last executing test programs: 4.721806107s ago: executing program 3 (id=2903): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x2c, @local, 0x4e24, 0x1, 'sh\x00', 0x18, 0x8, 0x43}, {@loopback, 0x4e20, 0x0, 0xc63, 0x3ff, 0x6}}, 0x44) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000280)={0x2, 0x2}, 0x4) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048001}, 0x24000080) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) socket$netlink(0x10, 0x3, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000400)='l2tp\x00', 0x802, &(0x7f0000000440)={@_ha_fsid={[0x6, 0x8]}, {0x5, 0xffd0, 0x4, 0xfffffffffffffecf}}, 0x4, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0x5}) sendmsg$nl_netfilter(r7, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x16c, 0x8, 0x7, 0x101, 0x70bd29, 0x25dfdbfb, {0x2, 0x0, 0x9}, [@nested={0xc, 0x3e, 0x0, 0x1, [@nested={0x4, 0x75}, @nested={0x4, 0xba}]}, @generic="b73399d55c6a109d59815e29405609849d4afae95984d2cd2ad02a0e36b75f0511456bce95ca1577939756688bfbd29fb13a87eebb6c2e389bf3041cdd8c651fd7d98f2965617a7fdac1e511cfe8f27ef16df58fdc8d16085babcff6d40b2c54f6abaa79030eab62766102def9b401ded5c271ce0e83dd97fdaddc0ccb9ace2ccf4dc8bcc58072aa4d942362fdec447e", @typed={0xbb, 0x129, 0x0, 0x0, @binary="6ab21b48cdc909cd2a99bc869c34c6154dedbfdbbc99e2b94c83ba08bde29959b82f79f722e57addf29439eca41a6690e1952135f66e07e08813868fdb8679745d6d09b053d9f506f7eddb3d45bfdf50b07a4aca93cc3e993e4ed68992422498dc06ee9dfe45f16d032c2d4dd418d1228961d74e54eb708101a311e3db9f8ad14dc5047e09615fdb3503c1688fefaa1c07fe030205a38fd3c40267767f9c0b2b5b37d706241c818425b3d298af18cbed116b6b268d1ccd"}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'syztnl0\x00', r5, 0x0, 0x5, 0x9, 0x5, 0x45, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7800, 0x7840, 0x66a, 0x8f89}}) sendmsg$nl_route_sched(r0, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff1, 0x3}, {0x7, 0xffe0}, {0xffe0, 0x4}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x801) r10 = openat$cgroup_ro(r7, &(0x7f0000000980)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000009c0)) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000001280)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001240)={&(0x7f0000000c80)={0x5ac, r11, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x14, 0x84, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x3a0, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x100, 0x0, "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"}, @NL80211_BAND_2GHZ={0x36, 0x0, "163906cc8e0c792106b55e21c67b43f972e8f6391dc4511f0e9d270e18265a6e6baef4e084649534b97fcd65103ea8c9a8a6"}, @NL80211_BAND_6GHZ={0x1d, 0x3, "e11365f85d2699b36963c5300d6ee7573f135c895920307e1d"}, @NL80211_BAND_6GHZ={0x50, 0x3, "e48b0575c62f6499c165c2c90227d8dc5bc0252d6c5bbdb6461e29bb5d022d57758a5b1fd7a3e7d52e11c13c1404f1ed9964b853926d745c6c2061e3fa8bca9b53349f6e00efd8133299f39d"}, @NL80211_BAND_6GHZ={0xac, 0x3, "1a3910c89dcb49f5c17721181f0eea44d2ef372af6ebf0dc3a83fcfaa282386cefbba295183d650a6f4d06039621817d6bc6d78a21a9bfb6d3a22ba6313b58aef4609221523ace29065d3617f17a5319f098ac43cc9cf9b3b0de60e09a654e4f442ccd7063dc46d6d9645392e6f6cd0b41893a6708be68bce03b0940e91603554ab14676f4c45625b6781ff2f720c309cfbe512f3a454ae247d706e337b16d9a45e5fe64e22652e6"}, @NL80211_BAND_2GHZ={0x9e, 0x0, "cab9144c968665e536305ee821f5eac1b3fafddccd51b6d34748f855e414d51041065af9a8f02534ddf0fe0f06344d384cf880e76100f20ffdf2e4ba399e978f8fd13ff46e98f5ea7ea9f4015eea16c662cc2877dde44d8fbebe7c0177f7645b72dd7141a1d45b4a169a048c2014e439573d5095b794e80da9355d9ab186a2ebdfc2a84f04a857313d6754bdf16371180d1a7604d5de2f1c80ef"}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0x65, 0x1, "6e24a11f57f574df8bc8154b40227c58f889d7295b06faed1db8a0dcf3172e0dd8c78dc34471e0fffa07d4af385f87141aac2c89bd0d481954d9408a2b8a9f3f820aaa3b0634a5b4e6cf953440144f6951afea0fd7197515a6d2b1f5c6457aa294"}, @NL80211_BAND_2GHZ={0x3b, 0x0, "a132dda17f17361212c95f571f269805e54709d051210bf5f3ab243ef63dd9d948a90ac9c0d3c009e698efdd8427a20552ed671a5f5e78"}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x6}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1b0, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa6, 0x3, "683f56628f4e6c5ac3b35d28399e69161e6b71729fa3743b4f98163bbc7904c3529e4a4f49bbfec44cac8977f4aef162b5748c76c9c4376ed11a869551c52cb8196396790d93ee750ce83b774d7344e96511ac58019c705524909795ac464a3ed2fc104b7476217b8540750feaa8beda62ff2ce8b47954ac8734ebbeacf1795133b1993d4c962e39e886cded571b054b639bee38f90f7bf522f52294b5de7edbeb16"}, @NL80211_BAND_5GHZ={0x103, 0x1, "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"}]}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x810}, 0x20000010) sendmsg$nl_route_sched(r1, &(0x7f0000001400)={&(0x7f00000012c0), 0xc, &(0x7f00000013c0)={&(0x7f0000001300)=@deltaction={0x9c, 0x31, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6ec}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x4004044) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000001440)={r10}) pipe(&(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25GDTEFACILITIES(r14, 0x89ea, &(0x7f00000014c0)) sendmsg$BATADV_CMD_GET_MESH(r13, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x44, r8, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x24048000) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001640)={r9, @remote, @broadcast}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x1d, 0x5, 0x3, 0x6, 0x10000, 0xffffffffffffffff, 0x77f, '\x00', 0x0, r7, 0x5, 0x3, 0x2, 0x0, @void, @value, @value=r10}, 0x50) 4.445565153s ago: executing program 3 (id=2906): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd700003dbdf2501000000000000000c4100000014001462726f6164636173742d6c696e6b0000c5de48d8a5ee55e8566d5ae0511f54555d829a10187b70015e140aa592554adadf30611da330ed2196eab3b258b273b55061be9733bb4b4f27b9948914fdfeaf67bf4565d87d6a1a00c59d0bb029d174c2b4905a803dbdae9bf83d7f03e88006725d6b09cb92b86feb9fa040e2627ef3793cd99c1c53bd4d24fce7b05a208d"], 0x30}}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x134, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_USERDATA={0x22, 0xd, 0x1, 0x0, "b8a869ee7b7702c911105e97e13a814be3d1afd3373a1291ac18253d4a1c"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPRESSIONS={0xdc, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0xb8, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xa8, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'tcpmss\x00'}, @NFTA_MATCH_NAME={0x8, 0x1, 'cpu\x00'}, @NFTA_MATCH_INFO={0x76, 0x3, "2db7bc03d81561f777824997e29fb3e7d50adc6797ef93aef58ac6c2218e159dc7a2ffea2ecff32552f656e8c5522c29a02caebf27dce4dfb0337c2d6d8bf3a1bf22d463364c86a2203398ac8d088b82e5d4e8c49eb7236bd1cdba004a1a285c77d7e3fca35c803c16a88b4896ca4f331b87"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x27}]}, @NFT_MSG_NEWSET={0x10c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_DESC={0x54, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfa22}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfd4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9af}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0x80, 0xd, 0x1, 0x0, "f1713d82e8f8d06af6243e31468ae838ea9ee128a5980746b7a65d86e874ef546853b0f0e2dd609b3c72d364700cda23990042fdb07495f54d3de788c83f9470e0011ebb0cecd73f176c54e5ba15e7c3829de33ee2bb0922c82133e7a2f168ab869b6e2b5abbae94eedbee73084c3407eba7344f44208af8909740ad"}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x35}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x58, 0xe, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x390}, 0x1, 0x0, 0x0, 0x2404c1c5}, 0x8090) 4.228613599s ago: executing program 3 (id=2908): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048060}, 0x20004080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x80000001) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x800, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r3, 0x1) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x100, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) connect$inet(r1, &(0x7f0000000000)={0x2, 0x7, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) getsockopt$inet_tcp_int(r1, 0x6, 0x2e, 0x0, &(0x7f0000000040)) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x9, [@decl_tag={0x7, 0x0, 0x0, 0x11, 0x1, 0x9}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto, @union={0x0, 0x0, 0x0, 0x2, 0x0, 0x3}]}, {0x0, [0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x55}, 0x28) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r6, 0xc040583f, &(0x7f0000000140)={{@_ha_fsid={[0xffff, 0x2]}, {0x7, 0x6e, 0x800, 0x2}}, {{[0xffffffff, 0x6, 0x10001, 0x4]}, 0x0, 0x1, 0xe61, 0x0, &(0x7f0000000100)=[{{@_ha_fsid={[0x5, 0x76]}, {0xffff, 0x53d, 0x0, 0x4}}, 0x3, 0x0, '^$\x00'}]}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x800000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.084712521s ago: executing program 3 (id=2918): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000002c0)={'macsec0\x00', @random="0100061f8145"}) 2.969697252s ago: executing program 4 (id=2920): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x8}}]}, 0x24}, 0x1, 0x5502000000000000, 0x0, 0x48084}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040004) 2.969116451s ago: executing program 2 (id=2921): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca}]}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffffffffffffff2e, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0xf, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r3}]}, 0x3c}}, 0x4080) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="850000002f000000d7000000100000009500000000000000423d19f1e4e058f160906b507e5120a0425f48f9550dcf76fc596696e6f89a4a2b1d29eadfdabd5217ba2d02d98d17b488d5437e04555f3dc719afc000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) 2.966049708s ago: executing program 3 (id=2922): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x401, 0x5, [0xff, 0x1, 0x5, 0x5500, 0x1a]}, 0x12) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="fb55", 0x2}], 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, '\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) close(0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) recvmmsg(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40000000, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x110, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x80, 0x5, 0x2}, {0x6, 0x0, 0x2}]}, 0x10) 2.903681176s ago: executing program 4 (id=2923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='b '], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) splice(r1, 0x0, r4, 0x0, 0xc, 0xd) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0xd) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0x20000008}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r7, 0x1000}], 0x1, &(0x7f0000000180), 0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000ee17200000", @ANYRES32=r5, @ANYBLOB="00000000000000009500000000000000"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r8], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = socket(0x2b, 0x80801, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x61, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[], 0x7c}}, 0x24044000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x74, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x3c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x4}, @IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_GUARD={0x5, 0x5, 0x1}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x1}, @IFLA_BRPORT_COST={0x8, 0x3, 0xff}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x3}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) 2.866531457s ago: executing program 1 (id=2925): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x3c, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000001540)=@ethtool_cmd={0x0, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x6, 0xff, 0x0, 0xfffffeff}}) (async, rerun: 64) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaaaa86dd66c2eeed0018110000000000000000000000000000000000fe8000000000000000000000000000aa4e204e2200"], 0x0) (rerun: 64) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r0}) (async) r3 = socket(0x14, 0x2, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (rerun: 64) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001780)={0x194, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x140, 0x8, 0x0, 0x1, [{0x138, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x108, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x4}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x61d0, 0x0) (async, rerun: 64) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000001480), &(0x7f00000014c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001440)={'vxcan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4040880) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000001500)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0xf}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 64) r8 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) recvmsg$can_bcm(r3, &(0x7f0000001400)={&(0x7f0000000040), 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001380)=""/69, 0x45}, 0x0) (async) getsockopt$ax25_int(r3, 0x101, 0x4, &(0x7f0000000000), &(0x7f0000000140)=0x4) 2.777086919s ago: executing program 2 (id=2926): syz_emit_ethernet(0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000140600fe8000000000000000000000000000aafe8000000000000000000000000000aa80004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="504201009078000070a18a31e8779954e161bae78ce897a41fef92c96ee211c2175de8713e2456ecad79f94d4e17b28df9f4b3220fbf003428dd79a2279319075cae3c8fc0e09d02b814bb3bffaed9efeab32615f41aea89a15b5587957b144ab959bf0680af0f669093e3ccebf7a9f3a1fa868493e0d18e0f644797aa0069acaccf267c5205113a9ae45a9b"], 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f00000007c0)) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a8e9, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2e}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff670000000800000018290000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007e9200000000000056080000010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x42, 0x3, 0x0, {0xa, 0x4e24, 0x1, @private1, 0x3}}}, 0x32) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000080)=0x1, 0x4) sendmsg$can_j1939(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)='NT', 0x2}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004) 2.731476641s ago: executing program 3 (id=2927): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @any, 0x0, 0x2}, 0xe) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000015e50000baa8b03b14a1676495195c0f0000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000002070250000000000202020631af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.537557266s ago: executing program 1 (id=2929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xff60ea325321353a, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x4, 0x1, {0xa, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) sendto$packet(r4, &(0x7f0000000380)="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", 0x121, 0x2000041, &(0x7f0000000080)={0x11, 0x2, r3, 0x1, 0xda, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) (async) close(r1) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xff60ea325321353a, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x4, 0x1, {0xa, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) (async) sendto$packet(r4, &(0x7f0000000380)="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", 0x121, 0x2000041, &(0x7f0000000080)={0x11, 0x2, r3, 0x1, 0xda, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x14) (async) 2.487130984s ago: executing program 4 (id=2930): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f0003002e2e2564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 2.290447029s ago: executing program 2 (id=2932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000140)={r0, &(0x7f0000000000)='-\xc3%&(\x00', 0x1, &(0x7f0000000040)={@align=0xfffffffffffffffa, {0x2, 0xfff, 0x7f, 0x9}}, 0x6, &(0x7f0000000080), &(0x7f0000000100)=0x9}) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000009580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[{0x10, 0x6, 0x8}, {0x10, 0x0, 0x492}], 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000008140)=[{0x10, 0x3a, 0x4}, {0x10, 0x1, 0x3}], 0x20}}], 0x2, 0x40840) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b400000000009000100", @ANYRES16], 0xc4}}, 0x0) 2.088594481s ago: executing program 2 (id=2934): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000009500"/24], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="1100"/12, @ANYRES32=0x0, @ANYBLOB="5a5631ad421217fd928a43cf4222cb242cc2dc9bb355aca5780f7fbbb67f77201d", @ANYRES64=0x0], 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = openat$cgroup_freezer_state(r4, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f00000000c0)='THAWED\x00', 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={r7, 0x2400}, &(0x7f0000000200)=0x8) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r11, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r11, 0x0) mmap(&(0x7f0000492000/0xf000)=nil, 0xf000, 0x1000002, 0x12, r10, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x7, 0x8, 0xd401}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x0, 0x4}, {}, {0x9, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x8, 0x8, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 1.994077856s ago: executing program 1 (id=2936): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, @in=@local, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2b}, 0x2, @in=@loopback, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003640)={@cgroup, 0xffffffffffffffff, 0x16, 0x20}, 0x20) 1.897743179s ago: executing program 4 (id=2937): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000001740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x3}]}, {0x0, [0x0, 0x2e, 0x2e, 0x3e]}}, 0x0, 0x2a, 0x0, 0x1, 0xc}, 0x28) (async) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001800192a00000000000000000a002000000000000005000008001700ffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000380)={r4, 0x3, 0x1, "a2"}, 0x9) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={r4, @in6={{0xa, 0x4e23, 0x35, @local, 0x8}}, 0x40, 0x6a, 0x7fff, 0x9, 0xb0, 0x401}, &(0x7f0000000100)=0x9c) (async) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="9db2bff6241b304bf971c32e0998f08705c8b52e8f6857fa8c4e1c5ea1d6be5a5729cfacacc40dca2569a7bdc5b9f1830f2fbd56", 0x34}, {0x0}], 0x2, &(0x7f0000000400)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0x0, 0x80000000}}], 0x20, 0x4048800}, 0x28048010) 1.372521454s ago: executing program 0 (id=2941): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x3c, 0x9, 0x5, 0x18, 0x10000}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf0000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100030000009500000000000000db003000a0000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0xc8, &(0x7f0000000040)=""/200}, 0x94) 1.312600778s ago: executing program 0 (id=2942): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2c, 0x18, 0x209, 0x0, 0x25dfdbff, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0xd, 0x9, 0x0, 0x1, [@nested={0x8, 0xb, 0x0, 0x1, [@generic="d6c00201"]}, @generic="fa"]}]}, 0x2c}}, 0x10) connect$unix(r1, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x140, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@dev, @in=@remote}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x32}, @in=@dev, {}, {0x0, 0x8, 0x0, 0x8000}, {0x0, 0x4000000}, 0x0, 0x1000000, 0xa}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x40, "25cac521"}}]}, 0x140}}, 0x4000080) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000300)={@private, @broadcast, 0x0}, &(0x7f0000000340)=0xc) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f0000000d40)={'filter\x00', 0x0, [0x1, 0x1, 0x7f]}, &(0x7f0000000dc0)=0x44) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0}, &(0x7f0000000400)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000e00)={0x0, 'pim6reg0\x00', 0x2}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000cc0)={&(0x7f00000004c0)=@delchain={0x7dc, 0x65, 0x200, 0x70bd2c, 0xffffff23, {0x0, 0x0, 0x0, r4, {0xffe1, 0xffe0}, {0x3, 0x3}, {0x9, 0xe}}, [@TCA_RATE={0x6, 0x5, {0xfa, 0x74}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_fw={{0x7}, {0xfff4, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_FW_CLASSID={0x8, 0x1, {0x5, 0x3}}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_MASK={0x8, 0x5, 0x2}, @TCA_FW_INDEV={0x14, 0x3, 'vxcan1\x00'}, @TCA_FW_POLICE={0x14, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x2}}, @TCA_FW_MASK={0x8, 0x5, 0x7fffffff}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x714, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_ACT={0x6f0, 0x2, [@m_nat={0xfc, 0x5, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x6, 0x5, 0x7, 0x8001}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc949, 0x1, 0x4, 0xc2, 0x5}, @loopback, @broadcast, 0xff000000, 0x7}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x8001, 0x5, 0x81, 0x10}, @broadcast, @remote, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x6, 0x10000000, 0xfffffffd, 0x8}, @loopback, @loopback, 0xff000000, 0x1}}]}, {0x32, 0x6, "3dcfc1724f016fcb7398fa4472dd60f56ef6e1b1a618aa25779ce425d02dcf3b05ff6817ec860ac485ed7c27265f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x130, 0x12, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x2, 0xfffffffffffffff9, 0x1, 0x1000}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x62, 0x1, 0x8, 0x5, 0x8}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x2, 0x8}, 0x1, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x6, 0x2, 0x8001, 0x9}, 0x2, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x19, 0xf, 0x5, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0xb50e, 0x6, 0xfffffff0, 0x1ff}, 0x1, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x8, 0x1, 0x7ff, 0x3}, 0x3, r11}}]}, {0x21, 0x6, "891518290344d22ae34e083db310b76d73fe05084cde1a310afdef2104"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x98, 0x5, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "f87539e329aa8032ec15beeba50ade10"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0ab362fe26085fb4a7b909b66ba59bf4"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0x19}}, @TCA_CT_ZONE={0x6, 0x4, 0x2}]}, {0x2e, 0x6, "f59104eeb059d590c5ee44edb47d771bf98ea48e628160cac7e6c2fbd1ebdcd18a4dd3f702c4adab396e"}, {0xc, 0x7, {0x1, 0xb4dae560272f8968}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x154, 0x20, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xeef}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xf, 0x0, 0x1, 0x8, 0x6}, 0xe}}]}, {0xe6, 0x6, "c578141342c02bfeece06d97d224f1169dc84b9d2ad15869532548dce2560c3f1d560c0d9e929d47732f38a297c834ebb68d59abaad14ae65cbf7467edcad0247a22c156640e3fc3fb5be58681be98c2788b3cb732248c10e73a2d3d2a02623bc135e8b4bbaa42b82e6bba3684c370de9f489861bbf9906cd8a60b561f0abf901d5befc98326fdff6d1bd433d3ad50c1b02e705533c68482963da28a9959d525da2fdb6c94011ea079653eab8abcd1b70ac7cff52b98ebd671f04be678e38c9c9de198f097456eb3c1a8c1a00afc88fd052b916c01344ba7455508ff623f0501bb4c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x164, 