last executing test programs: 2.684119329s ago: executing program 3 (id=3358): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r0, &(0x7f00000002c0), 0x0}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x9, &(0x7f00000000c0)=ANY=[@ANYBLOB="180700000000c000000000000000000000800000b128c812e790709283ff3fc0c104", @ANYRES32=r1, @ANYBLOB="000000000000000085100000030000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 2.605072288s ago: executing program 3 (id=3360): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000013069d5400000000000000008409010000040000000400000001000000000000010500000009000000003000002e00"], 0x0, 0x42, 0x0, 0x8}, 0x28) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000001b40)=""/4065, 0xfe1}, {&(0x7f0000003b80)=""/4111, 0x100f}, {&(0x7f0000000a40)=""/231, 0xe7}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f0000000880)=""/159, 0x9f}], 0x6}, 0x20) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ac41, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4040) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r6) write$cgroup_subtree(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYRES64, @ANYRES32, @ANYRESDEC=r2, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r8, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, 0xf, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x40084) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r11, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f1, &(0x7f0000010640)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0xff4, 0x0, 0x0, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x2, 0xfffd, 0xff, 0x0, 0x40000045, [0x0, 0x4]}}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2.104600221s ago: executing program 1 (id=3373): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)='G', 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="10560e5e3550a5bd3c00000008000000180000000000000084000000000000006200000000000000"], 0x28}, 0x41) r2 = socket$inet6(0xa, 0x5, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="94000000070a0104000000000000000003000005340005800800014000000004080001400000430508000240000000010800024000000005080001400000003c08000240000000000900020073797a30000000000c000340000000000000000308000b400000000424000580080001"], 0x94}, 0x1, 0x0, 0x0, 0x48000}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x208, 0x228, 0x25a, 0x208, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES8=r2, @ANYBLOB="050625bd700001dcdf251100000018000180140002d009edf3dc0000004d0000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000040)=@ethtool_perm_addr}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001", @ANYRES32=r1], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="060000001000010000000000000ec63fffe5e5e022b9292530676c000000050000946d0000001100110000ffffffffff0a6cf6a1000a"], 0x28}}, 0x0) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000002c0)=0x8) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000206050000000000000000000700000505000400030000000900020073797a320000000014000780050015000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 2.036362516s ago: executing program 4 (id=3375): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa8}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0xa, 0x16, 0xb3, 0x40}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xe, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x66, 0x0, 0x0, 0x6}, @initr0, @exit, @alu={0x4, 0x0, 0x3, 0x3, 0x0, 0x1, 0x4}, @call={0x85, 0x0, 0x0, 0x22}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x2c}, 0x94) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) setsockopt$inet6_udp_int(r7, 0x11, 0xa, &(0x7f0000000040)=0xb9d, 0x4) 1.680404039s ago: executing program 4 (id=3379): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x38}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fc}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000006800090300000000000000000a0003000000000014000600ac1e0101000000000000000000000000060007000200000008000500", @ANYRES32=0x0, @ANYBLOB="0c0005"], 0x48}}, 0x0) 1.583399402s ago: executing program 0 (id=3380): socket$inet6(0xa, 0x1, 0x0) (async) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400410000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x4}]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = gettid() openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (async) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r15 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$unix(r6, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r15]}}], 0x38, 0x20048000}, 0x4000080) writev(r2, &(0x7f0000000240)=[{&(0x7f00000018c0)="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", 