e4c6eb02cfad5ac3ee63f86733ac6454a261d82280c3824ad5bc9fe292527d321f6df074bd3c8bed5f765f219763e874a2699272"}, {0x1010, 0x119, 0xfffff19f, "26864ab6a27867a7adf42628d0cc23c22cb57dae6398c00101564f5eaad95298b4740f5d65d2d2bc0e2a635b6e3dc007b965cd966d249ffac2ed1525553348715e11cbbd817539d4d1ce5d2b2d8f7777aca23459b580c5381d0a7ce44108d3caa4113cd25b77dc76d984904d2760f35a8e88fbcd1ee45a69bb4c600868ec24a176197b8517161ed95c1ac56df00423d29b06490be34ceff12a450f600d014f6ef75cdf25768c6ba3865444c5f9176b7627312601155d9bc2ec8e29bec11a8e2eb5d86e6ed55a652346ed2d708f8270e97ca545af5787c6d2864c5bf9d9d88d41eb7decb545866ddc136f5909e6b40ff475056d71ddf1de425f34c9f8bfcf757ba9737b7c1e50ed7fed6ae651521a1a3348a5ad7c89df635dcd769a57f7abd1ae766ad5dcb219d93e6174490a20b17d6f64cf060566bc31b1a33e35e6d8a04aa3c6fd1dc66f8d53d6652e7fbb9e9ea6506a8d90972946dd25317ae310dabf0de76726399ae6892ab5cb7aa6b45813a6ccc650595f61bc876c0dba84d1904495570d76b2849a3ce8ba57ce01a935bc1ff912ca021d5450f7be77d448ce35564d21f13481b3c916410bced55b05ce14d5f589d75d048843da16c0422aaa62fc645438128dc6513ce7e010dcdea302ebe4704d948575f49b2a541f5d70021f6c84f5b595b171f2ac55f77ae8b81f76921dc9cd72472a9b4ed963ad260dfe18c4ebcfa971d53dad2e9819dca9f0230cb8485054938f45d89bce3a9aa598c7e437e105361853084078425cc40122ffac990da9d0f62d572688d57920f4c7c73c3f1f6de4210c92f2c63391d33ba11e5a7a0add155666b7f32848d3d4593e4ad616acccd7b544320f91ed8b1958a2b3ddfd823a9de4d59d32a68a2c0b1ad9508eaaab5a40d6aebf32347995977015f20e504c4ebdda0d20a93937aba76df356dd7e2d7e0add8883928e24c88dd400765eaccefac3258e36348e4e5f164aba9c0da2df7906c5a9b97b64bab49a5190520a5556f2dc34dfababaca5a32d70e4478f268c5a8ac8199c8b1275876fe5cb6107423e20fcffa094bde29d7f3d8a48c620c6001425ac97beb607f260b7f1ec0616833a1301d072ea9b49f085a70667b23e9ae7fe28c301659f3dbe1427c816284955205dab7cc7aa8f074ac8a91ffafcd739dbf827bdab73de9465e9e97afdad7c4c3495735192ea84d10892c69c3360eecff5b35091d38508e1a8363ebaaa9065f049f5728432ce1173eebb01b4af995fafabf8a472c087b60ce5eca05424f9020b1a0f2a47db157b64e51dd4cc57ee9359f4124cdaa17cadfc109cd9262892f483ce970c9a74b1ca70b3564371e5da356c943520fdbf74bf5e4319dabcff12afb46ea6ca60250b7603d1c76e1f232197a0ad63698fb87ae89366fd712e1a1904af209e248de56eed82d1ed5cb8b400b8546430547db369abffed6b55988f17dbf5bb8aec83b12002901db2a3e29c4e027ad872258e96c426832a016186a9699d220a3492ae38f501ca92de7298ca3694cd4ad6f25cedb956e4fec4b1623f708ef503a86b6fe747c1b7f71210f6781572681bdd06488f40181ceae53bb7c03f1936204a47e0d6ab20d61b43dbd6828fc747f6800dc58c724654cfb3bc24b45b336d587befd2cae70f8c8606e0671c61382279fe3037d9cedbaef6b95875eab2689d370969b29295a5f6d0e5f51771ffa8a150a54d50cd8443b7fbcdaee524c3d8b7a6311af59bf21b4a8b4e34b30d8ebd5b0eae7c781f5840ef99683884123271e3ef6a3e77b062b31f3f0e6a6584f797312d2a7cac1078fc124b5ec25d2e12ad864f2855e3b4e7f7f95e04b610359db9ba6fc24f963c2c84bc45b8043335a6a4596db5a7053a4170cc26577146ce38902a7d95fdac4ac407765102c33dfad278d3ee46d693f1aa9cf4643b4ef92860378f092955022d9d4fb317af04fcfd8e99ad7b1dad79322a8909a191eba26affda0035490d484676e9dfeb430bf1fecbe4e8a4a1fcd5701b79901c79d3b7218b950f6680389a45a87b74756f80de1598ad6db7ec50c3225da0e440bc568cd6d8825e51889b3c389b764d2c0e9fa0a8d7eff296c3297f1edef83173fd815e7f847283b04ba3db7d52fe01362ba359ad109ad76a39f5588e9abd260d6d358f72a58c66f63b45e0f35e5ec4bb183493f7797b66c939c5f15edae9af688ecfa737647e41bb6f26145874463b1339c0b523e5512861392275a2b2305683b3d72754cc4752bdd7455f7f22d5d7c998858c5fd2e8b0c9a122e31a3846d864aeba773db227dd0343c489fd9da9895fbad4de110356f219f6ac06222f2e6c66ba92a04a0009721fa0ac443d59aeb30a0318950c0822e535c7f7453d47417cbd5ddbd62793992fbf97fee98fc7007855cddb1227af8098b8d1ef1fe2075f73878566f8f48700c94abe35e0033b7a8aca7c7416ccf00fa2a8986871e85871929007e52230701ee673a389b6f26433c8e42f2136b9b3f2cbfe9f1d6ec28dde84071793c0bbe53213d69b71cf276a49b3df65e21f42db42c37060eed87599542faab130a692a01acc0b168a9275a192e47d1774f46b0f1c2472d565c10673bed18a48ecce44e04060d6ddb242cee2a2c9bfbc38e959c6b036bdfc4ef5c1334114e534fd0a83f70416db454e335b164a9237260be98aeb38760558267870f597088d16ca097bcabec5b4698de833a7ec74246aedc747ef5a7727c7a6e685ad26d40b7c49e6ce9d329f7a3273420945be927e819ad5a8a0668776952bf0942bbb65b3a3c703725f3e8ac10dd31dbd31bb77238b8163878d347be7f837670a8d441c1cb51fde16a6f044ebb5e0afe8d2385cd59cf8e4ed1559c3876f79f9d16cf55041b7e642c24ec2584b373a62163e0254f487f5a8586853ea00275e932dc74e8a7035f2b9f7c43a944b0b9c2673ece6803e4952d97d8293b0903596a8716ed305e1fe75f479dd93cc6f16b0e2130574f5fc2da299dedeb8aa9acc3640dd8b08af36f44caa8fe52ca67103dc425320f8fd2d1ac7f583ff5dcd4fa036ad0e44c6b32107cd434d082cf3e62b6c7eecb730aa414eccedeeccf21ffed7de2f9b63fe7027fc9141948e42174e6d2625095a85f06d9109a9b9b64efc419c158e7a501e224038f9d887cf7d69ca3a1f288d3db51b1f8882d807c85158816e14f64dec9e2231b62bcc649100541c933c74c1b8414f1f344a2be6398b260be2fb1ef6294ef6bab17220778644185b865908c0d2e44a1d1cca0ef243e77b293b571c6a76b289d95a80e93059329da8350762cea7521806e44cbea90666e22cb47d857fe57e7787236b824a9c68065419eb880da436b83503352fa76ba9926b8d84736ff2897c0d90ed5d7f11f18f460b9b5eaa263fe81519148e86d2a89d065fdb52dba750a2ae5ec059969ecc68e4d933ac4ea02943ca95fb3953692d9fc94bed73f2ab88baf32e1c10ce2f2dc9fdb019ad123d2dbd2c60e6eb0844c4ff139c62e8594a6e6a246a9b8ca0bdcc294290cf71a4c4e255484c2283c3bf4683c1f0b38f1d24464231ea91fda3c58e05c10e56489d3960c28c1e7d72bcbe08281bc379c122e78d4ccc691b19c918d906587f240563b5bccc7754861bc1dd0ebaad8676ee347c3898eee5203d6d31cda988fd59144e25edd6155bbd077765d51996df9d12ef13c36ece25c262649a4b52980d636557b742541480075998a35ff076cd13bdf402f4776f1c46f77e6ac3f4c9a5ef9bb272467d03023846c6d2fbf2b6a49ec925f9b0af1d07d20c53c066f4a8a3864f3ec2278eec01373edb294f5c9e7a82a41a21a60b42408a7517e6369db67a2e007867a185e795c8fbee86d9c79534f1f6381bec64b2780b75d035ea3603f0dfb50951479c84ec601f8cfe8b1cca793dddb66b78045c168f6f8cf0b32caf2e6fa0474dcf8791fdd780ca96e58cdca03ef2ac9ca988bf1e601101fed5569542e9821ca7d7faddd513d5cf17151aa26e0d9f5582d8fd05712c0eeb3e46d9f5ccae042be997572070be2705bf894f179df3a600ed481f8c4027219977baf2acd2535eca3062e3a31951a89bf0c05734932b5a8fa6adfc0586a17fe0dcbbba76d0d6d48fd94d12943a2a383a65e5ed3020c25a1265fb1fd783ec699ff870a327bd066d707712b69369c57c12b9a293a826280534bd3aafb1588482da4430a3758902904951d9db0e787032e0c078a22a3bee9ef302e3ae15d5f2480ce01620d231929b1c7803027dc607914879d2f195de42ba5d59f3f6fa4545f6be58676ff6fe258c7edfaf439a5850e2d9b98f7d779ca2614ccf08c2b5ae0ea5aff75fe23df54d512fd959d6e8a50a6956c5fee9f3f72b42cd8b12fc657962b3929c4157ab72dfb26438d7214927f5efce31c208c9a95ccc29722cc941b26d61ed94c44a5e6ee591e061afd43d0ab3e4dfa19fd6b526947646587d2e4dbf321ac175f718d659998f104b7325508ca2625cee976941edbe0a50c7713bf8b5779869080f6eea89341180003b107b958b63ce74120782c5cff68034e6e1dc56cc2a165e0b3ba00c8b80bc77124e30b9b11c253a34a6718846f7923dc949f7546fee9ca4b441471ad7a0103980e6b04e1bb81b07d2ccc471fab895cd27210950d25a51ae6d7b941c2e817d85e7e0f7318421200db405e978a240ad25eaf28324cd67c8105645f8a59d1bc8ed54f0587eaafc2c89bff5162eec866d1c3d0c4ff31bdb9e40fb01d9d2ad3493152797e8c598eeb21db80bd0e950961edc3c3437d89781df825d7137384aa31af9f9bdc7193338f7d220a1ea9d60912d89e96ff39e1cb5e3b5f735189ea9b11d1e535a0460940231d68f9a87e4f8ee12e84879967d9a8da1a3c78d36eff2eaf3e81f92abb6dd7d57f257270cde2f35fec81fc851a3b724db8966bfd9d6249a27e21889fa2dfe681bd6b540cfcc671a276a7317d4d13892f9e1f5ab76485dd6d0df505d83228da9548291e4620a74e9060b59586a9db7bbb18babfa8acbdf6b30a884bb8bcfcce514f44216a1bd21623eb73499387cb45e6550b02a8eec08ec918701f96af456ae2740b28180e644901dab9b6ac54ac6b6dd42a99226a9ca09fe701ebbd256846354703291e01c8d0a8e870c21dc2ebc5647198daf09f675ce76ce1fd68d87ba713b6fffd50dd999967322bbaf6cd5bee33057b55e9737ee906b875fd114fd08727ae19eeb2c44e0763c301bb8d36614279f722e3b0c67965d27e90991a18c6c69be63ac913793bc1b5c1fb161451918ca111c3db595f16f0f96ae9d5dd3058796c67b5f1ce56e4c6af3a41165492d47c0dd12ef8b9a685c77669b8fc4a477339581904b36983452ad9e421b4812fbbaf6b163f17c6d961cf4ea421cd4edf6008630c4922dc05ac15f9f1689601257fae243202fe3222c3eded950056552ea98da999af622b3d5e39b295bd0f94ddae2f352db82fa9b578754c99d924bb8e103e1beb00f6e04216160d62692280ba5b1d612c2ebc6ae0e9d0b8f766704536050dc64fb1e7627ac3722f361c0a3fb5bee838192b4f87baaf46183c812142d16d2ea6cef4ccc8d83bd5bada893aec530d9a6b376e378beda79748c63c7047e6c55c644577eff245cfdb439641e416a380d4ceb1cd4e3ca8136d61455dd787b7951109d32bd2753f6839d997f1d90fcefba6a4cbeb078ba8f1f6a8946fe15c5dd3079976dac766f93576e60ae1425413e04d438491e82268b1e4696bed5c6fff07812e9098afd5a9dcc1bbc090a6e77a41bdc0f97836c04e4"}], 0x15a0}}, {{&(0x7f00000034c0)=@phonet={0x23, 0x3, 0x3, 0x1}, 0x80, &(0x7f0000003580)=[{&(0x7f0000003540)="8b7c91bc8e456d6a10abb47b7ab8541bdb833675e4c0e4040f418d6022f5fce8709db56d69ab9939e38c92085ae11df7d88ac5cb54d8", 0x36}], 0x1, &(0x7f00000035c0)=ANY=[@ANYBLOB="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"], 0x5b0}}], 0x2, 0x800) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5ae46d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aee20182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a81505000000000000003591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df5db927d12aba9113c1cec6817d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273fd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e909938a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b6122f207dd59c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0d5ea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccdac114482b619fca4d97affe65ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d88d024bdc6bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7beeaf9afce09594b09a709a940965f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b8f7ff86e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000b0558e580000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867be0ef0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c250e2ba56301e25c19a7e37ce880bed8a8e1538560f2be7d4cca6539257505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa4f8b92c47eb03ec5a01466baad5a8ef329d831e3373f7f82b82a27b3d25682d9e63920658e5460c789633c5cf79e4e77cd7bd34c864c08d57fe32728d24f881fb8b1e1974ca17883835c5c60a9776f2df14227789f4da2296fecb3c44b783ea2e6f448eddc7f25648a5f27b8eda95b960efd3af193c4eb6f4e04f7bb89cb944fb7abea0b90da3c9bf41776604b5fa3423ca680029ae6ef5aaa4d72b8efba9abd3451e5d2b81a6022d4c1a78767058f84b56b8d062df5b5344c89add73f2b889cdb35c30ee2425621f1d966d56e8d315f8fe347464464ee0721f4253f500689c0f3efcb845254dab76f06c0d76b30c42aa9f55923c71350c2436eef1cab2d900442dd89f1051d32a12b576c9cbf5f5b32153e06eaeba938548bf5a3b4b5f5822790e0d8fd77b92ad9736af615b77e7597da8f0ab04a62"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x2, {0x3}}, 0x18) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68c1}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x3d, 0x301, 0x70bd25, 0x25dfdbfd, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x80) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r11) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r12, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000084) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r12, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000a40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x140022}, 0xc, &(0x7f0000000c00)={&(0x7f0000000500)={0x2c, r12, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002f, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000002c77030a89079f03b180004415050300845013f2325f0094090519fa0000880b943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c060000000000005992078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc04308461738190da450296b0ac014968ce23eefc9d4246dd14afbf79a228326c3acc240d7da058fa4806d1f5f7ff40000001600"/249, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4) r14 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r14, 0x84, 0x4, &(0x7f0000000440)=0x1, 0x4) 2.248442995s ago: executing program 3 (id=2336): socket$inet6(0xa, 0x800000000000002, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000000)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @opaque="24dc6170e1e0318539"}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000006340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="61124c00000000006113300000000000bf300000000000002500070007ffffffbd2001000000000095002000000000006916320000000000bf670000000000000407000072c960354607feff00200000540700000ee60090bf050000000000000c5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f055af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6901fcecc8158f0200000000c8fb735fd552bdc268694aeb0763f65e439ec1120843e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3abd5dedd3f7d2cf5834f2af97787f696649a46e17e090000000000000045eac1720e83b7838e3eede14308d582685e1becd6f35154bcb400000000000000000000008129277dc467148670ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f14c3f2ed6c64ec90000022d600000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca51c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcb9fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c17d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be6910023a26faea764fae160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7beecaaa61e7a726571df5cf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da046c7aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ce27e134548032a307871cea4c89d4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b8748d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b25055e786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc136464025013665b1cf26a863a5cb3e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a56c4f3f265a09628878040000000000000017b68afd95d4abd79286692439ee7acca2adc3d83d72b1b778e30c2bf2efbbcd054cf51f5705eb0faa8a0d9f18135cb1d8d567c3436fa697b72c5035d98b9e4f7f3379c0b3339debc78352b2e65299223d7ef2bd540e78167a3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586331eb5995d2288a167b7c6b20b32116b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22db669560d296287c13c92070000ee7553eb2df17a39542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c887081c8d320642389f5f0c42dba0ff75a257310f2d92cb1d1e16468949f5675262ee6609cf26ae4a8f5eac0ebf318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0f72c4a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x23, 0x2c, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0x10, 0xb}, {0x8, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@delchain={0x17, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x803, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl(r8, 0x6, &(0x7f0000000240)="9f68d1") sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000009cc7000000000000", @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYRES32=r9, @ANYBLOB="140012800b00010062726964676500000400"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r10) 1.913864703s ago: executing program 0 (id=2337): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='c'], 0x8) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd28, 0x25dddbbd, {0x0, 0x0, 0x0, r7, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x2}, {0x9, 0xfffffff9, 0x0, 0x3}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xc50, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x12400, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r8, 0x40585883, &(0x7f0000000440)={r0, 0x0, 0xd6f1, 0xf, 0x3, 0xf, [0x6aea, 0x8, 0x4, 0x0, 0x8001, 0x10001]}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f0000000240)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000200)="03", 0x1}, {&(0x7f00000005c0)="21920152b5aba5c23f7cf374e3cc4c", 0xf}], 0x2}, 0x20004014) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd25, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff3}, {0xa, 0xc}, {0xc, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_MPU={0x8, 0xe, 0xb0}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) 1.592392333s ago: executing program 2 (id=2338): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x40800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x1c, r6, 0x917, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}]}, 0x1c}}, 0x4) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xb}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0xc80) connect$can_bcm(r2, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b0800000075000000000000", @ANYRES64=r2], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0) sendmsg$can_bcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4008004) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000003040)=0xffffffff, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000", @ANYRES32=r0, @ANYBLOB="13cd2bbd7000fcdbdf250300000008000a0047504c00580007800c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES8=r0, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES8=0x0, @ANYRES16=r0, @ANYBLOB="0400078008000100000000000c0004"], 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x4008040) socket$nl_route(0x10, 0x3, 0x0) 1.455551716s ago: executing program 2 (id=2339): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r1, 0x100}, &(0x7f00000002c0)=0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="640000000d060101000000000000000003000001050005000700000005000500020000000500010007000000100003006269746d61703a706f72740005000100070000000e0003006269746d61703a697000000005000100070000000500010007000008edd4a6d932bcfdc1f64839a96b32af5d2bb9b8b1f78a200b71"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x44000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x4522f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200), &(0x7f0000000240)=0x8) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r1, 