0x13, 0x0, 0x0, {{0x7}, {0xd0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x50, 0x6, {0x80, 'mangle\x00', 0xf9, 0xf, "d8ed0fd3cba684800266885763a09575452c0a8a2fd7d97ed019eebe4d6f75b0ab57141c7ff5"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x70, 0x6, "62ae9da74b43af15e87e58acfb362560a5aab1bfb81e30c7f0d203a8d33a92a29b629e936fd18bd4f25a10bb06ac5a05cad04345353fc4e3bbff59b824186d83e06c1ce2fa56e6c6490fb5804e0029b1c4b5ddff63effe852b416ffa72f70f359a83a3938be6cd134bd82294"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x170, 0x6, 0x0, 0x0, {{0x7}, {0x80, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x5}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0xcb, 0x6, "aafd6fe6b7b709eb99460815ab39645bd8b64f76da2462b48e73c73d019c9b51356f802f65a34229027e451c821f1a119f898842abe9b12867b612fd8dfd80e820520793035f2f1143e092bd413ff80d6e48977b8518a4b4156366d19cee9ba3a1a56b34860fe2717179df6d0157d00cfd0a227f1be11a0af3216ff77c506eb77740dca87d41bc2e565bb53076c1b87b57e8995d40193dd260d7f9f929af1879abd52a3ec6b16458cad0716b93aab3a6a503b0094164dc5acb307f45549541b89f2221a8984e21"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0xd}}]}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffd}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}]}, 0x7dc}, 0x1, 0x0, 0x0, 0xc010}, 0x8000) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 857.035656ms ago: executing program 1 (id=2943): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000d7bf0200000099d1000000"], 0x18, 0x4008000}, 0x28008841) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendto$inet6(r0, &(0x7f0000000000)="9cf178c6d17e969b0d7e7b7cf1cb3b280cb2e7ca9ea30e9eb0330c9c11a2fb072a1827bce009481042a07966d64b779f4ba53f4e8674380ac7a43afe7aa57dbe602a3e831f60819105405a098285e65feec60035f434314df33fbdf24500bcbf0cb153ad", 0x64, 0x40080, &(0x7f0000000080)={0xa, 0x4e23, 0x4a, @mcast1, 0x7}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000940)=@mangle={'mangle\x00', 0x2, 0x6, 0x8d8, 0x250, 0x550, 0x468, 0x550, 0x250, 0x808, 0x808, 0x808, 0x808, 0x808, 0x6, 0x0, {[{{@ipv6={@empty, @private1, [], [0x0, 0x0, 0x0, 0xff], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x5}, 0x0, 0x228, 0x250, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x4}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@rand_addr=0x64010101, [0xff000000, 0x1fe000000, 0xff000000, 0xffffffff], @ipv4=@broadcast, [0xffffffff, 0xff, 0xffffffff], 0x4d5, 0x0, 0x1, 0x1, 0x0, 0x1e}, {@ipv4=@local, [0x0, 0x0, 0xff], @ipv4=@broadcast, [0xff000000, 0xffffffff, 0xffffffff, 0xffffff00], 0x4d4, 0x3507, 0x89, 0x1, 0x16, 0x4}, {@ipv4=@remote, [0xffffff00], @ipv6=@mcast1, [0xff, 0xff000000, 0xffffff, 0xff000000], 0x4d2, 0x3505, 0x19, 0x0, 0x10, 0x9}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x32}, [0x0, 0x0, 0x0, 0xff], @ipv4=@rand_addr=0x64010100, [0xff, 0xffffff00, 0xffffff00, 0xffffffff], 0x4d5, 0x3502, 0x16, 0x0, 0x10, 0xc}], 0x4, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x8, 0x2400], 0x80000000, 0x8, 0x94b06560c6564e1f, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @mcast1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2c}, @dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}], 0xf}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0x0, 0x20}, {0x0, 0x0, 0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0x5, 0x2, 0x8000, 0xc, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x8, @ipv6=@remote, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x938) 854.853942ms ago: executing program 4 (id=2944): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f4bec", 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff0003000000000000000000000000ffff"], 0x4c}}, 0x0) 771.039602ms ago: executing program 0 (id=2945): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f00000000c0)=[0xd240, 0x2]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) r5 = gettid() r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000001700)=r5) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f000000a240)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}]}, 0x28}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r11, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r12, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r13, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xb8, r8, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x7f, 0x3a}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4ac}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x8d}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0x2}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x63, 0xac, "c74a6afa9e9b55505545dc8466204e32282558796d2a597fff979dbedc39c8fe8bbb9671387722e6c665792f07e2d6d06605c09e48a3d87632e48fb124367159b313d55f397f735bdafa33e5efd7205eb2c9616facec3e22045c80d8f4009d"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x200}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0xd5) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, r3, 0x1, 0x70bd2b, 0x0, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0xffffffffffffff2d, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x1}, @IFLA_MACSEC_PROTECT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2c081}, 0x8000) 698.807684ms ago: executing program 2 (id=2946): r0 = socket$netlink(0x10, 0x3, 0x3) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070000000000000000000c0000001c00038008000400001000000800020020000000080005007180bbda180001801400020073797a5f74756e"], 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x81}, 0x1) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000012000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x40}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000180)=0x8) 647.841441ms ago: executing program 1 (id=2947): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="1a762da8b513c15512faa24f42c97f1c01669619d01db4d1b333a9ae", @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000c40)="63eced8e4601000000c35b09f2c5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 591.893401ms ago: executing program 4 (id=2948): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004000000000000000100000014000200776731000000000000000000000000002c0008802800008024000200207317944ac5fe71445aab7748fb1fb6fe46ff3662b5202294e2b857e08b5f19"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x20000010) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff1, 0x3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r8, 0x3c}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f26729165b477a680dacb7e20f9f1e0c86c6e5f0", 0x14}], 0x1}, 0x4011) r9 = socket(0x10, 0x803, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x510}]}, 0x34}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@multicast1, @broadcast, 0x0}, &(0x7f0000000180)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) r15 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x1d, 0x0, 0xfffffffe, 0x5, 0x6, 0x0, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8040}, 0x8010) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r18 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r20 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000680)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r20, r19, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001040)=@newtaction={0x31d4, 0x30, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{0x618, 0x1, [@m_mirred={0xa0, 0x1f, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x7, 0x4, 0x4, 0x8c9}, 0x1, r4}}]}, {0x53, 0x6, "964b06efe11687e8bb6f7b2d035fe0072a4061675a61765dcab53a811a29a422ba916482724797a8f7a790c22cab99a4089f5d836e57c3d2490de0a8a65b176dcf71f0fe2d50be5ec5cc79aa6c9d76"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x787e8cd471c9b843, 0x2}}}}, @m_simple={0x158, 0xf, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x469, 0x5, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x100, 0xd1ee, 0x2, 0x800, 0x3}}, @TCA_DEF_DATA={0xb, 0x3, '&-*@{%\x00'}, @TCA_DEF_DATA={0x8, 0x3, '),/\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6e, 0x9, 0x3, 0x2, 0x3}}]}, {0xcf, 0x6, "a79b7b40ab68be100ba71b6117c9aa3981c9497d61603a052650cae132438ff242db5cf4af07507a99615830b892600dc424203aa8dcdb5160bd510fac88fb73137a59b5d0da7f5f334ee02b82b5e5f36c24f06a092009ae86b398f42fb80e957b616032d2e339959b235784f319261ef9e3590fb1e9625afb926585203f30d6afa96bca51e64070b78a644a53f3ae40503a8f11aac098475ab14c987c356206dd94e55181d7cf4d56444b759b7cd653d8bca9d44a406422573aa851a3f1fa0975da72acbc859e6333b40d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0x13c, 0x11, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x5, 0x3, 0x6, 0x81}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3b, 0x0, 0x3, 0x2}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10, 0x7, 0xffffffffffffffff, 0x2, 0x7}, 0x1, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x3ff, 0x5, 0xecd2, 0x8000}, 0x6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xe, 0x1, 0x400, 0x51}, 0x3, r13}}]}, {0x6f, 0x6, "ae3e967879e35a98c16f4e175cf05c38e5d73d78c91a31a3accbb9ac2698a72b31caf27afc7a33b08ea92efddb5ce90caf698fbcebed7e66a8de590a03f6c85e68eb2a499ab07314afd9ec99e3e550beb2540294cea61bcc62aec5c12b52d1f456e824e672e7f086b1a576"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ctinfo={0xbc, 0x1c, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x80000000}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x4, 0x2, 0x7, 0x1}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}]}, {0x48, 0x6, "70cc3103e9d8fb154ced4f62bf308a3b856752ea18642234ecc717940aead82799cc21a274b36a52bfac29e9979cdbec3f78f1b511cd48b57031434fda66b830d5041d13"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0x1a8, 0xa, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x1ff, 0xffffffffffffffff, 0x7f, 0xffff}, 0x4, r14}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x4, 0x6, 0xe5d, 0x4}, 0x3, r16}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xfffffffb, 0x5, 0x7, 0x9}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x9, 0x2, 0x9, 0x8}, 0x1, r17}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x9, 0x6, 0x3, 0x7}, 0x3, r19}}]}, {0xdc, 0x6, "208a2ca67e3c3bfadf9334e73ea30c928592ce2d138fe0de70e72aceea254a99816e1f698ba7ca31d5bce296b8063e503c9d468eab45fde9861717d18867ca13fba1d5c97bfd0df78d0b53c5c2f34f18fefc0767ee0e997684d8efc68dc2538853cfa1348444c6ad4dfe15a84b50f793ad74b96aa1dca112cec0587522b707eeab97a74464eeeb38094456651535ff39bdeea9b46b5735514d41f2b406d544128bf21186dcdff92e89fc5b2cdd157772b8663f30e27cd7c14b039e47ac74fedf3be1eee7931f076258a8f75a70d40977b675ba7fbf032443"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x7c, 0x12, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x401}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x22, 0x6, "7cced13377e7b19a3c1b70a5a37c4fa414d2f05a31a122b0d9d51c03fbe6"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x5d4, 0x1, [@m_nat={0x150, 0x3, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x21, 0xdd4c, 0x10000000, 0xf, 0x5}, @empty, @broadcast, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4ae, 0x9, 0x2, 0xa2e, 0x80}, @empty, @rand_addr=0x64010101, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x9c, 0x10000000, 0x0, 0x2}, @multicast2, @local, 0x0, 0x1}}]}, {0xb0, 0x6, "acff0be71580dd2bcc5b656548b2a8e5ed4e9f611f6138ab4370f0214742d6a2e3370b18bd4fe16e8ee01f4278a03446eda9e26114555899c50b0596f03cfebec37d5e97246377de936f8e22414b233ceac29479a8423e1b80c18f91110e55dd57e0d3d25a565dea380012241cc0008af671e4eb2c56b8978de05913df24d363ceaee89ea0c117e96e81f577ba56dfd8f07aac3265a8c8e11dea16de5318b1a8d128e6f9699413d5dbb8ec55"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x160, 0x16, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x6, 0x1, 0xf0c1, 0x1ff}, @broadcast, @rand_addr=0x64010102}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x30eb, 0x7, 0xfe, 0x6b46}, @empty, @multicast2, 0xffffffff, 0x1}}]}, {0xe8, 0x6, "56e6f7e8437c2a992e0f28efb307ad30aeb562df5ded7a2de0bce6a0635f7b29e4a629e49f9bfa4729c5e66a336229d435b056cbd76b1fd3d0df7d59c8a45bd3ddf1f5b3fe85fc902fc9e836be081940c272f0bf8a84f15e59fa13c1242505eb6911b8e8483112398e99c700a67544c948784e250c859556388c1597d6f6df0b412e3578154d94cf710f2763a0a713659d4ed2397fe9698c09e30221c26645e2f1dedd7c7e3f03575f457b7ab85367d75e4743950f1bd853a42ea8c258eaffa6a970a66ccfc6eeb792227cefbdcca2016de0d6653bfc6c6b29a21e185073f18bd0f1bca9"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0xc0, 0x1a, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88f7}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xe574d}, @TCA_MPLS_LABEL={0x8, 0x5, 0xe8c97}, @TCA_MPLS_BOS={0x5}]}, {0x59, 0x6, "2c7cb7a1055f4dadc63c8195e4d5569dce482a84917977d942218e6cf1a8d378d09b2633b04e3730a25657c283877cc22236c3d8bb15d2292cb9a3d5ddd54b3f47d47c86bc532ff6a4bf6ce1d47dcdf4cbeeaad3fb"}, {0xc, 0x7, {0x1, 0xd8419916ae3f6ae4}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x54, 0x1f, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ife={0x90, 0x20, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xa}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x800}, @TCA_IFE_SMAC={0xa, 0x4, @random="0bc04cc8aacc"}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @random="7de32da449b7"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x6, 0xffffffffffffffff, 0x4, 0x8}}}]}, {0x9, 0x6, "4b7cfe88b9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x5}}}}, @m_nat={0x17c, 0x4, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x3, 0x5bb2, 0x1}, @rand_addr=0x64010101, @rand_addr=0x64010101, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x9, 0x8, 0x2, 0x3d87}, @local, @rand_addr=0x64010100, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3d0b, 0x7, 0x8, 0x7c, 0x2}, @private=0xa010101, @loopback, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x2, 0x5, 0x7, 0x6}, @local, @private=0xa010101, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x1, 0x8, 0x159, 0x8}, @private=0xa010101, @private=0xa010101, 0xffffff00, 0x1}}]}, {0x8a, 0x6, "fb5ac124d8fe86790ea274e1b392e8be63414938d73ba2a22264af8c338e8dd0db2fc5f2fbc60ae49a692682a37b2d9f7e086011084ec89bc865440a86e519d32b39162a83ba39413afca9720ca29f53fb172bd9516eb3e84c797eaf4819dc339e6449efbce81090aab8a9e417d540f89b3b22eae56419195b1deeafeb02cbbe57743eb95543"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0xf8, 0x1, [@m_csum={0xf4, 0x19, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x20000000, 0xb6, 0x7fff}, 0x7e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3, 0x1, 0x1000, 0xfffffffd}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffb, 0x2, 0x6, 0x6, 0x2}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x29, 0x7ff, 0x5, 0x8000, 0x920}, 0x2c}}]}, {0x55, 0x6, "d741b2088ceef69886ed30955dec19e9f5363de8a034ed9f5a45773d04c5726525a4b9e559993f1b09a0afe8a6f048857e5e31fcf99f2d7482962042a51566369b60164d97c076004634b48b818921601a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x144, 0x1, [@m_ctinfo={0x140, 0xd, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x8000, 0x3, 0x3, 0x100}}]}, {0xec, 0x6, "547ee13d2db23ead50859915d32050dfff701ea5e235480cbb179cdd6f5781bb7a7788450f944c4b8800ef6b747cdf9ae1d91c8c642b5ff01eb0e08c05f945d2d5e23100c6139283ef7f4fa210b3296cea12cb1056519452b34f5ebbc1aa01cfa92a6fac93d6a724f12498d95f4d4fc0212de716536dc9b86e2b3088544f7f1ce39736402ef0060151d447f9f9613ea9b35a9b6a4b7cbc3fe9f1d5a15049403383a3e688b0a2ad6372cfcda40365dba8efa5e06330ef97d60e1f89b65309b35e6dc5573c987ffe8e79fa2e7cbc4d7a4d18dc655fda83d651622b8d7857edf6482d85ea6f0dd79227"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x6}}}}]}, {0x2398, 0x1, [@m_tunnel_key={0xdc, 0x1c, 0x0, 0x0, {{0xf}, {0x70, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010102}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00'}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x40, 0x6, "18dfd26f70e06954f5b0e95e3cbf3de46d9cc79fe218ce5c69c342df3db23db4923d79570e172ba4dd2e3e40d8ba70d37be59cbc9658a90cb6453853"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x1b0, 0x10, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x4, 0x5, 0x1, 0x2}, @multicast2, @initdev={0xac, 0x1e, 0x6, 0x0}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x80, 0x5, 0xffffffff, 0x42}, @dev={0xac, 0x14, 0x14, 0x35}, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0xf8, 0x10000000, 0x7, 0x1}, @multicast2, @local, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x9, 0x7, 0xcbb, 0x4}, @dev={0xac, 0x14, 0x14, 0x27}, @local, 0xff000000, 0x1}}]}, {0xe8, 0x6, "d1cc0b5e75e66587300ee9032a1d67528dc0adbbf1826c0395f975a9ea4b708b32aed0282c3b2dbe8f092d679e4da430e98b195853d1258cb4042e496b194924c12fd3fec2649124514be69975eaea179efa6bc20ff7c2cc6687a3561661974b5951e299f2a5ff85d3fc6d22475a4bf2d21cca898039c44e40eb4f643859b29efa3cee98efa891e7b8be42df203328d77b3d50883fe8bfa0eeb53173b31abbd8f4b121cef9e088227ec504de628d19ad20a2871a12b70f610e3c37460fe8142ace96bd0fe29cf7a57e4f35d88e64850bc1f68b1cfe87471b486e98651f47bbc5711851a2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_pedit={0x1f9c, 0x0, 0x0, 0x0, {{0xa}, {0x1f14, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x0, 0xfffffff8, 0x2, 0x1, 0x800}, 0x8, 0x9, [{0xf482, 0x10, 0x7, 0x4e38, 0x41, 0x3ff}, {0x7fffffff, 0x3, 0x3, 0xe, 0x5, 0x4785}, {0x3, 0x80000000, 0xf, 0x4, 0xa, 0x1}, {0x4, 0xae0, 0x10, 0x7, 0x8b9, 0x2}, {0x6, 0x3, 0x7, 0x1, 0xbe, 0x3}, {0x4, 0x6fdc, 0x4, 0x4, 0x7, 0x5}]}, [{0x3ff, 0x10000, 0x7ff, 0x2, 0x0, 0x7}, {0x6, 0x6, 0x9, 0x8, 0x7, 0x100}, {0x100, 0x26b, 0x4, 0xfffffffc, 0xffffffff, 0x7}, {0x7, 0x6, 0x1, 0xfffffbed, 0x5, 0x8}, {0x8, 0xffff, 0x3, 0x81, 0x8}, {0x8, 0x53b, 0x6, 0x0, 0x9, 0x9}, {0x6, 0x4, 0x7e, 0x3, 0x2, 0x81}, {0x7, 0x6, 0x9, 0xa4c, 0x7}, {0x1000000, 0xdf, 0x7f, 0x9, 0x401, 0x400}, {0x8, 0x2, 0x4, 0x3, 0x7, 0x80000000}, {0x7, 0x6, 0x5, 0x1, 0xfea, 0xfe000000}, {0x65, 0xfffffffc, 0x9, 0x3, 0x8000, 0x8}, {0x1, 0x7, 0xd3, 0x2, 0x3, 0xbb3}, {0x4, 0xfffff001, 0x0, 0x9, 0xd1a, 0x2}, {0x10001, 0x5ba, 0x2, 0xb0d4, 0x40, 0x4}, {0x3, 0x0, 0x1000, 0x8, 0x1, 0x6}, {0x8, 0x1, 0x8, 0xfffffffc, 0x200, 0x9}, {0x0, 0x7d98, 0x2, 0x6, 0x401, 0x43c}, {0x6a01, 0x9, 0x9, 0x7f, 0x4, 0x2}, {0xd3, 0x8, 0x7, 0xde1, 0x4, 0x4}, {0x7fffffff, 0x3, 0xfffffff9, 0x2, 0x7fffffff}, {0x8, 0x401, 0x80000000, 0x9, 0x1, 0xe60}, {0x2, 0x8, 0x2, 0xded2, 0x6, 0x5}, {0xef09, 0x613, 0x939, 0x5, 0x6, 0x4f3b}, {0x3, 0x9, 0x8, 0x5, 0xb, 0x9}, {0x1, 0x400, 0x0, 0xcc05, 0x8, 0xd28}, {0x2, 0xe, 0x1, 0xa0, 0x81, 0x7fffffff}, {0x1, 0x1, 0x0, 0x9, 0x3}, {0x6, 0x0, 0x1ff, 0x5, 0x4, 0x4}, {0x9, 0xfffffc00, 0x5, 0x4, 0x2, 0x37}, {0xa4, 0x6, 0x2, 0x0, 0x3, 0x800}, {0x1, 0x7ff, 0x3, 0x9, 0xb, 0xb}, {0x5, 0x7, 0x3ff, 0x1, 0x4, 0x1}, {0x0, 0x0, 0x9, 0x3, 0x100, 0x5}, {0x7, 0x0, 0xffffffff, 0xfffffff7, 0x611}, {0x4, 0x2f, 0x4, 0x9, 0xc, 0x6}, {0x9, 0x91f, 0x8, 0x4, 0x6, 0xfffffdaa}, {0x862, 0x7, 0x3459, 0xe6, 0x2, 0x1}, {0x7, 0x29, 0x7, 0x6, 0x7, 0x62607328}, {0x3, 0x1, 0x6, 0x9, 0xd, 0x2}, {0x9, 0x4, 0x100, 0x8001, 0x6, 0xffff249d}, {0x7fff, 0x400, 0x2fdf, 0x0, 0x8, 0x1}, {0xc000000, 0x9, 0xfffffff1, 0x7, 0x1, 0x3}, {0x6, 0x3, 0x8, 0x1000, 0x8}, {0x60000000, 0x9, 0x1, 0x525, 0x2653dcf6, 0x3ff}, {0x0, 0x7, 0xfffffff8, 0x6, 0x1747, 0xfffffffb}, {0x934, 0x5, 0xfffffffe, 0x7, 0x2, 0x8}, {0x9, 0x80000000, 0x8, 0x5, 0x9, 0x1}, {0x1, 0x101, 0x5, 0x31c, 0x8000}, {0x2, 0x200, 0x47c1, 0x3, 0x1, 0xfffffffd}, {0x7948a97b, 0x0, 0x0, 0x5, 0x8, 0x8}, {0x2, 0x5, 0xb8, 0x3, 0x53, 0x101}, {0x9, 0x1, 0x4, 0x98c, 0x8, 0x2}, {0x3, 0x1d, 0x0, 0x1, 0x3, 0x28}, {0x200, 0x1ff, 0x2, 0x8, 0x40, 0xfffffffa}, {0x5, 0x42a9, 0x7, 0x5, 0x200, 0x80}, {0x0, 0x101, 0x3, 0x5, 0xe4, 0x7}, {0x10, 0x10001, 0x7, 0x113ea020, 0x6, 0x8}, {0x7f, 0x8, 0xfffff001, 0x2, 0x3, 0x7}, {0x0, 0x4, 0xd, 0x2, 0xfffffff8, 0x9}, {0x0, 0x8, 0x9, 0xffff, 0x5, 0x8001}, {0x2, 0x7, 0xf, 0x3, 0x0, 0x6}, {0x8, 0x2, 0x8, 0x8, 0xf05, 0x80000000}, {0x4, 0x8, 0x9, 0x9, 0x6, 0xff}, {0x5, 0xc, 0x31728, 0x72a, 0x6, 0xb58}, {0x1, 0x101, 0xff, 0x9, 0x2, 0xaad6}, {0x1, 0xfffff7f5, 0x5, 0x2, 0x10000, 0x4}, {0x800, 0x5, 0x757636fe, 0x6, 0x8}, {0x8, 0xfffffff1, 0xb2, 0x4, 0x8, 0x1ff}, {0xea, 0x86, 0x200000, 0x3, 0x80000001, 0x4}, {0x2, 0x100, 0x8001, 0x3, 0x400, 0x7}, {0x7aa, 0x8c50, 0x9, 0x9, 0xd58, 0xfffffff6}, {0x4, 0x565, 0x7, 0x0, 0xffffff7f, 0xfffffff5}, {0x3, 0x22e, 0x7, 0x5, 0xfffff000, 0x6}, {0x7fffffff, 0xff, 0x7d7b0000, 0x3ff, 0x5, 0x6}, {0xfffffc01, 0x1, 0x0, 0x400, 0x5, 0x7}, {0xc659, 0xadf, 0xd31c, 0x7, 0x7, 0x101}, {0x0, 0x1ff, 0x2, 0x9, 0x7fffffff, 0x7fff}, {0x1000, 0x7, 0x6c, 0x9}, {0x8, 0x3, 0x80000000, 0x64, 0x3, 0x6}, {0x7, 0x5, 0xb, 0x80, 0x400, 0x85}, {0x6, 0x7fff, 0xfffff633, 0xde, 0x1}, {0x200, 0x84, 0x4, 0x0, 0x9, 0x200}, {0x7fff, 0x1, 0x2, 0x3, 0x9, 0x459}, {0xbc, 0x1, 0x40, 0x2, 0x2, 0x100000}, {0x1, 0x10001, 0x4, 0x9, 0x1, 0x9}, {0x8, 0x1, 0x6, 0x80000000, 0xcaf2, 0xb7}, {0x51f, 0x3c77633d, 0x35, 0x1, 0x800, 0x401}, {0x2, 0x6, 0x0, 0x5, 0xec, 0x2}, {0x1, 0x100, 0xfffffffe, 0x9, 0x800, 0x4}, {0x9, 0x9, 0x8978, 0x7f, 0x8, 0x4}, {0x0, 0x2, 0x5, 0x7, 0x800, 0xfffff6f7}, {0x77, 0xdb0, 0x8001, 0x8001, 0x9, 0x5}, {0x8, 0x3, 0x10, 0x91, 0x10, 0x9}, {0x9, 0x3d, 0xd38, 0x10, 0x6, 0x7fffffff}, {0x0, 0x8, 0x0, 0x6, 0xffff, 0x1}, {0x8, 0x3, 0x7, 0x5, 0xe, 0x3}, {0x3, 0x5cf2789e, 0xd3e1, 0x1, 0xe0e, 0x437}, {0x200, 0x5, 0x2, 0x0, 0x800, 0x800}, {0xf11a, 0x9, 0x1, 0x7, 0x7f, 0x6}, {0xc7e, 0xe, 0xe, 0x5, 0x5, 0x1}, {0x0, 0x80000000, 0x2, 0xc8, 0x7, 0x10}, {0x3, 0xffff, 0x3000, 0x6, 0x200, 0x40}, {0x6, 0x3, 0x5, 0x1, 0xdc8, 0x368}, {0x8, 0x9, 0x4, 0x8, 0x1, 0x5}, {0xa, 0xf, 0x8923, 0x7, 0x5, 0x8}, {0x80000000, 0x8, 0x1800, 0x30, 0x8, 0xe}, {0x8, 0x2c8a5af4, 0xffffffff, 0x8, 0x1, 0x1}, {0xd, 0x61, 0x4, 0xa1b, 0x49f, 0x8}, {0x8, 0x8, 0x4, 0xfffffffc, 0x2, 0xff}, {0x1, 0x6, 0x5, 0x6, 0x38, 0xa7}, {0x7, 0x0, 0x401, 0x1, 0x1, 0x2}, {0x8, 0x32, 0x3, 0xcb, 0x934, 0x7}, {0x8000, 0x3, 0xffffffff, 0x0, 0x1ff, 0x6}, {0x4, 0x0, 0x1, 0x80000001, 0x1b, 0x9}, {0x116, 0x2, 0xe8e, 0x4, 0x1, 0x1}, {0xb, 0x9, 0x800, 0x5, 0x5, 0xd}, {0x6, 0x9, 0xa, 0x2, 0xa58, 0x5}, {0x0, 0x80, 0x9, 0xc, 0x6b, 0x7f}, {0x1, 0x1ff, 0xc366, 0x7ff, 0x1, 0x3}, {0xe7, 0x5, 0xd376, 0x361, 0x4, 0x9}, {0x9, 0x9, 0x3, 0xef8, 0x6, 0x6}, {0xfffff908, 0x8f, 0x6, 0x46db, 0x7, 0x2}, {0xe, 0x4, 0x5, 0xffff, 0x6, 0x8}, {0x8, 0x2e, 0x1, 0x2, 0x0, 0x9}, {0x3, 0x343, 0x1, 0x8, 0x3b4d6a29}, {0x0, 0x3, 0x6, 0x2, 0x100, 0x2}, {0x401, 0x8, 0x1, 0x4ffd, 0x9, 0x7}], [{0x1, 0x1}, {0x2}, {0xd}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x4}, {0xd1c74ce1073e83a1}, {0x0, 0x1}, {0x2}, {0x5}, {0x5}, {0x5}, {0x1}, {0x4}, {0x2}, {0x5, 0xa69d803933d7c840}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x3}, {0x2}, {0x4, 0x776a2d8e09e5d4cd}, {0x3, 0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x2}, {0x3}, {0x4}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0xbcd8eeec467da792}, {0x3}, {}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x9}, {0x3, 0xe24d6ba0f9c917ec}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xdc, 0x5, 0x0, 0x1, [{0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x4}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x104, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x800, 0x3, 0x20000000, 0x10, 0x22e4}, 0x2, 0x3, [{0xa, 0x4, 0x1, 0x80000000, 0x305, 0xc}, {0x1, 0x7, 0x3, 0x3, 0xab4, 0x1}, {0x6, 0x1, 0x6, 0x5, 0x800, 0xe}]}, [{0x0, 0x5fc, 0x9, 0xb, 0xfcc, 0x3}, {0x0, 0x1ff, 0xffffffc0, 0x0, 0xcb4b, 0x6}, {0x400, 0x2, 0x3780, 0xfffffff9, 0x8ac2, 0xff}, {0x10000, 