last executing test programs: 3.277126853s ago: executing program 2 (id=3774): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0xc}, {0xe, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r6, 0x89e5, &(0x7f0000000080)={0xfff, "a4cd16dbabf01b54dc29bb5da3e874f6126df4e1ec51a6463269129523a36a3191c02a91269a73d2766d416949e8ca9870a0dd7feb0b1349112df1ab884a78d5d56ec00e02f3c1a070ecb7cf71b841d05f2431d53beb5de88fc49bc030605ae08332af3b25b1dea718967cc349b7599d4416f794b8df5e3d313e8048d7152b07"}) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x32, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0xffffff9c, 0x1, {{0x4, 0x0, 0x4}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500200000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500200000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 2.994918094s ago: executing program 2 (id=3778): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x802) r1 = socket$caif_seqpacket(0x25, 0x5, 0x2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x9, &(0x7f0000000180)=[{0x3, 0xf, 0xc0, 0x2}, {0x680, 0x3, 0x9, 0x2}, {0x2, 0x1, 0xe6, 0x100}, {0x1, 0x7f, 0x7, 0xe442}, {0x2, 0x5, 0x0, 0x2}, {0x1, 0x8, 0x6, 0x41cc}, {0x59a, 0x4, 0x9, 0x80000000}, {0x6065, 0x5, 0x60, 0x8}, {0x1, 0xe, 0x3, 0xf}]}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000400)={{r1, &(0x7f0000000240)='IPVS\x00', 0x381502, &(0x7f0000000280)={@align=0x6, {0x0, 0x0, 0x8, 0xffffffffffffff57}}, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=0xe}, {[0x8, 0x3, 0xb, 0x7f]}, 0x3, 0x84, &(0x7f0000000340)=""/132}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) bind$netlink(r4, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfc, 0x200000}, 0xc) sendmsg(r1, &(0x7f00000008c0)={&(0x7f00000004c0)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000540)="44b1aad29ad2bd2b60f888902da7bcaa29d51b8e2421e743d8f92937ab12fbe6ba30ec3f8d4c3a4725f803bfe3706f94a01d6bfd8aa5a81b1247cafeaa44bed013c280b40593b088edf29d4f7eeaf24b718aa0c7547fd1aa20402c9c93073b7ef536abd4de6fbf88fe3441ea04c26753701f8c24bcfc07064be8b427c38eaa399e44", 0x82}, {&(0x7f0000000600)="641a60823ddaf330b820e0f47c4099cc21f08dc34650141631f281bbcd73fe2a3efd307d3109b55499a22c34467bcd40d464e070cfb2db5e7baa1afbdf836513411d419c913825f63386690a7b5ff1552b2cf8919ee163b262ec7bec328aef7e7a48255fc73f9a567c0ef0dd47b8ebfb00dfed96f1b90ea09dd7cd8a605d9a6f9d3af6c2bf92cf783a595c1f75de56a6c119b66e54de1f9d60e2794826b3eb211ecc699bfe6afaf29e9a38ea44c892c1a518b95dd56d5b95bd5a6e958ef6ea049caffc5f70899f4f2b7068bdff3c559b43ec1e45b2976008430ae52989298b9b", 0xe0}], 0x2, &(0x7f0000000740)=[{0xe0, 0x84, 0x1, "429df08df8436b0bf26ac2deded85773c34485c430dbf0d6a752832ed322a8de0c4a23a6830ab8e0ec6cec61ba36a1539b193de4526ea9de25c47ebffe3f1757378949fa0c6f35bb707be7702beedb0518506bcf244a1717d274641466fac2f94a0b904ab4e0f024a8e6f741e056607dce9452df262b28535094dc7add94fcdeed534ee32a12c3e7eab1cba94b13e634e4a1d935bf886293036e549b1977ee8da61861afb45f3589e28bbcb586b662b496ef6f81258282881d086761027df5f8917cc7ae5170c695d8c7"}, {0x60, 0x118, 0x3, "ddb24c2fcb0b17a3b1a9b0fab645f1af6deed87408aeb41968d1d727586e4d17cd42c408c5ee34bb44184dad830bdb67aee0ea8b7901981b86413f6a048ac2e991b826dc7b870bdf4a"}, {0x38, 0x82, 0xe9, "3b8f95381644d388a3d238dd7702818a202445397d11ef02b11aa3bab46ad31e8717bf877e3cf7"}], 0x178}, 0x80) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r4, 0x40106e8c, &(0x7f0000000900)=[0x1]) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000980), r3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6}, @GTPA_FLOW={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4094}, 0xc0) clock_gettime(0x0, &(0x7f0000006a00)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000a80)=""/247, 0xf7}, {&(0x7f0000000b80)=""/152, 0x98}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/236, 0xec}, {&(0x7f0000001d40)=""/235, 0xeb}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/58, 0x3a}, {&(0x7f0000002e80)=""/236, 0xec}, {&(0x7f0000002f80)=""/210, 0xd2}], 0x9}, 0x4c55}, {{&(0x7f0000003140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000003440)=[{&(0x7f00000031c0)=""/78, 0x4e}, {&(0x7f0000003240)=""/233, 0xe9}, {&(0x7f0000003340)=""/214, 0xd6}], 0x3, &(0x7f0000003480)=""/172, 0xac}, 0x1}, {{&(0x7f0000003540)=@x25={0x9, @remote}, 0x80, &(0x7f00000048c0)=[{&(0x7f00000035c0)=""/35, 0x23}, {&(0x7f0000003600)=""/174, 0xae}, {&(0x7f00000036c0)=""/174, 0xae}, {&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/97, 0x61}, {&(0x7f0000004800)=""/142, 0x8e}], 0x6, &(0x7f0000004940)=""/146, 0x92}, 0x80a}, {{&(0x7f0000004a00)=@hci, 0x80, &(0x7f0000004d80)=[{&(0x7f0000004a80)=""/36, 0x24}, {&(0x7f0000004ac0)=""/128, 0x80}, {&(0x7f0000004b40)=""/2, 0x2}, {&(0x7f0000004b80)=""/228, 0xe4}, {&(0x7f0000004c80)=""/223, 0xdf}], 0x5}, 0x22}, {{0x0, 0x0, &(0x7f0000006400)=[{&(0x7f0000004e00)=""/68, 0x44}, {&(0x7f0000004e80)=""/203, 0xcb}, {&(0x7f0000004f80)=""/231, 0xe7}, {&(0x7f0000005080)=""/81, 0x51}, {&(0x7f0000005100)=""/222, 0xde}, {&(0x7f0000005200)=""/21, 0x15}, {&(0x7f0000005240)=""/149, 0x95}, {&(0x7f0000005300)=""/205, 0xcd}, {&(0x7f0000005400)=""/4096, 0x1000}], 0x9, &(0x7f00000064c0)=""/217, 0xd9}, 0xdba8}, {{0x0, 0x0, &(0x7f00000065c0), 0x0, &(0x7f0000006600)=""/240, 0xf0}, 0x7}, {{0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006700)=""/31, 0x1f}], 0x1, &(0x7f0000006780)=""/148, 0x94}, 0xfffffff7}], 0x7, 0x40000001, &(0x7f0000006a40)={r6, r7+10000000}) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000006a80)={0x8b, 0xa, 0x1, 0x1, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1]}, 0x58) socket$alg(0x26, 0x5, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000006b40), r3) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000006b80)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000006c40)={'tunl0\x00', &(0x7f0000006bc0)={'syztnl0\x00', 0x0, 0x700, 0x7, 0x9, 0x2, {{0x14, 0x4, 0x3, 0x7, 0x50, 0x66, 0x0, 0x41, 0x2, 0x0, @rand_addr=0x64010102, @multicast2, {[@lsrr={0x83, 0xb, 0xc4, [@private=0xa010100, @remote]}, @rr={0x7, 0x13, 0xb3, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x19}, @broadcast]}, @generic={0x94, 0x7, "774a66c342"}, @timestamp={0x44, 0xc, 0x1f, 0x0, 0x2, [0x8, 0xfff]}, @ssrr={0x89, 0x7, 0x25, [@multicast1]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000006d00)={'syztnl2\x00', &(0x7f0000006c80)={'gretap0\x00', 0x0, 0x8000, 0x8000, 0x7f, 0x8, {{0x9, 0x4, 0x2, 0x18, 0x24, 0x67, 0x0, 0xb, 0x29, 0x0, @private=0xa010100, @broadcast, {[@lsrr={0x83, 0xf, 0x27, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x19}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000006d40)={'pimreg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000006d80)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000007040)={&(0x7f0000006b00)={0x10, 0x0, 0x0, 0x5}, 0xc, &(0x7f0000007000)={&(0x7f0000006dc0)={0x234, r8, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x170, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x62, 0x5, "fffa79c3a517e520271fc4fda5f3a2ebe6f1de39e8847dee6dc4eca64350df4e736072fbb6a9b62c5f8bea6ef36d587da94e95e460825b35f2a9ec163443f103d4285399098b330bd879fb22088d4bb54ba455d5651abf9ac4788362abd8"}, @ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'ovf\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-\xe7\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '{.+[-[-)\'%*/(!\xd3-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '-%/+\x13]@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'ovf\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'ovf\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x2c008010}, 0x4000810) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000007200)={{r2, &(0x7f0000007080)=',}\x00', 0x501402, &(0x7f00000070c0)={@_ha_fsid={[0x6, 0xc]}, {0x1, 0x0, 0x7fffffff, 0x3}}, 0xfffffffd, &(0x7f0000007100)={@_ha_fsid}, &(0x7f0000007140)=0x8}, {[0x80000001, 0x7fff, 0x4, 0x7]}, 0xfffffffd, 0x44, &(0x7f0000007180)=""/68}) getsockopt$XDP_STATISTICS(r14, 0x11b, 0x7, &(0x7f0000007280), &(0x7f00000072c0)=0x30) ioctl$sock_inet_SIOCGIFPFLAGS(r14, 0x8935, &(0x7f0000007300)={'rose0\x00'}) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000007380), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r14, &(0x7f0000007480)={&(0x7f0000007340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000007440)={&(0x7f00000073c0)={0x50, r15, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x81}, {0x8, 0x15, 0xffffffff}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) close(r14) 2.844155578s ago: executing program 0 (id=3781): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000240)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x6, @f={0x3, 0x2, 0x1, 0x2, 0xab, 0x9, 0x7f, {0x9, 0x69, "3a67cdf77c77ae06a6b328b0b4e124d7e0d3a3626d712ba8c0344a40e7663d88a0d59fc6ce18cd980d6fbf179412ce3f269dd97dc7a8585cb83eb181a745de905536d6c6af83f8323e5d04c471bfd36e54bbc955a4047b5f0c442d9566137bad4b5ddc166873d6ca3d"}, 0x9, 0x64, 0x0, 0x0, 0xf, "f9d2e881788cb88a5022b952077dfc"}}, 0x89) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) close(0x3) r7 = socket$inet_sctp(0x2, 0x7, 0x84) close(0x3) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x11a, 0x60, 0x0, 0x0) unshare(0x400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x2a}, 0x28) r9 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00') r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x400000000000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r6}, 0x50) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x8, 0x6, 0x101, 0x0, 0x0, {0x8, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x20008050) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x4, 0xa, 0x4, @private2, @loopback, 0x700, 0x10, 0x9, 0x2}}) 2.828907421s ago: executing program 2 (id=3782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005a00010000000000000000d5310000000400"], 0x18}}, 0x0) recvfrom$x25(r1, &(0x7f0000000080)=""/33, 0x21, 0x100e0, &(0x7f0000001200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x884) r3 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockname(r6, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x78000003, @empty, 0x80}, 0x1c) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, 0x0, &(0x7f00000001c0)) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="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", 0x1000, 0x20044850, &(0x7f00000011c0)={0x2, 0x4e24, @multicast1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_USERDATA={0x6a, 0x7, 0x1, 0x0, "6f4e303499464ff88a012a6a4339cf814efb07ea3f499e231208a1dae72c9d88ddf3475be7872901799180ec86aa14b6de8970e5d0658aec1ba973bb4abb63b6ab942ce068c800acf48d55034005e0c0fb9c923cf4276e266b16c8ce23ef90269e896dec7f86"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0x100}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24004004) 2.49828331s ago: executing program 2 (id=3784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) 2.123881598s ago: executing program 4 (id=3789): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) r2 = accept4(r0, 0x0, &(0x7f0000000000), 0x2f2130edeec48d68) r3 = accept4$bt_l2cap(r2, &(0x7f00000001c0)={0x1f, 0x0, @fixed}, &(0x7f00000002c0)=0xe, 0x983ae0ef470bd93d) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0xffff7fff}, @TCA_CAKE_MPU={0x8, 0xe, 0xfd}]}}]}, 0x44}}, 0x4800) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000300)={'wlan1\x00', 0x9}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000008"], 0x50) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$packet(r2, &(0x7f0000000240)={0x11, 0xf5, r1, 0x1, 0x9, 0x6, @remote}, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010320000000000000000c0000000800040001"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) bind$xdp(r2, &(0x7f0000000380)={0x2c, 0x1, r1, 0x36, r3}, 0x10) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 2.093655308s ago: executing program 4 (id=3790): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x0, 0x3}, 0x1c) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r2, &(0x7f0000000200)={0x2, @none={0x0, 0xffff}}, 0x14) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000000)={r5, @in={{0x2, 0x4e22, @multicast1}}, [0x3, 0xd7b, 0x80000001, 0x6, 0x80000000, 0x1, 0x5, 0x9, 0x100, 0xa3bd, 0x100000001, 0x8, 0x1, 0x6, 0x4]}, &(0x7f0000000100)=0x100) (async) syz_emit_ethernet(0x82, &(0x7f0000000280)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @multicast2, {0x16, 0x4, 0x0, 0x5, 0x0, 0x64, 0x0, 0x1, 0x11, 0x6, @empty, @dev={0xac, 0x14, 0x14, 0x15}, {[@cipso={0x86, 0x6, 0xfffffffffffffffe}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@rand_addr=0x64010104}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40000}, {@local, 0x800}, {@multicast2}, {@dev, 0x4}, {@private=0xa010102, 0x1}]}]}}}}}}}, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x7}}, {{0xa, 0x0, 0x6df, @empty, 0x5}}}, 0x108) (async) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000940), 0x10) listen(r8, 0x0) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) shutdown(r9, 0x1) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000014800000000fedbdf250000000090064fe41730ebe87e1eeac089611357bfbb0a587718a9d68fe1f409b7a5edf15a01f034e3829f7740137a1a7e948db7ded284155e84d85a80ace487ec6548eb5b027f1f657115c53853e29a79", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0003000000"], 0x30}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) 2.080366216s ago: executing program 3 (id=3791): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010101, @local}, {0x16, 0xff, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e30000000080001"], 0x40}}, 0x8084) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000020000115053f88bafcdbdf2504"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1.807818482s ago: executing program 2 (id=3792): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x540, 0x0, 0x410, 0x0, 0x2f8, 0x2f8, 0x640, 0x640, 0x640, 0x640, 0x640, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000007c000000060a0104000000000000000001000000540004802000018007000100727400001400028008000240000000030800014000000003240c01800b00010072656a656374000014000280080101400000000105000200000000000c000180080001006669620008000b4000000000090001"], 0x104}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x128, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x240, 0x20a, 0x278, 0x240, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e22], [], 0x0, 0x40, 0x2, 0x8}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, [0xff, 0xff, 0xffffffff, 0xffffff00], [0x0, 0x0, 0xff, 0xffffff00], 'wg1\x00', 'xfrm0\x00', {0xff}, {}, 0x11, 0x7, 0x2, 0x14}, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x7}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) socket$inet(0x2, 0x800, 0x6) 1.804823875s ago: executing program 1 (id=3793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) close(r1) 1.686182118s ago: executing program 0 (id=3794): r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x404, 0x0, 0x0, 0x0, 0x80}, {0x1, 0x0, 0x0, 0x6cc, 0xffffffffffffffa4}, {0x0, 0x0, 0x0, 0x7}, 0x7, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x6c}, 0x2, @in=@private=0xa010102, 0x0, 0x4, 0x1, 0x0, 0x0, 0x93}}, 0xe8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="dd5d513827fb05faf7fd853c05de60c7bd1743fcea2afdbfccd4c8d0669e9bbfc361b567ec25e1d89972611036a993897255e55e93e8a3881ec43ada5d9c7b7f64055bfc07f907473a43698cb79b2c5e2a07ddf3f4a6f90233adc522b464820efddfdd57859338c6701b126c6d32ac3a632f983ac6d41cedef2ba3e481f05af66ffab707921a828e6f3141b819913d83b9"], 0x7c}}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x600008c0) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, 0x0, 0x0) close(0x3) 1.674430899s ago: executing program 3 (id=3795): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000024c0), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf250100000008000200060000001400050000000000000000000000000000000000080001002b3aa30008000700e0000002d0ba22e9f17b83cd59a4d2766a3cd6fdfd291d78b5231b65124f5881566e486a9153051eca29b2e114699d1d51e7d84e6e"], 0x40}, 0x1, 0x0, 0x0, 0x4004801}, 0x20008804) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x28, 0x0, 0x7, 0xfffff010}, {0x16, 0x0, 0x2, 0x1}]}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0xc6db, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7effffff}], 0x2c) 1.618689849s ago: executing program 1 (id=3796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x20004000) (async) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c0001800800012ffffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10004082}, 0x90) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x42840}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d013d8e870ba3394f6a5c4cd00"/34, @ANYRES16=r4, @ANYBLOB="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"], 0x330}, 0x1, 0x0, 0x0, 0x800}, 0x4) connect$ax25(r2, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 1.570709342s ago: executing program 3 (id=3797): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0xffffffffffffffcf, &(0x7f0000000080)={&(0x7f0000000040)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x3, 0x15}]}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_DST={0x0, 0x2, @rand_addr=0x64010102}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2f, 0x0, "ede10c90e0d6d4b2b1651d4ddc62e17b5f4fa4a45bc87ce8b6cab0b0bf7f4a73a775b18b108887c58ce5057146437a52ff5d0f912a8eff0b48b4c25e7d5ae1e974f8cdaa3dccaccd26482b83f2a4afd0"}, 0xd8) close(0x3) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @generic="3ed73cfc"]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x1) accept4$unix(r3, 0x0, 0x0, 0x800) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e21, 0x2, @empty, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5b}}}}}, 0x20}}, 0x40008b1) bind$netrom(r3, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 1.419885528s ago: executing program 1 (id=3798): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000100001002cbd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200241a0100140003006e657464657673696d3000000000000034001680300001802c000c8014000100ff030000fb060000ffffffff88a800001400"], 0x70}, 0x1, 0x0, 0x0, 0x408c1}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r1) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2511000000080015000200000008000100c4a8"], 0x24}, 0x1, 0x0, 0x0, 0x71eff8d2059dfe60}, 0xc004) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x40, 0x119, 0xfffffffe, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x4, 0x141}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='e1'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @remote, @multicast2}, &(0x7f0000000140)=0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) (async, rerun: 32) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) (rerun: 32) getpeername$packet(r8, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r4, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x801}, 0x20000010) 1.375743235s ago: executing program 0 (id=3799): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000280)={r1, 0x10, "8939d0721d3150f0770ed55b20187fa6"}, &(0x7f0000000380)=0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x8020, 0x11000}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.282749966s ago: executing program 4 (id=3800): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd2a, 0x65dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0xc800) r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x80000) ioctl$SIOCX25GCALLUSERDATA(r4, 0x89e4, &(0x7f0000000080)={0x41, "799e57418c75fa0d693f5de5f82128fb52bcb345b9973287dbb77bdf2a4f9ce0d07126219371fcde1b526d12b325c1b8d642e149c4197f6804a610089a0cfbfbeeabda21ba661e42ac713ba9774c27ec31ffbd0a948a781f5faed363b6379cfcdccdbb05a2d2e989996c859708e0e313a4753512c2d5c37897692075c21755e4"}) bind$unix(r0, &(0x7f0000000340)=@file={0x1, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x6e) 979.120071ms ago: executing program 1 (id=3801): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r6], 0x30}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r8, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00\x00\x00', @ANYRESOCT=r8], 0x28}, 0x400c000) r9 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000540)={0xb0000010}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r3, r1, 0x25, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000940)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1, 0x0, 0xad, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x0, 0x0, 0x200}}}}}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="6454a66ef0e4402c00f9ff0f000100061f0000000000000008001c00c900e10256095d86000004004300"], 0x2c}], 0x1, 0x0, 0x0, 0xb305e06daeb01ab2}, 0x4000) r11 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreq(r11, 0x0, 0x20, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x100, 0x30, 0x4, 0x8}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r12, 0xe, 0xfffffff8, 0x6}, &(0x7f0000000200)=0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r13) sendmsg$ETHTOOL_MSG_STRSET_GET(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, r14, 0x321, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x14}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 978.725696ms ago: executing program 4 (id=3802): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000020000000000030000000900030073797a30000000000900010073797a300000000014000480080002406375fd82080001400000000028"], 0xb0}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x800) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000400)=0xc) (async) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x2000000}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async, rerun: 32) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0xffffffff, 0x4) (async, rerun: 32) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRESHEX=r3, @ANYRES64=r4, @ANYRESDEC=r1, @ANYRES16=r5, @ANYRES64=0x0], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 757.368215ms ago: executing program 4 (id=3803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="70010000000000001ede3b0100000000ffffffff000000000000000000000000ffff3ffe4e228001000020000000000000000000000000000000000000000000a68998d71c17050a5f5d3436c0971877ba82485fb8d68c432f0640e7f083a63fa271c6d55ec81254e1276c83c577cbba9a32650122fd8673682d6561fb27ded5bbcd5ede3cb6c3b481b1edb6106705a0f4674f7930e8c019839322fdfd94e4218ce83245988c3374911edefe4b6c47869b09ab127598661d1767103e89f121dd7e139b2cd6b29de6089a2890bbaa10f92084ea98ed69bf8cde773cc17f13173f831950bc8eee09e621b36a74a73020ebe18bf8c0193def26", @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="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"/296], 