0x100}, &(0x7f00000002c0)=0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="640000000d060101000000000000000003000001050005000700000005000500020000000500010007000000100003006269746d61703a706f72740005000100070000000e0003006269746d61703a697000000005000100070000000500010007000008edd4a6d932bcfdc1f64839a96b32af5d2bb9b8b1f78a200b71"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x44000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x4522f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) (async) 1.383889743s ago: executing program 1 (id=2340): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000300)='0', 0x1}], 0x1, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000000000000000000006119040000000000950000000000000090"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180)={0x1, "eade59"}, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r3, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f0001"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 1.25754454s ago: executing program 3 (id=2341): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000380)={r0, &(0x7f0000000080)='GPL\x00', 0x2002, &(0x7f00000001c0)={@align=0x8, {0x5, 0xffff, 0x3, 0x6}}, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x3ff}) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000003c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 1.224962587s ago: executing program 4 (id=2342): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x50, r3, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x24000010) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000400)={@empty, @rand_addr, 0x0}, &(0x7f0000000540)=0xc) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x7e4e, 0x2, 0x2, 0x42404, r1, 0x2, '\x00', r4, r5, 0x3, 0x2, 0x5, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r6, &(0x7f00000004c0), &(0x7f00000000c0)=@tcp=r0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r9, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000480000000000069078ac1414bbac1414aa4e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d002fffe907800000200"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000fc0)=ANY=[], 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x78, '\x00', 0x0, @sock_ops}, 0x94) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) recvmsg(r0, &(0x7f0000000880)={0x0, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/97, 0x61}], 0x1}, 0x0) sendmmsg$unix(r0, &(0x7f00000008c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x3b, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETQUEUE(r12, 0x400454d9, &(0x7f0000000480)={'xfrm0\x00', 0xe00}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0xd, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000900d405000000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 992.016813ms ago: executing program 3 (id=2343): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600), 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async, rerun: 64) r1 = openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) (async, rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r0, 0x0, 0x25, 0xf, @val=@tracing={0xffffffffffffffff, 0x4}}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) socket$kcm(0x23, 0x2, 0x0) (async, rerun: 64) r3 = socket(0xa, 0x5, 0x0) (rerun: 64) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3000000}, @generic={0x67, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfffffff8}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) (async) getpeername$packet(r2, &(0x7f0000000580)={0x11, 0x0, 0x0}, &(0x7f00000005c0)=0x14) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x10, 0x5}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071183f000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) close(r6) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r6, 0x58, &(0x7f0000001680)}, 0x10) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x5, 0x9}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4004) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006140)=@delchain={0x24, 0x64, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) (async) sendmsg$kcm(r6, &(0x7f00000002c0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2}, 0x1, 0x2, 0x0, 0xfffffffe}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x100100}, 0x4040081) (async) socket$unix(0x1, 0x2, 0x0) (async) socket$packet(0x11, 0x2, 0x300) 839.922172ms ago: executing program 2 (id=2344): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000037000107000000000000000003"], 0x14}}, 0x0) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@local, 0x78, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local}) pread64(r3, &(0x7f0000000100)=""/94, 0x5e, 0x0) 709.030903ms ago: executing program 3 (id=2345): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x7, 0x8, 0x25}) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'pids'}, {0x2b, 'hugetlb'}, {0x2d, 'hugetlb'}]}, 0x18) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 568.925071ms ago: executing program 0 (id=2346): syz_emit_ethernet(0x2a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1}, "2200354f00000001"}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x40000) 492.060804ms ago: executing program 1 (id=2347): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f00000003c0)={&(0x7f0000000200)=@canfd={{0x3, 0x1, 0x1}, 0x19, 0x3, 0x0, 0x0, "240a86003584b924cac358fd4eb444c5fe6eee297e3a4c67d606757d568df33e2c5213673263b835cf2ba3a79fc2bf9b84364474135f7c9d64abb3c843d4d8be"}, 0x48}, 0x2, 0x0, 0x0, 0x24000884}, 0x30048009) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002ec0)=ANY=[@ANYBLOB="14010000370001000000000000000000010100800c00010000000000000000001400030020"], 0x114}], 0x1}, 0x0) 423.233125ms ago: executing program 4 (id=2348): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x8, 0x7800, 0x80000000, 0x4, {{0xd, 0x4, 0x3, 0x8, 0x34, 0x65, 0x0, 0x9, 0x29, 0x0, @broadcast, @empty, {[@generic={0x89, 0x7, "fed69c8592"}, @ssrr={0x89, 0x17, 0xaa, [@multicast2, @private=0xa010101, @empty, @private=0xa010101, @empty]}, @end, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x26, 0x81, 0x22, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x10, 0xf840, 0x7f, 0x2}}) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000004c0)={@multicast1, @loopback, 0x0}, &(0x7f0000000500)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000540)={@ipv4={""/10, ""/2, @private}, 0x0}, &(0x7f0000000580)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000d40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000680)={0x67c, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x130, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc0f}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}, @ETHTOOL_A_BITSET_VALUE={0x1b, 0x4, "43ec347a16efbfdff315907e2497b6dadfd933a148cf07"}, @ETHTOOL_A_BITSET_MASK={0x72, 0x5, "cb0b7913a6d9d28034cc0a55bf4cf166e4c9c5bf5f5b0839dfb106e0efb1cbc46b04cfd366dab44cef7ba6dcab0781e360b2717fa938846d0725c285467fb1a21283589f176f7eaed4edbbb98cac9a55f209a291153e9b3d42f021f6a41aa143ec7321e0e43f600db949cbe93e97"}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7b2c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x760d}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x144, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xca}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x78}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '^!\xbc:}!\'\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x8e, 0x4, "41ea8d87de9fa653c241a055660cdbefe62f61587818cc89beecadd43108cb814cecd02a5085fc2892752997a393ac7c706a5576d4441584f95aafb2f79e0277993133dd561ba08a6585b9d5addf1866b1e3000ab0de91b3846da3e17364a1d9f002391929c6fd4e68d17866363c6a96d20de07bf04abcb76c528d60d11e7ceffa34f5cda95707442e15"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1d0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xc8, 0x5, "9cb7b5fdba67cb8ebb946b3821dbbb43b49e381824f35a5a6202a87636e782bb31856a2747b30beaf5ec492da7dc194d47d72ead28289813e65800ff04f0a81a2ca128f07a372ac9b88403402337b852f83f34b57d60d4e77808c366db5c1c65e93bea1bc80618161de9069f84f3a39971f9043315a46a745cc592ee47080b15529da045aad7ab55c016a50c1984535a94287d1c26ec4407962d0370aa56221ccd166579092d5df22f7746558df97eb7d179a60d541a2fe3d1de197727eb185fd6e87957"}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xb4, 0x5, "5521075d22b2efa03d575d016cc0b21e306e69f199002b86e85c89db910c1105de30fcdc8477c9befeef4bf5a466ad48c21b215be64ff1356dce38744beba70b2caec98b9fc13308f400a1734072846bffd02115e23eb28613f894a398b37d0cdd2a50ec0170ea0960b762e2f53c8092781eb67b913d4e651976854f4a9f23a71b5db93456e4602599e188c23c3dd207f18f9c1cf0b03792e3b5dc5bb97a63f4a74f350baf7a5fbe611f4c04e8f7e2a1"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x114, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5c7}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '}%(}\x1b.:(y\'!\\\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '{]-(!!%\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '^^/+{:/&--\\\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x6c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffff7f}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x24d3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '!{+$\\:/].\\}\xaa&[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x67c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x13, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048891}, 0x8010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) 312.225929ms ago: executing program 3 (id=2349): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=""/176, 0xb0}}], 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "750600", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "ffffffffffffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 311.036304ms ago: executing program 0 (id=2350): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r1], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x1}, 0xe) 134.572971ms ago: executing program 2 (id=2351): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000740)="d2aefc305f1d13015b", 0x9) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "c0ebbee831c6ce68", "b968503e20a002388549aaf05158bc49982d59b68e3139696187cb83d6cefb76", "ae529dac", "3887a2bc485351f3"}, 0x38) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00C)', @ANYRES16=r5, @ANYBLOB="11042abd7000fddbdf251400000008000300", @ANYRES32=r6, @ANYBLOB="08001d00", @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r8, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x77}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r10 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r10, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r10, &(0x7f0000002100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@hopopts={{0x18, 0x29, 0x36, {0x3c}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x6c}}}], 0x30}}], 0x2, 0x4000000) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000680)={@remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 87.048958ms ago: executing program 3 (id=2352): unshare(0x8040480) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) accept(r1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_to_hsr\x00', &(0x7f0000000040)=@ethtool_cmd={0x1d, 0x7, 0xc981, 0xff81, 0xaf, 0x0, 0x2, 0x4, 0x5, 0x27, 0x3, 0x8a57, 0xff, 0xb, 0x40, 0x7, [0xb452, 0xee]}}) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) 455.762µs ago: executing program 0 (id=2353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="9400000010000104000000000b9bdd51eb5d4f91", @ANYRES32=0x0, @ANYBLOB="80420000440001005c00128009000100626f6e64000000004c00028005000100050000000800030007000000080004000a000000080009000300000005001d00090000000500150001000000050010008000000005001b00df000000080007000200000008003a00", @ANYRES32=0x0, @ANYBLOB='\b\x00('], 0x94}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r2, 0x733, 0x70bd28, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) 0s ago: executing program 1 (id=2354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x20}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@empty, @link_local, @void, {@llc={0x4, {@llc={0xdc, 0xfc, "3d13", "c2f77ce854f6009e433fb546aaf0962ba5fc119868d0cb98dcb4cb3c3a85a587bb86590e41b94eb1fbdf5d403284201448f847b97365efd8172233309cfb518afbe735a0f104add17a67a2e8fd31294ccf7bc5025ea4af4179ce07a2"}}}}}, 0x0) socket(0x1d, 0x80805, 0x7bff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0904000000000000000002000002600004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc0800014000000000020001800e000100636f6e6e6c696d69740000000c00028008000140000000040900010073797a30000000000900020073797a3200"], 0xb4}}, 0x4080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket(0x1d, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) sendmsg$inet6(r7, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e23, 0x180000, @local, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="090000000000000029000008000000000022000000000000931e6d1fcb612dbeda7026e01e34601c68be9343e7a2d26cf3a40162dae5e0f4e50566278019947d0ed4d20465a8964f1211b3455a4761968caaa31141ceeb7b060471541a511eb251d2665fa9ba2ec57085186e5702e8342ef9d63ddd9996abb910da62a3d9b7e492127edb80bd08b9bf690b6ff7441c4500"/164], 0x18}, 0x30000004) sendto$unix(r5, &(0x7f0000000240)='\x00', 0x1, 0x4040081, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00', 0x90}}, 0x27c0, 0x9}, 0x90) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) recvfrom$unix(r6, 0x0, 0x23, 0x40000011, 0x0, 0x0) close(0x4) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r3, 0x4982, 0x701ca}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0xc10}, 0x4008000) kernel console output (not intermixed with test programs): dmsg: syz.2.1170 forgot to set AF_INET. Fix it! [ 265.251261][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 265.251299][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 265.667067][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1178'. [ 265.667569][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1178'. [ 265.758891][T10745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1178'. [ 265.771064][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 265.771097][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 268.193754][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1180'. [ 268.362690][T10759] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1182'. [ 268.365496][T10763] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1179'. [ 268.521330][T10774] Bluetooth: hci0: unsupported parameter 5161 [ 268.521354][T10774] Bluetooth: hci0: unsupported parameter 8192 [ 268.521369][T10774] Bluetooth: hci0: unsupported parameter 5161 [ 268.521382][T10774] Bluetooth: hci0: unsupported parameter 8192 [ 268.523609][T10763] bond4: entered promiscuous mode [ 268.526408][T10764] netlink: 'syz.1.1183': attribute type 2 has an invalid length. [ 268.768829][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1187'. [ 268.838266][T10785] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1187'. [ 268.862427][ T62] net_ratelimit: 10 callbacks suppressed [ 268.862449][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 268.862475][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 269.011936][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1190'. [ 269.012261][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1190'. [ 269.219269][T10801] netlink: 'syz.1.1192': attribute type 1 has an invalid length. [ 269.325694][T10803] sctp: [Deprecated]: syz.1.1192 (pid 10803) Use of int in max_burst socket option. [ 269.325694][T10803] Use struct sctp_assoc_value instead [ 269.373073][ T258] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 269.373110][ T258] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 269.881061][ T258] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 269.881139][ T258] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 270.392185][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 270.392222][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 270.901658][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 270.901696][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 272.373013][T10812] __nla_validate_parse: 3 callbacks suppressed [ 272.373038][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1194'. [ 272.723658][T10822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1196'. [ 272.951980][T10836] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1201'. [ 272.952008][T10836] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1201'. [ 273.045700][T10841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1201'. [ 273.045730][T10841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1201'. [ 273.666279][T10860] netlink: 'syz.4.1205': attribute type 1 has an invalid length. [ 