0x5, 0x6, 0x5, 0x8, 0x554}, {0x2, 0x80000001, 0x4, 0x8, 0x0, 0x9c}, {0x9, 0x8000, 0x1, 0x9, 0x80000001, 0x2}, {0x80000000, 0x6, 0x2, 0x3, 0x96, 0xf}, {0xe, 0x5, 0x5274a548, 0xffff6241, 0x9}, {0x0, 0x4, 0x10001000, 0x0, 0x8, 0xb6}, {0x210ca353, 0x26, 0x7, 0x7ff, 0x401, 0x7}, {0x6, 0x2, 0x7, 0x0, 0xffff, 0xd}, {0x2bac, 0x3, 0x3, 0xbc, 0x3b8}, {0x1, 0x1, 0x0, 0x2, 0x7, 0x7e57}, {0x25d5, 0x4, 0x1, 0x2d34, 0xb05b7030}, {0x0, 0x800, 0x4, 0x6, 0x80, 0xffff172b}, {0x9, 0x3, 0x80000000, 0x8, 0x2, 0x4}, {0x2, 0x4, 0x3, 0x80000001, 0x0, 0x3}, {0x9, 0x4, 0x6, 0x0, 0x6, 0xff}, {0x80000001, 0x8000, 0xffffffff, 0x2, 0x1, 0x5}, {0x7f92, 0x9, 0x2, 0x8, 0x3, 0x2}, {0x8001, 0x2, 0x2, 0xffff1e6a, 0x8}, {0x3, 0xc, 0x0, 0x3, 0xa147, 0x5}, {0x5, 0x0, 0x9, 0x0, 0x7, 0x7}, {0x10, 0x10001, 0x5, 0x6843b27e, 0x6, 0x3}, {0x1, 0x401, 0x9, 0x5, 0x3002, 0x7fe4}, {0x7, 0x1, 0x30, 0x6, 0x8, 0x6}, {0x0, 0x1000, 0x2, 0x21, 0x1d, 0x4}, {0x0, 0x3, 0x8, 0xa32, 0xaea4, 0x5f3}, {0x2, 0x200, 0x1, 0x6, 0x5, 0x1}, {0x10001, 0xe, 0xcf, 0x6, 0x3}, {0x3, 0xb218, 0x8, 0xc, 0x0, 0x2}, {0xfffffffa, 0x8, 0x5, 0x6, 0x1, 0x5}, {0xd, 0x4, 0x0, 0x1, 0xdcb, 0x3}, {0x1, 0xed, 0x7f, 0x4, 0x3, 0x3}, {0x8, 0x1, 0x0, 0x7, 0x8, 0x3}, {0xca, 0x0, 0x0, 0x7, 0xe}, {0x1, 0x4, 0x9cdd, 0xd563, 0x9, 0x7}, {0x9, 0x31e, 0x3, 0xfffffa04, 0x9e, 0x5}, {0x9, 0x4, 0x1, 0x10001, 0x9, 0x101}, {0x9, 0xa53, 0x9, 0x4, 0x3, 0x7}, {0x1, 0x0, 0xdd, 0x0, 0x171e262d, 0x8b3}, {0x400, 0x80000000, 0x8e, 0x625, 0x0, 0x10001}, {0x8, 0x8a1, 0x2, 0x800, 0x6}, {0x8001, 0x1, 0x4, 0x3, 0xa6, 0x1}, {0x8, 0x10, 0x10, 0x7, 0x9, 0x7}, {0x6, 0x8, 0x7a, 0x4, 0x4, 0x10001}, {0x1, 0xdb8, 0x9, 0x5, 0x9, 0x6}, {0x1000, 0x0, 0xff, 0x6e1, 0x8, 0x401}, {0x0, 0x5, 0x8, 0x2, 0x600, 0x7}, {0x0, 0x2, 0x80, 0xfff, 0x5, 0x8}, {0x8, 0x4, 0x7fff, 0x4, 0x81, 0x19b40a23}, {0xc49, 0xff, 0x9, 0x6, 0x1146, 0xb}, {0x2, 0x800, 0x7fff, 0x7, 0xc, 0x7}, {0xc, 0x4, 0x6, 0x5, 0x870, 0x68c}, {0x2, 0x5, 0x4, 0xf40f, 0x8000, 0x4}, {0xf, 0x8000, 0x0, 0x8, 0x0, 0x2000000}, {0xfff, 0x3, 0x9f3f, 0x5, 0x200, 0x42265723}, {0x9, 0x1000, 0xfffffdee, 0x4b, 0x7, 0x1ff30860}, {0x57, 0x5, 0x8001, 0x9, 0x9, 0x5}, {0xfffffffd, 0x51, 0x5, 0x9, 0x6566, 0xfffffff5}, {0x1, 0x8, 0x4a19, 0x5, 0x3, 0x8}, {0x0, 0x9, 0x7, 0x0, 0x29e9, 0x2}, {0xa8e4, 0xee2, 0x4, 0x7ff, 0x6, 0x4}, {0x3, 0x80, 0x5, 0x4, 0x5, 0x6}, {0x5, 0x4, 0x10, 0x7, 0x2, 0x6}, {0x7cd4, 0xd, 0xbc79, 0x7, 0x100, 0x5}, {0xf, 0x0, 0x8, 0x9, 0x10000, 0xffffa80e}, {0x5, 0x8, 0xf, 0x7, 0x949, 0x10}, {0xc000, 0x19a608d6, 0x5a, 0x3, 0x4, 0x80000000}, {0x1ff, 0x1ff, 0x7662079b, 0x1, 0x2}, {0xb, 0xa, 0x5, 0x2, 0x9, 0x6}, {0x3, 0x79a0, 0x0, 0x84c3, 0x0, 0x4}, {0x0, 0xff, 0xd96, 0x633, 0x9, 0x2}, {0x1, 0x3718, 0x7, 0xfffffffa, 0x8, 0xffffffff}, {0x0, 0xfd4, 0x8, 0x401, 0x6, 0x3}, {0x8, 0x9, 0x1, 0x0, 0x1}, {0x9, 0x8, 0x423d, 0x3, 0x9, 0x13c6}, {0x4, 0x81, 0x4, 0x9, 0x6, 0x6}, {0x2, 0x3f480, 0x3, 0x81, 0x3371, 0xb7e8e5c}, {0x2, 0x9349, 0x100, 0x1, 0x51}, {0x5, 0x38f1c4da, 0x81, 0x0, 0xf, 0x2}, {0x200, 0x5, 0x80, 0x2, 0x8, 0x584}, {0x9, 0x2, 0x9, 0x8, 0x4, 0x6}, {0x3ff, 0xbc4, 0x2ddf, 0x1, 0x6, 0x5}, {0xc4, 0x3, 0x7, 0x7, 0x8, 0xaa0}, {0x7, 0x80000000, 0xc4a, 0x10001, 0x2, 0x2}, {0x8586, 0xb03, 0x3, 0xb, 0x8, 0x1ff}, {0x1, 0x5, 0xaa0a, 0x8001, 0x1, 0x5}, {0x80, 0x7, 0x2, 0x3, 0x7, 0x3}, {0x5, 0x0, 0x8, 0x7f, 0xe, 0x8}, {0x1, 0xfff, 0x5, 0x8, 0x80000000, 0x8}, {0x8, 0x0, 0xffff8000, 0x4, 0x8, 0x100}, {0x88, 0x0, 0x4, 0x1, 0x4, 0xd}, {0x1, 0x3, 0x8, 0x5, 0x2, 0xfffffffa}, {0x4, 0x8, 0xe17, 0x9fc, 0x7, 0x1000}, {0x40, 0x9c, 0x11cf, 0x64, 0x10, 0x1}, {0x1, 0x3, 0x0, 0x6, 0x1, 0xfffffff7}, {0x8, 0x3ce3, 0xed, 0xddb, 0x1, 0x4}, {0x8, 0x0, 0x1, 0x8, 0x5, 0x1}, {0x10, 0x85f, 0x0, 0x7, 0x101, 0x4}, {0xffffff9d, 0xfffff801, 0x7, 0x88, 0x9, 0x40}, {0x3, 0x7, 0x7eb1, 0x1a8, 0x4, 0x8}, {0x4, 0x3b5, 0x8, 0x4, 0xc58, 0x6}, {0x3, 0xe4, 0xd, 0x3, 0x2, 0x9}, {0x40, 0x200, 0x10001, 0xc9, 0x7f, 0x3}, {0x4, 0x7fffffff, 0x2, 0x3f, 0x3, 0x8077}, {0x1000, 0x7fffffff, 0x6, 0x8, 0x7f, 0x7}, {0xfffffffe, 0x3, 0x800, 0xfffff801, 0x2, 0x7fffffff}, {0x1, 0x8, 0xf, 0x6, 0xcc, 0xea}, {0x6, 0x2, 0xfffffff3, 0xe, 0xf, 0x9}, {0x401, 0x4b7dfa2d, 0x8, 0x9, 0x5, 0xffff}, {0x3, 0x2, 0x3, 0x1, 0x8, 0x4}, {0x80000001, 0x4, 0x7, 0x2, 0xfffeffff, 0x2}, {0x9, 0x81, 0x8000, 0x4, 0x4}, {0x5, 0x6, 0xfff, 0xd559, 0x40000000, 0x946e}, {0x460d, 0x5, 0x7, 0x5, 0x0, 0x7}, {0x100, 0xffff, 0x9, 0x9, 0x2}, {0xb4d, 0x2, 0x0, 0x5, 0x5, 0xfffffff8}, {0x6, 0x20400, 0xe8, 0x1, 0x6, 0x8}, {0x0, 0x4, 0xb4, 0xb1, 0x5, 0xf4}, {0x460, 0xd7, 0xffff, 0xfffffff8, 0x7, 0xfffffff6}, {0xfffffff7, 0x4, 0xfffffff7, 0xffffffff, 0x2, 0x3}, {0xff, 0x80000000, 0x800, 0xfffffeff, 0xfffffffe, 0x5}, {0x7f27, 0x5, 0xb54, 0x91e, 0x0, 0x8b}, {0x5, 0xcd6, 0x7, 0x6, 0x8, 0x4656}, {0x7, 0x2, 0x6, 0x10001, 0xffffffff, 0x6}, {0x8001, 0x9, 0x7, 0x9, 0x1, 0x5}, {0x0, 0x1866, 0x80000000, 0xfffffff3, 0x5a2, 0x5}], [{0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0xebf8dae2fb5962ca}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x2}, {0x0, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4}, {0xf, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x80901ea7de2832f1}, {0x1, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0xea2d68b507ce0f95}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x2}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1, 0x1}, {0x1, 0x3}, {0x5, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x1}, {0x1, 0x1}, {0x3}, {0x7630dc7a6552cba}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x6, 0x1}, {0x4, 0x1}, {0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x60, 0x6, "26718a9c9da5d92de941c376553406455d96497699a296291e7d0c6bab01d69c368bbea0b39c1030f173683d878877bf2af7adfc06dbde51548f62d159e68ca3e4e565d0d68bff378ce952512077d29b0e03625b2f57f6055f59ae80"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x100, 0xd, 0x0, 0x0, {{0xf}, {0x64, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x1, 0x7, 0x4}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010102}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2f}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x20}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010102}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x6d, 0x6, "e937ed38e4967274c6a5963bf5e02d9d9355d346e5e56864473651f491f6027c9becefee1a96786fbce6ea2546910b25ab7b3989d6f3dea655e6cfddc4e2e0e259cd43b64d57bbc981ac9c239a4e82ed310af5a008b0fcbaa3f01b67b0bdb68deaa7921a0f7b04ff71"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_sample={0x6c, 0x9, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}]}, {0x2f, 0x6, "15ee72840c556238cba3c93b9233ce27d2ae4b79a234c54b91c4bb27677cf74c955c654c77ed27adc39b88"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x31d4}, 0x1, 0x0, 0x0, 0x20000840}, 0xc844) 354.660742ms ago: executing program 1 (id=2949): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x138, 0x10, 0x1, 0x7fffffc, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x10000004, 0x6c}, @in6=@remote, {0x200000000, 0x8000, 0x0, 0x0, 0x0, 0x7d48, 0x1000000000000000}, {0x5, 0x4, 0xd, 0xa}, {0x0, 0x2}, 0xfffffffc, 0x3507, 0xa2f229f84a4faf05, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@polexpire={0xcc, 0x1b, 0x100, 0x0, 0x25dfdbfd, {{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@private=0xa010102, 0x4e22, 0x3, 0x4e22, 0x0, 0xa, 0x90, 0x20, 0x73}, {0x2, 0x5, 0x2, 0x6, 0x9171, 0x8000, 0x1496, 0x81}, {0x6, 0x9, 0x10, 0xc0000000}, 0x4, 0x6e6bbb, 0x0, 0x0, 0x3, 0x3}, 0x4}, [@mark={0xc, 0x15, {0x35075a, 0x7}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x1, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x40, 0x0, 0x0, 0xbacabbefe60a3201}, 0x9c) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000010300000000000000000000000000000500010001000000"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0xb, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_COMPAT_NAME={0x7, 0x1, '*,\x00'}, @NFTA_COMPAT_NAME={0x6, 0x1, '&\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x8000) socket$alg(0x26, 0x5, 0x0) r8 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r8, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) accept$netrom(r8, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b, 0x20000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_PROTOCOL={0x6, 0x8, 0x8100}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 259.430882ms ago: executing program 0 (id=2950): mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x1ff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 216.602619ms ago: executing program 2 (id=2951): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x40400) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400403a00fe800000000000000000000000000011ff02000102009078000008000000000000003c01fc000000000000000000000000000001ff00000000000000000000000000000033000000000000000000040005200500"], 0x0) ioctl$HCIINQUIRY(r0, 0x400448e4, &(0x7f00000009c0)={0x0, 0x0, "0db43f"}) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = accept4(r1, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x80, 0x80000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000300)=ANY=[@ANYBLOB="280003ca0fa4224a43a4ab0000882f204174f286b794e8b7011a3177db7544fcfad8d3f17a0c7e66394fbf67507c0a5100f0be4161e0e37ff154c09e60bf15e4ce54874d875dab7ebe9178d0abf87cecf1af5c5fc0dc1a2fdf61259b3daab7ad74a9b0a577b7be399290a3c77e60ad123298769d", @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf25040000001400018008000500030000000600010008000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r5, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9fc2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x29}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x9090) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x9c}}, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) close(r7) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0x900e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, @in6={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x7}], 0x48) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x1c8, 0x1c8, 0x98, 0x0, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x7fffff80, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xff, 0x2, [0x4, 0x36, 0x1d, 0x1c, 0x23, 0x1e, 0x2c, 0x7, 0x1e, 0x7, 0x2d, 0x37, 0x30, 0x9, 0x3b, 0x16], 0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r11) sendmsg$ETHTOOL_MSG_STRSET_GET(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="ad0000002000000000000100000004000180100002800c00"], 0x28}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r7, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000a40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000d40)={0x2a8, r12, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x138, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x47, 0x4, "8609b5a457e39e889a676a1fc40cb7364c3cad59c821b7bda5503963ca29138391a5917d7a7c7b45b1eaa36304cdc7abf029ab9513fcbf50cf97046a6eb48720a20c95"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_MASK={0xe1, 0x5, "af0414385c541e24ef552156b2de9c355fc89ab5013a33f98e65876ebde521877d350596ce8ef734cdeb6511b65eab046190df0c19b9dfd62c763da0c27603ad0c78f7c5da4051191c51278889b73e44e13dbbd241b4c77e1fcd000ed52ff4e7c958c5fa05ff0d4f9fad71496df228e6baf6a36522439814aead6bb33737f74809f77c5dcd3d17dd03d156845b301ca6752dd559028e4cd0cb46b1e9bd30f564e1bd5347a27f35dc9b84e5f715a551959d39158335922c98ee8b4c461e61a3e7524a4214d3f1ea66bcc375af4cccf9f27bd686b8711125e0f554ac87ed"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x74, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '^[`@[]%-:@$![.\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd93}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'TTL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x4080}, 0x10) syz_emit_ethernet(0x9d, &(0x7f0000000980)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaa3b8100100086dd608a37f200632c00fc000000000000000000000000000000fe8000000000000000000000aa06000005000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780002f3d98c3502ffad32829a567fa99e64978b6ddecad472278468a74b4d488734e1a1f38ba4ba88a898a883168f949b9eced48b6dbbf7f0a67cc798d8ec98156854d9aa1bed45543e6b44fbfd1e689b57"], 0x0) 121.413754ms ago: executing program 0 (id=2952): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvfrom$netrom(r0, &(0x7f0000000000)=""/4096, 0x1000, 0x43, &(0x7f0000001000)={{0x3, @bcast, 0x6}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @bcast]}, 0x48) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f00000010c0)={{@_ha_fsid={[0x9, 0x1]}, {0xffff, 0x0, 0x1, 0x4}}, {{[0x3, 0xfffffff7, 0xfffffff7, 0x27]}, 0x0, 0x1, 0x3, 0x0, &(0x7f0000001080)=[{{@_ha_fsid={[0x6, 0x7]}, {0x7, 0x9, 0xffffffff, 0x2}}, 0x6, 0x0, '\x00'}]}}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001100)=[@in6={0xa, 0x4e20, 0x2, @mcast2, 0x8}, @in6={0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x408000}, @in={0x2, 0x4e20, @multicast1}], 0x48) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x24, r2, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5d}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048804}, 0x44) listen(r1, 0x4) r3 = accept4(r0, 0x0, &(0x7f00000012c0), 0x800) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000001300), &(0x7f0000001340)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0), r3) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r6, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd8c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x41) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000016c0)={'ip6gre0\x00', &(0x7f0000001640)={'syztnl2\x00', 0x0, 0x2f, 0xc8, 0xc, 0x9, 0x1c, @mcast2, @empty, 0x7, 0x8, 0x8, 0x10}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001700)={'wg0\x00', 0x0}) sendmsg$inet(r4, &(0x7f0000001900)={&(0x7f00000014c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001600)=[{&(0x7f0000001500)}, {&(0x7f0000001540)="d7790e37458651ca826eabaaf8d48c198fc8c8b4b737a6af6c1c341406fb20eeb2de63c07527dcd1e2a0173ec1b1567ca94ca429dc759f1280d9686b461227a01568a2e47d", 0x45}, {&(0x7f00000015c0)="8fba904e554b63d89d77e51b07faf328aec576d6d788126a6459febe8ad1a4494557bab43b7499f8057dad0eb5ec3d5c13f6acc406d7", 0x36}], 0x3, &(0x7f0000001740)=[@ip_retopts={{0x58, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0xa6, [@multicast2, @dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0xe}, @loopback, @rand_addr=0x64010100, @multicast2]}, @rr={0x7, 0x13, 0x1a, [@empty, @remote, @empty, @local]}, @rr={0x7, 0x13, 0x71, [@dev={0xac, 0x14, 0x14, 0x39}, @empty, @empty, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x30}, @remote}}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x18, 0x1, 0x5, [{@rand_addr=0x64010100, 0x90c}, {@remote, 0x101}, {@loopback, 0x5}, {@local, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x2}]}, @noop, @timestamp_addr={0x44, 0x1c, 0x8f, 0x1, 0x0, [{@local}, {@loopback, 0x7}, {@loopback, 0x7fffffff}]}, @lsrr={0x83, 0xf, 0xfc, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1]}, @lsrr={0x83, 0x23, 0xc9, [@dev={0xac, 0x14, 0x14, 0x33}, @loopback, @remote, @multicast2, @multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @rr={0x7, 0xb, 0x63, [@broadcast, @loopback]}, @rr={0x7, 0x7, 0x88, [@multicast2]}, @noop, @timestamp_prespec={0x44, 0xc, 0x37, 0x3, 0x3, [{@local, 0x80000000}]}, @lsrr={0x83, 0x13, 0x59, [@multicast1, @broadcast, @broadcast, @loopback]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @local}}}], 0x188}, 0x48000) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001980), r3) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000001a80)={&(0x7f0000001940), 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x54, r9, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8a}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000901) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001c00), r5) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x48, r10, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x46}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x1) close(r3) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000001f00)={{r3, &(0x7f0000001d40)='wg0\x00', 0x600480, &(0x7f0000001d80)={@align=0x2, {0xfffa, 0x9, 0x9, 0x8}}, 0x3, &(0x7f0000001dc0)={@_ha_fsid}, &(0x7f0000001e00)=0x5}, {[0x4, 0xffe00000, 0x3]}, 0x6, 0xb5, &(0x7f0000001e40)=""/181}) socket$pppoe(0x18, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)=@getspdinfo={0x14, 0x25, 0x300, 0x70bd26, 0x25dfdbfc, 0xcf5, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000002}, 0x40) ioctl$TUNSETIFINDEX(r11, 0x400454da, &(0x7f0000002080)=r7) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f00000020c0)=0x1, 0x4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x1c, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x4004084) 0s ago: executing program 0 (id=2953): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x10c8) socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x40) kernel console output (not intermixed with test programs): etlink: Message has 1 unknown bytes. [ 173.751336][T10118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.943420][T10138] netlink: 'syz.4.1043': attribute type 5 has an invalid length. [ 174.162820][T10147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1045'. [ 174.699328][T10170] xt_CT: No such helper "netbios-ns" [ 174.894790][T10183] lo speed is unknown, defaulting to 1000 [ 174.921719][ T30] audit: type=1804 audit(1773609718.964:2): pid=10189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1057" name="/newroot/197/cgroup.controllers" dev="tmpfs" ino=1026 res=1 errno=0 [ 174.970661][T10183] lo speed is unknown, defaulting to 1000 [ 174.971818][T10192] netlink: 'syz.2.1058': attribute type 7 has an invalid length. [ 174.986128][ T30] audit: type=1800 audit(1773609718.964:3): pid=10189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1057" name="cgroup.controllers" dev="tmpfs" ino=1026 res=0 errno=0 [ 174.995101][T10189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1057'. [ 175.009006][T10192] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.1058'. [ 175.042226][T10189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1057'. [ 175.066463][T10189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1057'. [ 175.079625][T10189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1057'. [ 175.091403][T10189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1057'. [ 175.369686][T10203] ip6gre2: entered promiscuous mode [ 175.402143][T10203] ip6gre2: entered allmulticast mode [ 175.457222][T10200] lo speed is unknown, defaulting to 1000 [ 175.690405][T10215] Cannot find add_set index 3 as target [ 175.715878][T10200] lo speed is unknown, defaulting to 1000 [ 176.044886][T10235] xt_recent: Unsupported userspace flags (000000b1) [ 176.433681][T10250] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 176.445556][T10252] netlink: 'syz.4.1074': attribute type 10 has an invalid length. [ 176.873278][T10265] can: request_module (can-proto-0) failed. [ 176.988599][T10273] xt_l2tp: missing protocol rule (udp|l2tpip) [ 177.672904][T10301] __nla_validate_parse: 39 callbacks suppressed [ 177.672923][T10301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1085'. [ 177.934383][T10305] lo speed is unknown, defaulting to 1000 [ 178.024035][T10305] lo speed is unknown, defaulting to 1000 [ 178.064211][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1087'. [ 178.088545][T10316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1088'. [ 178.109234][T10316] dvmrp1: entered allmulticast mode [ 178.118681][T10316] netlink: 'syz.2.1088': attribute type 11 has an invalid length. [ 178.135093][T10316] dvmrp1: left allmulticast mode [ 178.205727][T10321] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1087'. [ 178.225376][T10321] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1087'. [ 178.382463][T10327] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1090'. [ 178.575695][T10327] dvmrp0: entered allmulticast mode [ 178.737495][T10341] netlink: 'syz.0.1093': attribute type 10 has an invalid length. [ 178.944630][T10341] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1093'. [ 179.069604][T10341] team0: Port device geneve0 added [ 179.112554][ T91] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.351824][ T91] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.369979][ T91] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.427747][T10362] bond5: (slave bond_slave_1): Device is not our slave [ 179.434683][T10362] bond5: option active_slave: invalid value (bond_slave_1) [ 179.446020][T10362] bond5 (unregistering): Released all slaves [ 179.514128][ T91] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.598984][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 179.821613][T10305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.405334][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1101'. [ 180.467475][T10410] openvswitch: netlink: Flow actions attr not present in new flow. [ 180.974059][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1108'. [ 181.299045][T10437] syzkaller0: entered promiscuous mode [ 181.334029][T10437] syzkaller0: entered allmulticast mode [ 182.114127][T10492] x_tables: duplicate underflow at hook 2 [ 183.040471][T10506] netlink: 'syz.3.1120': attribute type 1 has an invalid length. [ 183.052369][T10506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.446102][T10529] __nla_validate_parse: 3 callbacks suppressed [ 183.446119][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1124'. [ 183.604036][T10529] team0: Port device team_slave_0 removed [ 183.656625][ T797] infiniband syz0: ib_query_port failed (-19) [ 183.669836][T10537] netlink: 'syz.0.1129': attribute type 153 has an invalid length. [ 183.750776][T10552] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1133'. [ 183.926234][T10564] Cannot find set identified by id 65534 to match [ 184.172523][T10573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1138'. [ 184.260148][T10583] netlink: 'syz.2.1140': attribute type 27 has an invalid length. [ 184.318433][T10583] erspan0: left allmulticast mode [ 184.350306][T10586] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1140'. [ 184.416246][T10593] netlink: 'syz.3.1142': attribute type 3 has an invalid length. [ 184.442579][T10593] netlink: 'syz.3.1142': attribute type 3 has an invalid length. [ 184.467928][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1142'. [ 184.552770][T10583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.583857][T10583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.597597][T10583] xfrm0: left promiscuous mode [ 184.602955][T10583] xfrm0: left allmulticast mode [ 184.729364][T10583] ip6gre1: left promiscuous mode [ 184.735630][T10583] ip6gre1: left allmulticast mode [ 184.748788][T10583] geneve2: left promiscuous mode [ 184.756748][T10583] bond4: left promiscuous mode [ 184.761647][T10583] bridge0: left promiscuous mode [ 184.769425][T10583] vlan0: left allmulticast mode [ 184.774978][T10583] bond4: left allmulticast mode [ 184.779952][T10583] bridge0: left allmulticast mode [ 184.787110][T10583] ip6gre2: left promiscuous mode [ 184.794997][T10583] ip6gre2: left allmulticast mode [ 184.803170][ T1037] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.816232][ T1037] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.834694][ T1037] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.854546][ T1037] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.082711][T10629] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1149'. [ 185.134293][T10629] syzkaller0: entered promiscuous mode [ 185.140274][T10629] syzkaller0: entered allmulticast mode [ 185.579919][T10653] netlink: 'syz.0.1152': attribute type 5 has an invalid length. [ 185.718056][T10662] bridge_slave_1: left allmulticast mode [ 185.724280][T10662] bridge_slave_1: left promiscuous mode [ 185.730133][T10662] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.964600][T10676] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 185.982363][T10671] netlink: 'syz.1.1158': attribute type 1 has an invalid length. [ 185.995279][T10671] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1158'. [ 186.500015][T10700] lo: Caught tx_queue_len zero misconfig [ 186.510967][T10703] netlink: 'syz.4.1166': attribute type 3 has an invalid length. [ 186.565309][T10707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1168'. [ 186.777950][T10718] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 186.804865][T10716] IPv6: Can't replace route, no match found [ 187.137807][T10741] netlink: 'syz.2.1176': attribute type 2 has an invalid length. [ 187.146635][T10742] netlink: 'syz.2.1176': attribute type 2 has an invalid length. [ 187.387540][T10754] netlink: 'syz.2.1177': attribute type 5 has an invalid length. [ 187.569846][T10763] netlink: 'syz.2.1181': attribute type 1 has an invalid length. [ 187.788138][T10764] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 187.816775][T10764] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 187.919030][T10776] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1184'. [ 187.967387][T10763] bond5: (slave bridge2): Enslaving as an active interface with a down link [ 187.996424][T10781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1183'. [ 188.036588][T10778] dvmrp1: entered allmulticast mode [ 188.473067][T10795] tipc: Enabling of bearer rejected, failed to enable media [ 188.566997][T10809] __nla_validate_parse: 1 callbacks suppressed [ 188.567016][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'. [ 188.668236][T10796] lo speed is unknown, defaulting to 1000 [ 188.713794][T10796] lo speed is unknown, defaulting to 1000 [ 188.722751][T10809] tipc: Enabling of bearer rejected, already enabled [ 188.749216][T10809] tipc: Resetting bearer [ 189.179043][ T78] tipc: Resetting bearer [ 189.419501][ T1037] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.473033][ T1037] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.520069][ T1037] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.552520][ T1037] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.587185][T10877] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1200'. [ 189.664098][T10870] lo speed is unknown, defaulting to 1000 [ 189.671703][T10870] lo speed is unknown, defaulting to 1000 [ 189.873682][T10887] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1204'. [ 190.191236][T10911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.503331][T10924] x_tables: duplicate underflow at hook 3 [ 191.076699][T10949] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:0 [ 191.171230][T10944] lo speed is unknown, defaulting to 1000 [ 191.193004][T10944] lo speed is unknown, defaulting to 1000 [ 191.289403][T10957] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1219'. [ 191.535987][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1221'. [ 192.177574][T10988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1227'. [ 192.284583][T10994] team0: No ports can be present during mode change [ 192.291455][T10989] team0: No ports can be present during mode change [ 192.403925][T10988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1227'. [ 192.826900][T11021] dvmrp0: entered allmulticast mode [ 192.834962][T11023] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1234'. [ 193.943130][T11074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1243'. [ 193.966911][T11074] ip6gre1: entered promiscuous mode [ 193.993843][T11077] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1244'. [ 194.002824][T11074] ip6gre1: entered allmulticast mode [ 194.007536][T11074] validate_nla: 1 callbacks suppressed [ 194.007551][T11074] netlink: 'syz.1.1243': attribute type 6 has an invalid length. [ 194.022367][T11074] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1243'. [ 194.056452][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.336842][T11092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1248'. [ 194.375617][T11094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1247'. [ 194.526863][T11105] lo speed is unknown, defaulting to 1000 [ 194.539324][T11105] lo speed is unknown, defaulting to 1000 [ 194.601478][T11118] openvswitch: netlink: Message has 572 unknown bytes. [ 194.608555][T11118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.738617][T11118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.768604][T11118] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.806479][T11118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.968429][T11128] lo speed is unknown, defaulting to 1000 [ 194.989681][T11128] lo speed is unknown, defaulting to 1000 [ 195.341868][T11138] syzkaller0: entered promiscuous mode [ 195.349976][T11138] syzkaller0: entered allmulticast mode [ 195.595629][T11129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1253'. [ 195.833307][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1255'. [ 196.131999][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 196.132819][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 196.144266][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 196.366991][T11152] lo speed is unknown, defaulting to 1000 [ 196.443607][T11152] lo speed is unknown, defaulting to 1000 [ 196.564293][T11172] mac80211_hwsim hwsim11 wlan1: Caught tx_queue_len zero misconfig [ 196.690500][T11161] lo speed is unknown, defaulting to 1000 [ 196.986570][T11175] netlink: 'syz.4.1264': attribute type 10 has an invalid length. [ 197.035834][T11175] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1264'. [ 197.045380][T11175] tipc: Enabling of bearer rejected, failed to enable media [ 197.085143][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1264'. [ 197.484974][T11191] 0X: left allmulticast mode [ 197.534997][T11191] gtp0: left promiscuous mode [ 197.539712][T11191] gtp0: left allmulticast mode [ 197.599283][T11191] bridge1: left promiscuous mode [ 197.604669][T11191] bridge1: left allmulticast mode [ 197.618589][T11191] gretap1: left promiscuous mode [ 197.672603][ T7766] lo speed is unknown, defaulting to 1000 [ 197.678472][ T7766] sqz0: Port: 1 Link DOWN [ 197.692830][T11185] openvswitch: netlink: Tunnel attr 2 has unexpected len 1 expected 4 [ 197.699351][ T7766] lo speed is unknown, defaulting to 1000 [ 197.732763][T11195] lo speed is unknown, defaulting to 1000 [ 198.232662][T11219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1275'. [ 198.367908][T11200] lo speed is unknown, defaulting to 1000 [ 199.125014][T11258] __nla_validate_parse: 3 callbacks suppressed [ 199.125032][T11258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1286'. [ 199.141520][T11258] openvswitch: netlink: Flow actions attr not present in new flow. [ 200.266855][ T91] tipc: Subscription rejected, illegal request [ 200.281471][T11303] netlink: 'syz.0.1301': attribute type 1 has an invalid length. [ 200.341101][T11305] netlink: 'syz.2.1302': attribute type 10 has an invalid length. [ 200.357124][T11308] netlink: 'syz.4.1300': attribute type 1 has an invalid length. [ 200.378947][T11310] syzkaller0: entered promiscuous mode [ 200.385138][T11310] syzkaller0: entered allmulticast mode [ 200.395179][T11305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1302'. [ 200.877192][T11331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1307'. [ 201.039155][T11335] lo speed is unknown, defaulting to 1000 [ 201.108270][T11337] macsec1: entered promiscuous mode [ 201.120746][T11337] bridge0: entered promiscuous mode [ 201.130578][T11343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'. [ 201.223597][T11341] syzkaller1: entered promiscuous mode [ 201.229180][T11341] syzkaller1: entered allmulticast mode [ 201.452532][T11359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1317'. [ 201.775714][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1310'. [ 201.855168][T11369] netlink: 'syz.0.1321': attribute type 1 has an invalid length. [ 201.941648][T11369] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.949444][T11369] netlink: 'syz.0.1321': attribute type 1 has an invalid length. [ 201.969637][T11365] lo speed is unknown, defaulting to 1000 [ 202.018040][T11369] netlink: 'syz.0.1321': attribute type 1 has an invalid length. [ 202.039734][T11369] netlink: 'syz.0.1321': attribute type 1 has an invalid length. [ 202.049175][T11369] netlink: 'syz.0.1321': attribute type 1 has an invalid length. [ 202.233784][T11369] netlink: 'syz.0.1321': attribute type 1 has an invalid length. [ 202.255105][T11369] netlink: 'syz.0.1321': attribute type 1 has an invalid length. [ 202.419940][T11392] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1324'. [ 202.649002][T11383] lo speed is unknown, defaulting to 1000 [ 203.563764][T11427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.626618][T11427] team0: Port device bond0 added [ 203.657656][T11434] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1336'. [ 203.959293][T11442] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 204.091734][T11451] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1340'. [ 204.243779][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1340'. [ 204.495500][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.513195][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.552468][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.576104][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.246629][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1354'. [ 205.402567][T11520] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 205.410696][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1357'. [ 205.435966][T11520] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 205.527825][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1361'. [ 205.542812][T11526] hsr_slave_0 (unregistering): left promiscuous mode [ 205.587638][T11539] 8021q: adding VLAN 0 to HW filter on device bond8 [ 205.863150][T11557] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1366'. [ 206.346860][T11583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1371'. [ 206.383179][T11585] tipc: Enabling not permitted [ 206.388902][T11585] tipc: Enabling of bearer rejected, failed to enable media [ 206.762491][T11613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1379'. [ 206.790071][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1379'. [ 206.812332][T11613] netlink: 580 bytes leftover after parsing attributes in process `syz.0.1379'. [ 206.994499][T11619] xt_hashlimit: max too large, truncated to 1048576 [ 207.294054][T11638] erspan0: entered promiscuous mode [ 207.303925][T11638] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1388'. [ 207.336459][T11634] tunl0: Caught tx_queue_len zero misconfig [ 207.642038][T11654] lo speed is unknown, defaulting to 1000 [ 208.412550][T11704] lo speed is unknown, defaulting to 1000 [ 208.767318][T11726] lo speed is unknown, defaulting to 1000 [ 209.389991][T11742] __nla_validate_parse: 8 callbacks suppressed [ 209.390019][T11742] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1411'. [ 209.553341][T11752] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1414'. [ 209.584737][T11752] geneve4: entered promiscuous mode [ 209.607213][T11752] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.651693][T11756] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1415'. [ 209.713920][T11752] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.825458][T11752] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.977269][T11752] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.028760][T11769] dvmrp0: entered allmulticast mode [ 210.044202][T11769] tipc: Cannot configure node identity twice [ 210.130901][ T6069] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.161088][T11777] lo speed is unknown, defaulting to 1000 [ 210.202598][ T6069] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.240243][ T6069] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.308711][ T6069] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.332681][T11780] syzkaller1: entered promiscuous mode [ 210.338229][T11780] syzkaller1: entered allmulticast mode [ 210.868713][T11811] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1430'. [ 210.931801][T11813] validate_nla: 28 callbacks suppressed [ 210.931818][T11813] netlink: 'syz.1.1431': attribute type 2 has an invalid length. [ 211.075381][T11820] 8021q: VLANs not supported on lo [ 211.089963][T11820] netlink: 'syz.0.1434': attribute type 1 has an invalid length. [ 211.238843][T11820] bond3: entered promiscuous mode [ 211.275500][T11820] 8021q: adding VLAN 0 to HW filter on device bond3 [ 211.307005][T11834] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1438'. [ 211.447139][T11841] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 211.783294][T11850] netlink: 'syz.1.1444': attribute type 3 has an invalid length. [ 211.798826][T11850] netlink: 'syz.1.1444': attribute type 3 has an invalid length. [ 211.843243][T11852] lo speed is unknown, defaulting to 1000 [ 212.075502][T11868] batman_adv: batadv0: Adding interface: vlan3 [ 212.092033][T11868] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.156871][T11868] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 212.185349][T11868] syzkaller0: entered promiscuous mode [ 212.190935][T11868] syzkaller0: entered allmulticast mode [ 212.197344][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1449'. [ 212.251767][T11846] lo speed is unknown, defaulting to 1000 [ 212.835571][T11891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1454'. [ 212.846580][T11897] syzkaller0: entered promiscuous mode [ 212.853056][T11897] syzkaller0: entered allmulticast mode [ 212.876386][T11848] lo speed is unknown, defaulting to 1000 [ 214.215161][T11930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1461'. [ 214.324177][T11934] netlink: 'syz.0.1462': attribute type 13 has an invalid length. [ 214.342768][T11935] netlink: 'syz.0.1462': attribute type 13 has an invalid length. [ 214.379471][T11937] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1463'. [ 214.499611][T11945] netlink: 'syz.1.1465': attribute type 7 has an invalid length. [ 214.519476][T11935] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.542616][T11935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.566377][T11934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.813330][T11958] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1469'. [ 214.813755][T11960] netlink: zone id is out of range [ 214.852313][T11960] netlink: zone id is out of range [ 214.857438][T11960] netlink: zone id is out of range [ 214.883405][T11960] netlink: zone id is out of range [ 214.906519][T11960] netlink: zone id is out of range [ 214.911642][T11960] netlink: zone id is out of range [ 214.918167][T11960] netlink: zone id is out of range [ 214.977872][T11969] tipc: Enabled bearer , priority 0 [ 215.043667][T11969] syzkaller0: entered promiscuous mode [ 215.059312][T11969] syzkaller0: entered allmulticast mode [ 215.072412][T11969] tipc: Resetting bearer [ 215.225056][ T13] tipc: Resetting bearer [ 215.274391][T11976] tipc: Resetting bearer [ 215.573163][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1473'. [ 216.449666][T11976] tipc: Disabling bearer [ 216.483080][T11987] syzkaller0: entered promiscuous mode [ 216.488542][T11987] syzkaller0: entered allmulticast mode [ 216.508172][T11989] bond4: Invalid ad_actor_system MAC address. [ 216.515517][T11989] bond4: option ad_actor_system: invalid value (7) [ 216.525092][T11989] bond4 (unregistering): Released all slaves [ 216.549376][T11994] netlink: 'syz.1.1475': attribute type 2 has an invalid length. [ 216.562705][T12002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1477'. [ 216.578446][T12004] geneve4: left promiscuous mode [ 217.484872][T12018] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1480'. [ 217.495900][T12018] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1480'. [ 217.657447][ T91] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.666401][ T91] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.735871][ T91] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.753651][ T91] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.889160][T12025] lo speed is unknown, defaulting to 1000 [ 218.166087][T12044] net_ratelimit: 10 callbacks suppressed [ 218.167318][T12044] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 218.218356][T12045] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 218.323204][T12041] lo speed is unknown, defaulting to 1000 [ 218.493914][T12055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1489'. [ 218.575703][T12061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1488'. [ 218.928840][T12071] syzkaller0: entered promiscuous mode [ 218.952046][T12071] syzkaller0: entered allmulticast mode [ 218.990242][T12077] netlink: 'syz.2.1494': attribute type 21 has an invalid length. [ 220.217606][T12077] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1494'. [ 220.227137][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1494'. [ 220.248336][T12072] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 220.258462][T12072] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 220.269115][T12072] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 220.370248][T12084] lo speed is unknown, defaulting to 1000 [ 220.488068][T12096] netlink: 'syz.4.1500': attribute type 2 has an invalid length. [ 220.686478][T12102] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1501'. [ 220.779543][T12109] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1504'. [ 220.779944][T12106] bond4: Removing last ns target with arp_interval on [ 220.804492][T12109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.888724][T12113] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1506'. [ 220.895670][T12114] sctp: [Deprecated]: syz.0.1505 (pid 12114) Use of int in max_burst socket option. [ 220.895670][T12114] Use struct sctp_assoc_value instead [ 220.915571][T12113] bond0 (unregistering): left promiscuous mode [ 220.922780][T12113] bond_slave_0: left promiscuous mode [ 220.928369][T12113] bond_slave_1: left promiscuous mode [ 220.953497][T12113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.988199][T12113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.007892][T12113] bond0 (unregistering): Released all slaves [ 221.046197][T12102] wg1 speed is unknown, defaulting to 1000 [ 221.092871][T12102] wg1 speed is unknown, defaulting to 1000 [ 221.149937][T12102] wg1 speed is unknown, defaulting to 1000 [ 221.206473][T12102] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 221.294187][T12102] wg1 speed is unknown, defaulting to 1000 [ 221.320574][T12124] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1509'. [ 221.324404][T12102] wg1 speed is unknown, defaulting to 1000 [ 221.364261][T12102] wg1 speed is unknown, defaulting to 1000 [ 221.425421][T12102] wg1 speed is unknown, defaulting to 1000 [ 221.455462][T12102] wg1 speed is unknown, defaulting to 1000 [ 221.632515][T12137] netlink: 'syz.4.1514': attribute type 3 has an invalid length. [ 221.640268][T12137] netlink: 'syz.4.1514': attribute type 3 has an invalid length. [ 221.662825][T12142] xt_ipcomp: unknown flags 1D [ 221.682752][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 221.712904][T12147] netlink: 'syz.2.1517': attribute type 1 has an invalid length. [ 221.732635][T12145] sit1: entered promiscuous mode [ 221.745048][T12137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1514'. [ 221.766186][T12147] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1517'. [ 221.802773][T12147] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 221.895511][T12149] tipc: Enabling of bearer rejected, failed to enable media [ 221.926066][T12152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1518'. [ 222.116982][T12162] netlink: 'syz.0.1523': attribute type 18 has an invalid length. [ 222.156974][T12159] batadv0: entered promiscuous mode [ 222.181028][T12159] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 222.365694][T12182] Set syz1 is full, maxelem 65536 reached [ 222.432405][T12184] bond0: entered promiscuous mode [ 222.443025][T12184] gretap0: entered promiscuous mode [ 222.449659][T12184] debugfs: 'hsr1' already exists in 'hsr' [ 222.458678][T12184] Cannot create hsr debugfs directory [ 222.464699][T12184] hsr1: entered promiscuous mode [ 222.528702][T12196] openvswitch: netlink: Flow key attr not present in new flow. [ 222.953102][T12221] lo speed is unknown, defaulting to 1000 [ 222.969386][T12228] lo: Caught tx_queue_len zero misconfig [ 223.455529][T12221] wg1 speed is unknown, defaulting to 1000 [ 223.575984][T12243] netlink: 'syz.4.1548': attribute type 5 has an invalid length. [ 224.002883][T12256] 8021q: adding VLAN 0 to HW filter on device bond9 [ 224.023286][T12263] tipc: Enabled bearer , priority 0 [ 224.081151][T12255] syzkaller0: entered promiscuous mode [ 224.102546][T12255] syzkaller0: entered allmulticast mode [ 224.127652][T12262] lo speed is unknown, defaulting to 1000 [ 224.160094][T12273] netlink: 'syz.3.1557': attribute type 30 has an invalid length. [ 224.277708][T12279] xt_hashlimit: max too large, truncated to 1048576 [ 224.290075][T12279] xt_hashlimit: overflow, try lower: 18446744073709551608/8 [ 224.555284][T12287] netlink: 'syz.3.1561': attribute type 21 has an invalid length. [ 224.585010][T12251] tipc: Resetting bearer [ 224.610450][T12251] tipc: Disabling bearer [ 224.634579][T12262] wg1 speed is unknown, defaulting to 1000 [ 224.877124][T12310] netlink: 'syz.1.1566': attribute type 16 has an invalid length. [ 224.885586][T12310] netlink: 'syz.1.1566': attribute type 17 has an invalid length. [ 225.026066][T12310] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.280977][T12336] ieee802154 phy0 wpan0: encryption failed: -22 [ 225.520057][T12349] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 225.765107][T12363] netlink: 'syz.3.1579': attribute type 3 has an invalid length. [ 225.800550][T12363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.827555][T12366] batadv_slave_0: entered promiscuous mode [ 225.851221][T12367] lo speed is unknown, defaulting to 1000 [ 225.858837][T12363] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 225.868939][T12363] __nla_validate_parse: 22 callbacks suppressed [ 225.868954][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1579'. [ 225.884611][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1579'. [ 226.107624][T12366] batadv_slave_0: left promiscuous mode [ 226.153798][T12382] lo: Caught tx_queue_len zero misconfig [ 226.260654][T12387] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1585'. [ 