0x1000}, {&(0x7f0000001380)="625acd8f38fb2d83d2e0aa839a894c77c03015b83731793e2a2fa534307fbbf2c990592cb642f557ecb70bbe625ae3248727161901baaa286f0cd36aafeb5c1d487e8506490fe0616a2af6"}], 0x4b) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000001800000004000000020000000200000c02000000000000000000000d0000000000005f00"], 0x0, 0x34}, 0x28) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x4c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6c1}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x13}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x65f1}]}, 0x4c}}, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000010001009500000000000000bd9cb016b0f6315ca2ef55b55ffc084eb3"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r16, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x540, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x470, 0x2e8, 0x2e8, 0x470, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x300, 0x338, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @common=@ipv6header={{0x28}, {0x4, 0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x4, 0x5}, {0x4, 0x5, 0x2}, {0x0, 0x0, 0x5}, 0x4b, 0x40}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0xe, 0x6, 0x3, 'syz0\x00', 'syz1\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 1.573685018s ago: executing program 3 (id=3381): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) shutdown(r1, 0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x101) socket(0x10, 0x3, 0x0) unshare(0x22000400) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) 1.496823769s ago: executing program 4 (id=3383): r0 = socket(0x2a, 0x2, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xec) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}}, 0x24004000) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.43711483s ago: executing program 1 (id=3384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23048000000f858db343f00000000", 0x35}, {&(0x7f0000000600)="051a00000e800065589ab62b0ce07be2525ff592bf22c3126481c865", 0x1c}], 0x2) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x82, &(0x7f00000000c0)}, 0x10) (async) close(0x4) (async) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1, 0x3, 0x2, 0x7fff}, 0x20) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f00000001c0)={0x10}) (async) r7 = socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r8, 0x5411, &(0x7f0000000200)) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xf, 0xf}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xb46b4df16672c7ee}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004008}, 0x20040844) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x2d}]}, 0x10) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f00000002c0)=@ethtool_flash={0x33, 0xfffffffc, './file0/file0/../file0/file0\x00'}}) 1.362008283s ago: executing program 3 (id=3385): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) socket$inet6(0xa, 0x80002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket(0x26, 0x2, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, 0x0, 0x800) bind$can_j1939(r4, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x880c}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket(0xb, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000940)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3a3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0d02fb8f890a837147941c53e7b12db32bf119e8a574b0dc8073ee8af358f17830c1da67b54b51ad143b071145c87bd755dc05487e5f33ddca23a8b9a3094c89a63e50f4273b448", 0xcf}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.361121111s ago: executing program 0 (id=3386): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x48) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000041) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x5, 0x0, 0x74, 0xba, &(0x7f0000000580)="5120763bc88c324279cf26da85dcdf51989c523508cdf1384a12dae02dd4002a5afa4f8cece775e0c786273c4d0e28678156033a8a84fe4f471b470e9eede08f7e5f3ed74134efd5dd40e78e34438a3088c46750aa488717f3957c8fb52d18b6e4c0786027807a48bb6e1f6b6d829933bc6a5a9b", &(0x7f0000000600)="8cd1df227c6cc191701ae4b121a5a9fedd13cf43446d550be276d0fc5e09b1559274215e62b05049174b4c384ae0c79777be3eb8c2ddaa53cfff56e24bdc89b8140937ff7efca31ecc0aa398d8bdcd35044690a4518b590bb1606d052c51ac5d3976e11760f0cb814ffb91baa39ea24cc04790ec559205fa92b92ab310a4d45a1109ecf1651ef0f774abce67035f2fd5cd366fac4bb01b1493cc435625c90995ee3896810351a52c7bd5f8b74ce1540220de4e3ddf15de839590", 0x4, 0x0, 0x9}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@delchain={0x372c, 0x65, 0x2, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffe0}, {0x5, 