273.666304][T10860] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1205'. [ 273.801154][T10863] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1206'. [ 273.970941][ T7541] net_ratelimit: 11 callbacks suppressed [ 273.970959][ T7541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 273.970978][ T7541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 274.480876][ T7541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 274.480914][ T7541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 274.990996][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 274.991033][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 275.500954][ T7541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 275.500991][ T7541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 276.012812][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 276.012848][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 276.858253][T10876] Bluetooth: MGMT ver 1.23 [ 277.091394][T10894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1214'. [ 277.097355][T10896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1214'. [ 277.517796][T10908] __nla_validate_parse: 1 callbacks suppressed [ 277.517819][T10908] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1216'. [ 278.695352][T10935] netlink: 1371 bytes leftover after parsing attributes in process `syz.3.1226'. [ 278.698723][T10935] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1226'. [ 279.071055][ T62] net_ratelimit: 11 callbacks suppressed [ 279.071079][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 279.071106][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 279.581443][ T7541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 279.581480][ T7541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 280.094555][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 280.094595][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 280.605691][ T258] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 280.605725][ T258] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 281.013999][T10955] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1232'. [ 281.069678][T10962] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 281.111463][ T284] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 281.111498][ T284] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 281.367346][T10973] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1234'. [ 281.528004][T10978] tc action pedit unable to extract header offset for header type (0x5) [ 281.528030][T10978] tc action pedit unable to extract header offset for header type (0x5) [ 281.528045][T10978] tc action pedit unable to extract header offset for header type (0x5) [ 281.528068][T10978] tc action pedit unable to extract header offset for header type (0x5) [ 281.528082][T10978] tc action pedit unable to extract header offset for header type (0x5) [ 281.528096][T10978] tc action pedit unable to extract header offset for header type (0x5) [ 281.528110][T10978] tc action pedit unable to extract header offset for header type (0x5) [ 281.528124][T10978] tc action pedit unable to extract header offset for header type (0x5) [ 281.528138][T10978] tc action pedit unable to extract header offset for header type (0x5) [ 281.528153][T10978] tc action pedit unable to extract header offset for header type (0x5) [ 281.618455][T10978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1238'. [ 284.172416][ T7541] net_ratelimit: 11 callbacks suppressed [ 284.172440][ T7541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 284.172466][ T7541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 284.680892][ T7541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 284.680968][ T7541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 284.819659][T11000] bond6 (unregistering): Released all slaves [ 284.932017][T11004] tipc: Enabled bearer , priority 0 [ 284.932979][T11006] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 284.933005][T11006] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 285.193624][ T258] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 285.193657][ T258] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 285.308448][T11037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'. [ 285.309225][T11037] hsr_slave_0: left promiscuous mode [ 285.340411][T11041] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1250'. [ 285.625742][T11057] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1252'. [ 285.700952][ T7541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 285.700987][ T7541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 285.931420][ T6103] tipc: Node number set to 2735514539 [ 286.107844][T11073] netlink: 'syz.0.1262': attribute type 1 has an invalid length. [ 286.212757][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 286.212794][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 286.337974][T11073] syzkaller0: entered promiscuous mode [ 286.338002][T11073] syzkaller0: entered allmulticast mode [ 286.427498][T11091] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1264'. [ 286.534390][T11097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1266'. [ 286.587199][T11100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1266'. [ 286.587832][T11098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1266'. [ 286.595455][T11099] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1265'. [ 286.595476][T11099] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1265'. [ 286.595549][T11099] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1265'. [ 289.271031][ T1383] net_ratelimit: 10 callbacks suppressed [ 289.271054][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 289.271078][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 289.781896][ T258] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 289.781966][ T258] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 290.291070][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 290.291107][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 290.801010][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 290.801052][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 291.093323][T11095] netlink: 'syz.4.1265': attribute type 4 has an invalid length. [ 291.125537][T11109] __nla_validate_parse: 1 callbacks suppressed [ 291.125559][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1268'. [ 291.314980][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 291.315016][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 291.391537][T11130] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1276'. [ 291.536887][T11124] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 291.536929][T11124] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 291.536976][T11124] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 291.593415][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'. [ 291.593452][T11143] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1277'. [ 291.681578][T11140] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1274'. [ 291.757257][T11124] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 292.485753][T11162] smc: net device vlan1 applied user defined pnetid SYZ2 [ 292.579669][T11172] tipc: Enabling of bearer rejected, failed to enable media [ 292.978719][T11191] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1287'. [ 292.978747][T11191] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1287'. [ 293.006031][T11187] wg2 speed is unknown, defaulting to 1000 [ 293.409837][T11208] syzkaller0: entered promiscuous mode [ 293.409862][T11208] syzkaller0: entered allmulticast mode [ 294.104982][T11235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1301'. [ 294.243264][T11241] sctp: [Deprecated]: syz.1.1305 (pid 11241) Use of int in maxseg socket option. [ 294.243264][T11241] Use struct sctp_assoc_value instead [ 294.401915][ T7543] net_ratelimit: 11 callbacks suppressed [ 294.401937][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 294.402267][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 294.407295][T11235] bond0: option miimon: invalid value (18446744073675997440) [ 294.407324][T11235] bond0: option miimon: allowed values 0 - 2147483647 [ 294.519706][T11256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1306'. [ 294.912036][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 294.912072][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 294.998049][T11256] 8021q: adding VLAN 0 to HW filter on device bond6 [ 295.015698][T11269] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1308'. [ 295.052752][T11265] smbdirect: ib_dev[syz2] removed [ 295.054678][T11255] bond6: (slave batadv1): Opening slave failed [ 295.152864][T11259] bond6: (slave batadv1): Opening slave failed [ 295.421059][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 295.421095][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 295.640468][T11286] bond3: (slave veth0_to_bond): Releasing active interface [ 295.767036][T11293] syzkaller0: entered promiscuous mode [ 295.767062][T11293] syzkaller0: entered allmulticast mode [ 295.932217][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 295.932253][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 296.198205][T11304] netlink: 'syz.2.1318': attribute type 21 has an invalid length. [ 296.198231][T11304] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1318'. [ 296.198870][T11304] netlink: 'syz.2.1318': attribute type 5 has an invalid length. [ 296.198889][T11304] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1318'. [ 296.441964][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 296.441999][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 297.727691][T11348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1331'. [ 298.069626][T11364] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1336'. [ 298.408427][T11375] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1339'. [ 298.408550][T11375] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1339'. [ 298.424422][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1339'. [ 298.428700][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1339'. [ 298.429084][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1339'. [ 298.454240][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1339'. [ 299.302341][T11402] vlan2: entered promiscuous mode [ 299.450094][T11409] vlan2: entered promiscuous mode [ 299.562087][ T7541] net_ratelimit: 11 callbacks suppressed [ 299.562109][ T7541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 299.562135][ T7541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 299.695867][T11414] xt_ipcomp: unknown flags 1D [ 300.071364][ T284] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 300.071398][ T284] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 300.119287][T11425] openvswitch: netlink: Actions may not be safe on all matching packets [ 300.589804][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 300.589840][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 300.855640][T11428] Bluetooth: hci0: unsupported parameter 5135 [ 300.855664][T11428] Bluetooth: hci0: unsupported parameter 8192 [ 300.855678][T11428] Bluetooth: hci0: unsupported parameter 5135 [ 300.855691][T11428] Bluetooth: hci0: unsupported parameter 8192 [ 301.091431][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 301.091464][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 301.250237][T11452] tipc: Enabling of bearer rejected, failed to enable media [ 301.603312][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 301.682746][T11464] __nla_validate_parse: 7 callbacks suppressed [ 301.682770][T11464] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1363'. [ 301.777144][T11467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1364'. [ 301.833713][T11467] syzkaller0: entered promiscuous mode [ 301.833739][T11467] syzkaller0: entered allmulticast mode [ 302.088218][ T31] audit: type=1804 audit(1789896220.336:14): pid=11471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1366" name="/newroot/275/memory.events" dev="tmpfs" ino=1435 res=1 errno=0 [ 302.088463][ T31] audit: type=1800 audit(1789896220.336:15): pid=11471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1366" name="memory.events" dev="tmpfs" ino=1435 res=0 errno=0 [ 302.266788][T11481] netlink: 'syz.3.1368': attribute type 58 has an invalid length. [ 302.266813][T11481] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1368'. [ 302.383394][T11478] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1365'. [ 302.777874][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1370'. [ 302.807385][T11502] syzkaller0: entered promiscuous mode [ 302.807411][T11502] syzkaller0: entered allmulticast mode [ 304.201926][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1384'. [ 304.537121][T11577] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1386'. [ 304.676986][ T7607] net_ratelimit: 11 callbacks suppressed [ 304.677011][ T7607] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 304.677037][ T7607] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 304.971231][T11584] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 305.049201][T11583] IPVS: stopping master sync thread 11584 ... [ 305.180857][ T7607] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 305.180892][ T7607] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 305.698144][ T7607] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 305.698178][ T7607] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 306.056310][T11607] netlink: 'syz.1.1393': attribute type 8 has an invalid length. [ 306.175047][T11607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1393'. [ 306.200818][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 306.200853][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 306.279582][T11607] veth3: entered allmulticast mode [ 306.713450][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 306.713485][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 306.935965][T11626] tipc: Enabling of bearer rejected, failed to enable media [ 307.137736][T11634] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 307.553897][T11656] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1404'. [ 307.560393][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1404'. [ 307.592659][T11654] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1403'. [ 307.656250][T11656] netlink: 'syz.4.1404': attribute type 1 has an invalid length. [ 307.952557][T11667] netlink: 'syz.4.1407': attribute type 1 has an invalid length. [ 308.002490][T11667] bond5: option mode: invalid value (7) [ 308.020111][T11667] bond5 (unregistering): Released all slaves [ 308.090559][T11673] syzkaller1: entered allmulticast mode [ 308.604142][T11676] bridge_slave_0: left allmulticast mode [ 308.604170][T11676] bridge_slave_0: left promiscuous mode [ 308.604385][T11676] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.641083][T11676] bridge_slave_1: left allmulticast mode [ 308.641131][T11676] bridge_slave_1: left promiscuous mode [ 308.641338][T11676] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.674818][T11676] bond0: (slave bond_slave_0): Releasing backup interface [ 308.696150][T11676] bond0: (slave bond_slave_1): Releasing backup interface [ 308.784075][T11676] team0: Port device team_slave_0 removed [ 308.867963][T11676] team0: Port device team_slave_1 removed [ 308.921499][ T5721] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 308.952747][T11678] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 308.957522][T11683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1411'. [ 308.957811][ T9] syz1: Port: 1 Link DOWN [ 309.164010][T11694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1414'. [ 309.308328][T11697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1415'. [ 309.326542][T11699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1415'. [ 309.342386][T11697] netlink: 'syz.0.1415': attribute type 6 has an invalid length. [ 309.342411][T11697] IPv6: NLM_F_CREATE should be specified when creating new route [ 309.781770][T11711] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1420'. [ 309.795275][ T62] net_ratelimit: 12 callbacks suppressed [ 309.795328][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 309.795392][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 310.302658][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 310.302695][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 310.652012][T11739] netlink: 'syz.0.1426': attribute type 1 has an invalid length. [ 310.652037][T11739] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1426'. [ 310.652056][T11739] netlink: 'syz.0.1426': attribute type 1 has an invalid length. [ 310.814219][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 310.814255][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 311.160224][T11760] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1432'. [ 311.321113][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 311.321148][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 311.836554][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 