226.282532][T12382] xfrm0: entered allmulticast mode [ 226.396334][T12397] xt_ecn: cannot match TCP bits for non-tcp packets [ 226.457833][T12367] wg1 speed is unknown, defaulting to 1000 [ 226.641319][T12408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1589'. [ 226.645715][T12409] x_tables: duplicate underflow at hook 1 [ 226.664097][T12408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.678611][T12408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1589'. [ 226.759800][T12411] bond0: entered promiscuous mode [ 226.774407][T12411] vcan0: entered promiscuous mode [ 226.779701][T12411] vcan0: entered allmulticast mode [ 226.786666][T12411] bond0: (slave vcan0): The slave device specified does not support setting the MAC address [ 226.798482][T12411] bond0: (slave vcan0): Error -95 calling set_mac_address [ 226.840976][T12415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1592'. [ 227.066552][T12415] tipc: Resetting bearer [ 227.310887][T12438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1595'. [ 227.342054][T12438] netlink: 'syz.1.1595': attribute type 2 has an invalid length. [ 227.380508][T12435] lo speed is unknown, defaulting to 1000 [ 227.393650][T12440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1597'. [ 227.419299][T12440] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1597'. [ 227.435684][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1598'. [ 228.228209][T12461] syzkaller0: entered promiscuous mode [ 228.268887][T12461] syzkaller0: entered allmulticast mode [ 229.014826][T12435] wg1 speed is unknown, defaulting to 1000 [ 229.845276][T12540] openvswitch: netlink: Flow actions attr not present in new flow. [ 230.888212][T12544] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 230.896023][T12544] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 231.114551][T12578] __nla_validate_parse: 2 callbacks suppressed [ 231.114568][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1619'. [ 231.301737][T12578] vlan1: entered promiscuous mode [ 231.326820][T12578] bridge0: entered promiscuous mode [ 231.578501][T12601] sqz0: rxe_newlink: already configured on lo [ 231.627029][T12601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1624'. [ 231.652728][T12601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1624'. [ 231.721667][T12605] netlink: 200072 bytes leftover after parsing attributes in process `syz.2.1625'. [ 231.986954][T12620] x_tables: duplicate underflow at hook 4 [ 232.499887][T12641] netlink: 'syz.3.1633': attribute type 4 has an invalid length. [ 232.536898][T12641] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1633'. [ 232.609514][T12641] veth6: entered allmulticast mode [ 233.064816][T12643] tipc: Resetting bearer [ 233.524658][T12671] netlink: 'syz.0.1639': attribute type 3 has an invalid length. [ 233.585319][T12671] bond0: Caught tx_queue_len zero misconfig [ 233.873054][T12690] netlink: 'syz.4.1642': attribute type 61 has an invalid length. [ 233.902285][T12690] netlink: 'syz.4.1642': attribute type 62 has an invalid length. [ 234.049861][T12701] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1645'. [ 234.077716][T12699] syzkaller0: entered promiscuous mode [ 234.088891][T12699] syzkaller0: entered allmulticast mode [ 234.261301][T12710] netlink: 'syz.0.1648': attribute type 1 has an invalid length. [ 234.268222][T12707] lo speed is unknown, defaulting to 1000 [ 234.358130][T12717] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.1649'. [ 234.422511][T12709] team0: Device gtp0 is of different type [ 234.824569][T12735] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1651'. [ 234.881441][T12707] wg1 speed is unknown, defaulting to 1000 [ 235.401232][T12771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.863271][T12790] IPVS: nq: FWM 3 0x00000003 - no destination available [ 236.115948][T12802] xt_HMARK: proto mask must be zero with L3 mode [ 236.157721][T12806] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:85 [ 236.201374][T12806] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20006 [ 236.381665][T12820] netlink: 'syz.3.1669': attribute type 13 has an invalid length. [ 236.402752][T12820] netlink: 'syz.3.1669': attribute type 17 has an invalid length. [ 236.564659][T12820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.577152][T12820] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.588883][T12820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.669788][T12832] lo speed is unknown, defaulting to 1000 [ 236.801011][T12840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1674'. [ 236.835930][T12840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1674'. [ 236.859505][T12849] syzkaller1: entered promiscuous mode [ 236.884630][T12849] syzkaller1: entered allmulticast mode [ 236.891729][T12840] netlink: 'syz.0.1674': attribute type 14 has an invalid length. [ 236.922948][T12840] netlink: 'syz.0.1674': attribute type 13 has an invalid length. [ 237.276733][T12832] wg1 speed is unknown, defaulting to 1000 [ 238.515947][T12915] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20004 [ 238.592590][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1691'. [ 238.776037][T12932] netlink: 'syz.4.1695': attribute type 15 has an invalid length. [ 238.807090][T12931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1695'. [ 239.010268][T12939] bond6: entered promiscuous mode [ 239.021575][T12939] 8021q: adding VLAN 0 to HW filter on device bond6 [ 239.112373][T12946] netlink: 'syz.4.1700': attribute type 6 has an invalid length. [ 239.234439][T12951] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1702'. [ 239.276386][T12958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1704'. [ 239.373323][T12964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1702'. [ 239.392624][T12963] netlink: 'syz.1.1706': attribute type 1 has an invalid length. [ 239.455701][T12968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1707'. [ 239.521504][T12963] 8021q: adding VLAN 0 to HW filter on device bond7 [ 239.543089][T12964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1702'. [ 239.566348][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1709'. [ 239.594399][ T508] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.615166][ T508] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.642315][T12975] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 239.676563][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.682543][T12975] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 239.700104][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.700257][T12975] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 239.757200][T12987] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 239.967179][T12997] bridge5: entered promiscuous mode [ 239.977696][T12997] bridge5: entered allmulticast mode [ 239.997153][T12997] team0: Port device bridge5 added [ 240.023019][T12998] bridge0: port 1(team0) entered blocking state [ 240.043865][T12998] bridge0: port 1(team0) entered disabled state [ 240.058294][T12998] team0: entered allmulticast mode [ 240.064093][T12998] C: entered allmulticast mode [ 240.069012][T12998] team_slave_1: entered allmulticast mode [ 240.075458][T12998] bridge1: entered allmulticast mode [ 240.302253][T13023] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 240.361151][T13023] bond8 (unregistering): Released all slaves [ 240.564814][T13036] lo speed is unknown, defaulting to 1000 [ 240.804527][T13036] wg1 speed is unknown, defaulting to 1000 [ 241.228222][T13048] tunl0: Caught tx_queue_len zero misconfig [ 241.712737][T13086] delete_channel: no stack [ 241.933871][T13095] netlink: 'syz.3.1742': attribute type 1 has an invalid length. [ 241.962570][T13092] __nla_validate_parse: 11 callbacks suppressed [ 241.962587][T13092] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1739'. [ 242.010886][T13093] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1740'. [ 242.206050][T13118] netlink: 'syz.3.1747': attribute type 1 has an invalid length. [ 242.328596][T13118] 8021q: adding VLAN 0 to HW filter on device bond4 [ 242.360938][T13129] bond4: (slave geneve3): making interface the new active one [ 242.370595][T13129] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 242.380039][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1749'. [ 242.399026][T13133] netlink: 'syz.4.1750': attribute type 29 has an invalid length. [ 242.412272][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1750'. [ 242.448544][ T6069] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 242.493286][ T6069] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 242.530334][ T6069] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 242.543685][ T6069] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 243.102821][T13182] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1763'. [ 243.294834][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1766'. [ 243.311193][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1766'. [ 243.471015][T13216] veth1_to_bond: Caught tx_queue_len zero misconfig [ 243.508283][T13217] netlink: 'syz.3.1771': attribute type 1 has an invalid length. [ 243.518651][T13217] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1771'. [ 243.984840][T13241] lo speed is unknown, defaulting to 1000 [ 244.085500][T13248] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1781'. [ 244.323980][T13241] wg1 speed is unknown, defaulting to 1000 [ 244.430815][T13271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1787'. [ 244.570358][T13275] bridge3: entered promiscuous mode [ 244.576717][T13275] macsec0: entered promiscuous mode [ 244.582885][T13275] macsec0: entered allmulticast mode [ 244.588921][T13275] bridge3: entered allmulticast mode [ 244.596015][T13275] bridge3: port 1(macsec0) entered blocking state [ 244.603317][T13275] bridge3: port 1(macsec0) entered disabled state [ 244.614791][T13275] bridge3: left allmulticast mode [ 244.620078][T13275] bridge3: left promiscuous mode [ 244.841200][T13290] netlink: 'syz.2.1794': attribute type 1 has an invalid length. [ 244.872804][T13290] netlink: 'syz.2.1794': attribute type 2 has an invalid length. [ 244.943625][T13286] netlink: 'syz.1.1793': attribute type 2 has an invalid length. [ 245.142417][T13294] lo speed is unknown, defaulting to 1000 [ 245.431120][T13294] wg1 speed is unknown, defaulting to 1000 [ 245.459900][T13304] lo speed is unknown, defaulting to 1000 [ 245.997788][T13304] wg1 speed is unknown, defaulting to 1000 [ 247.263129][T13391] __nla_validate_parse: 2 callbacks suppressed [ 247.263147][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1817'. [ 247.350733][T13392] lo speed is unknown, defaulting to 1000 [ 247.868578][T13406] lo speed is unknown, defaulting to 1000 [ 247.869645][T13392] wg1 speed is unknown, defaulting to 1000 [ 247.895736][T13418] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1823'. [ 247.919768][T13419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1823'. [ 247.939090][T13418] netlink: 'syz.1.1823': attribute type 7 has an invalid length. [ 247.949527][T13419] netlink: 'syz.1.1823': attribute type 7 has an invalid length. [ 247.957298][T13418] netlink: 'syz.1.1823': attribute type 8 has an invalid length. [ 247.957326][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1823'. [ 247.982268][T13419] netlink: 'syz.1.1823': attribute type 8 has an invalid length. [ 247.995265][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1823'. [ 248.293522][T13406] wg1 speed is unknown, defaulting to 1000 [ 248.526348][T13431] dvmrp0: left allmulticast mode [ 248.541578][T13431] dvmrp1: left allmulticast mode [ 248.836395][T13443] syzkaller1: entered promiscuous mode [ 248.842768][T13443] syzkaller1: entered allmulticast mode [ 248.878882][T13441] netlink: 'syz.3.1829': attribute type 1 has an invalid length. [ 248.909715][T13441] netlink: 728 bytes leftover after parsing attributes in process `syz.3.1829'. [ 249.066973][T13460] netlink: 'syz.3.1833': attribute type 1 has an invalid length. [ 249.076647][T13460] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1833'. [ 249.310037][T13477] netlink: 'syz.2.1837': attribute type 1 has an invalid length. [ 249.330790][T13477] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1837'. [ 249.371671][T13482] netlink: 656 bytes leftover after parsing attributes in process `syz.1.1839'. [ 249.665096][T13489] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1842'. [ 250.474815][T13545] validate_nla: 1 callbacks suppressed [ 250.474833][T13545] netlink: 'syz.4.1856': attribute type 15 has an invalid length. [ 250.634513][T13557] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 250.648516][T13548] batadv0: left promiscuous mode [ 250.654278][T13548] veth1: left promiscuous mode [ 250.659151][T13548] veth1: left allmulticast mode [ 250.665310][T13548] wg1: left promiscuous mode [ 250.669974][T13548] wg1: left allmulticast mode [ 250.680044][T13548] geneve2: left promiscuous mode [ 250.687064][T13548] bridge3: left promiscuous mode [ 250.695647][T13548] bridge4: left allmulticast mode [ 250.701569][T13548] xfrm1: left allmulticast mode [ 250.710573][T13548] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 250.717987][T13548] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 250.729089][T13559] : renamed from team_slave_1 [ 250.744352][ T6069] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 250.762143][ T6069] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 250.771800][ T6069] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 250.788123][ T6069] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 250.821841][T13564] netlink: 'syz.0.1861': attribute type 4 has an invalid length. [ 250.836293][T13564] netlink: 'syz.0.1861': attribute type 4 has an invalid length. [ 251.874883][T13650] lo speed is unknown, defaulting to 1000 [ 251.991775][T13659] openvswitch: netlink: Message has 6 unknown bytes. [ 252.075403][T13650] wg1 speed is unknown, defaulting to 1000 [ 252.116952][T13663] bridge6: entered promiscuous mode [ 252.122777][T13663] bridge6: entered allmulticast mode [ 252.183563][T13666] netlink: 'syz.4.1884': attribute type 8 has an invalid length. [ 252.293360][T13672] __nla_validate_parse: 8 callbacks suppressed [ 252.293378][T13672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1886'. [ 252.323823][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1887'. [ 252.658176][T13679] lo speed is unknown, defaulting to 1000 [ 252.667138][T13682] netlink: 'syz.3.1889': attribute type 1 has an invalid length. [ 252.704260][T13682] bond5: entered promiscuous mode [ 252.710965][T13682] 8021q: adding VLAN 0 to HW filter on device bond5 [ 252.744173][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1889'. [ 252.780795][T13682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1889'. [ 252.958389][T13679] wg1 speed is unknown, defaulting to 1000 [ 253.116273][T13705] netlink: 'syz.3.1895': attribute type 1 has an invalid length. [ 253.200606][T13705] bond6: entered promiscuous mode [ 253.206644][T13705] 8021q: adding VLAN 0 to HW filter on device bond6 [ 253.269327][T13707] xt_CT: No such helper "snmp_trap" [ 253.294218][T13710] bond6: (slave bridge6): making interface the new active one [ 253.301827][T13710] bridge6: entered promiscuous mode [ 253.309028][T13710] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 253.343452][T13713] xfrm0: Caught tx_queue_len zero misconfig [ 253.558988][T13729] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 253.590127][T13729] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 253.599056][T13729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1903'. [ 253.611391][T13729] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1903'. [ 253.949768][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1910'. [ 253.981169][T13750] lo speed is unknown, defaulting to 1000 [ 254.025964][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1910'. [ 254.027741][T13758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1911'. [ 254.042865][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1910'. [ 254.048591][T13758] netlink: 'syz.2.1911': attribute type 5 has an invalid length. [ 254.088379][T13764] xt_TCPMSS: Only works on TCP SYN packets [ 254.168025][T13755] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 254.334054][T13772] netlink: 'syz.2.1915': attribute type 4 has an invalid length. [ 254.378434][T13750] wg1 speed is unknown, defaulting to 1000 [ 254.385728][T13760] lo speed is unknown, defaulting to 1000 [ 254.390353][T13777] netlink: 'syz.1.1916': attribute type 10 has an invalid length. [ 254.890621][T13796] bond6: option mode: invalid value (254) [ 254.901161][T13796] bond6 (unregistering): Released all slaves [ 254.935498][T13760] wg1 speed is unknown, defaulting to 1000 [ 255.187743][T13810] Cannot find del_set index 1 as target [ 255.219534][T13806] mac80211_hwsim hwsim10 ;: renamed from wlan0 [ 255.320649][T13817] Cannot find map_set index 135 as target [ 255.396412][T13820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.474174][T13824] netlink: 'syz.1.1930': attribute type 62 has an invalid length. [ 255.482187][T13827] netlink: 'syz.1.1930': attribute type 62 has an invalid length. [ 255.591582][T13834] openvswitch: netlink: IPv4 tunnel dst address is zero [ 256.094160][T13844] veth3: entered promiscuous mode [ 256.483651][T13864] mac80211_hwsim hwsim8 wlan1: Master is either lo or non-ether device [ 256.643357][T13876] lo speed is unknown, defaulting to 1000 [ 256.700557][T13881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.868173][T13876] wg1 speed is unknown, defaulting to 1000 [ 257.121302][T13908] 8021q: adding VLAN 0 to HW filter on device bond6 [ 257.286309][T13908] bond6: (slave batadv1): Opening slave failed [ 257.395882][T13923] netlink: 'syz.3.1957': attribute type 1 has an invalid length. [ 257.422906][T13923] netlink: 'syz.3.1957': attribute type 2 has an invalid length. [ 257.578262][T13934] __nla_validate_parse: 14 callbacks suppressed [ 257.578279][T13934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1962'. [ 257.620365][T13932] syzkaller0: entered promiscuous mode [ 257.628809][T13930] block nbd2: not configured, cannot reconfigure [ 257.655707][T13932] syzkaller0: entered allmulticast mode [ 257.822699][T13952] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1966'. [ 258.023046][T13964] netlink: 'syz.0.1972': attribute type 1 has an invalid length. [ 258.197199][T13967] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1972'. [ 259.094347][T13982] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1974'. [ 259.178026][T13964] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 259.220934][T13979] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 259.262674][T13979] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 259.316608][T13956] lo speed is unknown, defaulting to 1000 [ 259.391649][T13994] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1978'. [ 259.403550][T13994] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1978'. [ 259.413925][T13994] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1978'. [ 259.468193][T13998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1980'. [ 259.515896][T13998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1980'. [ 259.545283][T13998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1980'. [ 259.603650][T14005] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 259.761984][ T5831] Bluetooth: hci4: link tx timeout [ 259.775536][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 259.838596][T13956] wg1 speed is unknown, defaulting to 1000 [ 260.489129][T14012] lec:lec_atm_close: lec0: Shut down! [ 260.903717][T14068] netlink: 'syz.0.1997': attribute type 30 has an invalid length. [ 260.998041][T14068] bond8: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 261.015251][T14068] bond8 (unregistering): Released all slaves [ 261.078267][T14080] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 261.515627][T14098] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 261.527562][T14105] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 261.765744][ T7764] lec:lec_start_xmit: lec0:No lecd attached [ 261.792001][T14114] netlink: 'syz.0.2008': attribute type 1 has an invalid length. [ 261.814034][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 261.985790][T14119] lo speed is unknown, defaulting to 1000 [ 261.996511][T14125] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 262.098093][T14132] wg1: entered promiscuous mode [ 262.105808][T14132] wg1: entered allmulticast mode [ 262.391051][T14149] sctp: [Deprecated]: syz.4.2018 (pid 14149) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.391051][T14149] Use struct sctp_sack_info instead [ 262.609587][T14119] wg1 speed is unknown, defaulting to 1000 [ 262.786390][T14168] lo speed is unknown, defaulting to 1000 [ 262.873596][T14172] __nla_validate_parse: 36 callbacks suppressed [ 262.873614][T14172] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2022'. [ 262.969030][T14181] bond10: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 263.019699][T14181] bond10 (unregistering): Released all slaves [ 263.059007][T14196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2022'. [ 263.083566][T14198] netlink: 'syz.3.2026': attribute type 21 has an invalid length. [ 263.091648][T14198] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2026'. [ 263.132171][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2023'. [ 263.202255][T14201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2023'. [ 263.293779][T14198] netlink: 'syz.3.2026': attribute type 4 has an invalid length. [ 263.301722][T14198] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2026'. [ 263.316189][T14205] bridge_slave_1: left allmulticast mode [ 263.322626][T14205] bridge_slave_1: left promiscuous mode [ 263.328458][T14205] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.353464][T14168] wg1 speed is unknown, defaulting to 1000 [ 263.500652][T14187] lo speed is unknown, defaulting to 1000 [ 263.532633][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2028'. [ 263.844462][T14187] wg1 speed is unknown, defaulting to 1000 [ 263.877452][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2029'. [ 263.895988][T14222] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2030'. [ 263.906740][T14222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.220471][T14229] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20002 [ 264.327403][T14235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2034'. [ 264.397813][T14242] hsr_slave_1 (unregistering): left promiscuous mode [ 264.687897][T14260] gtp0: entered promiscuous mode [ 264.696630][T14260] gtp0: entered allmulticast mode [ 264.726282][T14264] bridge0: entered allmulticast mode [ 264.732979][T14260] syzkaller1: entered promiscuous mode [ 264.738490][T14260] syzkaller1: entered allmulticast mode [ 264.909135][T14269] veth1_to_hsr: entered promiscuous mode [ 264.946658][T14269] veth1_to_hsr: entered allmulticast mode [ 265.211510][T14294] bridge_slave_1: left allmulticast mode [ 265.232274][T14294] bridge_slave_1: left promiscuous mode [ 265.238635][T14294] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.290803][T14299] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 