0xfff1}, {0x8, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0xffff6ad0}, @TCA_CHAIN={0x8, 0xb, 0xddd0}, @filter_kind_options=@f_fw={{0x7}, {0x3520, 0x2, [@TCA_FW_ACT={0x34c0, 0x4, [@m_bpf={0x10c0, 0x17, 0x0, 0x0, {{0x8}, {0x98, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x2, 0x70, 0x9, 0x2}, {0x6, 0x0, 0x3, 0x5}, {0x6, 0x3f, 0x1, 0x3ff}, {0x6823, 0x1, 0xd, 0x9}]}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0x9, 0x80, 0x47, 0x8}, {0xff, 0x9, 0x7a, 0x7}, {0x57, 0x2a, 0x5, 0xf}, {0x7, 0x83, 0x2, 0xc999}, {0x9, 0x2, 0x81, 0x7}, {0x4, 0x6, 0x1, 0x1}, {0x1, 0x1, 0x80, 0x5}, {0xfff, 0xf2, 0x80, 0xefc}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x3, 0x8, 0x8, 0x3}, {0x4, 0x6, 0x7f, 0x2}, {0x8, 0x8, 0x2, 0x101}]}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0x108, 0x1, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x10, 0x4, 0x7, 0x8, 0x6}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xeed, 0xfb3, 0x8, 0x9, 0xffffffff}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7fff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2a, 0xb, 0x10000000, 0x15, 0xae}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x600}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8a0, 0x4, 0x7, 0x41cb, 0x1ff}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}]}, {0x51, 0x6, "064203b7d79a1688acca24717c738e4d962ffbcad337d23e29756c16641736f1f62123a6ce33072bb6cc211978473577ebe691c2193848afa6ebc3f591274d71558253d3810855bb7a66f2a8e0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}, @m_xt={0x1c4, 0x14, 0x0, 0x0, {{0x7}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x7fffffff}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x72, 0x6, {0x7c0, 'nat\x00', 0x20, 0x8, "98c757a387ad185618150c29772fa69fd27287e8aef23b2f65af699b802e94b5b42e8092563c7338793ec933b64d26543c2fe4e722170a73b4e8f57505c8d60d157ae85d6ffc3a7a"}}]}, {0xe9, 0x6, "520e6eee281e2afdc09b1f9a4cb7f0adce56f98572d79702647c4d1dc344bf7dce89a35c5ef79f0b8a0444330b3556eba8f1a90c80719d05f8df8f7248653ada6b53b0cbe709df59ac3f51f40553fae480aada501e849e7cf3ab65110d27d98e95fccb69aeb93a1ddf4043d547c4f0c78885460be575fb266ff3541a020548cf5cb05e211165c00479947c51f8638c19c0aaeee52ca70b72e8228cab6948188661303fdd633a04a199c735d6cda4a540b93d25820576d64da959ad042d845e5b8024bfa8cd2ae1836214461e36e0f9f190bc75af0d70def57f1ed99e5755ebbbd00850c637"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_police={0x74, 0xb, 0x0, 0x0, {{0xb}, {0x4}, {0x45, 0x6, "13e0bac7b7d506188ee5c85202e121b391d067f1d99d1612303d75ef42fb79c530060735c7a1c611321e383410215d6416ec0a8dffc409f2274ede6b1acd77be7e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x138, 0x17, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0x8, 0x8, 0x7, 0xfffff86c}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8377, 0x0, 0x7, 0x10001, 0x2}, 0x2}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2534, 0x60, 0x6, 0x9, 0x6}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xa7, 0x8, 0x3, 0x3ff}, 0x46}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x92ea, 0x80, 0x3, 0x1, 0x2}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x8, 0x2, 0x2, 0x800}, 0x2b}}]}, {0x62, 0x6, "23ae93ae7dffde6259c247a456f39d8c1787431d298f4fdb6782a9411bd8a0995e9de7b9a945491e0ead01d9f55d298527c5e54e6dda3f45f1cc9f2f2df9f20ad51181ca247daf958ce72f638e2e4977fedeaab4c884ecb57dae28d80c70"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x1eac, 0x20, 0x0, 0x0, {{0xb}, {0x1dc0, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x1, 0x686, 0x6, 0x80000001, 0x2, 0xffffff00, 0x0, 0x2, 0xa5, 0x8001, 0x10001, 0x7, 0x200, 0x1, 0x2, 0xe, 0x6, 0x8, 0xfffffff7, 0x7, 0x9, 0x8f, 0x7, 0x90, 0x6, 0x0, 0x4, 0x2, 0x8, 0xecf, 0xc, 0x6, 0xdeb3, 0x8, 0x0, 0x5, 0x0, 0x69d, 0x8, 0x5, 0x7, 0x7fff, 0x5, 0x5, 0x9, 0x7, 0x6, 0x4, 0x2, 0x7f, 0x8000, 0x20, 0x4, 0x1, 0x58b6, 0x5, 0x6f4c, 0x4, 0x4, 0x1000, 0x2, 0x0, 0x0, 0x3, 0x200, 0xffffffff, 0x3, 0x6a6, 0x8, 0x10000, 0x6, 0x400, 0xcfe, 0x77e, 0x3ff, 0x7, 0x8000, 0x6, 0x9, 0x1, 0x6, 0xe, 0x4, 0x9c, 0x40, 0x1, 0x3, 0xf344, 0x4, 0x9, 0x41, 0x42b6f133, 0xf, 0x6, 0x3, 0xfff, 0x6, 0x60b, 0x0, 0x3, 0x6, 0x8, 0xdb, 0x7, 0xb961, 0x3, 0x1, 0x3, 0x10, 0x6, 0x1e97, 0x6, 0xe3, 0x5, 0x4, 0xfffffffb, 0x0, 0x4, 0x8, 0xb, 0x11, 0xa, 0xa, 0x8, 0x401, 0x6, 0x369, 0x2, 0x9, 0x88d9, 0x1, 0x8, 0xef, 0x4, 0x9, 0x10000, 0xfff, 0x3059, 0xffff, 0x7f8, 0x7, 0x10000, 0xfff, 0x40, 0xaf, 0x8, 0x3c6, 0xfffffffe, 0x8, 0x2, 0xa, 0x7ff, 0x7, 0x39f, 0x0, 0xdbb0, 0x0, 0x97, 0x3, 0x8, 0x7ff, 0x6, 0x6, 0xa, 0x1, 0x61, 0x80000001, 0x1, 0x7de, 0x8, 0x401, 0x4, 0xb, 0x1ff, 0x565, 0x92, 0xa, 0x4, 0xffffffff, 0x2, 0xf, 0xffffffff, 0x8, 0x7fff, 0xc45, 0x7, 0x1, 0xb23f, 0x5, 0xec, 0x4, 0x8, 0x1, 0x6, 0x7, 0x0, 0x3, 0x8001, 0x7, 0x10001, 0x0, 0x8, 0x9, 0x1d9340, 