311.836587][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 311.918194][T11776] vlan2: entered promiscuous mode [ 311.918221][T11776] gretap0: entered promiscuous mode [ 312.228134][ T5618] block nbd1: Receive control failed (result -22) [ 312.241718][T11790] nbd1: detected capacity change from 0 to 32 [ 312.243722][ T1736] block nbd1: Dead connection, failed to find a fallback [ 312.243745][ T1736] block nbd1: shutting down sockets [ 312.243758][ T1736] blk_print_req_error: 109 callbacks suppressed [ 312.243773][ T1736] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 312.243800][ T1736] buffer_io_error: 138 callbacks suppressed [ 312.243812][ T1736] Buffer I/O error on dev nbd1, logical block 0, async page read [ 312.248563][ T1736] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 312.248595][ T1736] Buffer I/O error on dev nbd1, logical block 0, async page read [ 312.248713][ T1736] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 312.248740][ T1736] Buffer I/O error on dev nbd1, logical block 0, async page read [ 312.250242][ T1736] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 312.250272][ T1736] Buffer I/O error on dev nbd1, logical block 0, async page read [ 312.252364][ T1736] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 312.252460][ T1736] Buffer I/O error on dev nbd1, logical block 0, async page read [ 312.254037][ T1736] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 312.254110][ T1736] Buffer I/O error on dev nbd1, logical block 0, async page read [ 312.256197][ T1736] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 312.256279][ T1736] Buffer I/O error on dev nbd1, logical block 0, async page read [ 312.256584][ T1736] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 312.256656][ T1736] Buffer I/O error on dev nbd1, logical block 0, async page read [ 312.258887][T11149] ldm_validate_partition_table(): Disk read failed. [ 312.259208][ T1736] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 312.259280][ T1736] Buffer I/O error on dev nbd1, logical block 0, async page read [ 312.261572][ T1736] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 312.261645][ T1736] Buffer I/O error on dev nbd1, logical block 0, async page read [ 312.266845][T11149] Dev nbd1: unable to read RDB block 0 [ 312.277742][T11149] nbd1: unable to read partition table [ 312.351129][T11149] ldm_validate_partition_table(): Disk read failed. [ 312.359944][T11149] Dev nbd1: unable to read RDB block 0 [ 312.389683][T11149] nbd1: unable to read partition table [ 313.850031][T11822] __nla_validate_parse: 2 callbacks suppressed [ 313.850052][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1444'. [ 313.850074][T11822] netlink: 'syz.0.1444': attribute type 1 has an invalid length. [ 314.901511][ T7607] net_ratelimit: 11 callbacks suppressed [ 314.901534][ T7607] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 314.901561][ T7607] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 315.056013][T11847] netlink: 'syz.1.1449': attribute type 1 has an invalid length. [ 315.056040][T11847] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1449'. [ 315.411036][ T7607] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 315.411072][ T7607] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 315.670722][T11870] netlink: 'syz.4.1454': attribute type 16 has an invalid length. [ 315.670747][T11870] netlink: 'syz.4.1454': attribute type 17 has an invalid length. [ 315.670774][T11870] lo: left promiscuous mode [ 315.671679][T11870] lo: left allmulticast mode [ 315.712488][T11872] Unknown options in mask 6 [ 315.713562][T11872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1455'. [ 315.713594][T11872] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1455'. [ 315.713709][T11875] netlink: 'syz.2.1455': attribute type 1 has an invalid length. [ 315.713724][T11875] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1455'. [ 315.920839][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 315.920875][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 316.026945][T11884] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1454'. [ 316.027531][T11874] xt_CT: No such helper "syz1" [ 316.179734][T11870] 0·: left allmulticast mode [ 316.179763][T11870] hsr_slave_0: left allmulticast mode [ 316.179781][T11870] hsr_slave_1: left allmulticast mode [ 316.197452][T11870] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 316.431920][ T284] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 316.431955][ T284] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 316.941668][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 317.018307][T11910] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1464'. [ 317.094388][T11911] netlink: 'syz.3.1464': attribute type 10 has an invalid length. [ 317.094415][T11911] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1464'. [ 317.147018][T11911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1464'. [ 317.147045][T11911] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1464'. [ 317.215307][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.325658][T11920] bridge_slave_1: left allmulticast mode [ 317.325686][T11920] bridge_slave_1: left promiscuous mode [ 317.325930][T11920] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.339332][T11920] bridge_slave_0: left allmulticast mode [ 317.339360][T11920] bridge_slave_0: left promiscuous mode [ 317.341386][T11920] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.637866][T11930] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 318.111990][T11959] netlink: 'syz.3.1476': attribute type 2 has an invalid length. [ 318.918152][T11976] xt_connbytes: Forcing CT accounting to be enabled [ 318.918407][T11976] xt_CT: You must specify a L4 protocol and not use inversions on it [ 318.957851][T11981] xt_CT: You must specify a L4 protocol and not use inversions on it [ 318.969930][T11982] __nla_validate_parse: 5 callbacks suppressed [ 318.969951][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1483'. [ 319.202994][T11982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.295103][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1488'. [ 319.297352][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1488'. [ 319.389523][T12002] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1487'. [ 319.416520][T12002] netlink: 'syz.1.1487': attribute type 4 has an invalid length. [ 319.416547][T12002] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1487'. [ 319.438076][T12002] 8021q: adding VLAN 0 to HW filter on device .` [ 320.002142][ T62] net_ratelimit: 12 callbacks suppressed [ 320.002164][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 320.002220][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 320.083921][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 320.104980][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 320.105376][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 320.105754][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 320.106049][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 320.390935][T12038] netlink: 'syz.2.1495': attribute type 11 has an invalid length. [ 320.521507][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 320.521542][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 320.733923][T12046] netlink: 'syz.1.1499': attribute type 3 has an invalid length. [ 321.030908][ T7541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 321.030943][ T7541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 321.540871][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 321.540909][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 322.050921][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 322.050959][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 323.802648][T12075] syzkaller0: entered promiscuous mode [ 323.802677][T12075] syzkaller0: entered allmulticast mode [ 323.805329][T12079] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.855400][T12075] tipc: Enabled bearer , priority 0 [ 323.884618][T12075] tipc: Resetting bearer [ 323.899219][T12074] tipc: Resetting bearer [ 323.932834][T12082] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 323.985307][T12074] tipc: Disabling bearer [ 324.187676][T12099] __nla_validate_parse: 4 callbacks suppressed [ 324.187698][T12099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1514'. [ 324.526829][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1511'. [ 324.526868][T12084] netlink: 'syz.3.1511': attribute type 30 has an invalid length. [ 324.574165][T12084] vxlan0: entered promiscuous mode [ 324.574192][T12084] vxlan0: entered allmulticast mode [ 324.602221][ T1383] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.603103][ T1383] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.603144][ T1383] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.608188][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1511'. [ 324.608220][T12084] netlink: 'syz.3.1511': attribute type 30 has an invalid length. [ 324.691555][T12084] vxlan1: entered promiscuous mode [ 324.691579][T12084] vxlan1: entered allmulticast mode [ 324.720983][ T7543] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.111772][ T7543] net_ratelimit: 12 callbacks suppressed [ 325.111794][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 325.111820][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 325.621379][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 325.621414][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 325.801884][T12154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1529'. [ 325.973423][T12162] netlink: 'syz.1.1532': attribute type 3 has an invalid length. [ 326.072796][T12165] syzkaller1: entered promiscuous mode [ 326.072824][T12165] syzkaller1: entered allmulticast mode [ 326.133018][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 326.133065][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 326.551370][T12183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1540'. [ 326.641070][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 326.641105][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 326.682074][T12183] 8021q: adding VLAN 0 to HW filter on device bond7 [ 326.862739][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1542'. [ 326.862773][T12190] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1542'. [ 326.914585][T12190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1542'. [ 326.998647][T12192] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1543'. [ 327.121707][T12198] netlink: 'syz.0.1546': attribute type 3 has an invalid length. [ 327.161573][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 327.161617][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 327.213055][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1547'. [ 327.284695][T12205] xt_hashlimit: size too large, truncated to 1048576 [ 327.406509][T12213] netlink: 'syz.3.1551': attribute type 21 has an invalid length. [ 327.406541][T12213] IPv6: NLM_F_CREATE should be specified when creating new route [ 327.461183][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 327.640209][T12223] x_tables: duplicate underflow at hook 1 [ 327.962786][T12241] netlink: 'syz.1.1556': attribute type 2 has an invalid length. [ 328.829214][T12267] netlink: 'syz.4.1560': attribute type 3 has an invalid length. [ 329.556411][T12290] x_tables: duplicate underflow at hook 3 [ 330.221202][ T7543] net_ratelimit: 11 callbacks suppressed [ 330.221226][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 330.221250][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 330.731927][ T284] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 330.731955][ T284] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 331.241256][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 331.241293][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 331.750923][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 331.750949][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 332.260858][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 332.260886][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 335.330892][ T62] net_ratelimit: 10 callbacks suppressed [ 335.330911][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 335.330928][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 335.840942][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 335.840982][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 336.350909][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 336.350936][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 336.861213][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 336.861250][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 337.371748][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 337.371788][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 340.430891][ T1383] net_ratelimit: 10 callbacks suppressed [ 340.430911][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 340.430929][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 340.940823][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 340.940849][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 341.451009][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 341.451036][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 341.960957][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 341.960996][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 342.472133][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 342.472171][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 345.531132][ T1383] net_ratelimit: 10 callbacks suppressed [ 345.531157][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 345.531186][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 346.050950][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 346.050988][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 346.561412][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 346.561443][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 347.070961][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 347.070987][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 347.580834][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 347.580861][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 350.640984][ T1383] net_ratelimit: 10 callbacks suppressed [ 350.641008][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 350.641033][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 351.150802][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 351.150828][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 351.660891][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 351.660931][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 351.758863][T12298] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 351.758894][T12298] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 351.791489][T12300] __nla_validate_parse: 5 callbacks suppressed [ 351.791509][T12300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1569'. [ 351.877355][T12301] geneve0: entered promiscuous mode [ 351.991305][T12305] netlink: 'syz.3.1574': attribute type 3 has an invalid length. [ 352.031381][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1576'. [ 352.031406][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 352.031431][T12309] netlink: 'syz.2.1576': attribute type 11 has an invalid length. [ 352.031446][T12309] netlink: 'syz.2.1576': attribute type 14 has an invalid length. [ 352.178929][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 352.178963][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 352.214433][T12314] netlink: 'syz.3.1580': attribute type 1 has an invalid length. [ 352.296085][T12318] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 352.328526][T12314] bond9: entered promiscuous mode [ 352.346271][T12314] 8021q: adding VLAN 0 to HW filter on device bond9 [ 352.390132][T12325] 8021q: adding VLAN 0 to HW filter on device bond9 [ 352.399717][T12325] bond9: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 352.399778][T12325] bond9: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 352.446576][T12325] bond9: (slave ip6gre1): making interface the new active one [ 352.446601][T12325] ip6gre1: entered promiscuous mode [ 352.448652][T12325] bond9: (slave ip6gre1): Enslaving as an active interface with an up link [ 352.502236][T12335] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1583'. [ 352.530429][T12334] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1583'. [ 352.609824][T12340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1585'. [ 352.610250][T12328] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1581'. [ 352.632377][ T5618] block nbd2: Receive control failed (result -1) [ 352.680870][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 352.680904][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 352.681780][T12337] netlink: 'syz.0.1584': attribute type 5 has an invalid length. [ 353.413646][T12363] syzkaller0: entered promiscuous mode [ 353.413671][T12363] syzkaller0: entered allmulticast mode [ 353.462867][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1590'. [ 354.043618][T12389] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 354.043648][T12389] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 354.050513][T12391] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 354.074044][T12389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1598'. [ 354.094975][T12391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1599'. [ 354.116097][T12389] tipc: Enabling of bearer rejected, already enabled [ 354.423747][T12405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.701425][T12434] netlink: 'syz.3.1608': attribute type 7 has an invalid length. [ 354.704132][T12434] netlink: 'syz.3.1608': attribute type 7 has an invalid length. [ 354.776013][T12436] tipc: Enabling of bearer rejected, already enabled [ 354.780402][T12436] netlink: 'syz.4.1609': attribute type 1 has an invalid length. [ 354.833996][T12436] bond6: entered promiscuous mode [ 354.834354][T12436] 8021q: adding VLAN 0 to HW filter on device bond6 [ 354.948962][T12436] bond6: entered allmulticast mode [ 355.009531][T12436] bond6: (slave bridge2): making interface the new active one [ 355.009555][T12436] bridge2: entered promiscuous mode [ 355.009729][T12436] bridge2: entered allmulticast mode [ 355.034588][T12436] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 355.741038][ T62] net_ratelimit: 10 callbacks suppressed [ 355.741059][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 355.741084][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 355.802691][T12488] netlink: 'syz.1.1621': attribute type 1 has an invalid length. [ 355.969239][T12488] 8021q: adding VLAN 0 to HW filter on device bond8 [ 356.148881][T12490] bond8: (slave veth5): Enslaving as an active interface with a down link [ 356.217915][T12492] syz_tun: left promiscuous mode [ 356.217942][T12492] syz_tun: left allmulticast mode [ 356.254170][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 356.254206][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 356.358876][T12492] veth0_macvtap: entered promiscuous mode [ 356.396309][T12492] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 356.396698][T12492] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 356.417679][T12492] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 356.446944][T12498] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 356.449887][T12498] bond8: (slave batadv1): making interface the new active one [ 356.466870][T12498] batadv1: entered promiscuous mode [ 356.469112][T12498] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 356.509080][T12503] batman_adv: batadv0: Adding interface: syzkaller0 [ 356.509103][T12503] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.509140][T12503] batman_adv: batadv0: Interface activated: syzkaller0 [ 356.568350][T12508] netlink: 'syz.0.1622': attribute type 4 has an invalid length. [ 356.679944][T12515] bond7: option lacp_active: invalid value (5) [ 356.696186][T12515] bond7 (unregistering): Released all slaves [ 356.760779][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 356.760812][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 356.765347][T12497] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 356.872477][T12497] batman_adv: batadv0: Removing interface: syzkaller0 [ 356.873766][T12531] __nla_validate_parse: 13 callbacks suppressed [ 356.873786][T12531] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1627'. [ 357.018902][T12528] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1626'. [ 357.273550][ T284] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 357.273584][ T284] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 357.522875][T12553] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1632'. [ 357.522938][T12553] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1632'. [ 357.781629][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 357.788322][T12569] validate_nla: 1 callbacks suppressed [ 357.788340][T12569] netlink: 'syz.2.1634': attribute type 1 has an invalid length. [ 358.957445][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1647'. [ 359.065127][T12629] netlink: 'syz.3.1649': attribute type 83 has an invalid length. [ 359.218780][T12635] pim6reg: entered allmulticast mode [ 359.532151][T12645] syzkaller0: entered promiscuous mode [ 359.532178][T12645] syzkaller0: entered allmulticast mode [ 359.566756][T12633] pim6reg: left allmulticast mode [ 360.272803][T12674] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1659'. [ 360.851240][ T7543] net_ratelimit: 12 callbacks suppressed [ 360.851264][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 360.851308][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 361.361137][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 361.361184][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 361.870805][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 361.870842][ T7543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 362.380912][ T7541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 362.380949][ T7541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 362.892674][ T7541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 362.892710][ T7541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 363.654649][T12697] netlink: 'syz.0.1666': attribute type 1 has an invalid length. [ 363.711440][T12700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1667'. [ 363.788735][T12704] gretap1: entered allmulticast mode [ 363.801818][T12704] bond5: (slave gretap1): making interface the new active one [ 363.803577][T12704] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 363.808896][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1669'. [ 363.936955][T12700] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1667'. [ 364.105095][T12713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1670'. [ 364.127962][T12713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1670'. [ 364.258531][T12719] netlink: 'syz.3.1673': attribute type 11 has an invalid length. [ 364.353384][T12719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1673'. [ 364.425386][T12723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1675'. [ 365.369027][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1677'. [ 365.678374][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1678'. [ 365.678410][T12745] netlink: 'syz.4.1678': attribute type 10 has an invalid length. [ 365.678427][T12745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1678'. [ 365.718594][T12731] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 365.818143][T12731] bond10 (unregistering): Released all slaves [ 365.917769][T12745] geneve3: entered promiscuous mode [ 365.917789][T12745] geneve3: entered allmulticast mode [ 365.953370][ T1383] net_ratelimit: 12 callbacks suppressed [ 365.953385][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 365.953403][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 366.309054][T12764] xt_time: unknown flags 0x4 [ 366.461765][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 366.461799][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 366.654142][T12774] batman_adv: batadv0: Adding interface: macvlan3 [ 366.654162][T12774] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.654313][T12774] batman_adv: batadv0: Interface activated: macvlan3 [ 366.713473][T12778] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 366.714594][T12778] netlink: 'syz.0.1692': attribute type 1 has an invalid length. [ 366.775070][T12780] ovs-s: entered promiscuous mode [ 366.974480][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 366.974507][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 367.480792][ T7541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 367.480840][ T7541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 367.991116][ T284] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 367.991154][ T284] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 369.628930][T12778] bond6: (slave veth5): Enslaving as an active interface with a down link [ 369.633714][T12780] openvswitch: ovs-s: Dropping previously announced user features [ 369.817070][T12787] veth7: entered allmulticast mode [ 369.831948][T12787] bond6: (slave veth7): Enslaving as an active interface with a down link [ 369.909055][T12785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.909084][T12785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.929822][T12785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.929846][T12785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.940225][T12785] batman_adv: batadv0: Interface deactivated: gretap2 [ 369.940247][T12785] batman_adv: batadv0: Removing interface: gretap2 [ 370.058505][T12800] pim6reg: entered allmulticast mode [ 370.092759][ T62] batadv1: left promiscuous mode [ 370.326468][T12822] Bluetooth: hci0: unsupported parameter 5135 [ 370.326493][T12822] Bluetooth: hci0: unsupported parameter 8192 [ 370.326507][T12822] Bluetooth: hci0: unsupported parameter 5135 [ 370.326521][T12822] Bluetooth: hci0: unsupported parameter 8192 [ 370.368787][T12823] syz_tun: entered allmulticast mode [ 370.457386][T12823] dvmrp8: entered allmulticast mode [ 370.515306][T12821] syz_tun: left allmulticast mode [ 370.912655][T12846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.071434][ T62] net_ratelimit: 13 callbacks suppressed [ 371.071484][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 371.071511][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 371.580795][ T284] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 371.580830][ T284] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 372.092679][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 372.092715][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 372.600844][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 372.600881][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 373.110898][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 373.110936][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 373.837938][T12853] __nla_validate_parse: 2 callbacks suppressed [ 373.837960][T12853] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1711'. [ 373.905343][T12856] FAULT_INJECTION: forcing a failure. [ 373.905343][T12856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.905396][T12856] CPU: 0 UID: 0 PID: 12856 Comm: syz.0.1713 Not tainted syzkaller #0 PREEMPT(full) [ 373.905422][T12856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 373.905445][T12856] Call Trace: [ 373.905458][T12856] [ 373.905468][T12856] dump_stack_lvl+0xe8/0x150 [ 373.905507][T12856] should_fail_ex+0x410/0x560 [ 373.905539][T12856] _copy_from_user+0x2d/0xb0 [ 373.905569][T12856] __sys_sendto+0x2a9/0x5a0 [ 373.905606][T12856] ? ksys_write+0x1e6/0x270 [ 373.905645][T12856] ? __pfx___sys_sendto+0x10/0x10 [ 373.905669][T12856] ? __mutex_unlock_slowpath+0x731/0x900 [ 373.905728][T12856] ? __pfx_ksys_write+0x10/0x10 [ 373.905768][T12856] __x64_sys_sendto+0xde/0x100 [ 373.905800][T12856] do_syscall_64+0x166/0x520 [ 373.905826][T12856] ? trace_irq_disable+0x3b/0x140 [ 373.905848][T12856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.905872][T12856] ? clear_bhb_loop+0x70/0xc0 [ 373.905900][T12856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.905923][T12856] RIP: 0033:0x7ffbe939e159 [ 373.905943][T12856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.905962][T12856] RSP: 002b:00007ffbea1ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 373.905987][T12856] RAX: ffffffffffffffda RBX: 00007ffbe9625fa0 RCX: 00007ffbe939e159 [ 373.906004][T12856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 373.906017][T12856] RBP: 00007ffbea1ec090 R08: 0000200000000200 R09: 0000000000000014 [ 373.906033][T12856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.906046][T12856] R13: 00007ffbe9626038 R14: 00007ffbe9625fa0 R15: 00007ffdc1805b28 [ 373.906082][T12856] [ 374.310909][T12879] ieee802154 phy0 wpan0: encryption failed: -22 [ 374.374569][T12875] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 374.528157][T12889] netlink: 'syz.2.1723': attribute type 13 has an invalid length. [ 374.584611][T12895] netlink: 'syz.0.1724': attribute type 2 has an invalid length. [ 374.708210][T12897] block nbd0: Unsupported socket: should be TCP or UNIX. [ 374.831957][T12902] syzkaller1: entered promiscuous mode [ 374.831983][T12902] syzkaller1: entered allmulticast mode [ 374.841591][T12902] netlink: 'syz.4.1725': attribute type 1 has an invalid length. [ 374.977780][T12902] bond7: (slave veth7): Enslaving as an active interface with a down link [ 374.993398][T12902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1725'. [ 375.057964][T12908] bond7: (slave veth9): Enslaving as an active interface with a down link [ 375.076469][T12902] 8021q: adding VLAN 0 to HW filter on device bond7 [ 375.095541][T12912] FAULT_INJECTION: forcing a failure. [ 375.095541][T12912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.095575][T12912] CPU: 0 UID: 0 PID: 12912 Comm: syz.0.1728 Not tainted syzkaller #0 PREEMPT(full) [ 375.095600][T12912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 375.095614][T12912] Call Trace: [ 375.095623][T12912] [ 375.095633][T12912] dump_stack_lvl+0xe8/0x150 [ 375.095679][T12912] should_fail_ex+0x410/0x560 [ 375.095711][T12912] _copy_to_user+0x31/0xb0 [ 375.095743][T12912] simple_read_from_buffer+0xe1/0x170 [ 375.095783][T12912] proc_fail_nth_read+0x1bb/0x230 [ 375.095818][T12912] ? common_file_perm+0x20e/0x2b0 [ 375.095849][T12912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 375.095892][T12912] ? rw_verify_area+0x24a/0x4c0 [ 375.095928][T12912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 375.095964][T12912] vfs_read+0x213/0xa80 [ 375.096003][T12912] ? __pfx___mutex_lock+0x10/0x10 [ 375.096033][T12912] ? __pfx_vfs_read+0x10/0x10 [ 375.096070][T12912] ? __fget_files+0x2a/0x420 [ 375.096106][T12912] ? __fget_files+0x3a2/0x420 [ 375.096136][T12912] ? __fget_files+0x2a/0x420 [ 375.096178][T12912] ksys_read+0x150/0x270 [ 375.096220][T12912] ? __pfx_ksys_read+0x10/0x10 [ 375.096268][T12912] do_syscall_64+0x166/0x520 [ 375.096294][T12912] ? trace_irq_disable+0x3b/0x140 [ 375.096318][T12912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.096341][T12912] ? clear_bhb_loop+0x70/0xc0 [ 375.096370][T12912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.096393][T12912] RIP: 0033:0x7ffbe935e98e [ 375.096413][T12912] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 375.096433][T12912] RSP: 002b:00007ffbea1ebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 375.096457][T12912] RAX: ffffffffffffffda RBX: 00007ffbea1ec6c0 RCX: 00007ffbe935e98e [ 375.096481][T12912] RDX: 000000000000000f RSI: 00007ffbea1ec0a0 RDI: 0000000000000008 [ 375.096496][T12912] RBP: 00007ffbea1ec090 R08: 0000000000000000 R09: 0000000000000000 [ 375.096511][T12912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.096525][T12912] R13: 00007ffbe9626038 R14: 00007ffbe9625fa0 R15: 00007ffdc1805b28 [ 375.096562][T12912] [ 375.655873][T12920] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1730'. [ 375.655903][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1730'. [ 375.715332][T12920] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 375.740237][T12922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1731'. [ 375.753807][T12924] x_tables: duplicate underflow at hook 2 [ 375.938566][ T31] audit: type=1804 audit(1789896294.186:16): pid=12926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1733" name="/newroot/318/cgroup.controllers" dev="tmpfs" ino=1661 res=1 errno=0 [ 375.938622][ T31] audit: type=1800 audit(1789896294.186:17): pid=12926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1733" name="cgroup.controllers" dev="tmpfs" ino=1661 res=0 errno=0 [ 376.016828][T12939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1736'. [ 376.142957][T12938] xt_ecn: cannot match TCP bits for non-tcp packets [ 376.181454][ T62] net_ratelimit: 10 callbacks suppressed [ 376.181475][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 376.181499][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 376.287359][T12948] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1735'. [ 376.292132][T12948] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1735'. [ 376.699415][T12968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1743'. [ 376.709440][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 376.709532][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 376.772197][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1743'. [ 377.138508][T12987] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 377.210901][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 377.210936][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 377.721396][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 377.721433][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 378.064953][T13006] netlink: 'syz.0.1752': attribute type 10 has an invalid length. [ 378.243162][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 