265.433262][T14312] netlink: 'syz.4.2057': attribute type 2 has an invalid length. [ 265.451824][T14312] netlink: 'syz.4.2057': attribute type 8 has an invalid length. [ 266.783469][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 266.791728][ C0] lec:lec_tx_timeout: lec0 [ 266.798126][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 266.835741][T14329] lo speed is unknown, defaulting to 1000 [ 267.053831][T14329] wg1 speed is unknown, defaulting to 1000 [ 268.162432][T14290] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.624351][T14376] Bluetooth: MGMT ver 1.23 [ 268.727438][T14364] dvmrp0: entered allmulticast mode [ 268.959017][T14400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.389488][T14444] __nla_validate_parse: 7 callbacks suppressed [ 269.389507][T14444] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2094'. [ 269.437845][T14444] bridge_slave_0 (unregistering): left allmulticast mode [ 269.482578][T14444] bridge_slave_0 (unregistering): left promiscuous mode [ 269.503686][T14444] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.520842][T14454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2097'. [ 269.539906][T14453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2096'. [ 269.549260][T14453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2096'. [ 269.558934][T14453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2096'. [ 269.569030][T14453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2096'. [ 269.596359][T14456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2097'. [ 269.706119][T14460] lo speed is unknown, defaulting to 1000 [ 269.788024][T14464] netlink: 'syz.3.2100': attribute type 13 has an invalid length. [ 269.886829][T14460] wg1 speed is unknown, defaulting to 1000 [ 269.894915][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2100'. [ 269.954446][T14464] lo speed is unknown, defaulting to 1000 [ 270.146074][T14475] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 270.158679][T14475] netlink: 'syz.0.2102': attribute type 1 has an invalid length. [ 270.194927][T14475] 8021q: adding VLAN 0 to HW filter on device bond8 [ 270.207936][T14464] wg1 speed is unknown, defaulting to 1000 [ 270.362358][T14475] syzkaller0: entered promiscuous mode [ 270.384213][T14475] syzkaller0: entered allmulticast mode [ 270.530765][T14489] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2105'. [ 270.591764][T14492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2105'. [ 270.630579][T14495] IPv6: NLM_F_CREATE should be specified when creating new route [ 271.303636][T14519] xt_TPROXY: Can be used only with -p tcp or -p udp [ 271.564019][T14531] gre0: entered promiscuous mode [ 271.569141][T14531] gre0: entered allmulticast mode [ 271.812464][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 271.820548][ C0] lec:lec_tx_timeout: lec0 [ 271.826699][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 272.109885][T14568] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 272.186424][T14572] xt_hashlimit: size too large, truncated to 1048576 [ 272.256362][T14576] netlink: 'syz.2.2132': attribute type 9 has an invalid length. [ 272.265897][T14578] Unsupported ieee802154 address type: 0 [ 272.376412][T14579] ksmbd: Unknown IPC event: 1, ignore. [ 272.662323][T14609] block nbd0: server does not support multiple connections per device. [ 272.674570][T14609] block nbd0: shutting down sockets [ 272.826223][T14621] tipc: New replicast peer: 255.255.255.255 [ 272.864122][T14621] tipc: Enabled bearer , priority 10 [ 272.945213][T14627] : renamed from team_slave_1 [ 273.319502][T14636] pimreg: entered allmulticast mode [ 273.888436][ T5908] tipc: Node number set to 748025903 [ 274.117708][T14665] netlink: 'syz.4.2152': attribute type 4 has an invalid length. [ 274.436432][T14675] lo speed is unknown, defaulting to 1000 [ 274.553045][T14700] __nla_validate_parse: 14 callbacks suppressed [ 274.553065][T14700] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2157'. [ 275.111253][T14675] wg1 speed is unknown, defaulting to 1000 [ 275.313159][T14726] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2164'. [ 275.392947][T14723] pimreg: tun_chr_ioctl cmd 1074025677 [ 275.398582][T14723] pimreg: linktype set to 780 [ 275.671394][T14737] lo speed is unknown, defaulting to 1000 [ 275.778432][T14752] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2168'. [ 275.870535][T14731] "syz.1.2165" (14731) uses obsolete ecb(arc4) skcipher [ 275.905132][T14761] netlink: 296 bytes leftover after parsing attributes in process `syz.4.2168'. [ 276.544023][T14781] lo speed is unknown, defaulting to 1000 [ 276.842483][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 276.850536][ C0] lec:lec_tx_timeout: lec0 [ 276.855708][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 276.936781][T14814] netlink: 'syz.0.2186': attribute type 2 has an invalid length. [ 276.964315][T14816] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2187'. [ 276.970595][T14814] !9: entered promiscuous mode [ 276.989272][T14820] netlink: 'syz.0.2186': attribute type 2 has an invalid length. [ 277.013847][T14816] netlink: 'syz.3.2187': attribute type 1 has an invalid length. [ 277.026060][T14820] !9: left promiscuous mode [ 277.048550][T14814] netlink: 'syz.0.2186': attribute type 10 has an invalid length. [ 277.048897][T14818] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 277.066432][T14814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2186'. [ 277.085222][T14814] bridge_slave_0: left promiscuous mode [ 277.090982][T14814] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.356716][T14781] wg1 speed is unknown, defaulting to 1000 [ 277.412829][T14845] netlink: 'syz.0.2194': attribute type 1 has an invalid length. [ 277.440886][T14845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2194'. [ 277.468273][T14845] netlink: 'syz.0.2194': attribute type 3 has an invalid length. [ 277.549677][T14843] bond10: entered allmulticast mode [ 277.560635][T14843] 8021q: adding VLAN 0 to HW filter on device bond10 [ 277.614934][T14852] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2196'. [ 277.626822][T14852] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2196'. [ 277.777229][T14860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2197'. [ 278.496341][T14890] netlink: 'syz.3.2204': attribute type 4 has an invalid length. [ 278.573037][T14890] lo speed is unknown, defaulting to 1000 [ 278.739229][T14906] ip6gre1: entered promiscuous mode [ 278.791066][T14906] ip6gre1: entered allmulticast mode [ 278.880821][T14909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.922777][T14890] wg1 speed is unknown, defaulting to 1000 [ 279.197296][T14934] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.203431][T14935] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.643841][T14954] netlink: 'syz.3.2221': attribute type 4 has an invalid length. [ 279.668114][T14954] __nla_validate_parse: 2 callbacks suppressed [ 279.668130][T14954] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2221'. [ 279.709427][T14954] .`: renamed from bond0 [ 279.837210][T14954] lo speed is unknown, defaulting to 1000 [ 279.975839][T14957] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 280.016623][T14967] netlink: 'syz.0.2224': attribute type 1 has an invalid length. [ 280.155383][T14954] wg1 speed is unknown, defaulting to 1000 [ 280.780898][T15009] netlink: 'syz.2.2237': attribute type 1 has an invalid length. [ 280.832735][T15009] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2237'. [ 280.893629][T15015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2239'. [ 280.975639][T15017] syzkaller0: entered promiscuous mode [ 280.981270][T15017] syzkaller0: entered allmulticast mode [ 281.064518][T15024] xt_hashlimit: size too large, truncated to 1048576 [ 281.253194][T15032] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2245'. [ 281.512938][T15044] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2250'. [ 281.522171][T15044] NCSI netlink: No device for ifindex 830110067 [ 281.544402][T15046] IPVS: set_ctl: invalid protocol: 1 172.20.20.15:20000 [ 281.734150][T15060] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 281.805578][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2259'. [ 281.862382][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 281.870423][ C0] lec:lec_tx_timeout: lec0 [ 281.875515][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 281.989547][T15081] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2265'. [ 282.004216][T15081] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2265'. [ 282.189096][T15087] bridge8: entered promiscuous mode [ 282.213336][T15087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2267'. [ 282.301142][T15089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2266'. [ 282.375879][T15098] validate_nla: 2 callbacks suppressed [ 282.375894][T15098] netlink: 'syz.3.2270': attribute type 3 has an invalid length. [ 282.435165][T15103] netlink: 'syz.3.2270': attribute type 3 has an invalid length. [ 282.490573][T15100] 8021q: adding VLAN 0 to HW filter on device bond9 [ 282.666408][T15100] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 283.458818][T15169] netlink: 'syz.4.2293': attribute type 9 has an invalid length. [ 283.681434][T15187] bond11: entered promiscuous mode [ 283.689479][T15187] bond11: entered allmulticast mode [ 283.704533][T15187] 8021q: adding VLAN 0 to HW filter on device bond11 [ 284.022494][T15202] netlink: 'syz.4.2305': attribute type 62 has an invalid length. [ 284.060684][T15210] netlink: 'syz.2.2307': attribute type 10 has an invalid length. [ 284.089937][T15210] team0: Port device dummy0 added [ 284.273504][T15223] ip6tnl1: entered allmulticast mode [ 284.703004][T15253] sctp: [Deprecated]: syz.3.2320 (pid 15253) Use of int in maxseg socket option. [ 284.703004][T15253] Use struct sctp_assoc_value instead [ 284.734097][T15255] sctp: [Deprecated]: syz.3.2320 (pid 15255) Use of int in maxseg socket option. [ 284.734097][T15255] Use struct sctp_assoc_value instead [ 284.955719][T15278] netlink: 'syz.1.2326': attribute type 1 has an invalid length. [ 284.998448][T15278] bond12: entered promiscuous mode [ 285.006550][T15278] 8021q: adding VLAN 0 to HW filter on device bond12 [ 285.042936][T15278] 8021q: adding VLAN 0 to HW filter on device bond12 [ 285.062407][T15278] bond12: (slave vcan0): The slave device specified does not support setting the MAC address [ 285.073016][T15278] bond12: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 285.090397][T15278] bond12: (slave vcan0): making interface the new active one [ 285.103053][T15278] vcan0: entered promiscuous mode [ 285.110021][T15278] bond12: (slave vcan0): Enslaving as an active interface with an up link [ 285.193903][T15293] __nla_validate_parse: 18 callbacks suppressed [ 285.193918][T15293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2330'. [ 285.316220][T15297] netlink: 'syz.3.2332': attribute type 1 has an invalid length. [ 285.343067][T15297] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2332'. [ 285.421496][T15305] syzkaller0: entered promiscuous mode [ 285.427143][T15305] syzkaller0: entered allmulticast mode [ 285.643792][T15316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2334'. [ 285.755905][T15327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2334'. [ 285.781548][T15325] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2336'. [ 286.067118][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2343'. [ 286.102527][T15348] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 286.116261][T15348] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 286.151253][T15348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2343'. [ 286.181796][T15354] netlink: 'syz.0.2345': attribute type 10 has an invalid length. [ 286.190903][T15354] veth0_vlan: left promiscuous mode [ 286.198684][T15354] veth0_vlan: entered promiscuous mode [ 286.206791][T15354] team0: Device veth0_vlan failed to register rx_handler [ 286.428364][T15374] sctp: [Deprecated]: syz.3.2350 (pid 15374) Use of int in maxseg socket option. [ 286.428364][T15374] Use struct sctp_assoc_value instead [ 286.445836][T15374] sctp: [Deprecated]: syz.3.2350 (pid 15374) Use of int in maxseg socket option. [ 286.445836][T15374] Use struct sctp_assoc_value instead [ 286.791093][T15388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2355'. [ 286.819016][T15399] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2358'. [ 286.837779][T15404] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2358'. [ 286.863419][ T7755] IPVS: starting estimator thread 0... [ 286.873088][T15397] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 286.912296][T15405] netlink: 'syz.4.2357': attribute type 2 has an invalid length. [ 286.920035][T15405] netlink: 'syz.4.2357': attribute type 1 has an invalid length. [ 286.963913][T15406] IPVS: using max 31 ests per chain, 74400 per kthread [ 286.971578][T15411] bridge6: entered promiscuous mode [ 286.988972][T15411] bridge6: port 1(macsec1) entered blocking state [ 287.022703][T15411] bridge6: port 1(macsec1) entered disabled state [ 287.039522][T15411] macsec1: entered allmulticast mode [ 287.062556][T15411] bridge6: entered allmulticast mode [ 287.101418][T15411] macsec1: left allmulticast mode [ 287.111928][T15411] bridge6: left allmulticast mode [ 287.142677][T15411] bridge6: left promiscuous mode [ 287.460286][T15442] netlink: 'syz.1.2373': attribute type 39 has an invalid length. [ 287.468485][T15443] netlink: 'syz.1.2373': attribute type 39 has an invalid length. [ 287.487232][T15445] IPVS: set_ctl: invalid protocol: 47 172.20.20.63:20001 [ 287.499233][T15443] netlink: 'syz.1.2373': attribute type 5 has an invalid length. [ 287.521914][T15447] netlink: 'syz.1.2373': attribute type 5 has an invalid length. [ 287.559685][T15447] vlan3: entered allmulticast mode [ 287.566054][T15447] bridge_slave_0: entered allmulticast mode [ 287.837808][T15471] team0: entered promiscuous mode [ 287.845261][T15471] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.008368][ T508] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.017324][ T508] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.073821][ T508] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.102985][ T508] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.141863][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6270 ms [ 288.149922][ C0] lec:lec_tx_timeout: lec0 [ 288.155101][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 288.230286][T15496] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 288.267686][T15498] Cannot find set identified by id 65534 to match [ 288.284039][T15496] netlink: 'syz.3.2385': attribute type 5 has an invalid length. [ 288.300450][T15496] netlink: 'syz.3.2385': attribute type 5 has an invalid length. [ 288.310156][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.320108][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.331674][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.420176][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.512660][T15518] netlink: 'syz.2.2392': attribute type 39 has an invalid length. [ 288.586033][T15518] syz_tun (unregistering): left promiscuous mode [ 288.713804][T15530] lo speed is unknown, defaulting to 1000 [ 288.995186][T15530] wg1 speed is unknown, defaulting to 1000 [ 289.041191][T15551] tipc: Resetting bearer [ 289.153806][T15555] tunl0: Caught tx_queue_len zero misconfig [ 289.493993][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 289.540097][T15576] syzkaller1: tun_chr_ioctl cmd 35111 [ 289.792420][T15602] netlink: 'syz.1.2412': attribute type 1 has an invalid length. [ 289.946132][T15612] lo speed is unknown, defaulting to 1000 [ 289.952349][T15612] lo speed is unknown, defaulting to 1000 [ 289.964487][T15612] lo speed is unknown, defaulting to 1000 [ 290.030079][T15612] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 290.076165][T15612] lo speed is unknown, defaulting to 1000 [ 290.084431][T15612] lo speed is unknown, defaulting to 1000 [ 290.087242][T15617] sctp: [Deprecated]: syz.3.2415 (pid 15617) Use of int in max_burst socket option. [ 290.087242][T15617] Use struct sctp_assoc_value instead [ 290.093084][T15612] lo speed is unknown, defaulting to 1000 [ 290.113584][T15612] lo speed is unknown, defaulting to 1000 [ 290.130257][T15612] lo speed is unknown, defaulting to 1000 [ 290.225012][T15622] tun0: tun_chr_ioctl cmd 1074025677 [ 290.237083][T15622] tun0: linktype set to 778 [ 290.254178][T15625] xt_bpf: check failed: parse error [ 290.264850][T15626] __nla_validate_parse: 24 callbacks suppressed [ 290.264872][T15626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2418'. [ 290.280623][T15626] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2418'. [ 290.313373][T15629] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 290.321765][T15626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2418'. [ 290.325289][T15629] netlink: 'syz.0.2419': attribute type 2 has an invalid length. [ 290.339946][T15626] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2418'. [ 290.340082][T15629] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2419'. [ 290.723546][T15656] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2426'. [ 290.777440][T15656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2426'. [ 291.400238][T15698] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.514778][T15698] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.621416][T15698] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.686392][T15718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2444'. [ 291.700483][T15720] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2443'. [ 291.700486][T15721] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2443'. [ 291.737399][T15698] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.805432][T15718] netlink: 'syz.2.2444': attribute type 1 has an invalid length. [ 291.898281][ T91] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.961073][ T91] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.000328][ T91] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.098440][ T78] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.432889][T15742] xt_CT: No such helper "syz0" [ 292.604053][T15755] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20004 [ 292.729278][T15761] lo speed is unknown, defaulting to 1000 [ 292.993016][T15767] 8021q: adding VLAN 0 to HW filter on device .` [ 293.001355][T15767] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.019586][T15767] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.123799][T15778] netlink: 'syz.4.2463': attribute type 16 has an invalid length. [ 293.307155][T15782] bond11: entered promiscuous mode [ 293.316128][T15771] lo speed is unknown, defaulting to 1000 [ 293.316355][T15761] wg1 speed is unknown, defaulting to 1000 [ 293.335167][T15782] vcan0: entered promiscuous mode [ 293.340829][T15782] vcan0: entered allmulticast mode [ 293.358340][T15761] lo speed is unknown, defaulting to 1000 [ 293.892395][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 293.900468][ C0] lec:lec_tx_timeout: lec0 [ 293.905454][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 294.788825][T15780] lo speed is unknown, defaulting to 1000 [ 295.071607][T15780] wg1 speed is unknown, defaulting to 1000 [ 295.080359][T15780] lo speed is unknown, defaulting to 1000 [ 295.087436][T15771] wg1 speed is unknown, defaulting to 1000 [ 295.107185][T15771] lo speed is unknown, defaulting to 1000 [ 295.421505][T15823] __nla_validate_parse: 6 callbacks suppressed [ 295.421524][T15823] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2477'. [ 295.456788][T15823] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2477'. [ 295.466147][T15823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.636283][T15827] lo: entered allmulticast mode [ 295.641355][T15827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.670505][T15829] 8021q: VLANs not supported on wg1 [ 295.798721][T15836] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.869496][T15836] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.030482][T15836] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.145993][T15836] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.320732][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.371105][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.393900][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.421122][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.421253][T15875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2491'. [ 296.473989][T15875] hsr_slave_1 (unregistering): left promiscuous mode [ 296.583750][T15898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2497'. [ 296.652808][T15900] netlink: 'syz.3.2498': attribute type 39 has an invalid length. [ 296.673064][T15902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2499'. [ 296.695804][T15902] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2499'. [ 296.712513][T15902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2499'. [ 296.759071][T15908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2500'. [ 296.860880][T15913] netlink: zone id is out of range [ 296.881995][T15913] netlink: zone id is out of range [ 296.887293][T15913] netlink: zone id is out of range [ 296.933010][T15913] netlink: zone id is out of range [ 296.940233][T15913] netlink: zone id is out of range [ 296.947967][T15913] netlink: zone id is out of range [ 296.953811][T15913] netlink: zone id is out of range [ 297.083125][T15922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2501'. [ 297.384664][T15929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2505'. [ 297.416180][T15929] netlink: 'syz.3.2505': attribute type 2 has an invalid length. [ 297.431400][T15929] netlink: 'syz.3.2505': attribute type 9 has an invalid length. [ 297.612573][T15933] netlink: 'syz.1.2506': attribute type 1 has an invalid length. [ 297.646875][T15933] 8021q: adding VLAN 0 to HW filter on device bond14 [ 297.658248][T15933] bond14: option tlb_dynamic_lb: unable to set because the bond device is up [ 297.670561][T15933] netlink: 'syz.1.2506': attribute type 1 has an invalid length. [ 297.766915][T15944] team0: left promiscuous mode [ 297.867551][T15950] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 297.879821][T15950] bond7 (unregistering): Released all slaves [ 297.905229][T15956] syzkaller0: entered promiscuous mode [ 297.910775][T15956] syzkaller0: entered allmulticast mode [ 297.922939][T15957] netlink: 'syz.1.2514': attribute type 3 has an invalid length. [ 298.204205][T15972] syzkaller0: entered promiscuous mode [ 298.210754][T15972] syzkaller0: entered allmulticast mode [ 298.482687][T15990] netlink: 'syz.3.2523': attribute type 9 has an invalid length. [ 298.625897][T15999] netlink: 'syz.3.2526': attribute type 9 has an invalid length. [ 298.729541][T16001] sctp: [Deprecated]: syz.2.2527 (pid 16001) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.729541][T16001] Use struct sctp_sack_info instead [ 298.905131][T16020] netlink: 'syz.2.2531': attribute type 1 has an invalid length. [ 298.952533][T16025] tap0: tun_chr_ioctl cmd 2148553947 [ 298.989773][T16029] xt_hashlimit: invalid rate [ 299.044115][T16030] lo speed is unknown, defaulting to 1000 [ 299.220372][T16032] tipc: Resetting bearer [ 299.431245][T16055] sctp: [Deprecated]: syz.3.2539 (pid 16055) Use of int in maxseg socket option. [ 299.431245][T16055] Use struct sctp_assoc_value instead [ 299.595792][T16030] wg1 speed is unknown, defaulting to 1000 [ 299.603794][T16030] lo speed is unknown, defaulting to 1000 [ 299.651861][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 299.659919][ C0] lec:lec_tx_timeout: lec0 [ 299.665228][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 300.279002][T16101] bond0 (unregistering): left promiscuous mode [ 300.286468][T16101] bond0 (unregistering): Released all slaves [ 300.445426][T16121] netlink: 'syz.1.2558': attribute type 2 has an invalid length. [ 300.455150][T16121] netlink: 'syz.1.2558': attribute type 1 has an invalid length. [ 300.466553][T16121] __nla_validate_parse: 22 callbacks suppressed [ 300.466568][T16121] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2558'. [ 300.583158][T16132] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2559'. [ 300.683661][T16137] netlink: 'syz.1.2560': attribute type 1 has an invalid length. [ 300.715719][T16137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.725283][T16137] bond0: entered allmulticast mode [ 300.741174][T16137] bond0: (slave ip6gretap2): making interface the new active one [ 300.749974][T16137] ip6gretap2: entered allmulticast mode [ 300.757124][T16137] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 303.172585][T16100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.276913][T16145] netlink: 844 bytes leftover after parsing attributes in process `syz.3.2563'. [ 303.298728][T16148] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2562'. [ 303.357124][T16156] siw: device registration error -23 [ 303.367660][T16148] IPv6: sit3: Disabled Multicast RS [ 303.398801][T16148] sit3: entered allmulticast mode [ 303.467064][T16160] tipc: Enabling of bearer rejected, failed to enable media [ 303.514008][T16160] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2566'. [ 303.525699][T16165] netlink: 'syz.2.2568': attribute type 1 has an invalid length. [ 303.532227][T16160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2566'. [ 303.562311][T16160] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2566'. [ 303.577326][T16160] netlink: 'syz.0.2566': attribute type 3 has an invalid length. [ 303.585850][T16160] netlink: 'syz.0.2566': attribute type 2 has an invalid length. [ 303.585938][T16166] x_tables: duplicate underflow at hook 1 [ 303.593688][T16160] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2566'. [ 303.593719][T16160] netlink: 'syz.0.2566': attribute type 2 has an invalid length. [ 303.604537][T16165] 8021q: adding VLAN 0 to HW filter on device bond7 [ 303.643262][T16171] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2569'. [ 303.663221][T16165] bond7: (slave veth5): Enslaving as an active interface with a down link [ 303.773238][T16169] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 303.793753][T16169] bond7: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 303.856398][T16151] netlink: 'syz.4.2564': attribute type 3 has an invalid length. [ 303.874496][T16151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2564'. [ 304.010885][T16195] net_ratelimit: 353 callbacks suppressed [ 304.010904][T16195] netlink: zone id is out of range [ 304.053264][T16195] netlink: zone id is out of range [ 304.070625][T16195] netlink: zone id is out of range [ 304.086190][T16195] netlink: zone id is out of range [ 304.112586][T16195] netlink: zone id is out of range [ 304.119052][T16195] netlink: zone id is out of range [ 304.137291][T16195] netlink: zone id is out of range [ 304.152725][T16195] netlink: zone id is out of range [ 304.162911][T16195] netlink: zone id is out of range [ 304.169308][T16195] netlink: zone id is out of range [ 304.393083][T16220] lo speed is unknown, defaulting to 1000 [ 304.586477][T16244] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:20002 [ 304.692072][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 304.700130][ C0] lec:lec_tx_timeout: lec0 [ 304.705377][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 304.784799][T16249] geneve3: entered promiscuous mode [ 304.812318][ T1037] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.838220][ T1037] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.863325][T16220] wg1 speed is unknown, defaulting to 1000 [ 304.869366][ T1037] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.901168][ T1037] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.915405][T16220] lo speed is unknown, defaulting to 1000 [ 305.294778][T16281] netlink: 'syz.2.2595': attribute type 4 has an invalid length. [ 305.484136][T16315] __nla_validate_parse: 5 callbacks suppressed [ 305.484155][T16315] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2599'. [ 305.607072][T16315] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.2599'. [ 305.794293][T16328] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 305.835328][T16320] bond15: option lp_interval: invalid value (0) [ 305.844651][T16320] bond15: option lp_interval: allowed values 1 - 2147483647 [ 305.874390][T16320] bond15 (unregistering): Released all slaves [ 306.026291][T16344] netlink: 'syz.0.2609': attribute type 21 has an invalid length. [ 306.076314][T16344] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2609'. [ 306.086507][T16344] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2609'. [ 306.286865][T16363] tipc: Started in network mode [ 306.295505][T16363] tipc: Node identity 8a5e2ff8ce55, cluster identity 4711 [ 306.305644][T16363] tipc: Enabled bearer , priority 0 [ 306.316345][T16363] syzkaller0: entered promiscuous mode [ 306.323093][T16363] syzkaller0: entered allmulticast mode [ 306.325403][T16365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2617'. [ 306.357154][T16363] tipc: Resetting bearer [ 306.374129][T16362] tipc: Resetting bearer [ 306.388384][T16362] tipc: Disabling bearer [ 306.598691][T16379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2621'. [ 306.628549][T16379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2621'. [ 306.644382][T16379] netlink: 'syz.1.2621': attribute type 14 has an invalid length. [ 306.682782][T16379] netlink: 'syz.1.2621': attribute type 11 has an invalid length. [ 306.794607][T16390] netlink: 3924 bytes leftover after parsing attributes in process `syz.4.2624'. [ 306.914839][T16395] vlan1: entered promiscuous mode [ 306.919900][T16395] bridge0: entered promiscuous mode [ 306.966343][T16402] netlink: 'syz.2.2628': attribute type 10 has an invalid length. [ 307.026528][T16407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2628'. [ 307.133767][T16417] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2629'. [ 307.404161][T16439] Cannot find del_set index 4 as target [ 307.411508][T16439] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 307.534201][T16445] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 307.555267][T16445] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 307.851777][T16469] FAULT_INJECTION: forcing a failure. [ 307.851777][T16469] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 307.911215][T16469] CPU: 0 UID: 0 PID: 16469 Comm: syz.1.2648 Not tainted syzkaller #0 PREEMPT(full) [ 307.911251][T16469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 307.911266][T16469] Call Trace: [ 307.911273][T16469] [ 307.911281][T16469] dump_stack_lvl+0xe8/0x150 [ 307.911310][T16469] should_fail_ex+0x412/0x560 [ 307.911337][T16469] _copy_from_user+0x2d/0xb0 [ 307.911364][T16469] ___sys_sendmsg+0x1c6/0x360 [ 307.911387][T16469] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.911432][T16469] ? __fget_files+0x2a/0x420 [ 307.911453][T16469] ? __fget_files+0x3a0/0x420 [ 307.911480][T16469] __x64_sys_sendmsg+0x1bd/0x2a0 [ 307.911497][T16469] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 307.911518][T16469] ? __pfx_ksys_write+0x10/0x10 [ 307.911542][T16469] do_syscall_64+0x14d/0xf80 [ 307.911562][T16469] ? trace_irq_disable+0x3b/0x150 [ 307.911582][T16469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.911596][T16469] ? clear_bhb_loop+0x40/0x90 [ 307.911613][T16469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.911627][T16469] RIP: 0033:0x7f10d1f9c799 [ 307.911641][T16469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.911654][T16469] RSP: 002b:00007f10d2eb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.911670][T16469] RAX: ffffffffffffffda RBX: 00007f10d2215fa0 RCX: 00007f10d1f9c799 [ 307.911680][T16469] RDX: 00000000040488c0 RSI: 0000200000000480 RDI: 0000000000000003 [ 307.911689][T16469] RBP: 00007f10d2eb4090 R08: 0000000000000000 R09: 0000000000000000 [ 307.911698][T16469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.911706][T16469] R13: 00007f10d2216038 R14: 00007f10d2215fa0 R15: 00007ffe7aea1fe8 [ 307.911729][T16469] [ 308.575084][T16502] netlink: 'syz.3.2660': attribute type 39 has an invalid length. [ 308.591793][T16497] macsec0: entered promiscuous mode [ 308.597739][T16497] team0: entered promiscuous mode [ 308.604846][T16497] team0: Device macsec0 is already an upper device of the team interface [ 308.614816][T16497] team0: left promiscuous mode [ 308.635324][T16502] netlink: 'syz.3.2660': attribute type 5 has an invalid length. [ 308.974089][T16526] xt_TCPMSS: Only works on TCP SYN packets [ 309.061321][T16530] netlink: 'syz.3.2669': attribute type 10 has an invalid length. [ 309.095393][T16530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.140092][T16530] .`: (slave batadv0): Enslaving as an active interface with an up link [ 309.165955][T16543] netlink: 'syz.4.2674': attribute type 39 has an invalid length. [ 309.218043][T16548] netlink: 'syz.4.2674': attribute type 5 has an invalid length. [ 309.331502][T16555] netlink: 'syz.3.2677': attribute type 83 has an invalid length. [ 309.615714][T16564] delete_channel: no stack [ 309.707227][T16580] tipc: Resetting bearer [ 309.722374][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 309.730430][ C0] lec:lec_tx_timeout: lec0 [ 309.735618][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 309.845606][T16594] FAULT_INJECTION: forcing a failure. [ 309.845606][T16594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.869040][T16591] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.879491][T16594] CPU: 0 UID: 0 PID: 16594 Comm: syz.3.2689 Not tainted syzkaller #0 PREEMPT(full) [ 309.879515][T16594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 309.879526][T16594] Call Trace: [ 309.879534][T16594] [ 309.879541][T16594] dump_stack_lvl+0xe8/0x150 [ 309.879569][T16594] should_fail_ex+0x412/0x560 [ 309.879597][T16594] _copy_from_iter+0x1d3/0x1670 [ 309.879625][T16594] ? rcu_is_watching+0x15/0xb0 [ 309.879655][T16594] ? __pfx__copy_from_iter+0x10/0x10 [ 309.879677][T16594] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 309.879706][T16594] ? netlink_sendmsg+0x650/0xb40 [ 309.879729][T16594] ? skb_put+0x11b/0x210 [ 309.879757][T16594] netlink_sendmsg+0x6c0/0xb40 [ 309.879799][T16594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.879826][T16594] ? aa_sock_msg_perm+0xf1/0x1b0 [ 309.879850][T16594] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 309.879873][T16594] ____sys_sendmsg+0x972/0x9f0 [ 309.879901][T16594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.879928][T16594] ? import_iovec+0x73/0xa0 [ 309.879957][T16594] ___sys_sendmsg+0x2a5/0x360 [ 309.879980][T16594] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.880032][T16594] ? __fget_files+0x2a/0x420 [ 309.880056][T16594] ? __fget_files+0x3a0/0x420 [ 309.880091][T16594] __x64_sys_sendmsg+0x1bd/0x2a0 [ 309.880112][T16594] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 309.880140][T16594] ? __pfx_ksys_write+0x10/0x10 [ 309.880170][T16594] do_syscall_64+0x14d/0xf80 [ 309.880194][T16594] ? trace_irq_disable+0x3b/0x150 [ 309.880218][T16594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.880236][T16594] ? clear_bhb_loop+0x40/0x90 [ 309.880258][T16594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.880276][T16594] RIP: 0033:0x7f0b81b9c799 [ 309.880292][T16594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.880308][T16594] RSP: 002b:00007f0b82a93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.880327][T16594] RAX: ffffffffffffffda RBX: 00007f0b81e15fa0 RCX: 00007f0b81b9c799 [ 309.880340][T16594] RDX: 00000000040488c0 RSI: 0000200000000480 RDI: 0000000000000003 [ 309.880351][T16594] RBP: 00007f0b82a93090 R08: 0000000000000000 R09: 0000000000000000 [ 309.880363][T16594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.880373][T16594] R13: 00007f0b81e16038 R14: 00007f0b81e15fa0 R15: 00007ffd1bc5afe8 [ 309.880404][T16594] [ 310.288630][T16591] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.465168][T16591] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.547302][T16591] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.556924][T16630] netlink: 'syz.3.2699': attribute type 1 has an invalid length. [ 310.582577][T16630] netlink: 'syz.3.2699': attribute type 1 has an invalid length. [ 310.678342][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.729340][T16297] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.760220][T16297] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.832051][ T6069] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.923887][T16643] FAULT_INJECTION: forcing a failure. [ 310.923887][T16643] name failslab, interval 1, probability 0, space 0, times 0 [ 310.950681][T16643] CPU: 1 UID: 0 PID: 16643 Comm: syz.3.2702 Not tainted syzkaller #0 PREEMPT(full) [ 310.950705][T16643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 310.950715][T16643] Call Trace: [ 310.950722][T16643] [ 310.950730][T16643] dump_stack_lvl+0xe8/0x150 [ 310.950759][T16643] should_fail_ex+0x412/0x560 [ 310.950786][T16643] should_failslab+0xa8/0x100 [ 310.950811][T16643] __kmalloc_cache_noprof+0x88/0x660 [ 310.950831][T16643] ? xfrm_policy_alloc+0x78/0x2b0 [ 310.950859][T16643] xfrm_policy_alloc+0x78/0x2b0 [ 310.950885][T16643] xfrm_policy_construct+0x39/0x6b0 [ 310.950913][T16643] xfrm_add_policy+0x286/0x820 [ 310.950936][T16643] ? __pfx_xfrm_add_policy+0x10/0x10 [ 310.950952][T16643] ? apparmor_capable+0x126/0x170 [ 310.950984][T16643] ? __nla_parse+0x40/0x60 [ 310.951012][T16643] xfrm_user_rcv_msg+0x746/0xb20 [ 310.951036][T16643] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 310.951087][T16643] ? __pfx___mutex_trylock_common+0x10/0x10 [ 310.951117][T16643] ? rcu_is_watching+0x15/0xb0 [ 310.951141][T16643] ? trace_contention_end+0x3d/0x150 [ 310.951169][T16643] ? __mutex_lock+0x319/0x1300 [ 310.951210][T16643] netlink_rcv_skb+0x232/0x4b0 [ 310.951237][T16643] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 310.951258][T16643] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 310.951296][T16643] ? netlink_deliver_tap+0x2e/0x1b0 [ 310.951318][T16643] ? netlink_deliver_tap+0x2e/0x1b0 [ 310.951344][T16643] xfrm_netlink_rcv+0x79/0x90 [ 310.951362][T16643] netlink_unicast+0x80f/0x9b0 [ 310.951391][T16643] ? __pfx_netlink_unicast+0x10/0x10 [ 310.951415][T16643] ? netlink_sendmsg+0x650/0xb40 [ 310.951437][T16643] ? skb_put+0x11b/0x210 [ 310.951466][T16643] netlink_sendmsg+0x813/0xb40 [ 310.951499][T16643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.951525][T16643] ? aa_sock_msg_perm+0xf1/0x1b0 [ 310.951548][T16643] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 310.951570][T16643] ____sys_sendmsg+0x972/0x9f0 [ 310.951598][T16643] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.951625][T16643] ? import_iovec+0x73/0xa0 [ 310.951654][T16643] ___sys_sendmsg+0x2a5/0x360 [ 310.951677][T16643] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.951729][T16643] ? __fget_files+0x2a/0x420 [ 310.951753][T16643] ? __fget_files+0x3a0/0x420 [ 310.951788][T16643] __x64_sys_sendmsg+0x1bd/0x2a0 [ 310.951809][T16643] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 310.951835][T16643] ? __pfx_ksys_write+0x10/0x10 [ 310.951865][T16643] do_syscall_64+0x14d/0xf80 [ 310.951889][T16643] ? trace_irq_disable+0x3b/0x150 [ 310.951913][T16643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.951932][T16643] ? clear_bhb_loop+0x40/0x90 [ 310.951955][T16643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.951972][T16643] RIP: 0033:0x7f0b81b9c799 [ 310.951990][T16643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.952005][T16643] RSP: 002b:00007f0b82a93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.952023][T16643] RAX: ffffffffffffffda RBX: 00007f0b81e15fa0 RCX: 00007f0b81b9c799 [ 310.952036][T16643] RDX: 00000000040488c0 RSI: 0000200000000480 RDI: 0000000000000003 [ 310.952047][T16643] RBP: 00007f0b82a93090 R08: 0000000000000000 R09: 0000000000000000 [ 310.952058][T16643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.952067][T16643] R13: 00007f0b81e16038 R14: 00007f0b81e15fa0 R15: 00007ffd1bc5afe8 [ 310.952095][T16643] [ 311.486983][T16665] __nla_validate_parse: 19 callbacks suppressed [ 311.487001][T16665] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2710'. [ 311.510307][T16665] ip6gre2: entered promiscuous mode [ 311.523154][T16665] ip6gre2: entered allmulticast mode [ 311.547061][T16672] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.558248][T16658] IPVS: set_ctl: invalid protocol: 50 172.30.1.2:20003 [ 311.568742][T16665] net_ratelimit: 5 callbacks suppressed [ 311.568758][T16665] openvswitch: netlink: IP tunnel dst address not specified [ 311.603304][T16658] netlink: 'syz.1.2705': attribute type 13 has an invalid length. [ 311.626537][T16658] gretap0: refused to change device tx_queue_len [ 311.634217][T16658] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 311.707270][T16677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2712'. [ 311.719475][T16680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2713'. [ 311.740354][T16677] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2712'. [ 311.830131][T16689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2713'. [ 311.920696][T16694] FAULT_INJECTION: forcing a failure. [ 311.920696][T16694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.944254][T16694] CPU: 1 UID: 0 PID: 16694 Comm: syz.2.2717 Not tainted syzkaller #0 PREEMPT(full) [ 311.944279][T16694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 311.944290][T16694] Call Trace: [ 311.944297][T16694] [ 311.944305][T16694] dump_stack_lvl+0xe8/0x150 [ 311.944334][T16694] should_fail_ex+0x412/0x560 [ 311.944361][T16694] _copy_to_user+0x31/0xb0 [ 311.944390][T16694] simple_read_from_buffer+0xe1/0x170 [ 311.944420][T16694] proc_fail_nth_read+0x1bb/0x230 [ 311.944448][T16694] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 311.944474][T16694] ? rw_verify_area+0x2a6/0x4d0 [ 311.944492][T16694] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 311.944517][T16694] vfs_read+0x20c/0xa70 [ 311.944533][T16694] ? fdget_pos+0x246/0x320 [ 311.944563][T16694] ? __pfx___mutex_lock+0x10/0x10 [ 311.944588][T16694] ? __pfx_vfs_read+0x10/0x10 [ 311.944609][T16694] ? __fget_files+0x2a/0x420 [ 311.944637][T16694] ? __fget_files+0x3a0/0x420 [ 311.944660][T16694] ? __fget_files+0x2a/0x420 [ 311.944692][T16694] ksys_read+0x150/0x270 [ 311.944713][T16694] ? __pfx_ksys_read+0x10/0x10 [ 311.944744][T16694] do_syscall_64+0x14d/0xf80 [ 311.944768][T16694] ? trace_irq_disable+0x3b/0x150 [ 311.944792][T16694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.944810][T16694] ? clear_bhb_loop+0x40/0x90 [ 311.944832][T16694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.944849][T16694] RIP: 0033:0x7f439735cfce [ 311.944866][T16694] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 311.944881][T16694] RSP: 002b:00007f439825efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 311.944900][T16694] RAX: ffffffffffffffda RBX: 00007f439825f6c0 RCX: 00007f439735cfce [ 311.944913][T16694] RDX: 000000000000000f RSI: 00007f439825f0a0 RDI: 0000000000000004 [ 311.944924][T16694] RBP: 00007f439825f090 R08: 0000000000000000 R09: 0000000000000000 [ 311.944935][T16694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.944946][T16694] R13: 00007f4397616038 R14: 00007f4397615fa0 R15: 00007fff4a8ec228 [ 311.944984][T16694] [ 312.160358][T16695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2716'. [ 312.171720][T16698] netlink: 'syz.0.2718': attribute type 5 has an invalid length. [ 312.219808][T16698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2718'. [ 312.434639][T16712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2723'. [ 312.462902][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2724'. [ 312.482669][T16712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2723'. [ 312.867262][T16734] openvswitch: netlink: IP tunnel dst address not specified [ 312.943006][T16734] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 312.998900][T16713] delete_channel: no stack [ 313.178658][T16744] lo speed is unknown, defaulting to 1000 [ 313.274641][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.283474][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.312521][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.321592][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.572655][T16744] wg1 speed is unknown, defaulting to 1000 [ 313.580317][T16744] lo speed is unknown, defaulting to 1000 [ 313.918137][T16801] netlink: 'syz.2.2749': attribute type 1 has an invalid length. [ 314.140331][T16809] xt_CT: You must specify a L4 protocol and not use inversions on it [ 314.742096][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 314.750118][ C0] lec:lec_tx_timeout: lec0 [ 314.755635][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 315.132758][T16845] IPVS: set_ctl: invalid protocol: 102 0.0.0.0:20003 [ 315.195792][T16850] netlink: 'syz.2.2761': attribute type 1 has an invalid length. [ 315.222965][T16848] netlink: 'syz.2.2761': attribute type 1 has an invalid length. [ 315.228370][T16852] netlink: 'syz.4.2763': attribute type 16 has an invalid length. [ 315.238995][T16852] netlink: 'syz.4.2763': attribute type 17 has an invalid length. [ 315.276951][T16855] openvswitch: netlink: Actions may not be safe on all matching packets [ 315.286672][T16852] lo: left allmulticast mode [ 315.298190][T16852] gre0: left promiscuous mode [ 315.303813][T16852] gre0: left allmulticast mode [ 315.337879][T16852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.347920][T16852] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.358934][T16852] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 315.389019][T16848] bond8: (slave bridge8): making interface the new active one [ 315.397986][T16848] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 315.413206][ T7764] lo speed is unknown, defaulting to 1000 [ 315.419039][ T7764] sqz0: Port: 1 Link ACTIVE [ 315.424659][T16850] bond8: (slave bridge9): Enslaving as an active interface with a down link [ 315.450410][ T7764] lo speed is unknown, defaulting to 1000 [ 315.598664][T16874] veth4: entered allmulticast mode [ 315.643429][T16876] netlink: 'syz.4.2770': attribute type 5 has an invalid length. [ 