0x0, 0x3, 0x6, 0x6bab, 0x7c8, 0xc, 0x401, 0x4, 0x7, 0x8, 0x10001, 0xe59, 0xe, 0x0, 0x8001, 0x0, 0x5, 0xfffffff3, 0xe5, 0x3af, 0x59, 0x80000001, 0x83, 0xffffff01, 0x80, 0x1, 0x8000, 0x4, 0x1000, 0xfffffffa, 0x9, 0x10001, 0x7ff, 0xdb, 0x1, 0x8, 0xb9bd, 0x2b92, 0x7, 0x2, 0x0, 0xfffffffb, 0x1, 0x2, 0x1, 0x6, 0x2, 0xfff, 0xb, 0x1, 0x80000000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x0, 0x8e, 0xfffffffd, 0x1, 0x3df8, 0xffffffff, 0x200, 0x2, 0x3, 0x4, 0x1, 0x7, 0x0, 0x4, 0x6, 0x0, 0x713, 0x4, 0xc4e, 0xd, 0x2, 0x2, 0x5, 0x80000000, 0x6, 0x2756371f, 0x200, 0x3, 0xfffffff7, 0x6, 0x7, 0x2, 0x2, 0xb, 0x3, 0x2, 0xfffffffe, 0x400, 0x4, 0x7, 0x9, 0x200, 0x3, 0xf, 0x7fff, 0x2, 0x7, 0xfffffe00, 0xd, 0x3, 0xfffffffa, 0x7, 0x0, 0x80000000, 0x6e8b, 0x1, 0x2, 0x9, 0x0, 0x1, 0x80000000, 0x0, 0xf2, 0x5, 0x7, 0x20, 0x8, 0x0, 0x8, 0x7, 0x2, 0x1, 0xf645, 0x2, 0x8, 0x5, 0x6, 0x5, 0x9, 0x73b6, 0x6, 0x60000000, 0x7, 0x3, 0x6, 0xc0000, 0x9, 0x4, 0x80000000, 0xff, 0x3, 0x8f6, 0xa, 0x2, 0x3, 0x4, 0x101, 0x8001, 0x4, 0x3, 0x0, 0x10001, 0x6, 0xff, 0x8, 0x6, 0x4, 0x9, 0x2, 0x5, 0x7, 0x3, 0x6f8f, 0xffff, 0x1, 0x2, 0xaf4, 0x1, 0x3ff, 0x6, 0x6135, 0x559, 0x4, 0x1, 0x9, 0xc257, 0x6, 0x8, 0x7, 0x6, 0xf58, 0x0, 0x9, 0x5, 0x7, 0x10, 0x2f, 0x2, 0x6, 0x40, 0x3, 0x5, 0x68, 0x2, 0x0, 0x8, 0x7, 0x7fffffff, 0x5, 0xf, 0xe, 0x6, 0x7ff, 0x7, 0x5, 0x0, 0xffffff8c, 0x7, 0x9, 0x3, 0x6, 0x5, 0x80000000, 0xb, 0x0, 0x9, 0x420, 0x1, 0x5, 0x0, 0x8, 0x6, 0x0, 0x3, 0xfffffff9, 0xa, 0x101, 0x8000, 0x3, 0x9, 0x6, 0x7f, 0x6, 0xc, 0x8, 0x10000, 0xfff, 0x2, 0x11, 0x6, 0x7f, 0x19, 0x5, 0x0, 0x5, 0x6, 0x3, 0x7, 0x8, 0x1, 0x4, 0x4, 0x7, 0x9, 0x0, 0x0, 0x2, 0x7, 0x0, 0x10001, 0x80000000, 0x2, 0x2, 0x6, 0x7, 0xfffffffb, 0x9, 0x0, 0xffff, 0x2e4, 0x2, 0x1, 0x0, 0x0, 0x3, 0x8001, 0x2, 0x9, 0x9, 0x80, 0x7, 0xc3, 0x9, 0x8000, 0xfffffd92, 0x2, 0x1, 0x5, 0x7, 0xe, 0x8, 0x6635f5b, 0x200, 0xcc3f, 0x1, 0x2, 0x597b, 0x0, 0x8, 0x132, 0xfffffffb, 0x2ec350bf, 0x5, 0x2, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb52, 0x3, 0xfffffffc, 0x0, 0x7, {0x10, 0x0, 0x1, 0x8, 0x31b, 0x2}, {0x9, 0x0, 0x1000, 0xc, 0x1, 0x5}, 0x14000000, 0xfff, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1c76, 0xffffffff, 0x1ff, 0x1, 0x0, 0x0, 0x6, 0x2, 0x6, 0x8, 0x4bf, 0x100, 0x5, 0x8, 0x1f438a99, 0x1, 0xb2, 0x1, 0x434, 0x6b771436, 0x5, 0x3, 0x9, 0xb, 0x7, 0x80800, 0x9, 0xff, 0x4a, 0x7, 0xc, 0x7, 0x8, 0x0, 0x1, 0x6, 0xb0e6, 0x972, 0x5, 0x200, 0x4, 0x4, 0xff, 0x80, 0x3, 0x81, 0x5, 0x4, 0xa88, 0x6, 0x4, 0x10, 0xffffffff, 0x0, 0x0, 0x6, 0x7, 0x6, 0x6, 0x2, 0xd8, 0xe, 0x97, 0x0, 0x2, 0x0, 0x3e, 0x5, 0x0, 0x1dd7, 0x2, 0x1, 0x8, 0x5, 0x59e00684, 0x3e, 0x800, 0x2c52, 0x101, 0x9, 0x0, 0x1ff, 0x5f2f, 0x7ff, 0x3, 0x67efaf5a, 0xfffffffa, 0x76a, 0xffffffff, 0x401, 0x6, 0x5, 0x9, 0x2, 0x3, 0x7045, 0x2, 0x48, 0x4, 0x26, 0x3, 0x8, 0x8, 0x8, 0x6, 0x1, 0x6c92deb7, 0x9, 0xd, 0x2, 0x9, 0x4, 0x9, 0x4, 0x14000000, 0x10, 0x3, 0x9, 0x34, 0x74, 0x2400, 0x58a, 0x3, 0x0, 0x0, 0xfffffffa, 0xc, 0x3, 0x3d, 0x4, 0x7ff, 0x4, 0x80, 0x6, 0x2, 0x822a, 0x9, 0x101, 0x0, 0xe, 0x8001, 0xbb, 0x401, 0x5, 0x24, 0x4, 0xffff, 0x1, 0x7, 0x2, 0x6, 0x0, 0x6, 0x5d, 0xf, 0x9, 0x5, 0x80000000, 0x8, 0xa, 0x9, 0x6, 0x0, 0x9, 0x44b, 0x5, 0x8, 0xe, 0x5, 0x5e7d, 0x1, 0xb4, 0x3, 0x2492, 0x9, 0x7, 0xf394, 0x5, 0xff, 0x8, 0x200, 0x6, 0x0, 0xffff, 0x859, 0x6, 0x3, 0x7f33, 0x7, 0x3, 0x1, 0x4a01, 0x5fd, 0x8, 0x3ff, 0x7fff, 0xf, 0x2, 0xbd0, 0xa, 0x0, 0x1, 0x2, 0x7f, 0x4, 0x80000001, 0x8, 0x8, 0x1, 0x9, 0x5, 0x5, 0x8, 0x350d, 0x40, 0x5, 0x9, 0xfffff78a, 0x9, 0x5, 0x7, 0x8, 0x0, 0x91e, 0xb, 0x3, 0x2efd, 0xee2, 0x8, 0x7, 0x8c2, 0x5, 0x2, 0x9, 0x0, 0x0, 0x2, 0x9, 0x7, 0x0, 0x1, 0x8, 0xa, 0x3, 0x101, 0x2, 0x400, 0x3, 0x400, 0x6, 0xdffb4e15, 0x3, 0x7, 0x2, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x5, 0xf76, 0x49, {0x0, 0x0, 0x4e, 0x0, 0x1, 0x4a97}, {0x2, 0x0, 0x1, 0xc, 0x4, 0xf71}, 0x8, 0x9, 0x5}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x7, 0x6da, 0x6, 0x7, {0x2, 0x2, 0x8, 0xff, 0x5, 0xff}, {0x1, 0x1, 0x81, 0x7, 0x7, 0x6}, 0x2, 0x100, 0x457}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x73ba}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x9, 0x1, 0x6, 0x9, 0x7, 0x5, 0xec1, 0x9, 0x2, 0xe, 0x6, 0x6, 0xfffffffd, 0xf351, 0x9, 0x3, 0x0, 0x3, 0x400, 0x9, 0xbc, 0x1a6, 0x300000, 0x79b, 0x3, 0x7, 0x400, 0x7, 0x8000000, 0x3, 0x0, 0x9, 0x0, 0x6, 0x5, 0x80000000, 0x7, 0xc5, 0x4, 0x0, 0x2, 0x2c, 0x8, 0x3, 0x1, 0xc0000000, 0x401, 0x49d, 0x2, 0x101, 0x800, 0x2, 0x1, 0x5a93, 0x7fff, 0x4, 0x40, 0x40000000, 0x7f, 0x91a, 0x83a, 0xe8, 0x7, 0x6f4, 0x7fff, 0x5, 0x1, 0x800, 0x1, 0x2, 0x2, 0x4, 0xd, 0xffff, 0x9, 0x0, 0x0, 0x9, 0xfffffff8, 0x86a, 0x7, 0x5, 0x0, 0x12e1, 0xfffffffd, 0x1000, 0x9, 0xfffff116, 0x36b3, 0x9, 0x100, 0x9d8, 0x4, 0x9, 0x200, 0x3ff, 