378.671425][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.819204][T13066] netlink: 'syz.4.1768': attribute type 29 has an invalid length. [ 378.821019][T13062] Bluetooth: hci0: unsupported parameter 5135 [ 378.821091][T13062] Bluetooth: hci0: unsupported parameter 8192 [ 378.821122][T13062] Bluetooth: hci0: unsupported parameter 5135 [ 378.821153][T13062] Bluetooth: hci0: unsupported parameter 8192 [ 378.882251][T13066] netlink: 'syz.4.1768': attribute type 29 has an invalid length. [ 379.008704][T13076] __nla_validate_parse: 6 callbacks suppressed [ 379.008724][T13076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1769'. [ 379.060488][T13076] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1769'. [ 379.060517][T13076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1769'. [ 379.060534][T13076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1769'. [ 379.141669][T13083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1774'. [ 379.269337][T13093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1773'. [ 379.289768][T13094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1771'. [ 379.289805][T13094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1771'. [ 379.346733][T13089] xt_policy: output policy not valid in PREROUTING and INPUT [ 379.395447][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1773'. [ 380.253337][T13121] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1782'. [ 381.304175][ T50] net_ratelimit: 517 callbacks suppressed [ 381.304197][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 381.304224][ T50] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 381.472079][T13177] xt_addrtype: ipv6 does not support BROADCAST matching [ 381.560072][T13180] netlink: 'syz.4.1791': attribute type 16 has an invalid length. [ 381.560096][T13180] netlink: 'syz.4.1791': attribute type 17 has an invalid length. [ 381.673893][T13181] netlink: 'syz.3.1792': attribute type 1 has an invalid length. [ 381.776461][T13184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.811307][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 381.811345][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 382.321938][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 382.321975][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 382.841349][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 382.841385][ T1383] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 383.363077][ T284] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 384.109333][T13180] bond1: left promiscuous mode [ 384.109362][T13180] bond1: left allmulticast mode [ 384.109747][T13180] geneve2: left promiscuous mode [ 384.167803][T13180] bond6: left promiscuous mode [ 384.167830][T13180] bridge2: left promiscuous mode [ 384.168109][T13180] bond6: left allmulticast mode [ 384.168125][T13180] bridge2: left allmulticast mode [ 384.363419][T13180] batman_adv: batadv0: Interface deactivated: macvlan3 [ 384.460967][ T12] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.461006][ T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.461063][ T12] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.461090][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.461129][ T12] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.461157][ T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.461194][ T12] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.461230][ T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.583173][T13181] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 385.215107][T13214] netlink: 'syz.0.1800': attribute type 1 has an invalid length. [ 385.288497][T13214] 8021q: adding VLAN 0 to HW filter on device bond7 [ 385.518617][T13230] __nla_validate_parse: 2 callbacks suppressed [ 385.518641][T13230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1806'. [ 385.518704][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1806'. [ 385.518722][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1806'. [ 385.518791][T13230] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1806'. [ 385.518807][T13230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1806'. [ 385.644916][T13225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1805'. [ 385.922801][T13237] macvlan4: entered allmulticast mode [ 385.927508][T13237] bond0: (slave macvlan4): Opening slave failed [ 386.365553][T13267] netlink: 'syz.0.1816': attribute type 1 has an invalid length. [ 386.420972][ T1036] net_ratelimit: 11 callbacks suppressed [ 386.420994][ T1036] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 386.421019][ T1036] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 386.554149][T13267] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1816'. [ 386.598617][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1818'. [ 386.605923][T13279] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1817'. [ 386.621803][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1818'. [ 386.930869][ T258] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 386.930902][ T258] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 387.441326][ T7607] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 387.441361][ T7607] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 387.501771][T13320] syzkaller0: entered promiscuous mode [ 387.501796][T13320] syzkaller0: entered allmulticast mode [ 387.505165][T13320] tipc: Enabled bearer , priority 0 [ 387.563232][T13320] tipc: Resetting bearer [ 387.594904][T13317] tipc: Resetting bearer [ 387.635817][T13325] netlink: 'syz.1.1823': attribute type 13 has an invalid length. [ 387.662183][T13317] tipc: Disabling bearer [ 387.892303][T13338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.950795][ T7607] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 387.950829][ T7607] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 388.095736][T13340] ovs-s: entered promiscuous mode [ 388.136600][T13350] netlink: 'syz.4.1828': attribute type 4 has an invalid length. [ 388.162194][T13350] .`: renamed from bond0 [ 388.418262][T13357] syz_tun: entered allmulticast mode [ 388.460782][ T258] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 388.460817][ T258] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 388.665323][T13369] vxcan0: entered allmulticast mode [ 391.520871][T13257] net_ratelimit: 10 callbacks suppressed [ 391.520895][T13257] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 391.520922][T13257] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 391.907499][T13391] netlink: 'syz.3.1841': attribute type 1 has an invalid length. [ 391.907523][T13391] __nla_validate_parse: 8 callbacks suppressed [ 391.907535][T13391] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1841'. [ 392.030074][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1843'. [ 392.041981][ T258] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 392.042013][ T258] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 392.068569][T13403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1843'. [ 392.357546][T13413] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1845'. [ 392.479049][T13425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1845'. [ 392.552995][ T258] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 392.553031][ T258] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 392.773649][T13424] syzkaller1: entered promiscuous mode [ 392.773677][T13424] syzkaller1: entered allmulticast mode [ 392.933236][T13436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1850'. [ 393.062737][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 393.062774][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 393.239157][T13454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1852'. [ 393.259217][T13456] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1854'. [ 393.570912][T13257] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 393.570947][T13257] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 393.733707][T13462] ip6tnl3: entered allmulticast mode [ 393.788969][T13475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1857'. [ 393.809194][ T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 393.809433][ T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 393.831058][ T30] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 393.855600][T13477] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1857'. [ 394.351007][ T3215] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 394.581364][ T3215] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 394.984473][T13506] batman_adv: batadv0: Interface deactivated: dummy0 [ 394.986815][T13506] batman_adv: batadv0: Removing interface: dummy0 [ 395.054090][T13506] bridge_slave_0: left allmulticast mode [ 395.054118][T13506] bridge_slave_0: left promiscuous mode [ 395.054343][T13506] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.105042][T13506] bridge_slave_1: left allmulticast mode [ 395.105068][T13506] bridge_slave_1: left promiscuous mode [ 395.105301][T13506] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.177799][T13506] bond5: (slave veth0_to_bond): Releasing backup interface [ 395.177828][T13506] bond5: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 395.231915][T13506] team0: Port device team_slave_0 removed [ 395.281611][T13506] team0: Port device team_slave_1 removed [ 395.286534][T13506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.286563][T13506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.334097][T13506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.334124][T13506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.567867][T13524] netlink: 'syz.4.1868': attribute type 2 has an invalid length. [ 395.832067][T13534] netlink: 'syz.1.1869': attribute type 1 has an invalid length. [ 395.832093][T13534] netlink: 'syz.1.1869': attribute type 12 has an invalid length. [ 395.851705][T13534] sctp: [Deprecated]: syz.1.1869 (pid 13534) Use of struct sctp_assoc_value in delayed_ack socket option. [ 395.851705][T13534] Use struct sctp_sack_info instead [ 395.987112][T13532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.018650][T13540] xt_connbytes: Forcing CT accounting to be enabled [ 396.034762][T13532] team0: Port device bond0 added [ 396.151493][T13540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.241496][T13543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.278543][T13539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.000361][T13594] IPVS: length: 249 != 24 [ 397.258115][T13613] sit0: entered promiscuous mode [ 397.283988][T13613] netlink: 'syz.2.1887': attribute type 1 has an invalid length. [ 397.284012][T13613] __nla_validate_parse: 14 callbacks suppressed [ 397.284026][T13613] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1887'. [ 397.479251][T13613] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1887'. [ 397.887119][T13640] x_tables: duplicate underflow at hook 4 [ 397.889312][T13642] x_tables: duplicate underflow at hook 4 [ 397.940473][T13640] netlink: 'syz.3.1893': attribute type 1 has an invalid length. [ 397.956280][T13603] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1885'. [ 398.010434][T13642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1893'. [ 398.090923][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 398.094871][T13640] 8021q: adding VLAN 0 to HW filter on device bond10 [ 398.189784][T13642] bond10: (slave batadv1): Opening slave failed [ 398.287485][T13660] netlink: 'syz.0.1895': attribute type 2 has an invalid length. [ 398.304857][T13663] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1894'. [ 398.613181][T13674] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1898'. [ 398.613207][T13674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1898'. [ 398.613222][T13674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1898'. [ 398.618956][T13673] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1897'. [ 398.691366][T13677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1899'. [ 398.694780][T13677] netlink: 'syz.0.1899': attribute type 1 has an invalid length. [ 399.346124][T13692] veth0_to_bridge: entered promiscuous mode [ 399.349375][T13692] macvtap1: entered allmulticast mode [ 399.349398][T13692] veth0_to_bridge: entered allmulticast mode [ 399.398187][T13692] veth0_to_bridge: left allmulticast mode [ 399.398221][T13692] veth0_to_bridge: left promiscuous mode [ 399.665184][T13697] veth0_to_bridge: entered promiscuous mode [ 399.667757][T13697] macvtap1: entered allmulticast mode [ 399.667777][T13697] veth0_to_bridge: entered allmulticast mode [ 399.695675][T13697] veth0_to_bridge: left allmulticast mode [ 399.695710][T13697] veth0_to_bridge: left promiscuous mode [ 402.210217][T13794] netlink: 'syz.4.1926': attribute type 1 has an invalid length. [ 402.223868][T13779] scsi_nl_rcv_msg: discarding partial skb [ 402.687208][T13807] __nla_validate_parse: 8 callbacks suppressed [ 402.687228][T13807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1932'. [ 402.827111][T13812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1932'. [ 402.922960][T13814] netlink: 'syz.1.1933': attribute type 1 has an invalid length. [ 402.991741][T13814] 8021q: adding VLAN 0 to HW filter on device bond10 [ 402.993976][T13819] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1934'. [ 403.048963][T13828] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1934'. [ 403.124660][T13824] bond10: (slave gretap1): making interface the new active one [ 403.127613][T13824] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 403.171215][T13825] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1936'. [ 403.171241][T13825] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1936'. [ 403.656669][T13850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1944'. [ 403.702898][T13850] team0: Port device bond0 removed [ 403.706695][T13850] bridge_slave_0: left allmulticast mode [ 403.706720][T13850] bridge_slave_0: left promiscuous mode [ 403.706917][T13850] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.754061][T13850] bridge_slave_1: left allmulticast mode [ 403.754088][T13850] bridge_slave_1: left promiscuous mode [ 403.755939][T13850] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.793118][T13850] bond0: (slave bond_slave_0): Releasing backup interface [ 403.844297][T13850] bond0: (slave bond_slave_1): Releasing backup interface [ 403.901808][T13850] team0: Port device team_slave_0 removed [ 403.945053][T13850] team0: Port device team_slave_1 removed [ 403.959552][T13850] net_ratelimit: 5 callbacks suppressed [ 403.959569][T13850] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 404.347581][T13885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1952'. [ 404.854430][T13904] tipc: Enabling of bearer rejected, already enabled [ 404.948546][T13911] ip_tables: iptables: counters copy to user failed while replacing table [ 404.961103][T13911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1963'. [ 405.016319][T13914] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1962'. [ 405.108573][T13914] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 405.127502][T13910] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 405.138208][T13914] block nbd1: NBD_DISCONNECT [ 405.138289][T13914] block nbd1: Send disconnect failed -107 [ 407.450825][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 407.799952][T14007] __nla_validate_parse: 2 callbacks suppressed [ 407.799980][T14007] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1987'. [ 408.152533][T14016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1989'. [ 408.197043][T14016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1989'. [ 408.725765][T14005] netlink: 432 bytes leftover after parsing attributes in process `syz.4.1986'. [ 408.726750][T14015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1990'. [ 408.835479][ T50] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.835519][ T50] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.835548][ T50] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 408.835591][ T50] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.835619][ T50] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.835646][ T50] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 408.835686][ T50] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.835714][ T50] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.835741][ T50] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 408.835779][ T50] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.835806][ T50] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.835833][ T50] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 408.857592][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1991'. [ 408.877819][ T6135] syz0: Port: 1 Link DOWN [ 409.226117][T14037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1995'. [ 409.226153][T14037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1995'. [ 409.343978][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1995'. [ 409.344005][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1995'. [ 409.585804][T14046] netlink: Failed to add l2tp helper -22 [ 409.585863][T14046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.915053][ T258] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.915092][ T258] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.915132][ T258] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.915158][ T258] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.915199][ T258] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.920704][ T258] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.920753][ T258] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.920863][ T258] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.043294][T14064] syzkaller0: entered promiscuous mode [ 411.043321][T14064] syzkaller0: entered allmulticast mode [ 411.147055][T14064] tipc: Enabled bearer , priority 0 [ 411.224107][T14063] tipc: Disabling bearer [ 411.835474][T14085] syzkaller1: entered promiscuous mode [ 411.835572][T14085] syzkaller1: entered allmulticast mode [ 411.982605][T14102] veth5: entered allmulticast mode [ 412.131573][T14106] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 412.227022][T14113] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 412.451989][T14134] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 412.517592][T14123] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.549084][T14135] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 412.549116][T14135] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 413.047185][T14147] __nla_validate_parse: 3 callbacks suppressed [ 413.047206][T14147] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2022'. [ 413.274250][T14140] 8021q: VLANs not supported on ip6gre0 [ 413.355134][T14149] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2023'. [ 413.386678][T14159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2025'. [ 413.709642][T14165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2027'. [ 414.325858][T14187] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.733823][T14195] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 416.477350][T14189] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 416.477378][T14189] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 416.670687][T14209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2037'. [ 416.876040][T14217] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2038'. [ 417.017395][T14215] 8021q: adding VLAN 0 to HW filter on device .