0x170}}, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xf}]}, 0x40}}, 0x48000) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x6}, {0x0, 0x3, 0x0, 0x4, 0x6}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24041090}, 0x0) r4 = gettid() (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001300)=0x0) getgid() (async) sendmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000580)="54692efc5d2e6963038cbfb1b0d441ba22bcfe56afd38decc96d6a6edfbea6dd5fa88d2558c3a3b61b737c7214467bb8b45e792870c3f4240061a3205221f58936a5e27bf16f3564afceee30746880fc0b6418512c0497bc54d3d085f9489c11f651305760349fa8f711a192d99bc63958b3fdae9b0f42763fb4fcd0976e09490e0b877a28df680f7e8b3ca82ab732fb", 0x90}, {&(0x7f0000000800)="45c53e26ad82dd223030d2f7095e891bf4a2070e22022ed93722adebe76852d066e78f8bff77a236eaa700b58774f6894c574d3c65ecc89f01184e4342b1357fbf9ad6f08194f9a9dcdcf9f09f01a27ab6d803dd6ca76048a6c7b1c190264eaaaafb517d2a35536d490152c340ae959fcf6c57097413869e9f88f46b29ae1fc8a0b572", 0x83}, {&(0x7f00000008c0)}, {&(0x7f0000000900)="8ff7d44bd81abc4b96f9013bb9fa8ad40f5846d532da51171aae6ec797e7249ceeed989deadebb6901cdb7f6ea731f8bb3bdd0336f7a3c19ebcf0ca048dea703da398c76cdec8bce56d355706df02e59f49a3da62aaa3e1cd845ef1e63c317764b72c33e01505263a3197cda5ddf", 0x6e}, {&(0x7f0000000980)="3e8b7972cb63317dc7385a2e68ce14ccf0dfebdf7536d2bc529f0dc4d438f8e5b8db3af9c1ff075aeaf07cec46c08144b2aade11de4f095428d6354eda9c6071c65d1ee4915ed4d056380fe329b11566cc5cbabab8", 0x55}], 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100004192b84560", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRESDEC=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r1, @ANYRES8, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000087a6e0f975979fe03685b591d52120ea4544872c0949de75a203f557515eb257f660ad0991fff5c0ad34ec5afb1d8b754788fc53b281807f374e91ad56aea02dc4f0f9cab3bf13affb78aa667fb3bd76"], 0x178, 0x4000}, 0x8000) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r7}, 0x20) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r6, r10, 0x0, 0xffffffff004) (async) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000000c0)) (async) r11 = socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x1, 0xfff2}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x20040084) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001500)=@delchain={0x2c04, 0x65, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xf}, {0xa, 0x1}, {0xc, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x1254, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0x6}}, @TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}]}, @TCA_BASIC_EMATCHES={0x2d0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf0c}}, @TCA_EMATCH_TREE_LIST={0x168, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7}, {0x0, 0x2}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x9, 0x8, 0x6}, {0x1, 0x6, 0x2}}}, @TCF_EM_META={0xb8, 0x3, 0x0, 0x0, {{0x5, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x6, 0x2}, {0xe5d, 0x82, 0x1}}}, @TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_VAR='6', @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="b6", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="c0d4ba8ec39e", @TCF_META_TYPE_VAR='/', @TCF_META_TYPE_VAR="64a737c77b4f76"]}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="64b0", @TCF_META_TYPE_VAR="89e54236fa2d64ec"]}, @TCA_EM_META_RVALUE={0x30, 0x3, [@TCF_META_TYPE_VAR="47021c56f942", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="52b56cf1", @TCF_META_TYPE_VAR="2c8c337a615b710b98", @TCF_META_TYPE_VAR="b70727f2d9"]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="db44", @TCF_META_TYPE_VAR="fe4c", @TCF_META_TYPE_VAR="6a7de1dc48"]}, @TCA_EM_META_RVALUE={0x27, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="998e375841c24441", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="876c1749174834", @TCF_META_TYPE_VAR="c9c28c0ed72a", @TCF_META_TYPE_VAR="987bf54b31bf"]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7fc, 0x3, 0x7}, {0x101, 0xfffffffa, 0x0, 0x7}}}, @TCF_EM_META={0x34, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x40}, [@TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="9d", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR='G', @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x9}, {0x8, 0x80}}}, @TCA_EM_META_LVALUE={0x4}]}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x9}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x7}, {0x100, 0x53}}}]}}, @TCF_EM_META={0x24, 0x3, 0x0, 0x0, {{0xfffe, 0x4, 0xffff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0xb}, {0x8, 0xfe, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3946, 0xa, 0x2}, {0x80, 0xfb, 0x1}}}]}}]}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x58, 0x1, 0x0, 0x0, {{0x8000, 0x0, 0x1}, "fb96701d8b059bc3bce71d7c35eea5e499d4489c0e4619475d9ad9996a1c27f85c376ef206499375f867de05b9295943827cb3fca08dd9016786f9df11f88eac33eff5617cba6121b5e88ac0"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xdfbd, 0x3, 0x5}, {0xfffffff7, 0x1, 0x1, 0x3}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1cc0, 0x3, 0x7}, {0x39, 0x400000, 0x7dda, 0x5}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8ccc, 0x7, 0x401}, {{0x3, 0x1}, {0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x9c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfffb, 0x7, 0x2}, {{0x1, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2, 0x1, 0xa}, {0x8, 0x0, 0xc3a, 0x0, 0x8, 0x1, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x4, 0x8, 0x8000}, {0x0, 0x1, 0x4}}}, @TCF_EM_U32={0x1c, 0x8, 0x0, 0x0, {{0x6, 0x3, 0x8}, {0x1, 0xb7f80000, 0xb, 0x2}}}, @TCF_EM_META={0x40, 0x3, 0x0, 0x0, {{0x10, 0x4, 0x8}, [@TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="fa6e5cfb7bf950d2", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="f9f5ecf5cd", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="27b48d19a2"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9d3f, 0x7, 0x1}, {0x6, 0x6, 0x1}}}]}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0xffe0}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x4}}, @TCA_BASIC_EMATCHES={0x21c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x188, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x3, 0x7, 0x7}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x4, 0x3, 0x4}, {0xa6c, 0xee29, 0x6, 0xc48}}}, @TCF_EM_CONTAINER={0x38, 0x1, 0x0, 0x0, {{0x2, 0x0, 0x1ff}, "48558edd544128255dc3cb16ea4f6e9616e0467c05dc5f7ce4f0bc8b50e37d720fb2ab35771a395f59"}}, @TCF_EM_CONTAINER={0x54, 0x3, 0x0, 0x0, {{0x995, 0x0, 0x9}, "d199227c20b00eff781ef63f7aaf9dce4855f4379eebf4bbd501bd553ffee50f465fe990b9e2d2d660cd420dadb06477f696a891d575d7efbd04ab615b9f09aeff3a4392e5"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x200, 0x1, 0x91}, {0x200, 0x81, 0x4, 0x1, 0x5, 0x0, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xfff8, 0x3, 0x8}, {0x2a4b5863, 0xe, 0x7, 0x91}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x10, 0x8, 0x800}, {0x3, 0x6}}}, @TCF_EM_CONTAINER={0x84, 0x3, 0x0, 0x0, {{0x3251, 0x0, 0x4}, "987e378fa3014ac6c29c1f8352206c2e5b526d57f917a94b84aca3c1aec4f273989950ffc86266d4c6cf0d3db519b75c995a51b651fb0e284695422e3caffe57b35666cf56b937dbbe54c3473641c55ae6f1aa2d4d2b5fef7442ea06c4a502fc8b06d8df53d2deaa616e9ecca95bb15fcc3c5f467d"}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x80, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x50, 0x2, 0x0, 0x0, {{0xace2, 0x9, 0x1}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x81}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x80}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5}, {{0x2, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x800, 0x1, 0x800}, {0x7, 0x8, 0x8678, 0x6, 0x1, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x21}}]}, @TCA_BASIC_POLICE={0xd24, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x6, 0x9d1, 0x6, 0xcba, {0xa, 0x2, 0x4800, 0x6, 0x9, 0x4}, {0x49, 0x1, 0x9, 0x71, 0xc64, 0x9}, 0x3, 0x5, 0x200}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xff, 0x7ff, 0x2e, 0xffff, 0x10001, 0x4, 0x4, 0x4cb, 0xffff7fff, 0x6, 0xa5c9, 0x400, 0x5, 0xfffffffc, 0x81, 0xa6, 0x8, 0x8, 0x7, 0xd, 0x4, 0x401, 0x7c2, 0x4690, 0xe60e, 0xffd6, 0x8000, 0x80000001, 0x100, 0xfffffff9, 0x3, 0x8, 0x2, 0xc8f, 0xb, 0xffffffff, 0x2, 0x7, 0xc5, 0x5, 0x320, 0x4, 0x7, 0x8, 0x100, 0x9, 0x401, 0x7, 0x80000001, 0x9, 0x100, 0x24b, 0x9, 0x2, 0x1, 0x5, 0x7c50, 0x398f, 0x4, 0xf, 0x1, 0x101, 0x8, 0x2, 0x5, 0xb, 0x0, 0x200, 0x3, 0x8, 0x14, 0xd8f7, 0x2, 0xfffff7cd, 0xfffffffb, 0x2, 0xb608, 0xfdeb, 0x3, 0x9f7, 0x4, 0x7, 0x2, 0x9, 0x3, 0x2, 0x1, 0x6, 0xa8, 0x9, 0xe63, 0xe2, 0x1, 0x360, 0x8, 0xe, 0x0, 0xa4aa, 0x3, 0x450, 0x7fffffff, 0x10001, 0x4, 0x2, 0x7, 0x200, 0x401, 0x8, 0xa, 0x9, 0x4, 0x8, 0x4, 0xf9c7, 0x27, 0xfc7, 0x8, 0xffffffff, 0x8, 0x9, 0x7, 0xa4, 0x2, 0x2, 0x4bf, 0xfffffff4, 0x5, 0x10001, 0x7fff, 0x4, 0x7, 0x3, 0x9, 0x1, 0x4, 0x4, 0x6, 0x75, 0x2, 0x9, 0x2, 0x7, 0x5, 0x5, 0x4, 0x4, 0x0, 0x0, 0xf, 0x101, 0xc80, 0x0, 0x8, 0x3, 0x4, 0x2, 0x10, 0x9, 0x3, 0x8, 0x2, 0x7, 0x3, 0x10000, 0x5, 0x4, 0x2, 0xffff8000, 0x6, 0x3ff, 0x2, 0x4, 0x8, 0x4, 0x6, 0x9, 0x10001, 0x7ff, 0x5, 0x8001, 0x5, 0x9, 0x6, 0x9, 0x9c, 0x7, 0x28000, 0xebb, 0xfff, 0x6, 0x4, 0x3, 0x2, 0x2, 0x2, 0xb1a6, 0x8, 0x427b, 0xff, 0x10000, 0x4, 0x2, 0xbb, 0x8, 0x1ff, 0x1, 0x3f1, 0x2d, 0xffffff5e, 0x1, 0x800, 0x0, 0x6, 0x70, 0x4, 0x5, 0x81, 0x9, 0x6, 0x2, 0x9, 0x1, 0x7, 0x73bc16e4, 0x6d6a, 0x62f1, 0x1, 0x5, 0x2e2f, 0x81, 0x0, 0x6, 0xfffffff6, 0x2, 0xfffffff7, 0x0, 0x1, 0x3, 0x40, 0x80000000, 0xf, 0x1, 0x1, 0x8000, 0x7, 0x2, 0x5, 0x3, 0x800, 0x7, 0xc751, 0x200, 0x8408, 0x9, 0x8000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0x800, 0xf, 0x4, 0x3, 0xfffff000, 0x4000, 0x80, 0x5, 0x8, 0x0, 0xfffeffff, 0xffffffff, 0xfff, 0x5, 0x9, 0xd5, 0x80, 0x1, 0x200, 0x5, 0x34f5, 0x2d43, 0xc, 0x80, 0xfff, 0x100, 0xbc, 0x5, 0xc, 0x0, 0x1, 0x2e, 0xfffffffb, 0x7, 0x10000, 0x1, 0x2, 0x9, 0xfff, 0xb, 0x2, 0x8, 0x8, 0x7, 0x2, 0x6, 0x1000, 0x1, 0x4, 0x28, 0x583, 0x101, 0x3, 0x3, 0xffffffff, 0x2000000, 0x7, 0x7c4, 0x7, 0x2, 0xfd, 0xfffff10d, 0x8, 0x3, 0x2, 0x5d, 0x3, 0xb, 0x0, 0x0, 0x1, 0x9, 0x1, 0x0, 0x81, 0x16, 0x7c, 0x1, 0x8001, 0x3ff, 0x8, 0x1000, 0x0, 0x6, 0x7, 0x1, 0x7, 0x9, 0xfff, 0x4, 0x80000001, 0x3ff, 0x0, 0x2, 0x8, 0xfffffffd, 0x668c, 0x2, 0x1, 0x1000, 0x5, 0x7085eae4, 0xfffffff8, 0x7ff, 0x3, 0x7fffffff, 0x1f6, 0x3, 0x6, 0x40, 0xfff, 0x6, 0xa6, 0x5, 0x5, 0x9, 0xbff, 0x3, 0x6, 0x0, 0x8, 0x1, 0x7, 0x7, 0x32d8, 0x7, 0x1, 0x771f, 0x9, 0x2, 0x8001, 0xd2c8, 0xc, 0xc, 0xc8ce, 0x4, 0x2, 0x5, 0x2, 0x9, 0x7, 0xc2dc, 0x6, 0xfffffffb, 0x1, 0x1, 0xa, 0x1d4a, 0x3, 0x7, 0x0, 0xffff, 0x0, 0x211, 0x7ff, 0x2, 0x8, 0x1, 0x100, 0x9, 0xe0, 0x0, 0x5, 0x9, 0x8001, 0x4, 0x4, 0x5d, 0x1, 0xfffffffd, 0x0, 0xfff, 0x3, 0x6, 0x20, 0x800, 0x9, 0x8, 0x6, 0x100, 0x8, 0x3, 0x7, 0x3, 0x1, 0x7, 0x5, 0x7, 0x4, 0x5fa, 0x9, 0x9, 0x60000000, 0x1, 0x7, 0x1, 0x62, 0x1, 0xfffffff9, 0x4, 0xe10, 0x8, 0xff, 0x53e, 0x4, 0x1, 0x5, 0x8, 0x3, 0x8, 0x0, 0x10, 0x0, 0x3, 0x4, 0x0, 0x1, 0xffffffff, 0xf91, 0x5, 0x5, 0x7, 0x1, 0x100, 0x2, 0x0, 0x8000, 0xe, 0x2, 0x1, 0x4b14, 0x8001, 0x9, 0xb, 0x1, 0x100, 0x8, 0x7, 0x8001, 0x5, 0x4, 0x4, 0xfffffc13, 0x80000001, 0x4, 0x1ff, 0xa4a3, 0x1, 0xffff, 0xfffffff9, 0x7, 0x400, 0x9, 0x8, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x9, 0x0, 0xffff, {0x4, 0x1, 0x100, 0xffff, 0x57}, {0x9, 0x2, 0xfff, 0x0, 0xfeff, 0xfffffffb}, 0xad, 0x7f, 0xa}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9d7b, 0x7f, 0x9, 0x4, 0x80000001, 0xfffffffb, 0x6, 0x9, 0xfffffffb, 0xb1, 0xb, 0x5, 0x8, 0x2, 0x2, 0x1, 0x4, 0x400, 0xf93f, 0xf57e, 0xe, 0x4, 0x9, 0x9, 0x2, 0x3f49, 0x2, 0x3c56, 0x800, 0x8, 0xfffffff2, 0x5, 0x6, 0x2, 0xfffffff9, 0x2, 0xfffffff0, 0x3, 0xd, 0xff, 0x80, 0x7, 0x1, 0x0, 0x6, 0x401, 0x9, 0x3, 0x7, 0xd, 0x9, 0x4, 0x7, 0x10000, 0x0, 0x6, 0x5, 0xbe, 0x5, 0x3, 0x100, 0x5, 0x8, 0x5, 0x9, 0x0, 0x718a, 0x1, 0x5c07, 0x6, 0x2, 0x0, 0x6, 0x9, 0x9, 0x4ad, 0x78a, 0x4, 0x2, 0x7fff, 0xc, 0xb, 0x4, 0x10, 0xfffffff2, 0xaf7e, 0x4, 0xfffffffc, 0x7, 0x10001, 0xba1, 0x3c7, 0x954, 0x7, 0x5, 0x6, 0x2, 0x3b, 0x3, 0x80, 0x4, 0xfffffff9, 0x7, 0x912, 0x8000, 0x9, 0x8, 0x2, 0x0, 0xde, 0x40, 0xe2, 0x7, 0x1, 0x100, 0x0, 0x6, 0x0, 0xf05, 0x3, 0x7, 0xa9d3, 0xd, 0x4, 0xb78, 0x30, 0xb6, 0x1, 0x5, 0x8001, 0x7, 0xcd9b, 0x2c, 0x6, 0x1000, 0x2, 0x1000000, 0x0, 0x9, 0x2, 0x10000, 0x9, 0x0, 0x9, 0xffff, 0x9, 0x5, 0xfffff3dd, 0x9ebc706, 0xb, 0x1, 0x9, 0xaf, 0x1, 0xfff, 0x7, 0x0, 0xe, 0x6, 0x2, 0x3, 0x6, 0xffffffad, 0x42, 0x24000000, 0x9, 0xfffffff8, 0xf, 0x400, 0x1, 0x8, 0x7c000000, 0x55, 0x8, 0x1e5, 0x5, 0x9, 0x760c, 0x1, 0x81, 0x3, 0xffffffff, 0x10, 0xfffffff0, 0x2611af25, 0x4, 0xe9, 0x7ff, 0x6, 0x9, 0x5, 0x8, 0x2, 0x6, 0x1, 0x6, 0x6, 0x7ff1, 0x7, 0x897, 0xf0c0, 0x2, 0x8, 0x8, 0x9, 0xfff, 0xaae, 0x15cb1255, 0xf, 0x3, 0x1, 0x9, 0x6, 0x1, 0x17, 0x0, 0x8001, 0x8, 0xa15, 0x5, 0x5, 0x8, 0xfffffff6, 0x75, 0x180000, 0x58a, 0xc000000, 0x3, 0x810553a, 0x6007, 0x45, 0x8, 0xc73d, 0x9c05, 0x8f8, 0x6, 0xfffffffb, 0x2, 0x2, 0x9, 0x5, 0x8, 0x4, 0x1, 0xfffffffc, 0xb5c, 0x7fff, 0xfffffffe, 0x5, 0x8, 0x1, 0x7, 0xd, 0x2e, 0x5, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x12000, 0x2, 0xfffffff0, 0x204a, 0x7f, {0x1, 0x2, 0x9, 0x8, 0x2, 0xfffffffa}, {0x1, 0x1, 0xffff, 0x530, 0x0, 0x2}, 0x4, 0x7ff, 0x7e52}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x0, 0x9, 0x40, 0x8, {0xc2, 0x2, 0x5, 0x6, 0x8, 0x800}, {0x9, 0x0, 0x4000, 0x855, 0x8, 0x6}, 0xf, 0x6, 0x8001}}]}, @TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_fw={{0x7}, {0x21c, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_INDEV={0x14, 0x3, 'nr0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xd}}, @TCA_FW_MASK={0x8, 0x5, 0x4}, @TCA_FW_INDEV={0x14, 0x3, 'pim6reg\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x4, 0x9}}, @TCA_FW_POLICE={0x18, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}]}, @TCA_FW_INDEV={0x14, 0x3, 'dvmrp1\x00'}, @TCA_FW_ACT={0x1a4, 0x4, [@m_skbedit={0x64, 0x4, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x1, 0x8, 0x3, 0x7}}]}, {0x1e, 0x6, "f887eb9c6e897ec234bfdab07ecf6454a60c940cad7268c95a9e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x13c, 0xe, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x101, 0x10, 0xfffffffffffffff9, 0x9, 0x7f}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x5, 0x78, 0x5aa}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x3, 0x8}, 0x9e9d}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10, 0x8, 0xffffffffffffffff, 0x35, 0x1}, 0x23}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x1ff, 0x20000002, 0x9, 0xfffffff8}, 0x5f8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x8, 0xfffffff9, 0xf7}, 0xca9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x7, 0xffffffffffffffff, 0xe, 0x2}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa8e9, 0x1, 0x1, 0x42, 0x1}, 0x2}}]}, {0x2c, 0x6, "0b7dabce18514ee46a9de31dd18a873effbdedfd83f2780fd7a0788d4adf4e1aa6c946c1f2cbe44c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @filter_kind_options=@f_basic={{0xffffffffffffff09}, {0x1730, 0x2, [@TCA_BASIC_ACT={0x172c, 0x3, [@m_ctinfo={0xe0, 0x19, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}]}, {0xa3, 0x6, "fec6bb4016189383df27c176d9222ffd655417f36979f7e5ea965c083d7286cc92e3ef751ad8d444ccd70c26955e61941030893935f872d8e95553e434f9d2db033130152e1bc6ec172e2e130649d1d9c17c63fefc6563eda46dfde441885cd36e5d8d89c2072d9ad6e5158547a95257b9031bc72a04482689b9740b4b1eebf0b18979be5cc6e6341ee1df768ff9993ee7ec9586a8ec22b15b2a4e54876884"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x1464, 0x1f, 0x0, 0x0, {{0xb}, {0x438, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7f3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xe95, 0x8a, 0x2, 0x4, 0x7fffffff, 0x101, 0xb4, 0xaea, 0x1, 0x100ff, 0x7fff, 0x9, 0x0, 0xfffffff7, 0x9, 0xfffffffa, 0x3, 0xca, 0x400, 0x9, 0x400, 0xfffffff8, 0x3, 0x4, 0x10001, 0xc3f, 0x0, 0x7, 0x7a, 0x80, 0x8001, 0x1, 0x9, 0x7fff8, 0xa9, 0x1, 0xfffffffe, 0x9b, 0x477ed765, 0x8, 0x7, 0x2, 0x9, 0x5, 0x7, 0x5, 0x1, 0x400, 0x4, 0x7, 0x1000, 0x4, 0x3, 0x1, 0x2, 0x2, 0x8, 0x9, 0x9, 0x7, 0xbeb, 0x4, 0x8, 0x7, 0x3, 0x9, 0x9, 0x65f, 0x4, 0xe962, 0xc95, 0xfffffffd, 0x3, 0x400, 0x1, 0x9, 0x2, 0xf4c7, 0x8, 0x5, 0x30f, 0x7, 0xfffffff9, 0x7, 0xc0, 0xfffffff9, 0x8001, 0x0, 0x69e, 0xfffffff9, 0x5, 0x7fff, 0x5, 0xb9, 0x1, 0x2, 0x1, 0x8, 0xffff8000, 0x8, 0xffff, 0x9, 0x5002, 0x8000, 0x5, 0x2, 0x8001, 0x2, 0x3, 0x7, 0x6, 0x9, 0xb, 0x3, 0x8000, 0x9, 0x5, 0x5, 0x101, 0x66, 0x4, 0x243, 0x8000, 0x1, 0x4, 0xb, 0xce1, 0xbea, 0x1000, 0x480000, 0xd, 0xf, 0x0, 0x8, 0xe, 0x10001, 0x2, 0x0, 0x2, 0x401, 0xffff, 0x6, 0x1, 0x7f, 0x80000000, 0x2, 0x2, 0xffffffc0, 0xa, 0x4, 0x982af68, 0x9, 0xb, 0x80, 0x5, 0x7, 0x7, 0xfffffbff, 0x5, 0x6, 0x0, 0x7, 0x9, 0x4, 0x1, 0x1, 0x1, 0x3, 0x80000001, 0x800, 0x408, 0x7fffffff, 0x8, 0x10, 0x10001, 0x0, 0x1, 0x5, 0x2, 0x3, 0x2, 0x4, 0x7, 0x10000, 0x1, 0x80000001, 0x7, 0xfffffff7, 0x0, 0xfffffffc, 0xa, 0x4, 0x2, 0xfffffff7, 0x80, 0xffffff01, 0x54, 0x7, 0x2, 0x6, 0x800, 0x1, 0x4, 0x9, 0xfffff801, 0xd276, 0xffffffff, 0x8d, 0x0, 0xffffffff, 0x2, 0xfffffbae, 0x7ff, 0x8001, 0x2, 0x3, 0x8, 0x4, 0x40, 0x5, 0x3, 0x1, 0xef2c, 0x80, 0xc, 0xba14, 0x1, 0x8, 0x7, 0x800, 0x6, 0x8, 0x7, 0x0, 0x5a77, 0x0, 0x0, 0xc06, 0x3, 0x9e50, 0x9, 0x3, 0xa, 0x40, 0x5, 0x2, 0xfffffffd, 0x400, 0x0, 0x81, 0x7fffffff, 0x8, 0x2, 0x5, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb}, @TCA_POLICE_PEAKRATE64={0xc}], []]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x1e4, 0x18, 0x0, 0x0, {{0xb}, {0xbc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x400, 0x4, 0x2, 0xff, 0x2}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x100}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10000, 0x0, 0xffffffffffffffff, 0xb, 0x7}, 0x4}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x100, 0x7, 0x4, 0x6, 0xd}, 0xf}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfc41}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x400, 0x2, 0x10000000, 0x3, 0x7000000}, 0x1}}]}, {0x100, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xc}}]}, 0x2c04}, 0x1, 0x0, 0x0, 0x480dc}, 0x0) 659.432407ms ago: executing program 2 (id=3804): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x2000}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@op={0x18, 0x117, 0x3, 0xb433ce711a2ab0dc}, @iv={0x18}], 0x30}], 0x1, 0x40400d4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xeffe}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "2a8e27e2fa"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd0}}, 0x0) (async) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000580)={0x9d9, {{0xa, 0x4e23, 0x6, @mcast1, 0xfffffffb}}, {{0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}}, 0x108) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a500000000c0a010100000000000000000a0000060900020073797a3100a780000900010073797a310000000024000380200000800c00018006000100d103000010000780090001006c6173740000000014000000110e810000000000000000000100000a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000b80)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=@getqdisc={0x2c, 0x26, 0x300, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xa, 0xc}, {0xfff2, 0x6}, {0xd, 0xfff3}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044}, 0x24040865) setsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000000340)=0x3, 0x4) 559.413131ms ago: executing program 3 (id=3805): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@const={0x1, 0x0, 0x0, 0xa, 0x3}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x4d, 0x0, 0x1a, 0x3}]}, {0x0, [0x0, 0x13, 0x61, 0x0, 0x2e, 0x61, 0x5f]}}, &(0x7f00000001c0)=""/28, 0x3d, 0x1c, 0x0, 0xffffffa6, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000010d961b570fa068e1722cb0a7838ca000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x3fa, 0x800, 0x70bd28, 0x25dfdbff, {0x1, 0x1}, ["", "", ""]}, 0x20}}, 0x805) 556.274397ms ago: executing program 1 (id=3806): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000140)={'batadv0\x00', @broadcast}) 428.685878ms ago: executing program 0 (id=3807): epoll_create1(0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f00000005c0)={r2, @in={{0x2, 0x4e24, @private=0xa010100}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000003080)=[{&(0x7f0000000000)=@in={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000380)="4495faaa4b52f693ea3320e60ff0f2e0007bc8e246f8f8a8d983162ee8a8297beb94d916846885bd1228c9337ad3f4b6a516874b9ef1167c3e84254ffad0bb4c320b4196a11eabd8b0e5693283b7f905d530ea798f55db1e199b4ae67faa5f0fcc8fb80ddebca362cc4a78333e9539fafc1d5d397aa4d90c384fea3bc5d6a4d7907660ac66b0159e232b542a4d0ab50af2fed4050266c1716159c6c655b23fff1d86b5e7389e8a61aea1ae2ecb8ed441ca6efa18768072b1e1d3e85b709d11dd57f85fcc0e036dd9b100422d3e04fb46767348", 