0xf0e, 0x25f, 0x7, 0x6, 0x5fe8a10c, 0x7fffffff, 0x6, 0x10000, 0x6, 0x2, 0x2, 0x8, 0x8, 0x7, 0x100, 0x9, 0x9, 0x0, 0x2, 0x5, 0x5, 0xffff, 0x8, 0xadd, 0x4, 0x7, 0xb8e9, 0x6, 0x6, 0xb9a4a040, 0x1000, 0x5, 0xd, 0x4, 0xffffffff, 0x0, 0x5cb4e935, 0x9, 0x1000, 0x2, 0x35, 0x9, 0x1, 0x10001, 0x8, 0x50, 0x0, 0x100, 0x6, 0x1, 0x100, 0x5, 0x12, 0x8, 0x9, 0x42ec, 0x6, 0x6, 0x7000, 0xffffffff, 0x1000, 0xa2ab, 0x9, 0x5, 0x2, 0x9e01, 0x9, 0x71, 0x1, 0x8, 0x0, 0x6, 0x2, 0x0, 0x5, 0x72b168cb, 0x10, 0x2, 0x800, 0x6, 0x5, 0x9, 0x0, 0x3, 0x7, 0x8, 0x1, 0x8, 0x3, 0x2, 0x7f, 0x7f, 0x2, 0xffc00000, 0x10000, 0x7, 0x5, 0x9, 0x15f, 0x5784, 0x100, 0x9, 0xb39, 0x4, 0x3, 0xfffffffd, 0x2, 0x3, 0xfff, 0x1, 0x39, 0x8001, 0x7fff, 0x9, 0x1, 0x64, 0xfff80000, 0xff, 0xfff, 0x81, 0x9, 0xc, 0x5, 0x8, 0x2, 0x1000, 0x1, 0xbb9, 0x2320190d, 0x4, 0xffff, 0x3901, 0x1, 0x10001, 0x0, 0xfffffffa, 0x7f, 0x8, 0xa98b, 0x7, 0xabde, 0x1, 0xb52, 0x6, 0x339, 0x9, 0xffffce74, 0x3, 0x2, 0x3, 0x6, 0x800, 0x200, 0xe, 0x89, 0x7, 0x3, 0xa0, 0x7fff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7f, 0x5, 0x80000000, 0xf605, 0xffffffff, {0x7, 0x0, 0x1, 0x6, 0x5, 0x10}, {0x8, 0x0, 0x3558, 0x4, 0xffa6, 0x401}, 0x9, 0x8}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x3, 0x1, 0x9, 0xb29, 0xfff, 0x8, 0x5, 0xc50, 0x1, 0x1, 0x0, 0x10001, 0xa5, 0x4, 0x80000000, 0x101, 0x3ff, 0xa40, 0x9, 0x3, 0x6, 0xffff, 0xffff, 0x5, 0x0, 0xa, 0x0, 0x3034, 0xe153, 0x1, 0x1, 0x1, 0x9, 0xe, 0x0, 0x3, 0x7f, 0x0, 0x3, 0x6, 0xffff, 0x7ff, 0x5, 0x6, 0x0, 0x1213560c, 0x2, 0x7fffffff, 0x1000, 0x2, 0x80000000, 0x8, 0x2, 0x7, 0x0, 0x7, 0xffffffff, 0xff, 0x5, 0x200, 0x82a9, 0xfffffc01, 0x8, 0x0, 0xe4, 0x7, 0x0, 0x2, 0x5, 0x3, 0x8, 0xfffffe00, 0x7fffffff, 0x7, 0x2, 0x0, 0x0, 0x3, 0x7, 0x0, 0x7fff, 0xc, 0x10000, 0x3ff, 0x7ff, 0x6, 0xb335, 0x9, 0x1, 0xffffb240, 0x2, 0x10001, 0x9, 0x198, 0x10000, 0x6, 0x960, 0x67e2, 0x803, 0xff, 0xb542, 0x2, 0x7, 0x200, 0x9, 0x40, 0xffff7fff, 0x5, 0x3, 0x7, 0x3, 0x5, 0x6, 0xfffffffb, 0x800, 0xb, 0x93, 0x50, 0x5, 0x7, 0x3, 0x101, 0x7, 0x7, 0x7fffffff, 0xfffffbff, 0x54c, 0x101, 0x7, 0x5, 0x8, 0x9, 0x3, 0x9, 0x5, 0x87, 0xffff0001, 0xd2, 0x1, 0xd6, 0xad, 0x1, 0x2187, 0x1ea, 0x0, 0x500, 0x8, 0x8, 0xc84, 0x4, 0x1, 0xfa8, 0x10, 0x4, 0x315, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x4, 0x4, 0x4, 0x7, 0x5, 0xb649, 0x1c5afc5e, 0x4, 0x280, 0x3ff, 0x9, 0x400, 0x401, 0x3, 0x2, 0xfffffcaf, 0x0, 0x44, 0x7, 0x51a, 0x3, 0x8, 0x8, 0x1, 0x2d0, 0x0, 0x2, 0xffffffff, 0xffff11c5, 0x101, 0xff, 0xa000000, 0x40000000, 0xf9, 0x9, 0x6, 0x4, 0x7, 0x8, 0xc4e6, 0x3, 0x9, 0xe, 0xc, 0x1a44, 0x5, 0x5, 0xd14, 0xa, 0x4, 0x7fff, 0x756d, 0x80000000, 0x9, 0xfffffffe, 0x1084b9d5, 0x5e, 0xc, 0x3, 0x3, 0x4, 0x2, 0x3c, 0x3, 0x6, 0xffffffff, 0x800, 0x10, 0xf, 0x7ff, 0x7, 0x10, 0x1, 0xbab9, 0x309, 0x5, 0x80000000, 0x7fff, 0x9, 0x6, 0xffff8133, 0x5, 0x7, 0xffff4dde, 0x2, 0x9, 0x8, 0x8, 0x7, 0x1c, 0x4, 0x4, 0x5, 0x2, 0xcc2e]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc63}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x400}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x8, 0x8, 0x0, 0x400, 0x80000001, 0x2, 0xfffffffe, 0xc5, 0x3, 0x8, 0xffffffff, 0x4, 0x8, 0xfffffff1, 0x10001, 0x5, 0x6, 0x800, 0x5, 0x8, 0x2, 0x2, 0x10, 0x1000, 0x7, 0x10001, 0x8093, 0x200, 0x2, 0x80000000, 0x4ef, 0x378e514f, 0x7, 0x2, 0x8, 0xe24, 0x4, 0x101, 0xb1d, 0x2, 0xf, 0x6, 0x8c, 0x4, 0x8001, 0xc0000000, 0x0, 0x8, 0x84, 0x9, 0xff, 0x26d, 0xb, 0x10, 0x6, 0xfffffeff, 0x7f, 0x3d0000, 0x6, 0x3, 0x3, 0x3c, 0x8, 0x1, 0x5eec, 0x1, 0x40, 0xb143, 0x0, 0x1, 0x20, 0x80000001, 0x9, 0x7, 0x5, 0x0, 0x3, 0x4, 0x5, 0x81, 0x1, 0xa86a, 0x200, 0x0, 0x6, 0x80000001, 0x55b, 0x800, 0x8, 0xdd, 0x0, 0x3, 0x2, 0x7, 0xf68, 0x80000000, 0x6, 0xfffffffc, 0xffffff81, 0x0, 0xc394, 0x8, 0x5a72, 0x100000, 0x5, 0x2, 0x3e, 0x9, 0x2, 0x2, 0x4, 0x2, 0x8001, 0x9, 0x7fffffff, 0x6, 0x0, 0x6, 0x2, 0x7, 0x5, 0xfffffff9, 0xbb6, 0xffffffff, 0xb228, 0x7fff, 0x2, 0x4, 0x8, 0x6, 0x10, 0x10001, 0x1000, 0x9, 0x4, 0xfffffff9, 0x10, 0x5, 0x3, 0x5a, 0x8, 0x6, 0x2, 0x5, 0x3, 0x3, 0x401, 0x1, 0x4, 0xb6bb, 0x10, 0x0, 0xfbc7, 0x3, 0x5, 0x4, 0x2, 0xe, 0x4, 0x3, 0x6, 0x0, 0xe7ca, 0x0, 0x2, 0xea2, 0xfffffe00, 0x0, 0xba, 0x8, 0xb88, 0x7, 0x119, 0x4, 0x4, 0x8, 0x8, 0x8, 0xc, 0x625, 0x9, 0x0, 0xf, 0x0, 0x4, 0xf, 0x8001, 0x3, 0x9, 0xfffffff8, 0x2, 0xfa2d, 0x3, 0xa, 0xb97, 0x40, 0xfffffffe, 0x4, 0x8, 0x400, 0x9, 0x3, 0x6c5, 0x8, 0x6, 0x4, 0x2c, 0x808, 0x9, 0xc8, 0x7, 0x9, 0x7, 0xa5, 0x1, 0x0, 0x8, 0x9, 0xb, 0x251, 0x0, 0x1, 0x1, 0x3, 0x4, 0x8, 0x8, 0x4, 0x7, 0xe1, 0x80000000, 0x10, 0x5, 0x2, 0x2, 0xd33, 0xbd9, 0x6, 0xfff, 0x200, 0x7, 0x2, 0x56, 0x4, 0x1000, 0x8, 0x6, 0x200, 0xb5, 0x0, 0x4, 0x40, 0xbfcb, 0xd2b0, 0x67]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xfffffffe, 