` [ 417.018136][T14223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2042'. [ 417.020457][T14215] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.077887][T14225] netlink: 'syz.2.2042': attribute type 8 has an invalid length. [ 417.077911][T14225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2042'. [ 417.185266][T14215] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 417.185295][T14215] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 417.214904][T14215] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 417.386390][ T31] audit: type=1800 audit(1789896335.636:18): pid=14227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2044" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A20 dev="tmpfs" ino=2095 res=0 errno=0 [ 417.961900][T14249] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 418.189590][T14262] openvswitch: netlink: Duplicate or invalid key (type 0). [ 418.352340][T14268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2057'. [ 418.391688][T14273] netlink: 'syz.3.2056': attribute type 21 has an invalid length. [ 418.391712][T14273] netlink: 'syz.3.2056': attribute type 22 has an invalid length. [ 418.391725][T14273] netlink: 'syz.3.2056': attribute type 23 has an invalid length. [ 418.391738][T14273] netlink: 'syz.3.2056': attribute type 25 has an invalid length. [ 418.391751][T14273] netlink: 'syz.3.2056': attribute type 26 has an invalid length. [ 418.391765][T14273] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2056'. [ 418.512944][T14276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2058'. [ 418.552393][T14283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2058'. [ 418.659853][T14291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2060'. [ 418.697091][T14291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2060'. [ 418.827346][T14296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2061'. [ 419.065473][T14304] IPVS: Error connecting to the multicast addr [ 419.087210][T14304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2064'. [ 419.206034][T14311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'. [ 419.755731][T14336] ip_tables: iptables: counters copy to user failed while replacing table [ 420.059948][T14345] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2073'. [ 420.205644][T14345] ovs-system: entered promiscuous mode [ 420.789916][T14373] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 420.789946][T14373] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 421.126862][T14396] ip6_vti0: mtu less than device minimum [ 421.129598][T14397] ip6_vti0: mtu less than device minimum [ 423.267508][T14459] tipc: Resetting bearer [ 423.375354][T14473] __nla_validate_parse: 5 callbacks suppressed [ 423.375376][T14473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2098'. [ 423.447893][T14478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2099'. [ 423.500308][T13257] IPVS: starting estimator thread 0... [ 423.594319][T14481] IPVS: using max 24 ests per chain, 57600 per kthread [ 423.614004][T14487] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2100'. [ 423.770242][T14495] ±ÿ: entered allmulticast mode [ 423.807429][T14498] netlink: 'syz.0.2103': attribute type 1 has an invalid length. [ 423.849357][T14498] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2103'. [ 423.889299][T14494] ±ÿ: left allmulticast mode [ 423.898086][ T5618] block nbd1: Receive control failed (result -32) [ 423.898635][ T5624] block nbd1: Receive control failed (result -32) [ 424.047704][T14500] syz_tun: entered promiscuous mode [ 424.047904][T14500] macsec1: entered promiscuous mode [ 424.059258][T14500] syz_tun: left promiscuous mode [ 424.154466][T14502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2105'. [ 424.388490][T14514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.716494][T14536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2115'. [ 424.718899][T14525] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2112'. [ 424.908973][T14525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2112'. [ 425.537857][T14570] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 425.548661][T14570] x_tables: duplicate underflow at hook 1 [ 425.781977][T14591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2127'. [ 425.832017][T14594] netlink: 'syz.1.2126': attribute type 62 has an invalid length. [ 425.861523][T14591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2127'. [ 426.069866][T14607] tipc: Enabling of bearer rejected, failed to enable media [ 426.263922][T14612] syzkaller0: entered promiscuous mode [ 426.263948][T14612] syzkaller0: entered allmulticast mode [ 427.123832][T14648] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-alb(6) [ 427.740210][T14676] syzkaller0: entered promiscuous mode [ 427.740234][T14676] syzkaller0: entered allmulticast mode [ 428.068671][T14683] 8021q: VLANs not supported on vcan0 [ 428.107310][T14687] 8021q: VLANs not supported on vcan0 [ 428.403836][T14700] __nla_validate_parse: 7 callbacks suppressed [ 428.403859][T14700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2154'. [ 428.430385][ T258] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.445758][ T258] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.445814][ T258] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.445857][ T258] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.723106][T14727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2158'. [ 428.723922][T14727] block nbd3: Unsupported socket: should be TCP or UNIX. [ 428.794799][T14721] syzkaller0: entered promiscuous mode [ 428.794828][T14721] syzkaller0: entered allmulticast mode [ 429.143299][T14738] bond0: option min_links: invalid value (18446744073709551615) [ 429.143328][T14738] bond0: option min_links: allowed values 0 - 2147483647 [ 429.183212][T14738] bond0 (unregistering): Released all slaves [ 429.551859][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2165'. [ 429.865616][T14765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2167'. [ 430.498841][T14785] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2173'. [ 430.573975][T14784] xt_CT: You must specify a L4 protocol and not use inversions on it [ 430.690538][T14793] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2175'. [ 431.920030][T14832] netlink: 'syz.4.2185': attribute type 2 has an invalid length. [ 432.542037][T14834] netlink: 'syz.0.2186': attribute type 30 has an invalid length. [ 432.730163][T14834] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 432.896946][T14843] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2187'. [ 433.599186][T14868] netlink: 'syz.4.2195': attribute type 2 has an invalid length. [ 433.855167][T14872] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2196'. [ 436.484875][T14880] ieee802154 phy0 wpan0: encryption failed: -126 [ 436.552022][T14886] netlink: 'syz.0.2199': attribute type 21 has an invalid length. [ 436.663026][T14881] IPVS: set_ctl: invalid protocol: 33 100.1.1.0:20003 [ 436.684135][T14901] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2200'. [ 436.686395][T14881] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 436.730467][T14889] openvswitch: netlink: IP tunnel dst address not specified [ 436.730504][T14889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.788251][T14890] bond11: option arp_interval: invalid value (18446744073709551615) [ 436.788279][T14890] bond11: option arp_interval: allowed values 0 - 2147483647 [ 436.822347][T14890] bond11 (unregistering): Released all slaves [ 437.085092][T14919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2205'. [ 437.262189][T14930] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2207'. [ 437.323121][T14934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2205'. [ 438.381515][T14939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2208'. [ 438.381556][T14939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2208'. [ 438.758354][T14958] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2209'. [ 438.950867][T14944] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2209'. [ 438.950892][T14944] nbd: device at index 64 is going down [ 439.339933][T12809] udevd[12809]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 439.584717][T14999] macsec0: entered promiscuous mode [ 439.589833][T14999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2220'. [ 439.619346][T14999] macsec0 (unregistering): left promiscuous mode [ 439.712104][T15002] v: renamed from veth0_vlan [ 439.874307][T15011] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2222'. [ 439.878064][T15014] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2222'. [ 440.096570][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.129913][T15018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2222'. [ 440.129956][T15018] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2222'. [ 440.235331][T15014] sit0: left promiscuous mode [ 440.303983][T15014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.502956][T15014] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.645291][T15042] netlink: 'syz.0.2225': attribute type 10 has an invalid length. [ 440.705366][T15040] netlink: 'syz.3.2227': attribute type 21 has an invalid length. [ 440.705394][T15040] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2227'. [ 440.766388][T15050] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2227'. [ 440.842326][T15014] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 440.842354][T15014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 440.878863][T15014] A link change request failed with some changes committed already. Interface – may have been left with an inconsistent configuration, please check. [ 441.034274][T15040] netlink: 'syz.3.2227': attribute type 4 has an invalid length. [ 441.034300][T15040] netlink: 'syz.3.2227': attribute type 5 has an invalid length. [ 441.034315][T15040] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2227'. [ 441.606008][T15078] netlink: 'syz.3.2231': attribute type 10 has an invalid length. [ 441.620402][T15078] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 441.643327][T15078] team0: Port device netdevsim1 added [ 441.684403][T15076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2231'. [ 442.300091][T15102] 8021q: adding VLAN 0 to HW filter on device .` [ 442.317108][T15102] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.439507][T15117] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20004 [ 442.628236][T15102] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 442.628265][T15102] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 442.666877][T15102] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 442.727347][T15118] netlink: 'syz.0.2239': attribute type 29 has an invalid length. [ 442.727993][T15121] netlink: 'syz.0.2239': attribute type 29 has an invalid length. [ 442.998903][T15147] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 443.015535][T15143] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 443.039596][T15150] FAULT_INJECTION: forcing a failure. [ 443.039596][T15150] name failslab, interval 1, probability 0, space 0, times 0 [ 443.039632][T15150] CPU: 0 UID: 0 PID: 15150 Comm: syz.2.2247 Not tainted syzkaller #0 PREEMPT(full) [ 443.039657][T15150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 443.039670][T15150] Call Trace: [ 443.039687][T15150] [ 443.039697][T15150] dump_stack_lvl+0xe8/0x150 [ 443.039736][T15150] should_fail_ex+0x410/0x560 [ 443.039767][T15150] should_failslab+0xa8/0x100 [ 443.039797][T15150] __kmalloc_noprof+0xfe/0x720 [ 443.039819][T15150] ? kstrtoull+0x137/0x1d0 [ 443.039852][T15150] ? iovec_from_user+0x87/0x250 [ 443.039877][T15150] ? iovec_from_user+0x87/0x250 [ 443.039911][T15150] iovec_from_user+0x87/0x250 [ 443.039936][T15150] ? lock_acquire+0x115/0x350 [ 443.039963][T15150] __import_iovec+0x15e/0x7e0 [ 443.040002][T15150] import_iovec+0x73/0xa0 [ 443.040035][T15150] vfs_writev+0x1cf/0x990 [ 443.040070][T15150] ? __pfx_vfs_writev+0x10/0x10 [ 443.040111][T15150] ? __fget_files+0x2a/0x420 [ 443.040148][T15150] ? __fget_files+0x3a2/0x420 [ 443.040177][T15150] ? __fget_files+0x2a/0x420 [ 443.040218][T15150] __x64_sys_pwritev+0x19c/0x2b0 [ 443.040244][T15150] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 443.040280][T15150] do_syscall_64+0x166/0x520 [ 443.040306][T15150] ? trace_irq_disable+0x3b/0x140 [ 443.040330][T15150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.040353][T15150] ? clear_bhb_loop+0x70/0xc0 [ 443.040381][T15150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.040404][T15150] RIP: 0033:0x7f866a39e159 [ 443.040426][T15150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.040445][T15150] RSP: 002b:00007f866b274028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 443.040471][T15150] RAX: ffffffffffffffda RBX: 00007f866a625fa0 RCX: 00007f866a39e159 [ 443.040488][T15150] RDX: 1000000000000090 RSI: 0000200000000dc0 RDI: 0000000000000003 [ 443.040503][T15150] RBP: 00007f866b274090 R08: 0000000000000001 R09: 0000000000000000 [ 443.040518][T15150] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 443.040531][T15150] R13: 00007f866a626038 R14: 00007f866a625fa0 R15: 00007ffdefff2148 [ 443.040569][T15150] [ 443.583952][T15168] A link change request failed with some changes committed already. Interface – may have been left with an inconsistent configuration, please check. [ 443.869530][T15178] tipc: Can't bind to reserved service type 2 [ 444.146086][T15187] __nla_validate_parse: 3 callbacks suppressed [ 444.146108][T15187] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2253'. [ 444.146128][T15187] nbd: illegal input index -1721480071 [ 444.752810][T15193] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 444.842529][T15228] x_tables: duplicate underflow at hook 2 [ 444.911207][T15228] netlink: 'syz.2.2259': attribute type 1 has an invalid length. [ 445.236468][T15244] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2263'. [ 445.666229][T15259] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2266'. [ 445.732161][T15259] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2266'. [ 445.732193][T15259] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 446.868131][T15309] netlink: 'syz.4.2274': attribute type 16 has an invalid length. [ 446.868158][T15309] netlink: 'syz.4.2274': attribute type 3 has an invalid length. [ 446.868255][T15309] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.2274'. [ 447.001655][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2275'. [ 447.288673][T15331] openvswitch: netlink: Tunnel attr 3851 out of range max 16 [ 447.373084][T15334] netlink: 'syz.1.2280': attribute type 1 has an invalid length. [ 