0xd3}, {&(0x7f0000000680)="0333705c6acc693fd281183b5f11dc1edd93305da3c15430ee7a8388f6f86a3eafdbed1243cfae645d079b1eaf389bd000398cee98875ee99b3b1ecf89c6daf968dcb8c557cd7f0a2aeb11b615817a86ec9a13161144f7029027d62606ff2d4003aee07bdaf1657b07edaec2870fb828c80611b31d96672f5213c7edd987ea24f078afe80e0e2b20b95003933fcbf74aa83ff31676ae7e7ea69ffa95c0489a3e0a8fe53ce23b4f001ed7682061ebb89e282da6103d439b3dd8e366670efe6c140cbafbde53b88eddccb830ea5b835ad239ac9f17ababd385effba755ae7aaee0916a3ce2be2e72c69fac575ffbdb2b384d8bc604edb88812903e9a03aac3687d5947f2712557cd68d30f088c69b515cfd5f3e2b5e3b0a427feb58eaac44b3eb4fbb96099bb77756f91b58237bc6e70475c198ea60cda3e8b62e4d799b385a9f0d14a53383986249e856b8d9885def54795c7f832ae463606ea09ce48ff01a69d7f202281eb61a8f71502c874ea3ade5decd032d88e6d80bed3acac033c0b29dc85719ebba3336ab80396a9c19825d9e0b8dbabcfce1dfe1e01bacccc7585c3f0f382c30a445e57a8f99234d4ab45b020fc1cb8ae705d0f43b7c3eeef6b00ddcf1b66b2cc5f3713578a0beea8fdb01d17edbc9f6511d77087e3a2e91a63ead836f15348e9fd2a563394bc8a60638d3751425eb4b415fcc3abc19ccab598767f044485dbb040b28e2dea21b5faaf10737d1c7c72469b73628272c50edc916c1bd741364da87c3862e4271b3c4392fce9c816aa5a0ec787064ab05b237c5033efe2f83ded76027c785068badc3766c28816c9824a9666788b1fe5fcded6746dc0f87a052363fe1886088702452d5adc208431b07dc64340929771998bbf6c55788e39d9e376a73dd2ddc56ecb5b3cd7db2a1511603642021d05f321663388731f42bd71a1029d4e2728091270e14def0cb08a0698d54e3c61e8cfcfb83ad4d985b3cedc98929fd5d81730658676fe2428a5d52c19d063c667656a52f9c82fe7d40e8f9ca4ae733df72ad8e63528e65b358176e469be987ca9fdd38f514ba8fecc41e0289b97f064fde28329bd2ca15115a732eb9519f3dbf067105088c4f81b258037175bc6ff29512e3ba3af6960ec3f5483e04df9544fbe52e0cf70eabe40dc7b33528c193d3a4da6f708ba1f587b6b3c6ebe42da2e8b8f088f03bd86face40e15ebbf470ed34e05e2fed89488c8a3c95ec5cbb0614a34084be15ad097999911c3d9249393db9af234cf4d0482edd9cd5a7c780ef51e6c834c29d087ee0e6c8ad74694a9abd67a0a37181baec117dbab509b5a34f49d4541132d85b70e3f38d8bd0ad888436f73376ea9844a274b236728401b526ff2094acc3dd69c2812801ae1773e7bd04ce7e6afc141491ee09c88de93b6c73cb725bf8e4a5b3aaaea94b28043aeeae1df024a28f0764fd90591ec95e98d60cf400a8b4a67119292c7e20300ee5b8f45107327a73fff886741633123dd77d6c9e6fb134d124bd1354392330a8cbc94a23ab83520e6a2fd478f5911fd9e707a21601e50f43c1bd5396d87fb0c24a6e828dbcb8792944fd6c976e4b5c5dd10290e34fb752243eca1ab5a7617dcc3905373f7687679ffa593f056361a8c698a111c04403607e7071217b1dc09412943d836cc93730ee9fd56e4168fc9130be00b012498786a050582e59d17635ba2d19a168cfdddc147706b54d0477bf3b4e73cbc4c88ea50f7557b1f8ed406f4c67775d63d2fd5a1a8e38a69a5c5217bf77aa2abf21d4728c63479c050d4c85fe8a3e0ac1f39a650b5487019aba59d62e9c0f3dea7ed8f472484238d6160ceda5f62b76e1cd17d91a2ce8184d5524f65d27b51cbbb86d9dcd6cc8286e4924c3aee185f0aa95998a1b074da46e89ba9914118a62c7cca857e25fb6d8d244377247757ff80713e3693901ee5ea4ab80b29c5764625d7d24c8c9b208f688bcef8374b99801ba347ef2f6d3a72a07f4fce55d1a325a87fdc9673610e4187fe2de94fa53b2de4b0eebfa68398fca9ce75a2e52546f6b0ffbd2c633ac25d03c814a5b4d242fede4f2a7b6732999e4b99667629276342d45a8549bf2c2807f4edf20b5518588b18473ebdb99e0bd858e94c2e837cd56c9432b06c0f7230d188c6209c6810a11679160c545f3464f581abfc2553ba1da88de1505cd3e66c56bf528462a83b72145341ef5c38cb7ebb7ea0d8891ee5a1c2b967679dab684ef69404f033b6944e5b9ea3a2369b1e1feb63137d60eff1a555162058e7e30ceb2fb4dbab2bed403c0a752eb6f385f465d4731f00d950b1e8173f8afc889db522a1adcc4dc8e97554cb5698ff897c8c2387c0cbccf2c5bf12536716c695017b3e6fc642a25a4b1276456050b50d7d266e45d0e1102b87c02f5c8df311d2fbc268c26a21c981c79c1d7fc28c875fb0b3118bd3f87dea72c4fb4123d9b45ccf43e444e8c1b13349c98ae73a4cd10f4964b0186e2b087e64ef29648f688d36a4b0b0139a34e28d57d7450c3927b5cf55fcc914e8089f4398581ba23b018e666954b75a92a90f57d8355434258bcf21a44441b136f6de78179f782e50dc3c30538e369e3a42b7dd4f866b77ffd94d09469ef2b8ac69266c3b2146fa5dbbeacafcdf87d03c37ebdd4983d251645fd6b99d3b7cf4cb6a790e15be340ab252bdfe281a17e335d3eddb38c369463401089e3b6c36a787001ba39b64c71086dd72cc50490eaa7c531807e0ee1e2d0cc0bf68457645755861fc439b63b8a2c23ad623237893eb7a145844a2dfbfafcdcc39a5630aa8431d222cf3474dd2334794d903fae1328a17a2e0b5361c5516f46bc8e3b9f9c694b438900714ecff235716d3547047a648168c144823a01d0e157e1833ca3dad59e20fd7d7b2aece05fbe654190a2859ccdd0cbe4415eb46f9f1658cf5a8f2e302e3f92f387f3b78288ebac58e4dcc5c46af28f22380601a80759f99e5de5f669f7786714b4a14f2ffbab0454c7b77607b7edcf58e7cdc47b0005a104a0f61d5097c386d4f97573c5042c4bcaa9ff9822c575fcd214987d2875ca1aee6c996c586941e5cfcc0ea8612ad9baeb4068a62caac7743c247e9c065c429140dea603461cde9c3f7f99633245d65a8926530960a50f38de983d77e2dd1793e6c27995d06fa8afdb8f68ae6ef3aca54d75a85ac561f6aeb1668ac1928dc471e55901e690345e495b664487fbc2dbb00da5ef8699cd76682eb199b325f840c14507aee9d872926a79c1842fc9b01375103f62300078bbb91af63c01e9082834614dc2bb42dc55af73119112c6ac3a5b24c498d37dbc4a53c68f1fa22b2656fca0ee30dd4ba61a7976712b9c4a9f902c63e968e72f0c46a03d9128f213c17708fab49449c58841e109dd6888e82c19ec0799ec6cc67b28b803574eb9b61dc01e650fee1bab91325c7d4b0c1b6236398d1f274f0250fd95beb9c832c6285ebea94e542f9331f23c2d37ef38ed41e11bef410ed624060a9b9b70d7bcbe79784241f35cde2356164da0193a7c7d230808f7756763f7c92dae866367c6fc11af033688033912d23663b1e868b3fbc90064f136e9e9ec8e5665dec869472757c7ced134650a47db1fec3ba2e4ed23df49a6a3f47d90eca079b817b4a6bc7f2ba673aecb40eae762d39a8aee8fd460366356b8730f60ea5cbc0a6102d4d6e2810d69c896c461021fc0454ac5145e12d79c948b43a569945fb4685ffcb073fc7ea280136907c43e865009c41c677e0952d227b9989c393117965326236792d727fe85e94696c81c9b060e1b3ff70ed042a1ca190241d4b2869e215595844db423bb30d8ea051db9fac865a9735b1861c2d462137106cb374b1ec2951505b4b4ee47821f90382b27bcca916f94e64b82c2a6c30debf3f500e8cb121fb5b2b7a5f3ed23f7630fd4bc610a127d5271102827ea69ee76f0aa65bd9aaa9fd56604b9570c91a5cfdded30096cf2a55d61cd7a6c2d2257f8886e6becea58cad3df5ccf00f7dc8c656d12615c482994a71d552b72d84bc123749bb04958814cf1785066eefad43b1275f6f11eba0665c7475bd2a55dbd766e864afad0952873fc5fc8840a185dd992f18e4107f21fe12080e03cac92179153cb38c5b6410924bb586967127a0688065a577b0d6c45c637b47a5984625aaaaddf6a45d8e55ad4aa5f993af7989e6a07321f2059a01797c6c0219853b3e893c253ed4dc54169a23b9b4d2b2339dc5cc7064f91bf8cffcb727d8e9ce1083389b87ca4f2a2e48294c6e29f01a083c4281dd90ea0921a28906bc1cd19dc2c7a421eb31224b9f7c9cc4684383986e594b843a684db58f9c8e28f0e54459a72fcd3b4a501f43aa408637c1a1f46f2af6f15b4d6abc581398b7204505d7fd809ee51f3c964db8e0ace8cfb6d1966da760ed4c45d876ee6ac0a6ab4a4731a6753eb0b25fb6284478498cecf0e6eb29a732ef2dc79cd251abcd0ca58e982a7cdb0bc515623de2ebbc009d488dd000ce32040e3d23db29b9851ccf7b38fb99fca683379976644b43818ce489a0e97fc67ee2bf06e0ee189051d2f20e9097171d68c23e21071c77ed4c100144839bda03ad4c6519b8691739ecf05850abaa49ffd4af275f90038662712b222330555b59a66f1791f80983ff9b100c28cd5b3e1a36a9cc76af28c943eb36fbd14b976f0d40c0565483c6c0ded1fa13c275fe6fa0ee9f806be0fddcff91b8edde743c3438d1d928c0bdfccbdbecb139c49c79ce2edb5bd5a09a9d6949194594124bcf5506dfb005260c785c6e5a18821fe0c954051446585c56fc24408904bdfd0b85dcb26f9f9bae9122b6bf03a29f6309c89dadfbccb277b4be4ba107387a4aab5b9839ea93c21be69843a77e454b0f1dd0872e42fe163586dedfbf31a9dbd7003f6a7999fa345ef8d57636f3f7d958ff5e03d5924659977b809b11f2e912c7fb18d7c893465b6d49eb2cf70f3a2219428766a325266191cd44c48b5a8f3c0de7322b71904d2f8cf507c45d36dd9ead7ad5ed917f4109f598ac671245385ab21260fab7a41d5a4fa8912e535564b367e3651caa3bda0c7b93589314e57c1dcd8758a0934ea46c00d0da09c5bf9e7015a75dfa44bc0a64b09afd16fa24060da7fe9c93d65b1deda34184a68afb925c402f2d5d17de83e1e0573ec3fbdaf6ecea636461c26e6fda82b494b1b3ed072dbee25fef83e23ccad60ea066610f99da61050e37b8a4fd17ffd271066f49ce58cf40734918d8cfa30eb234413454671501d0b44e3e9f304a6c0dfdcd4a7fd845161e31d5dfb85abc94051119fe8080d4ca4fea87ab18817411344dd236ef0f8ea1502595a2d4686bcdab2cd6e8f79c72bfe95345a8a72353857cf6fe59981a0a7509713ed1f4c7d695f1405b45ea1b574f86eaac5c743e57fae3b14cb8f54746fb49397e5379d23e515c108e6a6366a93703bd68c9f6a0e3b4e4ba8270153dccb977c148853265f40c04574c7af0e1c1a06af2b7a0b3d3ac6cca1efca20a202edaf33cb6ca7027948ccc0ad881c1f763a7d79e2aadd834d865a7180da5f5eeb962d8c3154061fedbbb708184537ccae5a1eb1688b15d0afd88c2da8c4322495e76ead32d03147a9db28d4bba1fa4ddd0a48ea58a28d8dde5bf871ea2ab4cd676f5cb34b96284e78c9168324e564f3dd5509bfaf4457f44094db6cbc02d911fe3de92dd988367caf928cf7feee97f695a39fcf86f7036a6845265fed4552e32ab808070719896cd68da645ca62ff363e10ab46", 0x1000}], 0x2, &(0x7f00000016c0)=ANY=[@ANYBLOB="18040000000000008400000006000000070000000000000018000000000000008400000005000000000000000800000018000000000000008400000000000000050001040e001d0030000000000000008400000001000000b6000502040000007f000000e4000000040000009000000009000000", @ANYRES32=r2, @ANYBLOB="180000000000000084000000060000000700000000000000180000000000000084000000060000000400000000000000"], 0xa8, 0x10}, {&(0x7f0000001780)=@in6={0xa, 0x4e24, 0x30, @private2}, 0x1c, &(0x7f0000002880)=[{&(0x7f00000017c0)="62b5d7cecc7a08b8ed6723a1a07fe2d2cdfb76b80f8dcca863d708fcadb99c5df38a7c838aaad4601384fe9a53696a72328bc43347c34deaf00c8e13976d821a72608488a0f4c9a43a32388cd2be0957607d0129db4312545c8c026df0a115db5b23f20a96f67a9c3c67a05a2eaa513620f3a2755694f141307a143ddcfa7e802cdf709c645252a6537a0a907f4496f1e9e8eafdf162722a5086559a8ace64", 0x9f}, {&(0x7f0000001880)="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", 0x1000}], 0x2, &(0x7f00000028c0)=ANY=[@ANYBLOB="2008000000000000840000000200000008000000000000003c270000", @ANYRES32=r3], 0x20, 0x20000040}, {&(0x7f0000002900)=@in6={0xa, 0x4e22, 0xfffffffb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1000}, 0x1c, &(0x7f0000002c40)=[{&(0x7f0000002940)="cf499014e0d1a01769ba578d6fde317ce9b41b968d955f607b9df9bfc9125e49518a115eb46a988d9e98e0e22c72bd0f8e74b4452c973b4a9e8e67c1d93bc957f1cbbb7153c378d04578ea2999738b4d01bd6f624a255b31938d94042af89ad683e1840df715a81578450f6385b08b292abddade4efcb53fee74be8454d10ae5c3dcdf9d156a59340284eca6013e9090ed2a153693a255870a67dced8d793c2338b84353a5d49dee9429a1cd330db9a5d15c47ced48b283b142419422ba9", 0xbe}, {&(0x7f0000002a00)="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", 0xfb}, {&(0x7f0000002b00)="c554c5e3584d72ea97b349b83c35247a6e360c716b1e7e1e94a291dd62500bce899cd5db081feb7fe7e98c7e02166cd7399fed40558cf74815cdf86ae8803109491534202402c4fae7f6dd8a76878f868b84779ec0eba27f13aa18749382b9e37557c269b2e5f6cf87e3402dd3374053b05969dc5304e33469d1ae19f93e5640c36e125f562bbf0dcae2776f2c71eb859a5380f20906e66f33455d8faece73b3922c71afa99a9b2123a490fe2217acae85ec750cbdc85b658dcfc38fa266598c9fcc358c2b5e0f40d3c4870fd4da7893a0c1eb1005abf6144a09f0700979", 0xde}, {&(0x7f0000002c00)="ce6e17a1facea9c087ac6f9b866544c21783c626f22ae92a2eb8b81a04f5f82337837bd56cedd075732191f6baabf309822fa4325502b1", 0x37}], 0x4, &(0x7f0000002c80)=[@dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @init={0x18, 0x84, 0x0, {0x4, 0x7, 0x5}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0xa7}}, @sndrcv={0x30, 0x84, 0x1, {0x2a, 0x4, 0x20c, 0x5, 0x4, 0x1ff, 0x40, 0x6}}], 0xa0, 0x40}, {&(0x7f0000002d40)=@in6={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000002f80)=[{&(0x7f0000002d80)="7485c9d9217b1b13affc03207e55be216c621d83b9b3c5fcd19e36fca9c13058d1895bbadf1ccc890a166ede7d4140634573757dd4ef78c254761ecced466178953b1a5b07314868c2429bab7f7b7b950efe3df5dfd3", 0x56}, {&(0x7f0000002e00)="abb4b9e1313ae4e9cd229d9e3747b6c22b055b", 0x13}, {&(0x7f0000002e40)="0cb35d52371c52", 0x7}, {&(0x7f0000002e80)="88a11977a21b894c7accf72ad45b435efc017d3a873cb016b35441bde4994dff60508675671ba212d4623bb01f907edb264115963e3fd2d52e1da88f7ed03b86a02757f80bb078e667d3ff2ba189b550669ac1b358c44d55db9a6b048f892e6779239274f105c0113f93773ffa32b4e02bc528dced8e06f66813c7822274bb55574a3b2f051661ad945a2cb5fbd55e952e2a0fc46b9f00dd040c545e981adbff527c16cb97ca52a4254693da7b1c77e2c86ebee0e9ee039011dd0b1448f91f8eee4ad8b02c5b3aa19bb338ebe74fceee1383e9ae64b58de980c1b5af8823516ea9b1cef1dd0a296382b2cf22518340d3afcd", 0xf2}], 0x4, &(0x7f0000002fc0)=[@authinfo={0x18, 0x84, 0x6, {0x4}}, @prinfo={0x18}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x7, 0x8008, 0x4, 0x6, 0x0, 0x7fff, 0x3, r3}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x6}}], 0x90, 0x20000001}], 0x4, 0x50) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e20, @multicast1}}, [0x3, 0x0, 0x7, 0xe, 0x9, 0x0, 0x9e9, 0x5, 0x3, 0xc0, 0x0, 0x7, 0x8, 0x3, 0x542]}, &(0x7f0000000580)=0x100) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x3c}, {0x0, 0x4, 0x80, 0x0, 0x6, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x2, 0x3}, {{@in=@broadcast, 0x4d4, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6}}, 0xe8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'lo\x00', 0x4000}) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 415.674718ms ago: executing program 4 (id=3808): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x94}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvfrom$inet(r0, &(0x7f0000000000)=""/8, 0xfffffffffffffd0b, 0x400123eb, 0x0, 0x1154103478d401ea) 347.434714ms ago: executing program 3 (id=3809): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r8, 0x111, 0x4, 0x0, 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x10, 0x10, 0x7, 0x40, {{0x19, 0x4, 0x1, 0x10, 0x64, 0x65, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x3, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x26, 0x1, [{0x6, 0xa, "908005a64ec9a9b2"}, {0x1, 0xd, "721ffdab6f554d5bfcc4c8"}, {0x2, 0x9, "d1dc658032866d"}]}, @ra={0x94, 0x4}, @noop, @cipso={0x86, 0x11, 0x0, [{0x5, 0xb, "95c9f561895482bd0c"}]}, @generic={0x0, 0xd, "90f50dc804cf9ed09c2c16"}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x0, 0x28020}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0xe}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) 346.847083ms ago: executing program 1 (id=3810): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0xfffe) preadv(r1, &(0x7f0000000100), 0xa, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xf4e) (async) writev(r2, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) sendmmsg$inet(r2, &(0x7f0000003500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8044) 126.352857ms ago: executing program 0 (id=3811): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1d, 0x0, 0x2, {0x1, 0x0, 0x3}}, 0x18, &(0x7f0000000280)={&(0x7f0000000180)="9367582e06470e398f1f9056eec7d1889cddd8aadd012565a59e60b9103b4adbb98e6b31f5b20f55d798f0d26054ad098f703caa5bfd9ced2b06f33aa3e7ef6907d4dbba4ad8e18e0d56468877baba405cdc4764f2cf23d43cd32cbb8efc2a487dbc5ddaec5912f35784d76c616b226ee1c405da904fc59943ca3b7d396b60305f107aaf22358f2757a688a4e89898c05b4474c9d5d5f0a2aac380e8ad3deb7a7db5023fed82c0965309e378c3a6a138cb995bf759a427aa750bcfaae34c9643cb9ab45fa7f92e74baa77cc4cab674734f2478bdf2a88b972be652b9ff7be6132138a6b060d2a99b587ca3aa0cbc017a07", 0xf1}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000) 45.418083ms ago: executing program 0 (id=3812): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000001140)={0x0, 0xf89, 0x8, 0x49}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1, 0x282, 0xffffffff, {0x77359400}, {}, {}, 0x1, @can={{}, 0x4, 0x3, 0x0, 0x0, "ee6a491530f05065"}}, 0x38}}, 0x0) 0s ago: executing program 3 (id=3813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x503, 0x70bd29, 0x701, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) kernel console output (not intermixed with test programs): unregistering): (slave bridge9): Releasing backup interface [ 307.744047][T15418] bridge9: left promiscuous mode [ 307.758634][T15418] bond8 (unregistering): Released all slaves [ 308.232422][T15477] __nla_validate_parse: 6 callbacks suppressed [ 308.232441][T15477] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.2393'. [ 308.776592][T15513] netlink: 'syz.2.2403': attribute type 1 has an invalid length. [ 308.891661][T15487] lec:lec_atm_close: lec0: Shut down! [ 308.918938][T15517] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address [ 308.930061][T15517] bond14: (slave vxcan3): Error -95 calling set_mac_address [ 309.273231][T15540] x_tables: duplicate underflow at hook 1 [ 309.330295][T15538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.340615][T15527] delete_channel: no stack [ 309.450952][T15546] block nbd0: not configured, cannot reconfigure [ 309.470679][T15546] block nbd0: not configured, cannot reconfigure [ 309.475425][T15548] vlan0: entered promiscuous mode [ 309.482640][T15548] bond0: entered promiscuous mode [ 309.489829][T15548] bond_slave_0: entered promiscuous mode [ 309.503240][T15548] bond_slave_1: entered promiscuous mode [ 309.510915][T15548] vlan0: entered allmulticast mode [ 309.516627][T15548] bond0: entered allmulticast mode [ 309.524504][T15548] bond_slave_0: entered allmulticast mode [ 309.530559][T15548] bond_slave_1: entered allmulticast mode [ 309.986123][T15579] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2422'. [ 310.303631][T15597] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 310.348868][T15596] tipc: Enabled bearer , priority 0 [ 310.384710][T15596] syzkaller0: entered promiscuous mode [ 310.395381][T15596] syzkaller0: entered allmulticast mode [ 310.472272][T15596] tipc: Resetting bearer [ 310.483414][T15607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 310.501189][T15607] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2432'. [ 310.516732][T15594] tipc: Resetting bearer [ 310.577974][T15594] tipc: Disabling bearer [ 310.867269][T15622] netlink: 'syz.0.2435': attribute type 15 has an invalid length. [ 311.027533][T15625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2437'. [ 311.056300][T15629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2437'. [ 311.109508][T15631] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2439'. [ 311.128835][T15631] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2439'. [ 311.151798][T15631] tipc: Invalid UDP bearer configuration [ 311.151851][T15631] tipc: Enabling of bearer rejected, failed to enable media [ 311.311596][T15633] netlink: 276 bytes leftover after parsing attributes in process `syz.3.2440'. [ 311.327840][T15644] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2442'. [ 311.375471][T15644] veth0: Caught tx_queue_len zero misconfig [ 311.405907][T15644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2442'. [ 311.490301][T15646] gre0 speed is unknown, defaulting to 1000 [ 311.571910][T15657] netlink: 'syz.3.2446': attribute type 29 has an invalid length. [ 311.588935][T15659] pim6reg1: entered promiscuous mode [ 311.610381][T15659] pim6reg1: entered allmulticast mode [ 311.868703][T15669] bridge6: entered promiscuous mode [ 311.920136][T15646] ip6erspan0 speed is unknown, defaulting to 1000 [ 311.920166][T14960] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.955416][T14960] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.017149][T14960] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.041417][T14960] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.395613][T15680] gre0 speed is unknown, defaulting to 1000 [ 312.727530][T15695] netlink: 'syz.4.2458': attribute type 1 has an invalid length. [ 312.780436][T15695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.944788][T15680] ip6erspan0 speed is unknown, defaulting to 1000 [ 312.979758][T15712] IPVS: set_ctl: invalid protocol: 51 172.30.1.4:20003 [ 313.275144][T15725] netlink: 'syz.3.2465': attribute type 1 has an invalid length. [ 313.284537][T15725] __nla_validate_parse: 6 callbacks suppressed [ 313.284782][T15725] netlink: 476 bytes leftover after parsing attributes in process `syz.3.2465'. [ 313.302080][T15725] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2465'. [ 313.394415][T15728] gre0 speed is unknown, defaulting to 1000 [ 313.437457][T15725] syzkaller1: entered promiscuous mode [ 313.443125][T15725] syzkaller1: entered allmulticast mode [ 313.599844][T15728] ip6erspan0 speed is unknown, defaulting to 1000 [ 313.815407][T15734] tipc: Enabled bearer , priority 0 [ 313.970852][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 313.970870][ T29] audit: type=1804 audit(1777243852.980:78): pid=15739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2469" name="/newroot/505/cgroup.controllers" dev="tmpfs" ino=2599 res=1 errno=0 [ 314.046076][ T29] audit: type=1800 audit(1777243852.980:79): pid=15739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2469" name="cgroup.controllers" dev="tmpfs" ino=2599 res=0 errno=0 [ 314.161973][T15755] netlink: 'syz.4.2470': attribute type 30 has an invalid length. [ 314.251796][T15753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2474'. [ 314.263442][T15762] netlink: 'syz.3.2475': attribute type 1 has an invalid length. [ 314.276740][T15762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2475'. [ 314.280245][T15753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2474'. [ 314.304718][T15753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2474'. [ 314.334444][T15755] bond9: option arp_missed_max: invalid value (0) [ 314.334859][T15753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2474'. [ 314.341359][T15755] bond9: option arp_missed_max: allowed values 1 - 255 [ 314.360883][T15755] bond9 (unregistering): Released all slaves [ 314.375849][T15753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2474'. [ 314.411423][T15757] veth16: entered allmulticast mode [ 314.566829][T15732] tipc: Disabling bearer [ 314.665279][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 314.673330][ C1] lec:lec_tx_timeout: lec0 [ 314.678070][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 314.976579][T15799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2483'. [ 315.094757][T15799] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2483'. [ 315.200205][T15781] bond11: entered allmulticast mode [ 315.249412][T15794] vxcan3: entered promiscuous mode [ 315.254687][T15794] vxcan3: entered allmulticast mode [ 315.270218][T15794] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 315.321914][T15794] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 315.415349][T15820] netlink: zone id is out of range [ 315.425036][T15820] netlink: zone id is out of range [ 315.439609][T15820] netlink: zone id is out of range [ 315.492610][T15820] netlink: zone id is out of range [ 315.511513][T15825] syz.4.2486 (15825) used obsolete PPPIOCDETACH ioctl [ 315.531023][T15820] netlink: zone id is out of range [ 315.540048][T15820] netlink: zone id is out of range [ 315.558568][T15817] netlink: 'syz.4.2486': attribute type 1 has an invalid length. [ 315.575625][T15820] netlink: zone id is out of range [ 315.584979][T15817] netlink: 'syz.4.2486': attribute type 1 has an invalid length. [ 315.597612][T15820] netlink: zone id is out of range [ 315.602824][T15820] netlink: zone id is out of range [ 315.616283][T15820] netlink: zone id is out of range [ 315.773635][T15843] netlink: 'syz.2.2492': attribute type 10 has an invalid length. [ 315.773813][T15844] netlink: 'syz.2.2492': attribute type 10 has an invalid length. [ 315.866711][T15851] netlink: 'syz.1.2491': attribute type 1 has an invalid length. [ 315.943164][T15851] 8021q: adding VLAN 0 to HW filter on device bond8 [ 315.956309][T15857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.986781][T15848] gre0 speed is unknown, defaulting to 1000 [ 316.686969][T15848] ip6erspan0 speed is unknown, defaulting to 1000 [ 317.601458][T14964] nci: nci_ntf_packet: unknown ntf opcode 0x26 [ 317.996304][T15953] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 318.035107][T15953] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 318.309360][T15929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 318.362391][T15982] netlink: 'syz.0.2518': attribute type 1 has an invalid length. [ 318.625437][T15989] netlink: 'syz.4.2519': attribute type 89 has an invalid length. [ 318.663974][T15995] __nla_validate_parse: 8 callbacks suppressed [ 318.663991][T15995] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2523'. [ 318.681223][T15990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2521'. [ 318.694131][T15990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2521'. [ 318.842164][T15995] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 318.849127][T16003] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.868154][T15996] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 318.882067][T16006] netlink: 'syz.2.2524': attribute type 12 has an invalid length. [ 318.913230][T16003] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.020525][T16009] ipvlan2: entered promiscuous mode [ 319.049188][T16009] ipvlan2: entered allmulticast mode [ 319.076463][T16009] dummy0: entered allmulticast mode [ 