0x1, 0x7, 0x2, 0x0, 0x8, 0x4, 0x1000, 0x6, 0x1, 0xe0, 0x101, 0x2, 0x5, 0x2, 0xe4, 0x6, 0x4, 0x4, 0x7, 0x8, 0x8, 0x3, 0x8, 0x845e, 0x9, 0x5, 0x2c88, 0x7, 0x3, 0x0, 0xabc, 0x401, 0x2a7, 0x0, 0xde2, 0x80000001, 0x7, 0x8, 0xc80e, 0x9e, 0xe1f, 0x39e, 0x7fff, 0x137a0, 0x5, 0x8, 0x8, 0x952, 0xf, 0x325, 0x8000, 0x80000000, 0x1c, 0x5, 0x511a, 0x6, 0x8, 0x6, 0x4, 0x2, 0x9, 0x81, 0x4, 0x5, 0x2, 0x3, 0xc60, 0xf, 0x3, 0x27de, 0x7, 0x1ff, 0x3a5, 0xfffffff8, 0x7, 0x8, 0x7, 0x3, 0xfffffff8, 0x200, 0xfffffffe, 0x101, 0x9, 0x400, 0x4800000, 0x5, 0x9, 0x2, 0x7, 0x8, 0x7, 0x4, 0x7, 0x7, 0x6, 0x466, 0x6, 0x0, 0x6, 0x6, 0x6, 0x0, 0x2, 0x0, 0x5, 0xffffffff, 0x8, 0x7, 0x7, 0x5, 0x2, 0x2, 0x6, 0xf8, 0x4, 0x9, 0x3, 0x1000, 0x17, 0xf, 0x7, 0xb9b6, 0x85e, 0x9, 0x2, 0x0, 0x1, 0x101, 0xdb, 0x6, 0x7, 0x8, 0x4, 0x3, 0x10000000, 0x1, 0x1, 0x1000, 0x1000, 0xe, 0xffffe709, 0x10, 0x3, 0x4, 0x7fff, 0xc1, 0xfffff1f9, 0x4, 0x9, 0xffff, 0x8, 0xa9a6, 0x9, 0x8, 0x382d5395, 0x43, 0xe59, 0x6, 0x2e, 0x0, 0x101, 0x4, 0x80, 0xfffffffc, 0x9, 0x807, 0x9, 0xa, 0xffff, 0x7, 0x1, 0x20000000, 0x7, 0x1, 0x7f, 0x6, 0x5, 0x5, 0x5, 0xf, 0x200, 0x0, 0x80000001, 0x4, 0x3, 0x4, 0x1eb, 0x5, 0xfffffffe, 0x6, 0x3ff, 0x6, 0x8e0, 0x4c, 0x29d39fbc, 0x7fe0000, 0x1ff, 0x40, 0xffffff6b, 0x0, 0x0, 0x6d, 0x3, 0xa36, 0x8, 0x0, 0xf, 0x0, 0x4, 0xa, 0x4, 0x3, 0xffff, 0x9, 0x5, 0x0, 0x7, 0x9, 0x81, 0x7, 0x2, 0x1, 0x800, 0x9fb0, 0x3, 0x6, 0xffff59cd, 0x5, 0x6, 0x200, 0x9, 0x7, 0xc9, 0x2, 0x2, 0x4, 0x1, 0x1, 0x100, 0x7, 0x2, 0x4, 0x4, 0xc, 0x7, 0x9, 0x7fff, 0x2, 0x5dd, 0x6, 0x8, 0xbed, 0x1, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x10000000, 0x0, 0x8000, 0xffffffff, {0x4, 0x2, 0x0, 0x5, 0xd, 0x5}, {0x6, 0x2, 0x7, 0x4, 0x6, 0x6}, 0x8540000, 0xa3, 0x5}}]]}, {0xc3, 0x6, "bb44788ee00b2627af4d79b42ebf348d5a9d985c8a3c14c07f108c276346b02a4bb01e58dd69dc397aba0067956f5362670b2947e2ef442c215330cbc25241472681d3d08054255e84d7fc74eeb5ee559e9678d4c86134a9100172d7a4e9d41d27c10a44fe40f756fa89b35a3a27c0fc4698f08f205c9b5083efe0aca4c3a0fc8952e53c5503eb0989722bb62b9450ecae778f97969834db87e5c81c952fae0e981f44b74179696a8840fe2ccb3501ab51d406ead8cfeb24a34fdec25f9eb2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0xd8, 0x16, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x94, 0x6, "143426b9217ab12efde6ffd2707f797b0575f507dd0021af46ac0523d7ddb39a2b31747915b81f6a497c6157f1daabea5a41a7222bf7fe221a00641eeb6a5d64ec1c0b8ae6df43055fd8100441fcfd4857be1c2054337f0203d6be7bd5e5a8a5e9a37a7af0f4bd4d8fa85b33452f95a1e38d6aa9646bcb6d48a98c662a61ca314e9cc8070a1d172dfb7e2a595de5bec6"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'hsr0\x00'}, @TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'ipvlan1\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x8}, @TCA_FW_INDEV={0x14, 0x3, 'macvlan0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0xfff1}}, @TCA_FW_CLASSID={0x8, 0x1, {0x2, 0x4}}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x1a0, 0x2, [@TCA_CGROUP_ACT={0x19c, 0x1, [@m_ife={0x158, 0x13, 0x0, 0x0, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x100, 0x3, 0x2, 0x4}}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x0, 0x0, 0x1}, 0x1}}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x1}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x3, 0x1, 0x2}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xf, 0x80000001, 0x2, 0x1ff, 0x81}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_TYPE={0x6, 0x5, 0x9}]}, {0x72, 0x6, "0656b0a9ab38631bdf0c092271004b3c9db4e2a625e5fe9b68d73b8cecac9c7d30a8d161682f265ac607c4c735211cf00e6519572e3122c90ebbd669ad35f461bc73fe45a37d2a18c169c4ec8c080c9d0d9a640ee996f7323a5f95814b348bfa4eeddbe1c9bec1bf85eada314a54"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_gact={0x40, 0x1a, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9a7, 0x2}}]}, {0x8, 0x6, "bc888b45"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x80000001}]}, 0x372c}, 0x1, 0x0, 0x0, 0x8890}, 0x44) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="ad56000081000008000d00"/24, 0x18) (async, rerun: 64) r3 = accept4(r2, 0x0, 0x0, 0x80000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r3, @ANYRES16=r5, @ANYBLOB="0100040000003f6dc5d1b000e14f003b0000", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff08021100000191d92959765008ee6d053b2c6d53787d631966986efd4bb157fbcc1a62dec579bbb3c7c7ecaa692519b77fb52497177c976464824d30510a3d866c4afc24c20bc30b169d3d35b0"], 0x6f4}, 0x1, 0x0, 0x0, 0x404c081}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r1, 0x0, 0x2000c040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000200)={0x0, '\x00', {0x2}, 0x3}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async, rerun: 32) socket$unix(0x1, 