447.448844][T15334] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2280'. [ 448.059633][T15361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2286'. [ 448.112651][T15357] No such timeout policy "syz0" [ 448.310212][T15357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2285'. [ 448.408852][T15353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2284'. [ 449.176823][T15392] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 450.170514][T15395] 0ªî{X¹¦: left allmulticast mode [ 450.179715][T15424] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 450.931047][T15395] gretap1: left allmulticast mode [ 450.932764][T15395] ip6erspan0: left allmulticast mode [ 450.942121][T15395] bridge4: left promiscuous mode [ 450.942623][T15395] ip6tnl2: left allmulticast mode [ 451.050295][T15455] xt_MASQUERADE: bad MAP_IPS. [ 451.123935][T15446] syzkaller0: entered promiscuous mode [ 451.123961][T15446] syzkaller0: entered allmulticast mode [ 451.420203][T15468] __nla_validate_parse: 2 callbacks suppressed [ 451.420224][T15468] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2308'. [ 451.420248][T15468] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2308'. [ 451.451868][T15467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2309'. [ 451.606583][T15473] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2310'. [ 451.894298][T15481] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 452.020229][T15481] block nbd0: reconnected socket [ 452.033044][ T5624] block nbd0: Receive control failed (result -32) [ 452.277046][T15495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2318'. [ 452.342644][T15498] x_tables: duplicate underflow at hook 3 [ 452.362551][T15502] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2319'. [ 452.366038][T15503] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2319'. [ 452.366871][T15502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2319'. [ 452.443708][T15494] ip6erspan1: entered allmulticast mode [ 452.571710][T15509] netlink: 'syz.1.2321': attribute type 10 has an invalid length. [ 452.571735][T15509] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2321'. [ 452.689789][T15511] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2322'. [ 454.799035][T15509] dummy0: entered promiscuous mode [ 454.800241][T15509] bond5: (slave dummy0): Releasing active interface [ 454.815820][T15509] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 455.304104][T15553] openvswitch: netlink: Tunnel attr 166 out of range max 16 [ 455.449004][T15561] netlink: 'syz.4.2335': attribute type 1 has an invalid length. [ 455.482482][T15561] bond0: entered promiscuous mode [ 455.482916][T15561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.548964][T15565] netlink: 'syz.3.2336': attribute type 1 has an invalid length. [ 455.941762][T15561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.942181][T15561] bond0: (slave gre3): The slave device specified does not support setting the MAC address [ 455.942201][T15561] bond0: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 455.948301][T15561] bond0: (slave gre3): making interface the new active one [ 455.948324][T15561] gre3: entered promiscuous mode [ 455.951589][T15561] bond0: (slave gre3): Enslaving as an active interface with an up link [ 456.043951][T15566] bond0 (unregistering): (slave gre3): Releasing backup interface [ 456.044054][T15566] gre3: left promiscuous mode [ 456.049110][T15566] bond0 (unregistering): Released all slaves [ 456.169461][T15571] bridge8: entered promiscuous mode [ 456.295075][T15589] sctp: [Deprecated]: syz.2.2339 (pid 15589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 456.295075][T15589] Use struct sctp_sack_info instead [ 456.336707][T15589] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 456.359765][T15580] netlink: 'syz.0.2337': attribute type 11 has an invalid length. [ 456.359790][T15580] netlink: 'syz.0.2337': attribute type 14 has an invalid length. [ 456.392485][T15591] sctp: [Deprecated]: syz.2.2339 (pid 15591) Use of struct sctp_assoc_value in delayed_ack socket option. [ 456.392485][T15591] Use struct sctp_sack_info instead [ 456.472600][T15589] bond7 (unregistering): Released all slaves [ 456.592239][T15598] netlink: 'syz.1.2340': attribute type 1 has an invalid length. [ 456.637280][T15594] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 456.716381][T15594] bond7 (unregistering): Released all slaves [ 456.824225][T15604] bond11: (slave geneve3): making interface the new active one [ 456.825267][T15604] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 456.895919][T15607] tipc: Resetting bearer [ 457.170178][T15623] __nla_validate_parse: 8 callbacks suppressed [ 457.170200][T15623] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2345'. [ 457.188701][T15623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 457.201312][ T7607] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 457.242941][ T7538] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 457.257551][ T7607] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 457.258043][ T7607] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 457.490905][T15633] dummy0: entered promiscuous mode [ 457.520421][T15633] hsr1: entered allmulticast mode [ 457.520449][T15633] dummy0: entered allmulticast mode [ 457.536117][T15633] gretap0: entered allmulticast mode [ 457.537554][T15640] netlink: 'syz.1.2347': attribute type 3 has an invalid length. [ 457.537576][T15640] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2347'. [ 457.662932][T15645] openvswitch: netlink: Message has 8 unknown bytes. [ 457.772631][T15651] [ 457.775033][T15651] ====================================================== [ 457.782081][T15651] WARNING: possible circular locking dependency detected [ 457.789142][T15651] syzkaller #0 Not tainted [ 457.793583][T15651] ------------------------------------------------------ [ 457.800618][T15651] syz.3.2352/15651 is trying to acquire lock: [ 457.806708][T15651] ffff88801c2f7a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430 [ 457.817311][T15651] [ 457.817311][T15651] but task is already holding lock: [ 457.824703][T15651] ffffffff8ebe9930 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 457.834929][T15651] [ 457.834929][T15651] which lock already depends on the new lock. [ 457.834929][T15651] [ 457.845352][T15651] [ 457.845352][T15651] the existing dependency chain (in reverse order) is: [ 457.854393][T15651] [ 457.854393][T15651] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 457.862153][T15651] cpus_read_lock+0x42/0x160 [ 457.867294][T15651] static_key_slow_inc+0x12/0x30 [ 457.872778][T15651] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 457.879046][T15651] nbd_genl_foreach_sock+0x265/0x450 [ 457.884898][T15651] nbd_genl_reconfigure+0xbbb/0x1040 [ 457.890725][T15651] genl_family_rcv_msg_doit+0x233/0x340 [ 457.896810][T15651] genl_rcv_msg+0x614/0x7a0 [ 457.901856][T15651] netlink_rcv_skb+0x226/0x4a0 [ 457.907165][T15651] genl_rcv+0x28/0x40 [ 457.911680][T15651] netlink_unicast+0x7bd/0x940 [ 457.917005][T15651] netlink_sendmsg+0x813/0xb40 [ 457.922317][T15651] sock_sendmsg_nosec+0x13a/0x180 [ 457.927879][T15651] ____sys_sendmsg+0x54e/0x850 [ 457.933185][T15651] ___sys_sendmsg+0x2a5/0x360 [ 457.938411][T15651] __x64_sys_sendmsg+0x1b1/0x290 [ 457.943895][T15651] do_syscall_64+0x166/0x520 [ 457.949031][T15651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.955477][T15651] [ 457.955477][T15651] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 457.963166][T15651] __mutex_lock+0x19d/0x1550 [ 457.968299][T15651] nbd_queue_rq+0x373/0xff0 [ 457.973342][T15651] blk_mq_dispatch_rq_list+0x499/0x1990 [ 457.979440][T15651] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 457.986311][T15651] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 457.992837][T15651] blk_mq_run_work_fn+0x16c/0x300 [ 457.998415][T15651] process_scheduled_works+0xc3d/0x1630 [ 458.004517][T15651] worker_thread+0xa47/0xfb0 [ 458.009657][T15651] kthread+0x38b/0x480 [ 458.014265][T15651] ret_from_fork+0x514/0xb70 [ 458.019400][T15651] ret_from_fork_asm+0x1a/0x30 [ 458.024714][T15651] [ 458.024714][T15651] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 458.031950][T15651] __mutex_lock+0x19d/0x1550 [ 458.037084][T15651] nbd_queue_rq+0xc1/0xff0 [ 458.042048][T15651] blk_mq_dispatch_rq_list+0x499/0x1990 [ 458.048139][T15651] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 458.055013][T15651] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 458.061542][T15651] blk_mq_run_work_fn+0x16c/0x300 [ 458.067110][T15651] process_scheduled_works+0xc3d/0x1630 [ 458.073197][T15651] worker_thread+0xa47/0xfb0 [ 458.078326][T15651] kthread+0x38b/0x480 [ 458.082928][T15651] ret_from_fork+0x514/0xb70 [ 458.088069][T15651] ret_from_fork_asm+0x1a/0x30 [ 458.093383][T15651] [ 458.093383][T15651] -> #4 (set->srcu){.+.+}-{0:0}: [ 458.100531][T15651] __synchronize_srcu+0xc9/0x2f0 [ 458.106014][T15651] elevator_switch+0x1e8/0x7b0 [ 458.111327][T15651] elevator_change+0x2fa/0x480 [ 458.116628][T15651] elevator_set_default+0x375/0x440 [ 458.122361][T15651] blk_register_queue+0x3f3/0x4e0 [ 458.127931][T15651] __add_disk+0x6b8/0xdb0 [ 458.132812][T15651] add_disk_fwnode+0x100/0x3a0 [ 458.138126][T15651] nbd_dev_add+0x733/0xb60 [ 458.143080][T15651] nbd_init+0x168/0x1f0 [ 458.147787][T15651] do_one_initcall+0x250/0x870 [ 458.153092][T15651] do_initcall_level+0x10a/0x1a0 [ 458.158571][T15651] do_initcalls+0x59/0xa0 [ 458.163441][T15651] kernel_init_freeable+0x29d/0x3e0 [ 458.169187][T15651] kernel_init+0x22/0x1d0 [ 458.174066][T15651] ret_from_fork+0x514/0xb70 [ 458.179198][T15651] ret_from_fork_asm+0x1a/0x30 [ 458.184517][T15651] [ 458.184517][T15651] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 458.192360][T15651] __mutex_lock+0x19d/0x1550 [ 458.197497][T15651] elevator_change+0x1af/0x480 [ 458.202802][T15651] elevator_set_none+0xb5/0x140 [ 458.208196][T15651] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 458.214548][T15651] nbd_start_device+0x189/0xb30 [ 458.219943][T15651] nbd_genl_connect+0x167d/0x1cd0 [ 458.225503][T15651] genl_family_rcv_msg_doit+0x233/0x340 [ 458.231601][T15651] genl_rcv_msg+0x614/0x7a0 [ 458.236644][T15651] netlink_rcv_skb+0x226/0x4a0 [ 458.242045][T15651] genl_rcv+0x28/0x40 [ 458.246572][T15651] netlink_unicast+0x7bd/0x940 [ 458.251879][T15651] netlink_sendmsg+0x813/0xb40 [ 458.257194][T15651] sock_sendmsg_nosec+0x13a/0x180 [ 458.262754][T15651] ____sys_sendmsg+0x54e/0x850 [ 458.268061][T15651] ___sys_sendmsg+0x2a5/0x360 [ 458.273280][T15651] __x64_sys_sendmsg+0x1b1/0x290 [ 458.278764][T15651] do_syscall_64+0x166/0x520 [ 458.283900][T15651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.290330][T15651] [ 458.290330][T15651] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 458.298986][T15651] blk_alloc_queue+0x544/0x690 [ 458.304298][T15651] __blk_mq_alloc_disk+0x194/0x390 [ 458.309953][T15651] nbd_dev_add+0x494/0xb60 [ 458.314911][T15651] nbd_init+0x168/0x1f0 [ 458.319603][T15651] do_one_initcall+0x250/0x870 [ 458.324912][T15651] do_initcall_level+0x10a/0x1a0 [ 458.330392][T15651] do_initcalls+0x59/0xa0 [ 458.335262][T15651] kernel_init_freeable+0x29d/0x3e0 [ 458.341016][T15651] kernel_init+0x22/0x1d0 [ 458.345895][T15651] ret_from_fork+0x514/0xb70 [ 458.351031][T15651] ret_from_fork_asm+0x1a/0x30 [ 458.356344][T15651] [ 458.356344][T15651] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 458.363684][T15651] fs_reclaim_acquire+0x71/0x100 [ 458.369161][T15651] kmem_cache_alloc_noprof+0x5f/0x600 [ 458.375073][T15651] __kernfs_iattrs+0xdd/0x380 [ 458.380311][T15651] kernfs_iop_setattr+0xe6/0x3f0 [ 458.385796][T15651] notify_change+0xbba/0xea0 [ 458.390927][T15651] do_truncate+0x1c2/0x250 [ 458.395915][T15651] path_openat+0x15b5/0x1d60 [ 458.401044][T15651] do_file_open+0x23e/0x4a0 [ 458.406090][T15651] do_sys_openat2+0x115/0x200 [ 458.411310][T15651] __x64_sys_openat+0x138/0x170 [ 458.416702][T15651] do_syscall_64+0x166/0x520 [ 458.421838][T15651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.428351][T15651] [ 458.428351][T15651] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 458.436886][T15651] __lock_acquire+0x164c/0x2de0 [ 458.442287][T15651] lock_acquire+0x115/0x350 [ 458.447333][T15651] down_read+0x4a/0x330 [ 458.452031][T15651] kernfs_iop_permission+0x7f/0x430 [ 458.457802][T15651] inode_permission+0x3de/0x5f0 [ 458.463199][T15651] cgroup_attach_permissions+0x28e/0x9f0 [ 458.469374][T15651] __cgroup_procs_write+0x24b/0x320 [ 458.475108][T15651] cgroup_threads_write+0x24/0x50 [ 458.480676][T15651] cgroup_file_write+0x331/0x8f0 [ 458.486190][T15651] kernfs_fop_write_iter+0x3a4/0x540 [ 458.492022][T15651] vfs_write+0x612/0xba0 [ 458.496812][T15651] ksys_write+0x150/0x270 [ 458.501691][T15651] do_syscall_64+0x166/0x520 [ 458.506824][T15651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.513256][T15651] [ 458.513256][T15651] other info that might help us debug this: [ 458.513256][T15651] [ 458.523500][T15651] Chain exists of: [ 458.523500][T15651] &root->kernfs_iattr_rwsem --> &nsock->tx_lock --> cpu_hotplug_lock [ 458.523500][T15651] [ 458.537776][T15651] Possible unsafe locking scenario: [ 458.537776][T15651] [ 458.545244][T15651] CPU0 CPU1 [ 458.550620][T15651] ---- ---- [ 458.556002][T15651] rlock(cpu_hotplug_lock); [ 458.560612][T15651] lock(&nsock->tx_lock); [ 458.567565][T15651] lock(cpu_hotplug_lock); [ 458.574600][T15651] rlock(&root->kernfs_iattr_rwsem); [ 458.580012][T15651] [ 458.580012][T15651] *** DEADLOCK *** [ 458.580012][T15651] [ 458.588171][T15651] locks held by syz.3.2352/15651: 4, last CPU#1: [ 458.594510][T15651] #0: ffff8880357fc460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 458.603421][T15651] #1: ffff888056606880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 458.613198][T15651] #2: ffffffff8ed9c7e0 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230 [ 458.622975][T15651] #3: ffffffff8ebe9930 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 458.633537][T15651] [ 458.633537][T15651] stack backtrace: [ 458.639444][T15651] CPU: 1 UID: 0 PID: 15651 Comm: syz.3.2352 Not tainted syzkaller #0 PREEMPT(full) [ 458.648830][T15651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 458.658905][T15651] Call Trace: [ 458.662230][T15651] [ 458.665184][T15651] dump_stack_lvl+0xe8/0x150 [ 458.669806][T15651] print_circular_bug+0x2e2/0x300 [ 458.674855][T15651] check_noncircular+0x12f/0x150 [ 458.679815][T15651] __lock_acquire+0x164c/0x2de0 [ 458.684776][T15651] ? __lock_acquire+0x747/0x2de0 [ 458.689743][T15651] lock_acquire+0x115/0x350 [ 458.694268][T15651] ? kernfs_iop_permission+0x7f/0x430 [ 458.699787][T15651] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 458.705628][T15651] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 458.711466][T15651] down_read+0x4a/0x330 [ 458.715646][T15651] ? kernfs_iop_permission+0x7f/0x430 [ 458.721042][T15651] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 458.726878][T15651] kernfs_iop_permission+0x7f/0x430 [ 458.732133][T15651] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 458.737986][T15651] inode_permission+0x3de/0x5f0 [ 458.742865][T15651] cgroup_attach_permissions+0x28e/0x9f0 [ 458.748533][T15651] __cgroup_procs_write+0x24b/0x320 [ 458.753752][T15651] cgroup_threads_write+0x24/0x50 [ 458.758816][T15651] ? __pfx_cgroup_threads_write+0x10/0x10 [ 458.764579][T15651] cgroup_file_write+0x331/0x8f0 [ 458.769593][T15651] ? __pfx_cgroup_file_write+0x10/0x10 [ 458.775084][T15651] ? __kmalloc_noprof+0x38c/0x720 [ 458.780134][T15651] ? __pfx_cgroup_file_write+0x10/0x10 [ 458.785624][T15651] kernfs_fop_write_iter+0x3a4/0x540 [ 458.790941][T15651] vfs_write+0x612/0xba0 [ 458.795215][T15651] ? __pfx_vfs_write+0x10/0x10 [ 458.800007][T15651] ? __pfx_do_futex+0x10/0x10 [ 458.804727][T15651] ? kmem_cache_free+0x182/0x650 [ 458.809692][T15651] ksys_write+0x150/0x270 [ 458.814051][T15651] ? __pfx_ksys_write+0x10/0x10 [ 458.818960][T15651] do_syscall_64+0x166/0x520 [ 458.823572][T15651] ? trace_irq_disable+0x3b/0x140 [ 458.828612][T15651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.834704][T15651] ? clear_bhb_loop+0x70/0xc0 [ 458.839402][T15651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.845307][T15651] RIP: 0033:0x7f8e9b39e159 [ 458.849826][T15651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.869451][T15651] RSP: 002b:00007f8e9c1ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 458.877890][T15651] RAX: ffffffffffffffda RBX: 00007f8e9b625fa0 RCX: 00007f8e9b39e159 [ 458.885883][T15651] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000005 [ 458.893878][T15651] RBP: 00007f8e9b43506b R08: 0000000000000000 R09: 0000000000000000 [ 458.901883][T15651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.909874][T15651] R13: 00007f8e9b626038 R14: 00007f8e9b625fa0 R15: 00007ffcfa1423e8 [ 458.918135][T15651] [ 458.947447][T15654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2353'. [ 458.974640][T15654] bond10: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 458.993922][T15648] can: request_module (can-proto-0) failed. [ 458.999229][T15654] bond10 (unregistering): Released all slaves