319.142992][T16003] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.286575][T16003] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.413251][T16035] xt_TCPMSS: Only works on TCP SYN packets [ 319.472248][T16034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.484747][T16034] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.524743][T16037] sch_fq: defrate 0 ignored. [ 319.558068][T14965] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.622007][T14959] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.690817][T16048] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2538'. [ 319.705319][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 319.713357][ C1] lec:lec_tx_timeout: lec0 [ 319.718722][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 319.774603][T16051] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2538'. [ 319.806988][T16048] bond0 (unregistering): left allmulticast mode [ 319.813299][T16048] bond_slave_0: left allmulticast mode [ 319.821026][T16048] bond_slave_1: left allmulticast mode [ 319.828408][T16048] bridge0: port 1(bond0) entered disabled state [ 319.839085][T16048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.848946][T16048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.858304][T16048] bond0 (unregistering): Released all slaves [ 319.868142][T14961] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.924679][T14964] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.055113][T16063] netlink: 'syz.4.2541': attribute type 1 has an invalid length. [ 320.341953][T16087] netlink: 'syz.1.2546': attribute type 6 has an invalid length. [ 320.424588][ T9749] IPVS: starting estimator thread 0... [ 320.525546][T16097] IPVS: using max 33 ests per chain, 79200 per kthread [ 320.537222][T16101] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2551'. [ 320.652695][T16088] ip6tnl0: Caught tx_queue_len zero misconfig [ 320.841649][T16112] syzkaller1: entered promiscuous mode [ 320.847508][T16112] syzkaller1: entered allmulticast mode [ 321.262526][T16130] netlink: 'syz.3.2556': attribute type 13 has an invalid length. [ 321.715132][T16157] bridge_slave_1: left allmulticast mode [ 321.721101][T16157] bridge_slave_1: left promiscuous mode [ 321.728283][T16157] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.778540][T16159] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2563'. [ 321.788250][T16161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2565'. [ 321.875220][T16161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2565'. [ 321.891815][T16165] gre0 speed is unknown, defaulting to 1000 [ 322.184255][T16172] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2568'. [ 322.245089][T16139] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 322.281963][T16165] ip6erspan0 speed is unknown, defaulting to 1000 [ 322.283982][T16169] gre0 speed is unknown, defaulting to 1000 [ 322.597527][T16169] ip6erspan0 speed is unknown, defaulting to 1000 [ 322.597626][T16180] gre0 speed is unknown, defaulting to 1000 [ 322.943383][T16210] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 323.000280][T16180] ip6erspan0 speed is unknown, defaulting to 1000 [ 323.539889][T16217] gre0 speed is unknown, defaulting to 1000 [ 323.990379][T16234] __nla_validate_parse: 6 callbacks suppressed [ 323.990398][T16234] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2585'. [ 324.090321][T16217] ip6erspan0 speed is unknown, defaulting to 1000 [ 324.280360][T16242] batadv_slave_0: left allmulticast mode [ 324.297554][T16242] ip6erspan0: left allmulticast mode [ 324.304819][T16242] veth3: left allmulticast mode [ 324.310658][T16242] geneve3: left promiscuous mode [ 324.316083][T16242] geneve3: left allmulticast mode [ 324.321929][T16242] bond2: left promiscuous mode [ 324.327315][T16242] erspan1: left promiscuous mode [ 324.332523][T16242] bond2: left allmulticast mode [ 324.338200][T16242] erspan1: left allmulticast mode [ 324.348136][T16242] macsec1: left promiscuous mode [ 324.353757][T16242] bond7: left allmulticast mode [ 324.371807][T16242] bond8: left promiscuous mode [ 324.385726][T16242] bond9: left promiscuous mode [ 324.393597][T16242] bond9: left allmulticast mode [ 324.423601][T16242] vlan2: left allmulticast mode [ 324.434519][T16242] bond10: left allmulticast mode [ 324.443972][T16242] gretap2: left allmulticast mode [ 324.449898][T16242] bond11: left promiscuous mode [ 324.454901][T16242] bond12: left promiscuous mode [ 324.462066][T16242] bond13: left promiscuous mode [ 324.467183][T16242] bridge5: left promiscuous mode [ 324.472434][T16242] bond13: left allmulticast mode [ 324.479671][T16242] bridge5: left allmulticast mode [ 324.480944][T16238] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2586'. [ 324.485950][T16242] ip6gre1: left promiscuous mode [ 324.499504][T16242] ip6gre1: left allmulticast mode [ 324.506662][T16242] ip6tnl2: left allmulticast mode [ 324.512116][T16242] ipip1: left promiscuous mode [ 324.517890][T16242] gre2: left allmulticast mode [ 324.525761][T16242] bridge6: left promiscuous mode [ 324.532085][T16242] ipvlan2: left promiscuous mode [ 324.537484][T16242] ipvlan2: left allmulticast mode [ 324.542606][T16242] dummy0: left allmulticast mode [ 324.725278][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 324.733344][ C1] lec:lec_tx_timeout: lec0 [ 324.739063][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 325.049439][T16269] netlink: 'syz.3.2592': attribute type 13 has an invalid length. [ 325.122900][T16271] bond16: option arp_interval: invalid value (18446744073709551615) [ 325.131936][T16271] bond16: option arp_interval: allowed values 0 - 2147483647 [ 325.141198][T16271] bond16 (unregistering): Released all slaves [ 325.420487][T16286] syz.3.2597 uses old SIOCAX25GETINFO [ 325.579634][T16296] syzkaller0: entered promiscuous mode [ 325.618866][T16295] gre0 speed is unknown, defaulting to 1000 [ 325.704236][T16307] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2603'. [ 325.909159][T16314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2602'. [ 326.260006][T16330] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2605'. [ 326.275657][T16309] gre0 speed is unknown, defaulting to 1000 [ 326.282704][T16295] ip6erspan0 speed is unknown, defaulting to 1000 [ 326.284344][T16320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2605'. [ 326.342181][T16330] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2605'. [ 326.356779][T16320] syz_tun (unregistering): left allmulticast mode [ 326.443109][T16333] IPVS: set_ctl: invalid protocol: 11822 0.0.0.0:0 [ 326.474140][T16333] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 326.677244][T16342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2609'. [ 326.770643][T16345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2609'. [ 326.812787][T16345] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2609'. [ 326.829479][T16309] ip6erspan0 speed is unknown, defaulting to 1000 [ 326.830791][T16342] dummy0: entered promiscuous mode [ 327.455135][T16360] bridge_slave_1: default FDB implementation only supports local addresses [ 327.661855][T16375] syzkaller0: entered promiscuous mode [ 327.669392][T16375] syzkaller0: entered allmulticast mode [ 328.744427][T16419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.937353][T16445] ipvlan0: entered promiscuous mode [ 329.071792][T16454] net_ratelimit: 4 callbacks suppressed [ 329.071810][T16454] openvswitch: netlink: IP tunnel dst address not specified [ 329.218606][T16459] __nla_validate_parse: 9 callbacks suppressed [ 329.218624][T16459] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2629'. [ 329.283078][T16466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2632'. [ 329.366126][T16466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.424417][T16466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.608146][T16488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2636'. [ 329.618282][T16489] nicvf0: tun_chr_ioctl cmd 1074812117 [ 329.745326][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 329.753400][ C1] lec:lec_tx_timeout: lec0 [ 329.758271][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 329.845212][T16482] gre0 speed is unknown, defaulting to 1000 [ 329.860407][T16498] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2638'. [ 329.935579][T16500] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2639'. [ 329.982274][T16500] nbd: socks must be embedded in a SOCK_ITEM attr [ 329.989194][T16501] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2639'. [ 329.998741][T16501] nbd: nbd64 already in use [ 330.006907][ T5855] block nbd64: NBD_DISCONNECT [ 330.130784][T16510] sctp: [Deprecated]: syz.3.2640 (pid 16510) Use of int in max_burst socket option. [ 330.130784][T16510] Use struct sctp_assoc_value instead [ 330.326578][ T5842] udevd[5842]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 330.513278][T16482] ip6erspan0 speed is unknown, defaulting to 1000 [ 330.535027][T16495] siw: device registration error -23 [ 330.552430][T16527] syzkaller0: entered promiscuous mode [ 330.565495][T16527] syzkaller0: entered allmulticast mode [ 330.572637][T16531] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2644'. [ 330.592817][T16527] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2645'. [ 330.659737][T16534] netlink: 'syz.2.2647': attribute type 1 has an invalid length. [ 330.676186][T16535] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2646'. [ 330.751175][T16534] 8021q: adding VLAN 0 to HW filter on device bond16 [ 330.813469][T16534] bond16 (unregistering): Released all slaves [ 330.873665][T16540] pimreg9: entered allmulticast mode [ 330.969552][T16543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2649'. [ 331.472282][T16567] netlink: 'syz.4.2658': attribute type 1 has an invalid length. [ 331.498521][T16567] netlink: 'syz.4.2658': attribute type 1 has an invalid length. [ 331.558819][T16575] dummy0: entered allmulticast mode [ 332.175513][T16608] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 332.321199][T16620] netlink: 'syz.1.2678': attribute type 33 has an invalid length. [ 332.336236][T16620] `: renamed from team0 (while UP) [ 332.574913][T16624] bond0 (unregistering): Released all slaves [ 333.298778][T16663] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 333.444119][T16670] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 334.178763][T16682] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 334.186613][T16682] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 334.240052][T16685] netlink: 'syz.1.2694': attribute type 1 has an invalid length. [ 334.248255][T16685] __nla_validate_parse: 13 callbacks suppressed [ 334.248271][T16685] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2694'. [ 334.571703][T16699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2701'. [ 334.581823][T16695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2700'. [ 334.686719][T16695] vlan4: entered promiscuous mode [ 334.765311][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 334.773372][ C1] lec:lec_tx_timeout: lec0 [ 334.794731][T16716] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2704'. [ 334.948387][T16730] veth1_to_bond: entered promiscuous mode [ 334.968134][T16730] veth1_to_bond: entered allmulticast mode [ 334.983124][T16730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2708'. [ 334.999742][T16730] veth1_to_bond (unregistering): left promiscuous mode [ 335.012606][T16730] veth1_to_bond (unregistering): left allmulticast mode [ 335.127810][T16730] bond0: (slave bond_slave_1): Releasing backup interface [ 335.152127][ T29] audit: type=1800 audit(1777243874.160:80): pid=16737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2711" name="memory.events" dev="tmpfs" ino=2663 res=0 errno=0 [ 335.268203][T16741] gre0 speed is unknown, defaulting to 1000 [ 335.278180][T16749] netlink: 'syz.3.2712': attribute type 1 has an invalid length. [ 335.423326][T16749] bond4: entered promiscuous mode [ 335.431473][T16749] 8021q: adding VLAN 0 to HW filter on device bond4 [ 335.457515][T16746] 8021q: adding VLAN 0 to HW filter on device bond4 [ 335.470935][T16746] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 335.482711][T16746] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 335.508820][T16746] bond4: (slave wireguard0): making interface the new active one [ 335.517385][T16746] wireguard0: entered promiscuous mode [ 335.534778][T16746] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 335.584733][T16755] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address [ 335.601492][T16755] bond4: (slave wireguard1): Enslaving as a backup interface with an up link [ 335.683698][T16771] gre0: Caught tx_queue_len zero misconfig [ 335.749561][T16741] ip6erspan0 speed is unknown, defaulting to 1000 [ 335.838657][T16774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2718'. [ 335.874448][T16778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.236557][T16791] netlink: 'syz.1.2723': attribute type 1 has an invalid length. [ 336.259978][T16794] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2724'. [ 336.261128][T16791] netlink: 'syz.1.2723': attribute type 7 has an invalid length. [ 336.298527][T16791] netlink: 'syz.1.2723': attribute type 8 has an invalid length. [ 336.328510][T16791] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2723'. [ 336.359979][T16791] NCSI netlink: No device for ifindex 1073545264 [ 336.402584][T16797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2723'. [ 336.528582][T16805] can: request_module (can-proto-4) failed. [ 336.611134][T16804] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2728'. [ 336.821846][T16821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.456840][T16850] netlink: 'syz.2.2740': attribute type 12 has an invalid length. [ 337.798265][T16869] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.918061][T16867] delete_channel: no stack [ 337.926121][T16867] netlink: 'syz.3.2746': attribute type 1 has an invalid length. [ 337.991385][T16867] bond5: entered promiscuous mode [ 338.001798][T16867] 8021q: adding VLAN 0 to HW filter on device bond5 [ 338.112546][T16869] 8021q: adding VLAN 0 to HW filter on device bond6 [ 338.133076][T16869] bond5: (slave bond6): making interface the new active one [ 338.143378][T16869] bond6: entered promiscuous mode [ 338.151431][T16869] bond5: (slave bond6): Enslaving as an active interface with an up link [ 338.412809][T16904] syzkaller0: entered promiscuous mode [ 338.427849][T16904] syzkaller0: entered allmulticast mode [ 338.836394][T16927] netlink: 'syz.4.2763': attribute type 4 has an invalid length. [ 339.122621][T16942] gre0 speed is unknown, defaulting to 1000 [ 339.432357][T16942] ip6erspan0 speed is unknown, defaulting to 1000 [ 339.433434][T16952] __nla_validate_parse: 6 callbacks suppressed [ 339.433451][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2769'. [ 339.587475][T16958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2771'. [ 339.977537][T16970] syzkaller1: entered promiscuous mode [ 339.988925][T16970] syzkaller1: entered allmulticast mode [ 340.085878][T16984] syzkaller1: entered promiscuous mode [ 340.091445][T16984] syzkaller1: entered allmulticast mode [ 340.255753][T16988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2777'. [ 340.295400][T16988] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2777'. [ 340.320489][T16988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2777'. [ 340.324014][T16992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2778'. [ 340.338849][T16988] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2777'. [ 340.691091][T17010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2783'. [ 340.982599][T17027] syzkaller0: entered promiscuous mode [ 341.002034][T17027] syzkaller0: entered allmulticast mode [ 341.010654][T17030] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2789'. [ 341.093659][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2791'. [ 341.212155][T17033] bond9: Removing last arp target with arp_interval on [ 341.495872][T17052] netlink: 'syz.4.2794': attribute type 1 has an invalid length. [ 341.617062][T17052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.629337][T17057] bond0: entered allmulticast mode [ 341.751682][T17052] bond0: (slave ip6gretap1): making interface the new active one [ 341.786230][T17052] ip6gretap1: entered allmulticast mode [ 341.803560][T17052] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 342.305903][T17103] : renamed from veth0_to_bond [ 343.077645][T17142] netlink: 'syz.0.2816': attribute type 1 has an invalid length. [ 343.173136][T17142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.234698][T17146] bond0: (slave geneve3): making interface the new active one [ 343.253380][T17146] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 343.284536][T14966] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.300245][T14966] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.327008][T14966] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.355560][T14966] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.622654][T17167] ªªªªª: renamed from vlan0 (while UP) [ 343.898157][T17193] 8021q: VLANs not supported on ip_vti0 [ 344.114123][T17200] sctp: [Deprecated]: syz.3.2830 (pid 17200) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.114123][T17200] Use struct sctp_sack_info instead [ 344.519612][T17230] __nla_validate_parse: 10 callbacks suppressed [ 344.519631][T17230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2839'. [ 344.629553][T17230] bond12: (slave geneve4): Enslaving as an active interface with an up link [ 344.643612][T17239] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2839'. [ 344.653925][T14966] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 344.664594][T14966] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 344.694931][T17239] 8021q: adding VLAN 0 to HW filter on device bond12 [ 344.704224][T14966] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 344.719950][T14966] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 344.731716][T17238] tipc: Enabled bearer , priority 0 [ 344.813791][T17238] syzkaller0: entered promiscuous mode [ 344.819598][T17238] syzkaller0: entered allmulticast mode [ 344.826243][T17238] tipc: Resetting bearer [ 344.836813][T17242] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 344.953490][T17257] netlink: zone id is out of range [ 344.959041][T17257] netlink: zone id is out of range [ 344.964289][T17257] netlink: zone id is out of range [ 344.970115][T17257] netlink: zone id is out of range [ 344.976347][T17257] netlink: zone id is out of range [ 344.981701][T17257] netlink: zone id is out of range [ 344.987475][T17257] netlink: zone id is out of range [ 344.992841][T17257] netlink: zone id is out of range [ 344.998259][T17257] netlink: zone id is out of range [ 345.458087][T17236] tipc: Resetting bearer [ 347.343641][T17236] tipc: Disabling bearer [ 347.486267][T17321] batadv_slave_1: entered promiscuous mode [ 347.494402][T17321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2852'. [ 347.507720][T17320] batadv_slave_1: left promiscuous mode [ 347.708901][T17336] wg1: Master is either lo or non-ether device [ 347.800471][T17244] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.971716][T17361] netlink: 'syz.2.2858': attribute type 13 has an invalid length. [ 348.000658][T17361] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.2858'. [ 348.091614][T17366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2861'. [ 348.515036][T17394] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2869'. [ 349.164753][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 349.178497][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 349.190940][ T5854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 349.199324][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 349.208033][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 349.387249][T17417] gre0 speed is unknown, defaulting to 1000 [ 349.934840][T17417] ip6erspan0 speed is unknown, defaulting to 1000 [ 349.980372][T17435] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2881'. [ 350.088273][T17438] netlink: 'syz.1.2882': attribute type 11 has an invalid length. [ 350.107452][T17438] netlink: 'syz.1.2882': attribute type 23 has an invalid length. [ 350.131685][T17438] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2882'. [ 350.331484][T17417] chnl_net:caif_netlink_parms(): no params data found [ 350.471808][T17417] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.485431][T17417] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.493828][T17417] bridge_slave_0: entered allmulticast mode [ 350.501648][T17417] bridge_slave_0: entered promiscuous mode [ 350.517926][T17417] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.525169][T17417] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.533500][T17417] bridge_slave_1: entered allmulticast mode [ 350.541208][T17417] bridge_slave_1: entered promiscuous mode [ 350.596077][T17468] Bluetooth: MGMT ver 1.23 [ 350.618422][T17417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.628739][T17468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2891'. [ 350.634384][T17417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.667551][T17468] 8021q: adding VLAN 0 to HW filter on device bond7 [ 350.703170][T17417] team0: Port device team_slave_0 added [ 350.711823][T17417] team0: Port device team_slave_1 added [ 350.729787][T17474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2891'. [ 350.772361][T17417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.779535][T17417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.805954][T17417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.822284][T17417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.834685][T17417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.879215][T17417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.989788][T17417] hsr_slave_0: entered promiscuous mode [ 350.996683][T17484] netlink: 'syz.0.2896': attribute type 1 has an invalid length. [ 350.999258][T17417] hsr_slave_1: entered promiscuous mode [ 351.010797][T17417] debugfs: 'hsr0' already exists in 'hsr' [ 351.018002][T17417] Cannot create hsr debugfs directory [ 351.087471][T17489] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 351.097724][T17484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2896'. [ 351.132650][T17484] 8021q: adding VLAN 0 to HW filter on device bond13 [ 351.306225][ T5854] Bluetooth: hci5: command