0x5, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) 1.359772877s ago: executing program 4 (id=3387): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x0, 0x0, 0x20, 0x80, 0xffffffff}, 0x0, 0x0, 0x4, 0x6, 0x2e, 0x14, 0x0, 0x0, 0x4, 0x0, {0x0, 0x3, 0x8, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x7, 0x6, 0x0, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xd}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) 1.102851263s ago: executing program 4 (id=3388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000d300", @ANYRES16=r2, @ANYBLOB="01000000000000000000070000000c0001800500020001000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="40000000100003042bbd7000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x40080) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c80)=ANY=[@ANYRES32=r5], 0x80}, 0x1, 0x0, 0x0, 0x4008844}, 0x24044010) 1.045247571s ago: executing program 2 (id=3389): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) unshare(0x2c020400) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600)="b4f116c199a08646dd1b59d49c0587e36efa21e71df817a8d201e600c91e8e4efd9935132519b1781f54d6a7d86d66f3e32b2a5240592e5a748ac4945627cb274417a079d6527b9091dbda73ff5021b2ee8ed7eac6e6259d3f007b93453b5c135a762d919eee1ab51b66a09e7d418209a37f71cf39ec85f61de3e069cd752427c8095cae3af3285140ecf052fec7fb766441ee2b30f51416378a2643b1a4f8520d9113e34118f94be0d2b7c775c5fc8cd0", 0xb1}], 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1001, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x102, 0x1000, 0x9, 0x3, 0x3, 0x1, 0x6, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x6, 0x0, 0x11000, 0x5, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xfff, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x74f, 0x0, 0x1005, 0x80005, 0x10001, 0x2, 0xffffffff, 0x20006, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x81, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0x13f, 0x2, 0x2, 0x5, 0x8, 0x400, 0x4, 0x1, 0x40, 0x8, 0x8001, 0x3, 0x10, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.04437102s ago: executing program 1 (id=3390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000005d80)='syzkaller\x00', 0xc, 0x0, 0x0, 0xfac3041fa03053cc, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x2000000000000216, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000180000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0xb, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="139a3847926aa9120000c7ca0338a7aab67e000000000000850000007d"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x44e582532a0e04f1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0300000004100000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="06000000000000000000000000000000000000000000000000000000091531d35b01d07ff17e913e9806f7ff8b87c915152b4395741ad40b017814dac64cce7f2b491cdf43975cead7d0e2dc78fdf0493657b9d84ff2d2cd808e10ded367cbb05260396b1ecaa2cdc19c8fdd839788efa378ea331de6c63480c6ec163d79d0decd8d38745cac2585d93f06073e20b9d703da93d7f3dc4874bbfbc75e2bcfc169ee174e58ec290c52446bbf472aced38c10dfab1698bbf9f85d7f6938860a3aef7c00"/207], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x20000335, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYRES8=r1], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xde65e667fedf934b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r3, @ANYRES32=r9, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001080000050008", @ANYRES32=r4, @ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x2000800}, 0x800) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0800, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x3, 0x1, 0xfffffffb) write$nci(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRES16=r12], 0x14) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r12, 0x111, 0x5, 0x2, 0x4) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r13, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=@gettfilter={0x54, 0x2e, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x1ffe2, 0xfff2}, {0x11, 0x10}, {0xc, 0xe}}, [{0x8}, {0x8, 0xb, 0x7fff}, {0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xbb9b}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001100)=@gettaction={0x1ac, 0x32, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x22a0}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7fffffff}, @action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x73}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6c33}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}]}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x68d}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4f}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000200000014000480100001800a0001006c696d69740000000900010073797a30000000000900020073797a300000000005000700140000000900018ca36e5500000000000a00000000"], 