315.999449][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.022409][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.047585][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.084566][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.313576][T16929] IPVS: length: 77 != 24 [ 316.396777][T16933] pim6reg: entered allmulticast mode [ 316.407037][T16933] pim6reg: left allmulticast mode [ 316.455760][T16933] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 316.530630][T16942] __nla_validate_parse: 33 callbacks suppressed [ 316.530648][T16942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2789'. [ 316.560899][T16937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2787'. [ 316.649706][T16948] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2791'. [ 316.673805][T16948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2791'. [ 316.964561][T16969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2799'. [ 316.984271][T16969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2799'. [ 317.088140][T16978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2800'. [ 317.102426][T16963] IPv6: addrconf: prefix option has invalid lifetime [ 317.185695][T16982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2800'. [ 317.210806][T16978] 8021q: adding VLAN 0 to HW filter on device bond15 [ 317.373532][T16989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2804'. [ 317.384728][T16991] netlink: 'syz.4.2805': attribute type 1 has an invalid length. [ 317.408477][T16991] netlink: 'syz.4.2805': attribute type 4 has an invalid length. [ 317.424867][T16991] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2805'. [ 317.699104][T17020] syzkaller0: entered promiscuous mode [ 317.710659][T17020] syzkaller0: entered allmulticast mode [ 318.071372][T17034] 8021q: adding VLAN 0 to HW filter on device bond16 [ 318.090119][T17038] tipc: Failed to remove unknown binding: 66,0,0/3213071119:3778752252/3778752254 [ 318.128017][T17038] tipc: Failed to remove unknown binding: 66,0,0/3213071119:3778752252/3778752253 [ 318.163468][T17034] bond16: (slave batadv1): Opening slave failed [ 318.180693][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.180882][T17038] tipc: Failed to remove unknown binding: 66,0,0/3213071119:3778752252/3778752254 [ 318.197920][T17038] tipc: Failed to remove unknown binding: 66,0,0/3213071119:3778752252/3778752253 [ 318.207420][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.215957][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.228178][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.241475][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.304598][T17041] lo speed is unknown, defaulting to 1000 [ 318.453915][T17052] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 318.489423][T17055] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 318.603154][T17060] bridge0: port 1(syz_tun) entered blocking state [ 318.619549][T17060] bridge0: port 1(syz_tun) entered disabled state [ 318.667154][T17060] syz_tun: entered allmulticast mode [ 318.703108][T17060] syz_tun: entered promiscuous mode [ 318.795211][T17041] wg1 speed is unknown, defaulting to 1000 [ 318.833944][T17041] lo speed is unknown, defaulting to 1000 [ 318.951626][T16297] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.068627][T16297] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.158902][T16297] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.228661][T16297] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.329984][T17041] chnl_net:caif_netlink_parms(): no params data found [ 319.561548][T17041] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.575562][T17041] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.583330][T17041] bridge_slave_0: entered allmulticast mode [ 319.590870][T17041] bridge_slave_0: entered promiscuous mode [ 319.638369][T17041] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.676637][T17041] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.692771][T17041] bridge_slave_1: entered allmulticast mode [ 319.707715][T17041] bridge_slave_1: entered promiscuous mode [ 319.762472][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 319.768950][T16297] pimreg: left allmulticast mode [ 319.770531][ C0] lec:lec_tx_timeout: lec0 [ 319.780619][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 320.197291][T17153] netlink: zone id is out of range [ 320.227754][T17153] netlink: zone id is out of range [ 320.247349][T17153] netlink: zone id is out of range [ 320.258580][T17153] netlink: zone id is out of range [ 320.264152][T17153] netlink: zone id is out of range [ 320.272567][T17153] netlink: zone id is out of range [ 320.277765][T17153] netlink: zone id is out of range [ 320.292365][ T5836] Bluetooth: hci5: command tx timeout [ 320.452192][T16297] bond4 (unregistering): (slave bridge0): Releasing backup interface [ 320.503858][T16297] bond5 (unregistering): (slave bridge2): Releasing active interface [ 320.765543][T16297] bond8 (unregistering): (slave bridge8): Releasing active interface [ 320.774081][T16297] bond8 (unregistering): (slave bridge8): the permanent HWaddr of slave - 6a:e8:5b:e8:02:7c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 320.854947][T16297] bond8 (unregistering): (slave bridge9): Releasing active interface [ 320.895598][T16297] bond1 (unregistering): Released all slaves [ 320.908184][T16297] bond2 (unregistering): Released all slaves [ 320.920162][T16297] bond3 (unregistering): Released all slaves [ 320.936653][T16297] bond4 (unregistering): Released all slaves [ 320.950110][T16297] bond5 (unregistering): Released all slaves [ 320.966378][T16297] bond0 (unregistering): Released all slaves [ 320.978350][T16297] bond6 (unregistering): Released all slaves [ 320.992694][T16297] bond7 (unregistering): (slave veth5): Releasing active interface [ 321.005974][T16297] bond7 (unregistering): Released all slaves [ 321.021564][T16297] bond8 (unregistering): Released all slaves [ 321.103763][T17168] netlink: 'syz.0.2842': attribute type 12 has an invalid length. [ 321.240001][T17041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.266326][T16297] 9: left promiscuous mode [ 321.308602][T17041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.350691][T16297] : left promiscuous mode [ 321.436734][T17041] team0: Port device team_slave_0 added [ 321.475111][T16297] tipc: Disabling bearer [ 321.481531][T16297] tipc: Left network mode [ 321.494474][T17188] lo speed is unknown, defaulting to 1000 [ 321.502900][T17041] team0: Port device team_slave_1 added [ 321.598804][T16297] IPVS: stopping backup sync thread 14568 ... [ 321.615723][T17197] bond17: option fail_over_mac: invalid value (127) [ 321.637501][T17197] bond17 (unregistering): Released all slaves [ 321.784995][T17041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.882543][T17041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.910150][T17041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.964703][T17188] wg1 speed is unknown, defaulting to 1000 [ 321.982911][T17041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.989863][T17041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.045907][T17041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.112793][T17188] lo speed is unknown, defaulting to 1000 [ 322.259663][T17234] netlink: 'syz.4.2854': attribute type 1 has an invalid length. [ 322.274463][T17234] __nla_validate_parse: 7 callbacks suppressed [ 322.274477][T17234] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.2854'. [ 322.332211][T17041] hsr_slave_0: entered promiscuous mode [ 322.348981][T17041] hsr_slave_1: entered promiscuous mode [ 322.371883][ T5836] Bluetooth: hci5: command tx timeout [ 322.506107][T17245] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2856'. [ 322.761176][T17263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2856'. [ 322.978685][T17272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2863'. [ 323.044466][T17272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2863'. [ 323.066502][T17272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2863'. [ 323.267386][T17286] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 323.296920][T17281] netlink: 'syz.1.2864': attribute type 1 has an invalid length. [ 323.316958][T17290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2865'. [ 323.329450][T17272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2863'. [ 323.350307][T17284] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2864'. [ 323.361025][T17279] macvtap0: entered promiscuous mode [ 323.400114][T17290] macvtap0 (unregistering): left promiscuous mode [ 323.421155][T17272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2863'. [ 323.789836][T17307] tipc: Enabling not permitted [ 323.820372][T17307] tipc: Enabling of bearer rejected, failed to enable media [ 324.012200][T16297] hsr_slave_0: left promiscuous mode [ 324.018387][T16297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.038541][T16297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.239664][T16297] team0 (unregistering): Port device team_slave_1 removed [ 324.387871][T16297] team0 (unregistering): Port device dummy0 removed [ 324.452218][ T5836] Bluetooth: hci5: command tx timeout [ 324.602188][T17041] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 324.623908][T17041] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 324.664240][T17041] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 324.692868][T17041] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 324.793432][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 324.801474][ C0] lec:lec_tx_timeout: lec0 [ 324.807126][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 324.984046][T16297] IPVS: stop unused estimator thread 0... [ 325.029646][T17041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.097452][T17041] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.144513][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.151685][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.218328][T17379] veth5: entered promiscuous mode [ 325.274869][T16297] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.282052][T16297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.324129][T17390] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.419725][T17390] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.479234][T17390] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.545074][T17390] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.604908][T17406] lo speed is unknown, defaulting to 1000 [ 325.838253][T17406] wg1 speed is unknown, defaulting to 1000 [ 325.846417][T17406] lo speed is unknown, defaulting to 1000 [ 326.230777][ T6069] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.240332][T17432] net_ratelimit: 47 callbacks suppressed [ 326.240348][T17432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.348204][ T6069] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.440744][ T6069] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.455671][ T6069] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.532022][ T5836] Bluetooth: hci5: command tx timeout [ 326.555801][T17041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.746155][T17041] veth0_vlan: entered promiscuous mode [ 326.798504][T17041] veth1_vlan: entered promiscuous mode [ 326.934211][T17041] veth0_macvtap: entered promiscuous mode [ 326.979502][T17041] veth1_macvtap: entered promiscuous mode [ 327.059805][T17041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.098917][T17041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.107977][T17475] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20004 [ 327.154974][T16297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.175323][T16297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.213220][T16297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.243040][T16297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.257441][T17479] netlink: 'syz.0.2905': attribute type 1 has an invalid length. [ 327.332684][T17486] __nla_validate_parse: 8 callbacks suppressed [ 327.332701][T17486] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2905'. [ 327.461504][T17491] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2907'. [ 327.481688][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.514523][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.635930][T17497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2905'. [ 327.662251][T16297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.690808][T16297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.717069][T17497] 8021q: adding VLAN 0 to HW filter on device bond10 [ 329.397558][T17600] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2930'. [ 329.534873][T17598] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2931'. [ 329.541959][T17605] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2932'. [ 329.576044][T17598] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check. [ 329.636313][T17600] ..0{X: renamed from gretap0 (while UP) [ 329.647739][T17600] ..0{X: entered allmulticast mode [ 329.658210][T17600] A link change request failed with some changes committed already. Interface ..0{X may have been left with an inconsistent configuration, please check. [ 329.821891][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 329.829939][ C0] lec:lec_tx_timeout: lec0 [ 329.835346][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 329.894786][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 329.905045][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 329.916447][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 329.928653][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 329.940145][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 330.100328][T17619] lo speed is unknown, defaulting to 1000 [ 330.509678][T17648] IPVS: Unknown mcast interface: pim6reg0 [ 330.548544][T17648] erspan0: left promiscuous mode [ 330.615153][T17648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.635631][T17648] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.702364][T17648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 330.792526][ T5908] lo speed is unknown, defaulting to 1000 [ 330.951304][T17669] xt_policy: neither incoming nor outgoing policy selected [ 330.958786][T17619] wg1 speed is unknown, defaulting to 1000 [ 331.003784][T17619] lo speed is unknown, defaulting to 1000 [ 331.272793][T17675] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2945'. [ 331.445012][T17682] ip6tnl0: Caught tx_queue_len zero misconfig [ 331.638979][T17619] chnl_net:caif_netlink_parms(): no params data found [ 331.714764][T17713] [ 331.717127][T17713] ====================================================== [ 331.724142][T17713] WARNING: possible circular locking dependency detected [ 331.731173][T17713] syzkaller #0 Not tainted [ 331.735583][T17713] ------------------------------------------------------ [ 331.742597][T17713] syz.2.2951/17713 is trying to acquire lock: [ 331.745118][T17719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2953'. [ 331.748655][T17713] ffffffff8fd42798 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 331.761879][T17719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2953'. [ 331.767060][T17713] [ 331.767060][T17713] but task is already holding lock: [ 331.767069][T17713] ffffffff8fd42738 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 331.767130][T17713] [ 331.767130][T17713] which lock already depends on the new lock. [ 331.767130][T17713] [ 331.767136][T17713] [ 331.767136][T17713] the existing dependency chain (in reverse order) is: [ 331.767144][T17713] [ 331.767144][T17713] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 331.767171][T17713] _raw_spin_lock_bh+0x36/0x50 [ 331.825408][T17713] nr_rt_ioctl+0x40c/0xf90 [ 331.830343][T17713] sock_do_ioctl+0x101/0x320 [ 331.835439][T17713] sock_ioctl+0x5c6/0x7f0 [ 331.840273][T17713] __se_sys_ioctl+0xfc/0x170 [ 331.845370][T17713] do_syscall_64+0x14d/0xf80 [ 331.850471][T17713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.856867][T17713] [ 331.856867][T17713] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 331.864845][T17713] _raw_spin_lock_bh+0x36/0x50 [ 331.870116][T17713] nr_rt_ioctl+0x215/0xf90 [ 331.875039][T17713] sock_do_ioctl+0x101/0x320 [ 331.880134][T17713] sock_ioctl+0x5c6/0x7f0 [ 331.884969][T17713] __se_sys_ioctl+0xfc/0x170 [ 331.890064][T17713] do_syscall_64+0x14d/0xf80 [ 331.895169][T17713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.901564][T17713] [ 331.901564][T17713] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 331.909369][T17713] __lock_acquire+0x15a5/0x2cf0 [ 331.914731][T17713] lock_acquire+0xf0/0x2e0 [ 331.919654][T17713] _raw_spin_lock_bh+0x36/0x50 [ 331.924929][T17713] nr_rt_device_down+0xbe/0x860 [ 331.930299][T17713] nr_device_event+0x137/0x150 [ 331.935573][T17713] notifier_call_chain+0x1be/0x400 [ 331.941195][T17713] __dev_notify_flags+0x16d/0x310 [ 331.946729][T17713] netif_change_flags+0xe8/0x1a0 [ 331.952175][T17713] dev_change_flags+0x130/0x260 [ 331.957535][T17713] dev_ioctl+0x7b4/0x1150 [ 331.962372][T17713] sock_do_ioctl+0x23e/0x320 [ 331.967470][T17713] sock_ioctl+0x5c6/0x7f0 [ 331.972305][T17713] __se_sys_ioctl+0xfc/0x170 [ 331.977400][T17713] do_syscall_64+0x14d/0xf80 [ 331.982501][T17713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.988898][T17713] [ 331.988898][T17713] other info that might help us debug this: [ 331.988898][T17713] [ 331.999101][T17713] Chain exists of: [ 331.999101][T17713] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 331.999101][T17713] [ 332.012904][T17713] Possible unsafe locking scenario: [ 332.012904][T17713] [ 332.020330][T17713] CPU0 CPU1 [ 332.025678][T17713] ---- ---- [ 332.031024][T17713] lock(nr_neigh_list_lock); [ 332.035687][T17713] lock(&nr_node->node_lock); [ 332.042954][T17713] lock(nr_neigh_list_lock); [ 332.050135][T17713] lock(nr_node_list_lock); [ 332.054710][T17713] [ 332.054710][T17713] *** DEADLOCK *** [ 332.054710][T17713] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 332.062832][T17713] 2 locks held by syz.2.2951/17713: [ 332.068016][T17713] #0: ffffffff8fbc7008 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 332.076808][T17713] #1: ffffffff8fd42738 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 332.086811][T17713] [ 332.086811][T17713] stack backtrace: [ 332.092682][T17713] CPU: 0 UID: 0 PID: 17713 Comm: syz.2.2951 Not tainted syzkaller #0 PREEMPT(full) [ 332.092701][T17713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 332.092711][T17713] Call Trace: [ 332.092718][T17713] [ 332.092725][T17713] dump_stack_lvl+0xe8/0x150 [ 332.092748][T17713] print_circular_bug+0x2e1/0x300 [ 332.092774][T17713] check_noncircular+0x12e/0x150 [ 332.092799][T17713] __lock_acquire+0x15a5/0x2cf0 [ 332.092823][T17713] ? __lock_acquire+0x6b5/0x2cf0 [ 332.092846][T17713] lock_acquire+0xf0/0x2e0 [ 332.092864][T17713] ? nr_rt_device_down+0xbe/0x860 [ 332.092888][T17713] ? nr_rt_device_down+0xbe/0x860 [ 332.092908][T17713] _raw_spin_lock_bh+0x36/0x50 [ 332.092927][T17713] ? nr_rt_device_down+0xbe/0x860 [ 332.092947][T17713] nr_rt_device_down+0xbe/0x860 [ 332.092967][T17713] ? nr_device_event+0x12f/0x150 [ 332.092989][T17713] nr_device_event+0x137/0x150 [ 332.093009][T17713] notifier_call_chain+0x1be/0x400 [ 332.093036][T17713] __dev_notify_flags+0x16d/0x310 [ 332.093061][T17713] ? __pfx___dev_notify_flags+0x10/0x10 [ 332.093088][T17713] ? __dev_change_flags+0x4c6/0x690 [ 332.093114][T17713] ? __pfx___dev_change_flags+0x10/0x10 [ 332.093138][T17713] ? full_name_hash+0x92/0xe0 [ 332.093162][T17713] netif_change_flags+0xe8/0x1a0 [ 332.093186][T17713] dev_change_flags+0x130/0x260 [ 332.093211][T17713] dev_ioctl+0x7b4/0x1150 [ 332.093233][T17713] sock_do_ioctl+0x23e/0x320 [ 332.093252][T17713] ? __pfx_sock_do_ioctl+0x10/0x10 [ 332.093269][T17713] ? do_futex+0x333/0x420 [ 332.093294][T17713] sock_ioctl+0x5c6/0x7f0 [ 332.093312][T17713] ? __pfx_sock_ioctl+0x10/0x10 [ 332.093331][T17713] ? rcu_is_watching+0x15/0xb0 [ 332.093353][T17713] ? bpf_lsm_file_ioctl+0x9/0x20 [ 332.093373][T17713] ? __pfx_sock_ioctl+0x10/0x10 [ 332.093389][T17713] __se_sys_ioctl+0xfc/0x170 [ 332.093408][T17713] do_syscall_64+0x14d/0xf80 [ 332.093430][T17713] ? trace_irq_disable+0x3b/0x150 [ 332.093452][T17713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.093468][T17713] ? clear_bhb_loop+0x40/0x90 [ 332.093485][T17713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.093501][T17713] RIP: 0033:0x7fed55b9c799 [ 332.093516][T17713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.093530][T17713] RSP: 002b:00007fed569c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.093547][T17713] RAX: ffffffffffffffda RBX: 00007fed55e15fa0 RCX: 00007fed55b9c799 [ 332.093559][T17713] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 332.093571][T17713] RBP: 00007fed55c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 332.093581][T17713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.093590][T17713] R13: 00007fed55e16038 R14: 00007fed55e15fa0 R15: 00007ffe092680b8 [ 332.093608][T17713] [ 332.111976][ T5836] Bluetooth: hci2: command tx timeout [ 332.944073][ T5828] syz_tun (unregistering): left allmulticast mode [ 332.950523][ T5828] syz_tun (unregistering): left promiscuous mode [ 332.959722][ T5828] bridge0: port 1(syz_tun) entered disabled state [ 333.287837][T16286] bond0 (unregistering): Released all slaves [ 333.535701][T16286] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.596152][T16286] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.655663][T16286] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.695664][T16286] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.763725][T16286] bridge_slave_1: left allmulticast mode [ 333.769914][T16286] bridge_slave_1: left promiscuous mode [ 333.776205][T16286] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.789546][T16286] bridge_slave_0: left allmulticast mode [ 333.795649][T16286] bridge_slave_0: left promiscuous mode [ 333.801318][T16286] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.910241][T16286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.926262][T16286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.936194][T16286] bond0 (unregistering): Released all slaves [ 334.191801][T16286] hsr_slave_0: left promiscuous mode [ 334.206543][T16286] hsr_slave_1: left promiscuous mode [ 334.213353][T16286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.220752][T16286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.229892][T16286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.237731][T16286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.248486][T16286] veth1_macvtap: left promiscuous mode [ 334.255006][T16286] veth0_macvtap: left promiscuous mode [ 334.260516][T16286] veth1_vlan: left promiscuous mode [ 334.270619][T16286] veth0_vlan: left promiscuous mode [ 334.374599][T16286] team0 (unregistering): Port device team_slave_1 removed [ 334.388066][T16286] team0 (unregistering): Port device team_slave_0 removed [ 334.842257][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 334.850248][ C0] lec:lec_tx_timeout: lec0 [ 334.855328][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 339.862139][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 339.870128][ C0] lec:lec_tx_timeout: lec0 [ 339.875125][ C0] lec:lec_start_xmit: lec0:No lecd attached