tx timeout [ 351.337007][T17503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2900'. [ 351.375062][ T9776] ip6erspan0 speed is unknown, defaulting to 1000 [ 351.454314][ T6632] lec:lec_start_xmit: lec0:No lecd attached [ 351.564000][T17417] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.630852][T17417] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.681591][T17417] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.742110][T17417] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.851547][ T29] audit: type=1804 audit(1777243890.860:81): pid=17534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2905" name="/newroot/576/memory.events" dev="tmpfs" ino=2978 res=1 errno=0 [ 351.878963][ T29] audit: type=1800 audit(1777243890.860:82): pid=17534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2905" name="memory.events" dev="tmpfs" ino=2978 res=0 errno=0 [ 351.897935][T17534] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 351.916639][T17534] bond8 (unregistering): Released all slaves [ 352.942738][T14963] bond0 (unregistering): (slave ip6gretap1): Releasing active interface [ 352.951423][T14963] ip6gretap1 (unregistering): left allmulticast mode [ 353.067431][T14963] bond5 (unregistering): (slave gre2): Releasing backup interface [ 353.151275][T14963] bond4 (unregistering): (slave bridge0): Releasing active interface [ 353.332740][T14963] bond1 (unregistering): Released all slaves [ 353.346070][T14963] bond2 (unregistering): Released all slaves [ 353.361270][T14963] bond3 (unregistering): (slave wireguard0): Releasing backup interface [ 353.375625][T14963] bond3 (unregistering): Released all slaves [ 353.386508][ T5854] Bluetooth: hci5: command tx timeout [ 353.398208][T14963] bond4 (unregistering): Released all slaves [ 353.411904][T14963] bond5 (unregistering): Released all slaves [ 353.431332][T14963] bond6 (unregistering): Released all slaves [ 353.445136][T14963] bond7 (unregistering): (slave veth7): Releasing active interface [ 353.454712][T14963] bond7 (unregistering): Released all slaves [ 353.473951][T14963] bond8 (unregistering): Released all slaves [ 353.489176][T14963] bond0 (unregistering): Released all slaves [ 353.628539][T14963] tipc: Left network mode [ 354.058563][T14963] hsr_slave_0: left promiscuous mode [ 354.064843][T14963] hsr_slave_1: left promiscuous mode [ 354.109464][T14963] pim6reg (unregistering): left allmulticast mode [ 354.237721][T14963] team0 (unregistering): Port device team_slave_1 removed [ 354.251729][T14963] team0 (unregistering): Port device team_slave_0 removed [ 354.396665][T17507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 354.418266][T17417] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 354.498653][T17417] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 354.537050][T17417] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 354.557308][T17417] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 354.568632][T17417] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 354.602690][T17417] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 354.676140][T17417] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 354.715053][T17417] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 354.728180][T17552] lo: left allmulticast mode [ 354.753197][T17552] gretap1: left allmulticast mode [ 354.802695][T17552] bond9: left promiscuous mode [ 354.809977][T17552] bond9: left allmulticast mode [ 354.828623][T17552] ªªªªª: left allmulticast mode [ 354.836682][T17552] macvtap0: left allmulticast mode [ 354.903531][T17566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2912'. [ 354.933614][T17566] net_ratelimit: 393 callbacks suppressed [ 354.933638][T17566] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 354.965550][T17566] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 354.972388][T17566] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 354.979227][T17566] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 354.986077][T17566] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 354.992917][T17566] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 354.999763][T17566] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 355.006593][T17566] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 355.013420][T17566] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 355.020256][T17566] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 355.466491][ T5854] Bluetooth: hci5: command tx timeout [ 355.683147][T17576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2914'. [ 355.743353][T17576] 8021q: adding VLAN 0 to HW filter on device bond14 [ 355.761261][T17567] syzkaller0: entered promiscuous mode [ 355.775329][T17567] syzkaller0: entered allmulticast mode [ 355.792933][T14964] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.801652][T14964] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 355.906324][T17581] bond14: (slave batadv2): Opening slave failed [ 355.939198][T17589] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2914'. [ 355.991774][T14964] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.000753][T14964] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 356.014178][T14964] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.036435][T14964] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 356.051736][T17591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2916'. [ 356.065628][T17591] netlink: 'syz.3.2916': attribute type 11 has an invalid length. [ 356.097734][T14964] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.107724][T14964] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 356.118177][T17592] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2914'. [ 356.118267][T17591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2916'. [ 356.175326][T17591] netlink: 'syz.3.2916': attribute type 11 has an invalid length. [ 356.329224][T14963] IPVS: stop unused estimator thread 0... [ 356.408799][T17417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.484276][T17417] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.538045][T14961] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.546089][T14961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.592849][T14963] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.600121][T14963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.650208][T17609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2921'. [ 356.665436][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5210 ms [ 356.673486][ C1] lec:lec_tx_timeout: lec0 [ 356.929591][T17632] xt_l2tp: invalid flags combination: 0 [ 357.180791][T17417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.281400][T17655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2934'. [ 357.438612][T17664] netlink: 'syz.2.2936': attribute type 1 has an invalid length. [ 357.456841][T17664] netlink: 'syz.2.2936': attribute type 1 has an invalid length. [ 357.545790][ T5854] Bluetooth: hci5: command tx timeout [ 357.625979][T17417] veth0_vlan: entered promiscuous mode [ 357.653006][T17417] veth1_vlan: entered promiscuous mode [ 357.754721][T17417] veth0_macvtap: entered promiscuous mode [ 357.777294][T17680] netlink: 'syz.2.2939': attribute type 5 has an invalid length. [ 357.783613][T17417] veth1_macvtap: entered promiscuous mode [ 357.820951][T17417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.855144][T17417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.897126][T14961] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.913759][T14964] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.929981][T14964] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.951764][T14964] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.006916][ T5905] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 358.182558][T17697] netlink: 212176 bytes leftover after parsing attributes in process `syz.3.2943'. [ 358.223762][T14963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.240753][T14963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.280819][T17698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2945'. [ 358.300975][T14960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.334849][T14960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.532926][T17711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2874'. [ 358.668010][T14960] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 358.827194][ T5905] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 359.459592][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 359.472275][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 359.480321][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 359.491851][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 359.499626][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 359.605500][T17770] gre0 speed is unknown, defaulting to 1000 [ 359.707418][T14964] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 359.719326][T14964] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 359.859993][ T35] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.059842][ T35] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.109856][T17770] ip6erspan0 speed is unknown, defaulting to 1000 [ 360.214827][ T35] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.318912][ T35] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.522075][T17770] chnl_net:caif_netlink_parms(): no params data found [ 360.591327][T17811] bond0: Error: Cannot enslave bond to itself. [ 360.666346][ T5905] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 360.759916][T14963] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 360.888946][T17832] __nla_validate_parse: 2 callbacks suppressed [ 360.888964][T17832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2977'. [ 360.904328][T17832] netlink: 'syz.1.2977': attribute type 7 has an invalid length. [ 360.912540][T17832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2977'. [ 360.994728][T17832] gretap0: entered promiscuous mode [ 361.003291][T17836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2978'. [ 361.016934][T17832] gretap0: left promiscuous mode [ 361.044150][T17836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2978'. [ 361.046837][T17770] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.078858][T17770] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.094924][T17770] bridge_slave_0: entered allmulticast mode [ 361.112246][T17770] bridge_slave_0: entered promiscuous mode [ 361.124607][T17836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2978'. [ 361.167321][T17770] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.179978][T17770] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.188124][T17770] bridge_slave_1: entered allmulticast mode [ 361.196545][T17770] bridge_slave_1: entered promiscuous mode [ 361.204141][T17836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2978'. [ 361.256684][ T35] bridge_slave_0: left allmulticast mode [ 361.262423][ T35] bridge_slave_0: left promiscuous mode [ 361.270100][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.489330][T14963] smbdirect: ib_dev[syz0] removed [ 361.545954][ T5853] Bluetooth: hci4: command tx timeout [ 361.623757][ T35] bond2 (unregistering): (slave erspan1): Releasing active interface [ 361.687612][ T35] bond10 (unregistering): (slave gretap2): Releasing active interface [ 361.758433][ T35] bond4 (unregistering): (slave geneve4): Releasing active interface [ 361.780537][ T35] bond1 (unregistering): (slave geneve2): Releasing active interface [ 362.121418][ T35] bond13 (unregistering): (slave bridge5): Releasing backup interface [ 362.335740][ T35] bond0 (unregistering): (slave 07ÿ): Releasing backup interface [ 362.344868][ T35] bond0 (unregistering): Released all slaves [ 362.371057][ T35] bond1 (unregistering): Released all slaves [ 362.392582][ T35] bond2 (unregistering): Released all slaves [ 362.413931][ T35] bond3 (unregistering): Released all slaves [ 362.447251][ T35] bond4 (unregistering): Released all slaves [ 362.474349][ T35] bond5 (unregistering): (slave bond6): Releasing backup interface [ 362.483167][ T35] bond5 (unregistering): Released all slaves [ 362.503097][ T35] bond6 (unregistering): Released all slaves [ 362.533082][ T35] bond7 (unregistering): Released all slaves [ 362.558132][ T35] bond8 (unregistering): Released all slaves [ 362.584334][ T35] bond9 (unregistering): Released all slaves [ 362.609543][ T35] bond10 (unregistering): Released all slaves [ 362.637325][ T35] bond11 (unregistering): (slave bond12): Releasing backup interface [ 362.647196][ T35] bond11 (unregistering): Released all slaves [ 362.674105][ T35] bond12 (unregistering): Released all slaves [ 362.693763][ T35] bond13 (unregistering): Released all slaves [ 362.718853][ T35] bond14 (unregistering): Released all slaves [ 362.738296][ T35] bond15 (unregistering): Released all slaves [ 362.806838][T17770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.900524][T17770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.968157][ T35] tipc: Left network mode [ 363.002233][T17770] team0: Port device team_slave_0 added [ 363.021971][T17770] team0: Port device team_slave_1 added [ 363.040849][ T35] IPVS: stopping backup sync thread 7109 ... [ 363.131766][T17770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.159541][T17770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.221665][T17770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.267989][T17770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.285335][T17770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.326523][T17770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.431672][T17770] hsr_slave_0: entered promiscuous mode [ 363.438555][T17770] hsr_slave_1: entered promiscuous mode [ 363.444995][T17770] debugfs: 'hsr0' already exists in 'hsr' [ 363.452451][T17770] Cannot create hsr debugfs directory [ 363.635691][ T5853] Bluetooth: hci4: command tx timeout [ 363.653011][T17817] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 363.941696][T17873] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2988'. [ 363.984978][T17873] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2988'. [ 363.991740][T17879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2990'. [ 364.017526][T17881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2990'. [ 364.043398][T17877] netlink: 'syz.0.2990': attribute type 4 has an invalid length. [ 364.051635][T17877] netlink: 'syz.0.2990': attribute type 8 has an invalid length. [ 364.060419][T17877] netlink: 'syz.0.2990': attribute type 1 has an invalid length. [ 364.089413][T17877] NCSI netlink: No device for ifindex 0 [ 364.329200][T17896] delete_channel: no stack [ 365.015222][T17909] gre0 speed is unknown, defaulting to 1000 [ 365.055378][ T35] hsr_slave_0: left promiscuous mode [ 365.078729][ T35] hsr_slave_1: left promiscuous mode [ 365.705411][ T5853] Bluetooth: hci4: command tx timeout [ 365.764036][ T35] team0 (unregistering): Port device team_slave_1 removed [ 365.777877][T17937] netlink: 'syz.1.2999': attribute type 4 has an invalid length. [ 365.790686][ T35] team0 (unregistering): Port device C removed [ 365.829267][T17938] netlink: 'syz.1.2999': attribute type 4 has an invalid length. [ 365.868179][ T35] dummy0 (unregistering): left allmulticast mode [ 365.991096][T17770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 366.013381][T17770] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 366.028707][T17770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 366.041813][T17770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 366.100339][T17770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 366.135340][T17949] can: request_module (can-proto-3) failed. [ 366.147974][T17770] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 366.157377][T17770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 366.172303][T17770] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 366.402066][T17965] netlink: 'syz.4.3004': attribute type 13 has an invalid length. [ 366.450508][T17965] netlink: 'syz.4.3004': attribute type 17 has an invalid length. [ 366.462769][T17967] net_ratelimit: 3322 callbacks suppressed [ 366.462787][T17967] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 366.501430][T17967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.523760][T17964] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.531497][T17964] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.567769][T17967] __nla_validate_parse: 3 callbacks suppressed [ 366.567786][T17967] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3005'. [ 366.663976][T17974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3004'. [ 366.719687][T17977] xt_addrtype: ipv6 does not support BROADCAST matching [ 366.728416][T17964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.748410][T17964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.805056][T17978] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 366.815660][T17978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.826625][T17978] netlink: 'syz.1.3006': attribute type 2 has an invalid length. [ 366.834394][T17978] netlink: 'syz.1.3006': attribute type 2 has an invalid length. [ 366.985011][T17965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.994204][T17965] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.004684][T17965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 367.056344][T14960] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.068603][T14960] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.084194][T17969] macsec1: entered promiscuous mode [ 367.101262][T14960] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.110772][T14960] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.278292][T17770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.317705][T17990] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3009'. [ 367.360910][T17770] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.397143][T14966] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.404345][T14966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.475192][T14966] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.482427][T14966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.533984][T18000] netlink: 'syz.4.3013': attribute type 3 has an invalid length. [ 367.787734][ T5853] Bluetooth: hci4: command tx timeout [ 367.814047][T18010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3015'. [ 367.861559][T18010] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3015'. [ 367.900993][T18010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3015'. [ 367.943370][T18010] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3015'. [ 368.020363][T18010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3015'. [ 368.041864][T18019] tipc: Failed to remove unknown binding: 66,1,1/0:2248841920/2248841922 [ 368.072748][T18019] tipc: Failed to remove unknown binding: 66,1,1/0:2248841920/2248841922 [ 368.121096][T18019] tipc: Failed to remove unknown binding: 66,1,1/0:2248841920/2248841922 [ 368.368773][T17770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.382716][T18033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3019'. [ 368.429555][T18040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3020'. [ 368.638329][T17770] veth0_vlan: entered promiscuous mode [ 368.712108][T17770] veth1_vlan: entered promiscuous mode [ 368.854173][T17770] veth0_macvtap: entered promiscuous mode [ 368.897417][T17770] veth1_macvtap: entered promiscuous mode [ 368.972846][T17770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.036142][T17770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.052118][T14963] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.063504][T14963] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.076089][T14963] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.085041][T14963] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.396409][T18090] xt_l2tp: v2 doesn't support IP mode [ 369.461099][T14960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.488177][T14960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.665497][T14963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.685499][T14963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.407340][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 370.421317][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 370.430163][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 370.443505][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 370.454450][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 370.541953][T18136] gre0 speed is unknown, defaulting to 1000 [ 371.583080][T18196] Bluetooth: MGMT ver 1.23 [ 371.605811][T18196] Bluetooth: hci1: too big key_count value 29096 [ 371.709571][T18196] __nla_validate_parse: 7 callbacks suppressed [ 371.709590][T18196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3050'. [ 371.746429][T18207] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3052'. [ 371.771298][T18207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3052'. [ 372.048269][T18136] chnl_net:caif_netlink_parms(): no params data found [ 372.273590][T18136] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.306700][T18136] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.314512][T18136] bridge_slave_0: entered allmulticast mode [ 372.322318][T18136] bridge_slave_0: entered promiscuous mode [ 372.333610][T18136] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.349648][T18136] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.361703][T18136] bridge_slave_1: entered allmulticast mode [ 372.374799][T18136] bridge_slave_1: entered promiscuous mode [ 372.505854][ T5854] Bluetooth: hci2: command tx timeout [ 372.591792][T18136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.635530][T18136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.648045][T18264] xt_hashlimit: size too large, truncated to 1048576 [ 372.737048][T18251] syzkaller1: entered promiscuous mode [ 372.748889][T18251] syzkaller1: entered allmulticast mode [ 372.822354][T18276] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3063'. [ 372.912791][T18136] team0: Port device team_slave_0 added [ 373.012015][T18274] syzkaller0: entered promiscuous mode [ 373.035408][T18274] syzkaller0: entered allmulticast mode [ 373.054990][T18136] team0: Port device team_slave_1 added [ 373.076910][T18284] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3067'. [ 373.120819][T18284] ip6gre1: entered promiscuous mode [ 373.126185][T18284] ip6gre1: entered allmulticast mode [ 373.439926][T18306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3068'. [ 374.588906][ T5854] Bluetooth: hci2: command tx timeout [ 374.949357][T18136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.956757][T18136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.986009][T18136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.012402][T14966] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 375.032322][T14966] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 375.041108][ T9731] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 375.056025][T18313] Cannot find add_set index 2 as target [ 375.097024][T18136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.112200][T18136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.139000][T18136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.232826][T18136] hsr_slave_0: entered promiscuous mode [ 375.274280][T18136] hsr_slave_1: entered promiscuous mode [ 375.302712][T18136] debugfs: 'hsr0' already exists in 'hsr' [ 375.320431][T18136] Cannot create hsr debugfs directory [ 375.351856][T18329] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3074'. [ 375.377948][T18329] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3074'. [ 375.412747][T18336] openvswitch: netlink: Message has 171 unknown bytes. [ 375.567195][T18342] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3077'. [ 375.583542][T18342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3077'. [ 375.704689][T18345] gre0 speed is unknown, defaulting to 1000 [ 375.711145][ T9731] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 375.796080][ T9731] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 376.294437][T18363] validate_nla: 1 callbacks suppressed [ 376.294455][T18363] netlink: 'syz.1.3085': attribute type 1 has an invalid length. [ 376.311820][T18364] netlink: 'syz.1.3085': attribute type 1 has an invalid length. [ 376.401496][T18364] bond10: entered promiscuous mode [ 376.412748][T18364] 8021q: adding VLAN 0 to HW filter on device bond10 [ 376.429700][T18363] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 376.433427][T18136] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 376.483813][T18136] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 376.537530][T18136] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 376.555732][T18136] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 376.576531][T18136] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 376.588961][T18136] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 376.618438][T18136] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 376.629380][T18136] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 376.665759][ T5854] Bluetooth: hci2: command tx timeout [ 376.758090][T18383] __nla_validate_parse: 8 callbacks suppressed [ 376.758108][T18383] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3088'. [ 376.947626][T18136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.053186][T18136] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.110394][T14963] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.117618][T14963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.184226][T14960] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.191424][T14960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.477733][T18405] netlink: 'syz.3.3095': attribute type 11 has an invalid length. [ 377.502965][T18405] netlink: 'syz.3.3095': attribute type 4 has an invalid length. [ 377.511281][T18405] netlink: 16130 bytes leftover after parsing attributes in process `syz.3.3095'. [ 377.637754][T18136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.709118][T18413] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 377.717765][ T9749] syzkaller1: tun_net_xmit 90 [ 377.723273][T18413] syzkaller1: Linktype set failed because interface is up [ 377.802703][T18136] veth0_vlan: entered promiscuous mode [ 377.845693][ T9749] syzkaller1: tun_net_xmit 90 [ 377.850625][T18420] pimreg9: entered allmulticast mode [ 377.913136][T18136] veth1_vlan: entered promiscuous mode [ 378.012485][T18136] veth0_macvtap: entered promiscuous mode [ 378.061524][T18136] veth1_macvtap: entered promiscuous mode [ 378.093958][T18433] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3105'. [ 378.099006][T18136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.108911][T18433] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3105'. [ 378.135132][T18434] 8021q: VLANs not supported on syzkaller1 [ 378.162418][T18136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.213012][T14963] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.238209][T14963] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.274785][T14960] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.290823][T14960] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.433145][ T1316] lec:lec_start_xmit: lec0:No lecd attached [ 378.501456][T14961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.512586][T14961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.584827][T14961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.604471][T14961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.617917][T18449] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3109'. [ 378.745590][ T5854] Bluetooth: hci2: command tx timeout [ 379.060279][T18467] macvtap1: entered promiscuous mode [ 379.095516][T18467] macvtap1: entered allmulticast mode [ 379.110556][T18467] veth1_vlan: entered allmulticast mode [ 379.169487][T18466] macvtap2: entered promiscuous mode [ 379.190043][T18466] macvtap2: entered allmulticast mode [ 379.231161][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 379.249246][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 379.259215][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 379.268596][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 379.283278][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.316696][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 379.503064][T18475] gre0 speed is unknown, defaulting to 1000 [ 379.540248][T18485] batman_adv: batadv0: Adding interface: vlan2 [ 379.549388][T18486] xt_hashlimit: size too large, truncated to 1048576 [ 379.564720][T18485] batman_adv: batadv0: The MTU of interface vlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.600404][T18485] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 379.951384][T14963] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.962155][T14963] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 380.061054][T14963] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.090589][T14963] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 380.181209][T14963] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.207486][T14963] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 380.255034][T18501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.307639][T14963] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.320358][T18501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3120'. [ 380.339397][T14963] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 380.371146][T18514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.423319][T18517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3120'. [ 380.485222][T18508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3120'. [ 380.497685][T18505] gre0 speed is unknown, defaulting to 1000 [ 380.504598][T18508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3120'. [ 380.543007][T18475] chnl_net:caif_netlink_parms(): no params data found [ 380.601969][T18501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.796286][T18530] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3128'. [ 380.928810][T18475] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.938078][T18475] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.946139][T18475] bridge_slave_0: entered allmulticast mode [ 380.954215][T18475] bridge_slave_0: entered promiscuous mode [ 380.981840][T18475] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.993096][T18475] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.000718][T18475] bridge_slave_1: entered allmulticast mode [ 381.007955][T18475] bridge_slave_1: entered promiscuous mode [ 381.148591][T18475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.178092][T18475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.190475][T14963] bridge_slave_0: left promiscuous mode [ 381.197158][T14963] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.249627][T14963] dvmrp0: left allmulticast mode [ 381.255037][T14963] pimreg9: left allmulticast mode [ 381.306291][ T5853] Bluetooth: hci0: command tx timeout [ 381.368801][T14963] ip6gretap0 (unregistering): left promiscuous mode [ 381.539073][T14963] bond1 (unregistering): (slave gretap1): Releasing active interface [ 381.554182][T14966] smc: removing ib device syz1 [ 381.593556][T14966] smbdirect: ib_dev[syz1] removed [ 381.601273][T14963] bond4 (unregistering): (slave geneve3): Releasing backup interface [ 382.332905][T14963] bond5 (unregistering): (slave bridge7): Releasing backup interface [ 382.347117][T14963] bridge7 (unregistering): left promiscuous mode [ 382.357192][T14963] bridge7 (unregistering): left allmulticast mode [ 382.606787][T14963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.618363][T14963] bond_slave_0: left promiscuous mode [ 382.623931][T14963] bond_slave_0: left allmulticast mode [ 382.646132][T14963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.656169][T14963] bond_slave_1: left promiscuous mode [ 382.661721][T14963] bond_slave_1: left allmulticast mode [ 382.670239][T14963] bond0 (unregistering): Released all slaves [ 382.708373][T14963] bond1 (unregistering): Released all slaves [ 382.770298][T14963] bond2 (unregistering): Released all slaves [ 382.817657][T14963] bond3 (unregistering): Released all slaves [ 382.863457][T14963] bond4 (unregistering): Released all slaves [ 382.933265][T14963] bond5 (unregistering): Released all slaves [ 383.000717][T14963] bond6 (unregistering): (slave veth3): Releasing backup interface [ 383.034688][T14963] bond6 (unregistering): (slave batadv1): Releasing backup interface [ 383.044757][T14963] bond6 (unregistering): Released all slaves [ 383.079330][T14963] bond7 (unregistering): Released all slaves [ 383.132359][T14963] bond8 (unregistering): Released all slaves [ 383.164832][T14963] bond9 (unregistering): Released all slaves [ 383.178217][T14963] bond10 (unregistering): Released all slaves [ 383.237415][ T9775] gre0 speed is unknown, defaulting to 1000 [ 383.243555][ T9775] syz1: Port: 1 Link DOWN [ 383.386162][ T5853] Bluetooth: hci0: command tx timeout [ 383.455006][T18475] team0: Port device team_slave_0 added [ 383.467384][T14963] tipc: Disabling bearer [ 383.481209][T14963] tipc: Left network mode [ 383.557886][T18475] team0: Port device team_slave_1 added [ 383.715424][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5280 ms [ 383.723474][ C1] lec:lec_tx_timeout: lec0 [ 383.767977][T18570] netlink: 'syz.0.3135': attribute type 2 has an invalid length. [ 383.809979][T18475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.818787][T18475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.866090][T18475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.887790][T18475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.907263][T18475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.936476][T18475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.984753][T18577] netlink: 'syz.0.3138': attribute type 1 has an invalid length. [ 383.998655][T18577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.110585][T18571] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 384.147461][T18571] RDS: rds_bind could not find a transport for fe88::104, load rds_tcp or rds_rdma? [ 384.203033][T18475] hsr_slave_0: entered promiscuous mode [ 384.218446][T18475] hsr_slave_1: entered promiscuous mode [ 384.235064][T18475] debugfs: 'hsr0' already exists in 'hsr' [ 384.246238][T18475] Cannot create hsr debugfs directory [ 384.283520][T18585] netlink: 'syz.2.3140': attribute type 1 has an invalid length. [ 384.351322][T18590] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3141'. [ 384.558255][T18585] bond1: entered promiscuous mode [ 384.567033][T18585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 384.575486][T18585] netlink: 'syz.2.3140': attribute type 1 has an invalid length. [ 384.583564][T18585] netlink: 'syz.2.3140': attribute type 1 has an invalid length. [ 384.608202][T18591] bond1: (slave bridge1): making interface the new active one [ 384.615950][T18591] bridge1: entered promiscuous mode [ 384.622336][T18591] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 384.730953][T18585] netlink: 'syz.2.3140': attribute type 1 has an invalid length. [ 384.801212][T18585] netlink: 'syz.2.3140': attribute type 1 has an invalid length. [ 384.904386][T18585] netlink: 'syz.2.3140': attribute type 1 has an invalid length. [ 384.977349][ T5506] 8021q: adding VLAN 0 to HW filter on device eth1 [ 384.984246][T18585] netlink: 'syz.2.3140': attribute type 1 has an invalid length. [ 385.017096][T18585] netlink: 'syz.2.3140': attribute type 1 has an invalid length. [ 385.130150][T18624] netlink: 388 bytes leftover after parsing attributes in process `syz.3.3147'. [ 385.181154][T18633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3147'. [ 385.194262][T18630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3149'. [ 385.300635][T18630] ip6gre1: entered promiscuous mode [ 385.326956][T18630] ip6gre1: entered allmulticast mode [ 385.360215][T14963] hsr_slave_0: left promiscuous mode [ 385.378041][T14963] hsr_slave_1: left promiscuous mode [ 385.392073][T14963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.414347][T14963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.441482][T18647] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3150'. [ 385.456361][T14963] batman_adv: batadv0: Removing interface: vlan2 [ 385.465408][ T5853] Bluetooth: hci0: command tx timeout [ 386.074754][T14963] ` (unregistering): Port device team_slave_1 removed [ 386.178037][T18676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3158'. [ 386.406021][T14963] ` (unregistering): Port device dummy0 removed [ 386.484639][T18641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3150'. [ 386.485646][T18690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3160'. [ 386.504037][T18690] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3160'. [ 386.535853][T18690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3160'. [ 386.596950][ T5506] 8021q: adding VLAN 0 to HW filter on device eth2 [ 386.722675][T18695] nbd: must specify a size in bytes for the device [ 387.156172][T18709] netlink: zone id is out of range [ 387.195138][T18709] netlink: zone id is out of range [ 387.213685][T18709] netlink: zone id is out of range [ 387.242736][T18709] netlink: zone id is out of range [ 387.255785][T18709] netlink: zone id is out of range [ 387.273660][T18709] netlink: zone id is out of range [ 387.284739][T18719] openvswitch: netlink: Missing valid actions attribute. [ 387.305196][T18719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.385491][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 387.392284][T14963] IPVS: stop unused estimator thread 0... [ 387.532257][T18475] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 387.545788][ T5853] Bluetooth: hci0: command tx timeout [ 387.581670][T18475] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 387.598988][T18475] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 387.653765][T18475] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 387.684387][T18475] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 387.730937][T18475] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 387.831705][T18475] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 387.858520][T18475] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 388.108303][T18763] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 388.151663][T18475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.260401][T18475] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.299478][T14962] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.306646][T14962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.343470][T18770] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 388.404087][T14964] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.411297][T14964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.525916][T18475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.760973][T18797] xt_policy: too many policy elements [ 388.894144][T18797] bridge_slave_0: left allmulticast mode [ 388.902919][T18810] validate_nla: 9 callbacks suppressed [ 388.902933][T18810] netlink: 'syz.3.3189': attribute type 21 has an invalid length. [ 388.921199][T18797] bridge_slave_0: left promiscuous mode [ 388.940447][T18797] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.973351][T18797] bridge_slave_1: left allmulticast mode [ 388.989727][T18797] bridge_slave_1: left promiscuous mode [ 389.002323][T18797] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.023897][T18815] net_ratelimit: 1 callbacks suppressed [ 389.023911][T18815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.043598][T18797] bond0: (slave bond_slave_0): Releasing backup interface [ 389.061809][T18797] bond0: (slave bond_slave_1): Releasing backup interface [ 389.092418][T18797] team0: Port device team_slave_0 removed [ 389.128103][T18797] team0: Port device team_slave_1 removed [ 389.152632][T18797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.161234][T18797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.174152][T18797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.184614][T18797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.194873][T18797] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 389.467400][T18475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.600971][T18475] veth0_vlan: entered promiscuous mode [ 389.648065][T18475] veth1_vlan: entered promiscuous mode [ 389.732480][T18475] veth0_macvtap: entered promiscuous mode [ 389.755102][T18475] veth1_macvtap: entered promiscuous mode [ 389.774204][T18849] __nla_validate_parse: 12 callbacks suppressed [ 389.774220][T18849] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3199'. [ 389.775531][T18850] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3199'. [ 389.823828][T18475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.831374][T18854] nftables ruleset with unbound set [ 389.897539][T18475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.932231][T18849] netem: unknown loss type 0 [ 389.952102][T18849] netem: change failed [ 389.991600][T14960] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.005891][T14960] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.032522][T14960] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.068892][T14960] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.313686][T14960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.342311][T14960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.417848][T18887] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3208'. [ 390.448582][T14966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.459689][T18888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.482466][T14966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.552600][T18896] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 390.872795][T18912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3214'. [ 391.082178][T18919] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3216'. [ 391.183402][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 391.199328][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 391.212162][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 391.222048][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 391.234311][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 391.366241][T18929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.678167][T18933] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3220'. [ 391.687497][T18933] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3220'. [ 391.989002][T18923] chnl_net:caif_netlink_parms(): no params data found [ 392.250116][T18948] openvswitch: netlink: IP tunnel dst address not specified [ 392.276473][T18923] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.288880][T18923] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.302317][T18923] bridge_slave_0: entered allmulticast mode [ 392.323473][T18923] bridge_slave_0: entered promiscuous mode [ 392.332285][T18923] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.340234][T18923] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.348082][T18923] bridge_slave_1: entered allmulticast mode [ 392.352761][T18958] netlink: 'syz.2.3224': attribute type 13 has an invalid length. [ 392.356102][T18923] bridge_slave_1: entered promiscuous mode [ 392.385427][T18958] netlink: 'syz.2.3224': attribute type 17 has an invalid length. [ 392.515176][T18948] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.516614][T18966] netlink: 'syz.1.3228': attribute type 1 has an invalid length. [ 392.522861][T18948] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.561219][T18968] openvswitch: netlink: Multiple metadata blocks provided [ 392.582638][T18969] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3228'. [ 392.652816][T18948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.677565][T18948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.812029][T18979] team0: entered promiscuous mode [ 392.825814][T18979] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3231'. [ 392.850517][T18979] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 392.874356][T14965] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.887173][T14965] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.947603][T18945] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 392.962662][T14965] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.973807][T14965] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.021392][T18923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.082435][T18923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.134245][T18989] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3235'. [ 393.187185][T18923] team0: Port device team_slave_0 added [ 393.227727][T18923] team0: Port device team_slave_1 added [ 393.305523][ T5854] Bluetooth: hci1: command tx timeout [ 393.477970][T19010] netlink: 'syz.0.3240': attribute type 3 has an invalid length. [ 393.538995][T19014] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 393.956020][T14962] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 394.185388][ T5854] Bluetooth: hci0: command 0x0401 tx timeout [ 394.258860][T14962] bond0 (unregistering): left promiscuous mode [ 394.266608][T14962] bond_slave_0: left promiscuous mode [ 394.274027][T14962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.283751][T14962] bond0 (unregistering): Released all slaves [ 394.302991][T14962] bond1 (unregistering): (slave batadv1): Releasing active interface [ 394.314910][T14962] bond1 (unregistering): Released all slaves [ 394.335141][T14962] bond2 (unregistering): Released all slaves [ 394.358957][T14962] bond3 (unregistering): (slave lo): Releasing backup interface [ 394.367551][T14962] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 394.380446][T14962] bond3 (unregistering): Released all slaves [ 394.395796][T14962] bond4 (unregistering): (slave wireguard0): Releasing backup interface [ 394.404140][T14962] wireguard0: left promiscuous mode [ 394.411143][T14962] bond4 (unregistering): (slave wireguard1): Releasing backup interface [ 394.420539][T14962] bond4 (unregistering): Released all slaves [ 394.438659][T14962] bond5 (unregistering): (slave bond6): Releasing backup interface [ 394.446692][T14962] bond6 (unregistering): left promiscuous mode [ 394.453470][T14962] bond5 (unregistering): Released all slaves [ 394.471210][T14962] bond6 (unregistering): Released all slaves [ 394.484205][T14962] bond7 (unregistering): Released all slaves [ 394.502967][T14962] bond8 (unregistering): Released all slaves [ 394.543239][T18923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.550450][T18923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.578192][T18923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.639072][T18923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.675832][T18923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.764556][T18923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.777685][T19034] __nla_validate_parse: 3 callbacks suppressed [ 394.777701][T19034] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3245'. [ 394.831414][T14962] tipc: Left network mode [ 394.889370][T14962] IPVS: stopping backup sync thread 14594 ... [ 395.223211][T18923] hsr_slave_0: entered promiscuous mode [ 395.248752][T18923] hsr_slave_1: entered promiscuous mode [ 395.277319][T18923] debugfs: 'hsr0' already exists in 'hsr' [ 395.300709][T18923] Cannot create hsr debugfs directory [ 395.391753][ T5854] Bluetooth: hci1: command tx timeout [ 396.051894][ T5506] 8021q: adding VLAN 0 to HW filter on device eth1 [ 396.220234][T19078] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3252'. [ 396.932971][T19129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3265'. [ 397.117399][T19127] netlink: 'syz.4.3264': attribute type 1 has an invalid length. [ 397.210835][T19133] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3264'. [ 397.253193][T19129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.372564][T19143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3266'. [ 397.396498][T19143] netlink: 'syz.1.3266': attribute type 30 has an invalid length. [ 397.421624][T14962] batadv0: left promiscuous mode [ 397.468652][ T5854] Bluetooth: hci1: command tx timeout [ 397.488334][T14962] hsr_slave_0: left promiscuous mode [ 397.509682][T14962] hsr_slave_1: left promiscuous mode [ 397.519580][T14962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.530770][T14962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.568874][T19164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3271'. [ 397.579603][T19164] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3271'. [ 397.652781][T19171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3271'. [ 397.879083][T14962] team0 (unregistering): Port device team_slave_1 removed [ 397.900219][T14962] team0 (unregistering): Port device team_slave_0 removed [ 398.062069][T14961] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.104136][T14961] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.194292][T19180] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3276'. [ 398.486351][T19193] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3276'. [ 398.576445][T14961] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.599043][T14961] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.789742][T19196] netlink: 'syz.1.3277': attribute type 1 has an invalid length. [ 398.808602][T19198] Bluetooth: MGMT ver 1.23 [ 398.837097][T19203] netlink: 'syz.0.3278': attribute type 20 has an invalid length. [ 399.112952][T18923] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 399.246933][T18923] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 399.323220][T18923] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 399.436954][T18923] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 399.471312][T18923] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 399.530615][T18923] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 399.546257][ T5853] Bluetooth: hci1: command tx timeout [ 399.560859][T18923] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 399.588283][T18923] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 399.600289][T19236] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 399.600410][T14962] IPVS: stop unused estimator thread 0... [ 399.614396][T19236] syzkaller1: linktype set to 780 [ 400.389493][T18923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.450006][T18923] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.494765][T19294] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20001 [ 400.500636][T19300] netlink: 'syz.1.3292': attribute type 2 has an invalid length. [ 400.517816][T14966] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.524992][T14966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.548451][T19300] netlink: 'syz.1.3292': attribute type 2 has an invalid length. [ 400.563559][T14966] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.570748][T14966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.887651][T19313] syzkaller0: entered promiscuous mode [ 400.908108][ T5853] Bluetooth: hci0: command 0x0401 tx timeout [ 400.916325][ T5854] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 400.925663][T19313] syzkaller0: entered allmulticast mode [ 400.932347][T19319] __nla_validate_parse: 1 callbacks suppressed [ 400.932372][T19319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3297'. [ 401.051078][T19320] IPv6: addrconf: prefix option has invalid lifetime [ 401.267189][T18923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.328623][T18923] veth0_vlan: entered promiscuous mode [ 401.367935][T18923] veth1_vlan: entered promiscuous mode [ 401.473926][T19339] bridge0: port 1(syz_tun) entered blocking state [ 401.481229][T19339] bridge0: port 1(syz_tun) entered disabled state [ 401.487892][T19339] syz_tun: entered allmulticast mode [ 401.494151][T19339] syz_tun: entered promiscuous mode [ 401.506207][T19339] bridge0: port 1(syz_tun) entered blocking state [ 401.512681][T19339] bridge0: port 1(syz_tun) entered forwarding state [ 401.570189][T19338] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3303'. [ 401.586650][T18923] veth0_macvtap: entered promiscuous mode [ 401.597992][T19338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3303'. [ 401.652773][T18923] veth1_macvtap: entered promiscuous mode [ 401.677837][T19342] bond1: option all_slaves_active: invalid value (5) [ 401.686558][T19342] bond1 (unregistering): Released all slaves [ 401.781535][T18923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.811437][T18923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.829712][ T7037] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.861113][ T7037] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.895174][ T7037] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.941130][ T7037] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.048805][T14962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.069009][T14962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.233831][T14966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.250916][T14966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.441689][T19365] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 404.073680][T19416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3318'. [ 404.136659][T19418] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3320'. [ 405.643713][T19468] Cannot find del_set index 0 as target [ 405.807359][T19475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3329'. [ 405.898687][T19478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3328'. [ 406.041404][T19485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3330'. [ 406.096180][T19487] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3331'. [ 406.180167][T19492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3331'. [ 406.200520][T19492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3331'. [ 406.311461][T19486] delete_channel: no stack [ 406.498647][T19511] netlink: 'syz.3.3335': attribute type 13 has an invalid length. [ 406.526172][T19511] netlink: 'syz.3.3335': attribute type 17 has an invalid length. [ 406.533654][T19504] bond1: Unable to set up delay as MII monitoring is disabled [ 406.544584][T19504] bond1 (unregistering): Released all slaves [ 406.658875][T19511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 406.675408][T19514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3337'. [ 406.700567][T19516] sch_tbf: burst 545 is lower than device lo mtu (65550) ! [ 406.852949][T19514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3337'. [ 406.989053][T19530] geneve2: entered allmulticast mode [ 407.082347][T19540] sctp: [Deprecated]: syz.3.3344 (pid 19540) Use of struct sctp_assoc_value in delayed_ack socket option. [ 407.082347][T19540] Use struct sctp_sack_info instead [ 407.107185][T19543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3346'. [ 407.127395][T19543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3346'. [ 407.193056][T19547] delete_channel: no stack [ 407.240798][T19549] netlink: 'syz.4.3347': attribute type 3 has an invalid length. [ 407.727045][T19559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3350'. [ 407.755046][T19559] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3350'. [ 408.068174][T19568] netlink: 'syz.1.3353': attribute type 1 has an invalid length. [ 408.111264][T19568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.161072][T19571] bond1: (slave geneve2): making interface the new active one [ 408.173599][T19571] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 408.237917][T14962] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 408.275037][T19568] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 408.291130][T14962] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 408.312395][T14962] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 408.322942][T14962] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 408.542444][T19588] openvswitch: netlink: Missing key (keys=40, expected=80) [ 408.600806][T19599] syzkaller0: entered promiscuous mode [ 408.620025][T19599] syzkaller0: entered allmulticast mode [ 408.742423][T19599] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.813411][T19606] syzkaller0: entered promiscuous mode [ 408.836611][T19606] syzkaller0: entered allmulticast mode [ 408.866052][T19616] gre1: entered promiscuous mode [ 408.922943][T19599] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.021064][T19599] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.170171][T19626] netlink: 'syz.2.3366': attribute type 1 has an invalid length. [ 409.225758][T19629] netlink: 'syz.1.3367': attribute type 2 has an invalid length. [ 409.253171][T19599] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.314200][T19626] 8021q: adding VLAN 0 to HW filter on device bond2 [ 409.499149][T19633] netlink: 'syz.2.3368': attribute type 61 has an invalid length. [ 409.572059][ T7037] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.670667][T14962] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.744837][T14966] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.798885][T14962] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.929186][T19647] netlink: 'syz.3.3371': attribute type 10 has an invalid length. [ 409.951389][T19647] team0: Device vxcan1 is of different type [ 410.237370][T19659] nbd: must specify a device to reconfigure [ 410.312870][T19659] netlink: 'syz.3.3376': attribute type 5 has an invalid length. [ 410.652464][T19676] netlink: 'syz.4.3381': attribute type 11 has an invalid length. [ 410.675633][T19676] netlink: 'syz.4.3381': attribute type 23 has an invalid length. [ 411.387963][T19705] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 411.398384][T19719] __nla_validate_parse: 16 callbacks suppressed [ 411.398395][T19719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3392'. [ 411.428464][T19717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3393'. [ 411.439043][T19719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.604386][T19728] sctp: [Deprecated]: syz.1.3395 (pid 19728) Use of int in maxseg socket option. [ 411.604386][T19728] Use struct sctp_assoc_value instead [ 411.827809][T19741] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3400'. [ 412.035938][T19748] macsec1: entered promiscuous mode [ 412.044692][T19748] bridge0: entered promiscuous mode [ 412.222338][T19768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3406'. [ 412.231400][T19768] tipc: Started in network mode [ 412.238034][T19768] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 412.250033][T19768] tipc: Enabled bearer , priority 0 [ 412.427320][T19779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3410'. [ 412.446690][T19779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3410'. [ 412.468108][T19779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3410'. [ 412.486813][T19779] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3410'. [ 412.497152][T19779] netlink: 'syz.4.3410': attribute type 3 has an invalid length. [ 412.507154][T19779] netlink: 'syz.4.3410': attribute type 2 has an invalid length. [ 412.515012][T19779] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3410'. [ 412.532466][T19779] netlink: 'syz.4.3410': attribute type 2 has an invalid length. [ 413.507247][ T9731] tipc: Node number set to 10005162 [ 413.672069][T19811] netem: change failed [ 413.794703][T19825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3424'. [ 414.259941][T19849] netlink: 'syz.1.3429': attribute type 1 has an invalid length. [ 414.476352][T19849] 8021q: adding VLAN 0 to HW filter on device bond2 [ 414.550741][T19868] netlink: 'syz.4.3434': attribute type 1 has an invalid length. [ 414.756331][T19872] bond2: entered promiscuous mode [ 414.785469][T19872] bond2: entered allmulticast mode [ 414.801893][T19872] 8021q: adding VLAN 0 to HW filter on device bond2 [ 414.936801][T19888] pim6reg: entered allmulticast mode [ 415.013702][ T6632] lec:lec_start_xmit: lec0:No lecd attached [ 415.043433][T19890] pim6reg: left allmulticast mode [ 415.171759][T19896] veth3: entered promiscuous mode [ 415.286122][T19906] bond3 (unregistering): Released all slaves [ 415.736153][T19936] netlink: 'syz.0.3450': attribute type 4 has an invalid length. [ 415.771401][T19938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 416.045194][T19953] netlink: 'syz.0.3454': attribute type 30 has an invalid length. [ 416.078673][T19953] netlink: 'syz.0.3454': attribute type 30 has an invalid length. [ 416.096251][T14959] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.113619][T14959] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.129898][T14959] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.142928][T14959] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.801131][T19991] sctp: [Deprecated]: syz.3.3466 (pid 19991) Use of int in maxseg socket option. [ 416.801131][T19991] Use struct sctp_assoc_value instead [ 416.906437][T19999] __nla_validate_parse: 6 callbacks suppressed [ 416.906453][T19999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3468'. [ 416.974495][T20004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3470'. [ 417.021330][ T10] IPVS: starting estimator thread 0... [ 417.115406][T20006] IPVS: using max 27 ests per chain, 64800 per kthread [ 417.299349][T20011] xt_HMARK: spi-set and port-set can't be combined [ 417.320365][T20018] Cannot find set identified by id 65534 to match [ 417.380406][T20018] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3475'. [ 417.519629][T20023] netlink: 'syz.1.3477': attribute type 17 has an invalid length. [ 417.537995][T20023] netlink: 'syz.1.3477': attribute type 49 has an invalid length. [ 417.596994][T20029] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3480'. [ 417.714704][T20036] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3478'. [ 417.820536][T20052] netlink: 'syz.3.3485': attribute type 1 has an invalid length. [ 417.908078][T20052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.044310][T20054] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.067588][T20054] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 418.089398][T20072] openvswitch: netlink: Missing valid actions attribute. [ 418.097736][T20054] bond1: (slave vcan0): Error -95 calling set_mac_address [ 418.099781][T20062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3485'. [ 418.104971][T20072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.389721][T20087] netlink: 'syz.0.3493': attribute type 3 has an invalid length. [ 418.409458][T20087] netlink: 'syz.0.3493': attribute type 1 has an invalid length. [ 418.435173][T20087] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3493'. [ 418.460936][T20087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3493'. [ 418.461603][T20090] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3495'. [ 418.525942][T20097] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3491'. [ 418.564529][T20095] pim6reg1: entered promiscuous mode [ 418.593164][T20095] pim6reg1: entered allmulticast mode [ 418.632056][T20104] netlink: 'syz.0.3497': attribute type 1 has an invalid length. [ 418.780917][T20114] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 418.817494][T20114] team0: Port device batadv1 added [ 419.163302][T20134] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.170959][T20134] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.229467][T20134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.249253][T20134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.320603][T20136] tipc: Started in network mode [ 419.325807][T20136] tipc: Node identity 080000000000000008, cluster identity 4711 [ 419.392171][T14959] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.424656][T14959] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.452003][T14959] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.522016][T14959] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.000364][T20197] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 420.010793][T20197] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 420.245160][T20207] bond3 (unregistering): Released all slaves [ 420.636861][T20226] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 420.646292][T20234] netlink: 'syz.0.3527': attribute type 1 has an invalid length. [ 420.665961][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5650 ms [ 420.674002][ C1] lec:lec_tx_timeout: lec0 [ 420.787013][T20243] netlink: 'syz.0.3530': attribute type 21 has an invalid length. [ 421.214385][T20278] netlink: 'syz.4.3538': attribute type 2 has an invalid length. [ 422.010674][T20272] delete_channel: no stack [ 422.081207][T20318] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 422.113821][T20318] bond3: (slave lo): Enslaving as an active interface with an up link [ 422.124353][T20318] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 422.460113][T20329] syzkaller0: entered promiscuous mode [ 422.473896][T20329] syzkaller0: entered allmulticast mode [ 422.526718][T20344] __nla_validate_parse: 13 callbacks suppressed [ 422.526737][T20344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3556'. [ 422.784894][T20366] netlink: 'syz.2.3561': attribute type 1 has an invalid length. [ 422.912621][T20374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3565'. [ 422.926959][T20374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3565'. [ 423.441041][T20448] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3576'. [ 423.574491][T20468] netlink: 'syz.4.3577': attribute type 12 has an invalid length. [ 423.893897][T20530] netlink: 'syz.1.3584': attribute type 1 has an invalid length. [ 424.031065][T20557] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3585'. [ 424.603434][T20614] netlink: 'syz.1.3593': attribute type 1 has an invalid length. [ 424.623472][T20615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3592'. [ 424.626814][T20614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3593'. [ 424.691842][T20606] bond4 (unregistering): Released all slaves [ 424.740319][T20629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3595'. [ 424.766074][T20629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3595'. [ 425.280046][T20692] xt_policy: too many policy elements [ 425.370182][T20399] workqueue: Failed to create a rescuer kthread for wq "nfc44_nci_rx_wq": -EINTR [ 425.677649][T20713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3604'. [ 425.836056][T20714] sit1: entered allmulticast mode [ 426.883903][T20777] netlink: 'syz.0.3623': attribute type 10 has an invalid length. [ 426.923165][T20777] dummy0: entered promiscuous mode [ 426.942446][T20781] netlink: 'syz.0.3623': attribute type 10 has an invalid length. [ 426.952333][T20777] team0: Port device dummy0 added [ 426.971722][T20781] dummy0: left promiscuous mode [ 427.009384][T20781] team0: Port device dummy0 removed [ 427.034825][T20781] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 427.095061][T20783] syzkaller1: entered promiscuous mode [ 427.113866][T20783] syzkaller1: entered allmulticast mode [ 427.203433][T20787] netlink: 'syz.2.3627': attribute type 2 has an invalid length. [ 427.737092][T20804] tipc: Enabled bearer , priority 0 [ 427.814492][T20815] __nla_validate_parse: 11 callbacks suppressed [ 427.814512][T20815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3637'. [ 427.907194][T20804] syzkaller0: entered promiscuous mode [ 427.921507][T20804] syzkaller0: entered allmulticast mode [ 427.936580][T20804] tipc: Resetting bearer [ 428.074376][T20802] tipc: Resetting bearer [ 428.200101][T20834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3641'. [ 428.209557][T20834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3641'. [ 430.325968][T20802] tipc: Disabling bearer [ 430.358495][T20828] syzkaller0: entered promiscuous mode [ 430.363978][T20828] syzkaller0: entered allmulticast mode [ 430.402492][T20834] syz_tun: entered promiscuous mode [ 430.410183][T20834] syz_tun: left promiscuous mode [ 432.284203][T14962] bond2: left allmulticast mode [ 432.289543][T14962] bond2: left promiscuous mode [ 432.294512][T14962] bridge0: port 3(bond2) entered disabled state [ 432.419304][T14962] bond8 (unregistering): (slave ip6erspan0): Releasing active interface [ 432.584331][T14962] bond4 (unregistering): (slave gretap1): Releasing active interface [ 432.611581][T14962] bond12 (unregistering): (slave geneve4): Releasing backup interface [ 432.623772][T14962] bond0 (unregistering): (slave geneve3): Releasing active interface [ 432.674334][T14962] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 433.040266][T14962] bond1 (unregistering): Released all slaves [ 433.053557][T14962] bond2 (unregistering): Released all slaves [ 433.067596][T14962] bond3 (unregistering): Released all slaves [ 433.080581][T14962] bond4 (unregistering): Released all slaves [ 433.095027][T14962] bond5 (unregistering): Released all slaves [ 433.110334][T14962] bond6 (unregistering): Released all slaves [ 433.126496][T14962] bond7 (unregistering): Released all slaves [ 433.141946][T14962] bond8 (unregistering): Released all slaves [ 433.161133][T14962] bond9 (unregistering): Released all slaves [ 433.182728][T14962] bond10 (unregistering): Released all slaves [ 433.197849][T14962] bond11 (unregistering): Released all slaves [ 433.211214][T14962] bond0 (unregistering): Released all slaves [ 433.224259][T14962] bond12 (unregistering): Released all slaves [ 433.239574][T14962] bond13 (unregistering): Released all slaves [ 433.264667][T14962] bond14 (unregistering): Released all slaves [ 433.404760][T14962] tipc: Disabling bearer [ 433.414760][T14962] tipc: Left network mode [ 433.623645][T20879] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3648'. [ 433.637782][T20866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.739583][T20871] bond2: Removing last arp target with arp_interval on [ 433.930596][ T9735] IPVS: starting estimator thread 0... [ 434.025878][T20889] IPVS: using max 26 ests per chain, 62400 per kthread [ 434.330312][T14962] IPVS: stopping backup sync thread 7920 ... [ 434.508822][T20910] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3656'. [ 434.804851][T20916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3659'. [ 434.876009][T20920] netlink: 'syz.3.3660': attribute type 1 has an invalid length. [ 434.884521][T20922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3661'. [ 434.894619][T20920] netlink: 'syz.3.3660': attribute type 1 has an invalid length. [ 434.926451][T14962] hsr_slave_0: left promiscuous mode [ 434.958262][T14962] hsr_slave_1: left promiscuous mode [ 435.565650][T14962] team0 (unregistering): Port device dummy0 removed [ 435.848475][ T9735] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 436.221841][T20958] veth1_to_batadv: entered allmulticast mode [ 436.376007][T14962] IPVS: stop unused estimator thread 0... [ 436.436248][ T5905] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 436.549040][T20978] netlink: 'syz.0.3675': attribute type 1 has an invalid length. [ 436.668449][T20981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3675'. [ 436.680530][T14959] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 436.729770][T20980] bond2: entered promiscuous mode [ 436.760695][T20980] bond2: entered allmulticast mode [ 436.789533][T20980] 8021q: adding VLAN 0 to HW filter on device bond2 [ 436.869437][T20978] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3675'. [ 436.905587][T20980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3675'. [ 437.085103][T20995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3679'. [ 437.105826][T20995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3679'. [ 437.158660][T20995] netlink: 'syz.0.3679': attribute type 1 has an invalid length. [ 437.587673][T21015] block nbd0: not configured, cannot reconfigure [ 437.700391][T21020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3686'. [ 437.709998][T14966] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 437.724026][T21020] openvswitch: netlink: Flow key attr not present in new flow. [ 437.734986][T14966] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 437.805477][ T9776] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 437.856179][T21030] netlink: 'syz.1.3689': attribute type 39 has an invalid length. [ 438.243577][T21046] pimreg: entered allmulticast mode [ 438.952295][T21089] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 439.005552][T21089] netlink: 'syz.3.3705': attribute type 6 has an invalid length. [ 439.016673][ T5905] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 439.279558][T21115] __nla_validate_parse: 2 callbacks suppressed [ 439.279577][T21115] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3711'. [ 439.308917][T21115] netlink: 'syz.2.3711': attribute type 1 has an invalid length. [ 439.317620][T21115] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3711'. [ 439.341912][T21122] veth1_to_batadv: entered allmulticast mode [ 439.370068][T21120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3712'. [ 439.473812][T21129] dummy0: entered allmulticast mode [ 439.555554][T14966] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 439.636953][T21123] dummy0: left allmulticast mode [ 439.771116][T21138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3718'. [ 439.783887][T21140] netlink: 'syz.4.3719': attribute type 1 has an invalid length. [ 439.871858][ T1316] lec:lec_start_xmit: lec0:No lecd attached [ 439.883053][T21145] ±ÿª¨úrBº“€: renamed from lo [ 439.888095][T21147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3721'. [ 439.942380][T21147] 8021q: adding VLAN 0 to HW filter on device bond3 [ 439.962037][T21151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3721'. [ 439.980337][T21151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3721'. [ 439.990136][T21151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3721'. [ 440.001776][T21151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3721'. [ 440.025963][ T5905] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 440.131350][T21164] veth1_to_batadv: entered allmulticast mode [ 440.301947][T21177] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 440.582522][T21179] syzkaller0: entered promiscuous mode [ 440.590317][T21179] syzkaller0: entered allmulticast mode [ 440.611948][T21195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3732'. [ 440.621656][T21193] veth5: entered allmulticast mode [ 440.627119][T21182] tipc: Started in network mode [ 440.632077][T21182] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 440.639652][T21182] tipc: Enabled bearer , priority 14 [ 442.041399][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 442.413209][T14966] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 442.422714][T14966] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 442.468363][ T5905] tipc: Node number set to 10463914 [ 442.540936][T21206] netlink: 'syz.3.3737': attribute type 6 has an invalid length. [ 442.560711][T21206] IPv6: NLM_F_CREATE should be specified when creating new route [ 442.735472][ T9776] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 442.872911][T21220] 8021q: adding VLAN 0 to HW filter on device bond4 [ 442.959641][T21220] bond4: entered promiscuous mode [ 442.976819][T21220] bond4: entered allmulticast mode [ 443.000205][T21220] 8021q: adding VLAN 0 to HW filter on device bond4 [ 443.010200][T21220] team0: Port device bond4 added [ 443.028961][T21239] netlink: 'syz.1.3747': attribute type 39 has an invalid length. [ 443.031562][T21229] vxcan3: entered promiscuous mode [ 443.051172][T21231] tipc: Started in network mode [ 443.056231][T21231] tipc: Node identity 4abf6a83f327, cluster identity 4711 [ 443.063598][T21231] tipc: Enabled bearer , priority 0 [ 443.073409][T21237] lo speed is unknown, defaulting to 1000 [ 443.113605][T21235] syzkaller0: entered promiscuous mode [ 443.119947][T21235] syzkaller0: entered allmulticast mode [ 443.128237][T21237] lo speed is unknown, defaulting to 1000 [ 443.157763][T21237] lo speed is unknown, defaulting to 1000 [ 443.165956][T21231] tipc: Resetting bearer [ 443.173181][T21237] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 443.190610][T21230] tipc: Resetting bearer [ 443.196899][T21237] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 443.229854][T21237] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 443.240551][T21230] tipc: Disabling bearer [ 443.269860][T21237] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 443.304629][T21245] netlink: 'syz.3.3749': attribute type 11 has an invalid length. [ 443.336158][T21237] lo speed is unknown, defaulting to 1000 [ 443.348739][T21237] lo speed is unknown, defaulting to 1000 [ 443.356471][T21237] lo speed is unknown, defaulting to 1000 [ 443.363990][T21237] lo speed is unknown, defaulting to 1000 [ 443.372516][T21237] lo speed is unknown, defaulting to 1000 [ 443.842766][T21271] netlink: 'syz.2.3759': attribute type 6 has an invalid length. [ 443.851220][T21271] netlink: 'syz.2.3759': attribute type 1 has an invalid length. [ 443.862166][T21271] block nbd0: Unsupported socket: should be TCP or UNIX. [ 443.932340][T21278] netlink: 'syz.2.3761': attribute type 5 has an invalid length. [ 443.994265][T21278] geneve2: entered promiscuous mode [ 444.000102][T21278] geneve2: entered allmulticast mode [ 444.013644][ T7056] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 444.028610][ T7056] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 444.046540][ T7056] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 444.065838][ T7056] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 444.156078][T21288] erspan0: entered promiscuous mode [ 444.161511][T21288] macsec2: entered promiscuous mode [ 444.170282][T21288] erspan0: left promiscuous mode [ 444.370499][T21296] __nla_validate_parse: 12 callbacks suppressed [ 444.370517][T21296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3765'. [ 444.490897][T21299] macvtap1: entered promiscuous mode [ 444.519212][T21299] macvtap1: entered allmulticast mode [ 444.651394][T21313] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3772'. [ 444.697434][T21317] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3774'. [ 444.717964][T21317] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3774'. [ 444.728208][T21317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3774'. [ 444.738158][T21317] netlink: 'syz.2.3774': attribute type 1 has an invalid length. [ 444.772287][T21324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3776'. [ 444.800877][T21321] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3775'. [ 444.810131][T21321] netlink: 245 bytes leftover after parsing attributes in process `syz.1.3775'. [ 444.885582][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 444.893672][ C1] lec:lec_tx_timeout: lec0 [ 445.015112][T21333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3779'. [ 445.169265][T21338] lo speed is unknown, defaulting to 1000 [ 445.449152][T21359] xt_hashlimit: size too large, truncated to 1048576 [ 445.722588][T21371] netlink: 'syz.3.3787': attribute type 1 has an invalid length. [ 445.756777][T21371] 8021q: adding VLAN 0 to HW filter on device bond5 [ 445.773311][T21371] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 445.786085][T21371] bond5: entered promiscuous mode [ 445.792372][T21371] bond5: entered allmulticast mode [ 445.966671][T21340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 445.987616][T21381] netlink: 'syz.3.3791': attribute type 4 has an invalid length. [ 446.005308][T21381] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3791'. [ 446.186973][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 446.308839][T21389] lo speed is unknown, defaulting to 1000 [ 446.437718][T21399] netlink: 'syz.3.3797': attribute type 10 has an invalid length. [ 446.702080][T21411] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“€ may have been left with an inconsistent configuration, please check. [ 447.938904][T21487] netlink: 'syz.3.3813': attribute type 1 has an invalid length. [ 447.947004][ C1] ================================================================== [ 447.955084][ C1] BUG: KASAN: slab-use-after-free in ax25_heartbeat_expiry+0x115/0x140 [ 447.963335][ C1] Read of size 4 at addr ffff888058799660 by task cmp/21488 [ 447.970604][ C1] [ 447.972929][ C1] CPU: 1 UID: 0 PID: 21488 Comm: cmp Not tainted syzkaller #0 PREEMPT(full) [ 447.972948][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 447.972967][ C1] Call Trace: [ 447.972973][ C1] [ 447.972980][ C1] dump_stack_lvl+0xe8/0x150 [ 447.973008][ C1] print_address_description+0x55/0x1e0 [ 447.973033][ C1] ? ax25_heartbeat_expiry+0x115/0x140 [ 447.973056][ C1] print_report+0x58/0x70 [ 447.973076][ C1] kasan_report+0x117/0x150 [ 447.973097][ C1] ? call_timer_fn+0xd4/0x5e0 [ 447.973113][ C1] ? ax25_heartbeat_expiry+0x115/0x140 [ 447.973139][ C1] ax25_heartbeat_expiry+0x115/0x140 [ 447.973164][ C1] call_timer_fn+0x192/0x5e0 [ 447.973179][ C1] ? __pfx_ax25_heartbeat_expiry+0x10/0x10 [ 447.973202][ C1] ? call_timer_fn+0xd4/0x5e0 [ 447.973216][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 447.973235][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 447.973255][ C1] ? __pfx_ax25_heartbeat_expiry+0x10/0x10 [ 447.973280][ C1] __run_timer_base+0x652/0x8b0 [ 447.973303][ C1] ? ktime_get+0x45/0x220 [ 447.973328][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 447.973357][ C1] run_timer_softirq+0xb7/0x170 [ 447.973381][ C1] handle_softirqs+0x22a/0x840 [ 447.973406][ C1] ? __irq_exit_rcu+0xca/0x220 [ 447.973432][ C1] __irq_exit_rcu+0xca/0x220 [ 447.973455][ C1] irq_exit_rcu+0x9/0x30 [ 447.973477][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 447.973498][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 447.973515][ C1] RIP: 0033:0x7f31281a6850 [ 447.973539][ C1] Code: Unable to access opcode bytes at 0x7f31281a6826. [ 447.973547][ C1] RSP: 002b:00007ffec0853728 EFLAGS: 00000246 [ 447.973567][ C1] RAX: 0000000000000004 RBX: 00007ffec0853830 RCX: 00007ffec0853730 [ 447.973579][ C1] RDX: 00007ffec08537e0 RSI: 00007ffec0854018 RDI: 0000000000000004 [ 447.973590][ C1] RBP: 00007ffec0853d90 R08: 0000000000000000 R09: 0000000000000001 [ 447.973600][ C1] R10: 000000000000006c R11: 00007ffec085383c R12: 0000000000000000 [ 447.973611][ C1] R13: 00007f312836bc26 R14: 00007ffec0853da0 R15: 0000000000000000 [ 447.973629][ C1] [ 447.973634][ C1] [ 448.180657][ C1] Allocated by task 17438: [ 448.185065][ C1] kasan_save_track+0x3e/0x80 [ 448.189799][ C1] __kasan_kmalloc+0x93/0xb0 [ 448.194401][ C1] __kmalloc_cache_noprof+0x31c/0x660 [ 448.199780][ C1] ax25_dev_device_up+0x54/0x5f0 [ 448.204766][ C1] ax25_device_event+0x127/0x8a0 [ 448.209709][ C1] notifier_call_chain+0x1ad/0x3d0 [ 448.214820][ C1] __dev_notify_flags+0x1a9/0x310 [ 448.219842][ C1] netif_change_flags+0xe8/0x1a0 [ 448.224768][ C1] dev_change_flags+0x130/0x270 [ 448.229602][ C1] dev_ioctl+0x7b4/0x1150 [ 448.233931][ C1] sock_do_ioctl+0x23e/0x320 [ 448.238513][ C1] sock_ioctl+0x5c6/0x7f0 [ 448.242845][ C1] __se_sys_ioctl+0xfc/0x170 [ 448.247442][ C1] do_syscall_64+0x15f/0xf80 [ 448.252031][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.257915][ C1] [ 448.260228][ C1] Freed by task 21316: [ 448.264277][ C1] kasan_save_track+0x3e/0x80 [ 448.268946][ C1] kasan_save_free_info+0x46/0x50 [ 448.273972][ C1] __kasan_slab_free+0x5c/0x80 [ 448.278727][ C1] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 448.284267][ C1] rcu_free_sheaf+0x31/0x200 [ 448.288850][ C1] rcu_core+0x7cd/0x1070 [ 448.293089][ C1] handle_softirqs+0x22a/0x840 [ 448.297851][ C1] __irq_exit_rcu+0xca/0x220 [ 448.302439][ C1] irq_exit_rcu+0x9/0x30 [ 448.306685][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 448.312327][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 448.318386][ C1] [ 448.320705][ C1] The buggy address belongs to the object at ffff888058799600 [ 448.320705][ C1] which belongs to the cache kmalloc-256 of size 256 [ 448.334748][ C1] The buggy address is located 96 bytes inside of [ 448.334748][ C1] freed 256-byte region [ffff888058799600, ffff888058799700) [ 448.348446][ C1] [ 448.350761][ C1] The buggy address belongs to the physical page: [ 448.357168][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888058798400 pfn:0x58798 [ 448.367220][ C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 448.375710][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 448.384206][ C1] page_type: f5(slab) [ 448.388188][ C1] raw: 00fff00000000240 ffff88813fe2eb40 ffffea0001e39810 ffffea0000f6bc10 [ 448.396762][ C1] raw: ffff888058798400 0000000800100009 00000000f5000000 0000000000000000 [ 448.405336][ C1] head: 00fff00000000240 ffff88813fe2eb40 ffffea0001e39810 ffffea0000f6bc10 [ 448.413999][ C1] head: ffff888058798400 0000000800100009 00000000f5000000 0000000000000000 [ 448.422661][ C1] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 448.431319][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 448.439970][ C1] page dumped because: kasan: bad access detected [ 448.446373][ C1] page_owner tracks the page as allocated [ 448.452071][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5841, tgid 5841 (syz-executor), ts 77255198835, free_ts 24618702542 [ 448.473420][ C1] post_alloc_hook+0x231/0x280 [ 448.478186][ C1] get_page_from_freelist+0x24ba/0x2540 [ 448.483728][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 448.489537][ C1] allocate_slab+0x77/0x660 [ 448.494037][ C1] refill_objects+0x339/0x3d0 [ 448.498715][ C1] __pcs_replace_empty_main+0x321/0x720 [ 448.504250][ C1] __kmalloc_noprof+0x474/0x760 [ 448.509152][ C1] __register_sysctl_table+0xba1/0x1340 [ 448.514692][ C1] __devinet_sysctl_register+0x386/0x490 [ 448.520359][ C1] devinet_sysctl_register+0x187/0x200 [ 448.525805][ C1] inetdev_init+0x2a4/0x4e0 [ 448.530295][ C1] inetdev_event+0x30d/0x1610 [ 448.534959][ C1] notifier_call_chain+0x1ad/0x3d0 [ 448.540061][ C1] register_netdevice+0x18c9/0x1ec0 [ 448.545251][ C1] veth_newlink+0x67b/0xb70 [ 448.549756][ C1] rtnl_newlink_create+0x329/0xb70 [ 448.554855][ C1] page last free pid 1 tgid 1 stack trace: [ 448.560642][ C1] __free_frozen_pages+0xbc7/0xd30 [ 448.565753][ C1] free_contig_range+0xb7/0x100 [ 448.570615][ C1] destroy_args+0x4e5/0x570 [ 448.575117][ C1] debug_vm_pgtable+0x3f8/0x410 [ 448.579966][ C1] do_one_initcall+0x250/0x870 [ 448.584726][ C1] do_initcall_level+0x104/0x190 [ 448.589678][ C1] do_initcalls+0x59/0xa0 [ 448.594006][ C1] kernel_init_freeable+0x2a6/0x3e0 [ 448.599200][ C1] kernel_init+0x1d/0x1d0 [ 448.603525][ C1] ret_from_fork+0x514/0xb70 [ 448.608115][ C1] ret_from_fork_asm+0x1a/0x30 [ 448.612871][ C1] [ 448.615180][ C1] Memory state around the buggy address: [ 448.620813][ C1] ffff888058799500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 448.628948][ C1] ffff888058799580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 448.636996][ C1] >ffff888058799600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 448.645039][ C1] ^ [ 448.652223][ C1] ffff888058799680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 448.660276][ C1] ffff888058799700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 448.668321][ C1] ================================================================== [ 448.676453][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 448.683653][ C1] CPU: 1 UID: 0 PID: 21488 Comm: cmp Not tainted syzkaller #0 PREEMPT(full) [ 448.692436][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 448.702496][ C1] Call Trace: [ 448.705763][ C1] [ 448.708684][ C1] vpanic+0x56c/0xa60 [ 448.712701][ C1] ? __pfx_vpanic+0x10/0x10 [ 448.717193][ C1] ? irqentry_exit+0x218/0x730 [ 448.721969][ C1] panic+0xc5/0xd0 [ 448.725688][ C1] ? __pfx_panic+0x10/0x10 [ 448.730096][ C1] ? ax25_heartbeat_expiry+0x115/0x140 [ 448.735561][ C1] ? ax25_heartbeat_expiry+0x115/0x140 [ 448.741022][ C1] check_panic_on_warn+0x89/0xb0 [ 448.745957][ C1] ? ax25_heartbeat_expiry+0x115/0x140 [ 448.751418][ C1] end_report+0x73/0x170 [ 448.755657][ C1] ? ax25_heartbeat_expiry+0x115/0x140 [ 448.761117][ C1] kasan_report+0x128/0x150 [ 448.765617][ C1] ? call_timer_fn+0xd4/0x5e0 [ 448.770285][ C1] ? ax25_heartbeat_expiry+0x115/0x140 [ 448.775745][ C1] ax25_heartbeat_expiry+0x115/0x140 [ 448.781036][ C1] call_timer_fn+0x192/0x5e0 [ 448.785624][ C1] ? __pfx_ax25_heartbeat_expiry+0x10/0x10 [ 448.791432][ C1] ? call_timer_fn+0xd4/0x5e0 [ 448.796101][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 448.801205][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 448.806400][ C1] ? __pfx_ax25_heartbeat_expiry+0x10/0x10 [ 448.812208][ C1] __run_timer_base+0x652/0x8b0 [ 448.817063][ C1] ? ktime_get+0x45/0x220 [ 448.821396][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 448.826771][ C1] run_timer_softirq+0xb7/0x170 [ 448.831618][ C1] handle_softirqs+0x22a/0x840 [ 448.836390][ C1] ? __irq_exit_rcu+0xca/0x220 [ 448.841162][ C1] __irq_exit_rcu+0xca/0x220 [ 448.845776][ C1] irq_exit_rcu+0x9/0x30 [ 448.850019][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 448.855765][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 448.861740][ C1] RIP: 0033:0x7f31281a6850 [ 448.866154][ C1] Code: Unable to access opcode bytes at 0x7f31281a6826. [ 448.873154][ C1] RSP: 002b:00007ffec0853728 EFLAGS: 00000246 [ 448.879212][ C1] RAX: 0000000000000004 RBX: 00007ffec0853830 RCX: 00007ffec0853730 [ 448.887173][ C1] RDX: 00007ffec08537e0 RSI: 00007ffec0854018 RDI: 0000000000000004 [ 448.895132][ C1] RBP: 00007ffec0853d90 R08: 0000000000000000 R09: 0000000000000001 [ 448.903093][ C1] R10: 000000000000006c R11: 00007ffec085383c R12: 0000000000000000 [ 448.911054][ C1] R13: 00007f312836bc26 R14: 00007ffec0853da0 R15: 0000000000000000 [ 448.919023][ C1] [ 448.922624][ C1] Kernel Offset: disabled [ 448.926943][ C1] Rebooting in 86400 seconds..