0x70}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 1.036140893s ago: executing program 0 (id=3391): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0x10}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000240)="63eced000000000a9f33c9f7b9e5", 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x188, 0x33, 0x107, 0x70bd2a, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x171, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}, @generic="7e9d63eaa7aaea2477ee97445820632371eda4d115f37497efbfa7577c7fffffffffffffff7ee80abf3392f21dc17c53a009a1c77e5713250cdf69af1549d24ea4b0448ce80491e27e701ee5849d2ac57361562b60a6db168dad9f3d1f548888423f251b51467a4931e6d8f72d6ae740756fd48b5e87ad05f23e25bf076d7ca7015c1077dea96b0eb89cf7f0e8675175c87f69bb08e25fe70005adddb367b2b69cb76543b17274ab276f90aa2009ffefcf81dbcc7696468a81b6c4", @generic="777d2e6b2add62ee7370003607b3b4ff3b14d948d819f91ea69a577a0928cb08e851ba13eee15a28e849e7efc87fc261262117ccfe55d4e54dca012e594b5cd52f6a8ec2f39af8010393656eecd2c995a3817c579245905e0b2a57cfefd5804afb6a9637d29005b2cec921cac1cc4756f03b84c0fad7af2b8d040ca0a29cc0615bcab65be462d230ff6bed3af8d8ad7fa2f7d645726e71d6f7e05dfa99948dcc8fed4e9e42807e1212ea3846d540"]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 990.416763ms ago: executing program 2 (id=3392): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x300, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4010) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000004040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004a40)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x2003, 0x0, 0x0, 0x40}, [@TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x5, 0xfffffa9a, 0x4000000, 0x4, 0x6}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 820.85675ms ago: executing program 2 (id=3393): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000ffff28bd7004fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="572000002120000014001280090001007663616e000000000400028014000300"/48], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce0", 0x55}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000180)=0x10000, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(0xffffffffffffffff, r1, 0x0, 0x2) (async) sendfile(0xffffffffffffffff, r1, 0x0, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, 0x0, 0x40000) (async) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, 0x0, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) (async) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, 0x0) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) (async) connect$bt_rfcomm(r8, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) shutdown(r7, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) unshare(0x6020400) socket(0x15, 0x5, 0x0) 778.294056ms ago: executing program 0 (id=3394): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x80000) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000180)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x7}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x3}], &(0x7f00000001c0)='GPL\x00', 0x9ea, 0x88, &(0x7f0000000200)=""/136, 0x41100, 0x39, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x1}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1b, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000a0000000107000004000000186600000b00000000000000050000", @ANYRES32=0x1, @ANYBLOB="000000000000b5c963a47f00000000008500000086000000d0080000f0ffffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000180000000700000000000000ffffffff85100000fbffffff9500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x6, 0xbd, &(0x7f0000000500)=""/189, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xf, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000640)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000680)=[{0x1, 0x4, 0xf, 0xa}, {0x3, 0x1, 0x2, 0x6}, {0x0, 0x1, 0xb, 0xd}, {0x0, 0x1, 0xa, 0xa}, {0x1, 0x3, 0xe, 0x4}, {0x2, 0x1, 0x4, 0x5}, {0x5, 0x1, 0x10, 0xc}, {0x5, 0x3, 0x5, 0x9}, {0x0, 0x3, 0x9, 0x5}], 0x10, 0x1ff}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f000000e000)=[{{0x0, 0x0, &(0x7f000000d400)=[{&(0x7f000000d080)="eaba3e5f9c19b49d25d8ec768f0a06bcd9291c2d7aeb39f8db27c9a7f2d4b7b61c8821399d9913a441c8233fca7886eaad96", 0x32}, {&(0x7f000000d100)="f9e5778253cc3fbe6184aaf51726d4ccdf0e3844874dcc9c33c34fead6ff1dfcd5b9122710188c0274a3073f4f0284ce06569ed1c47f2427870173e21318675df806379658debdc302ec76835e20517ab1cc56299142f1aeff2c6af65a7b559109b275a2892ce8b27d82efeb59cf60655db42bad5934b4794ec6395763802ee9d0f71c662d27f912ba2988d772f9e4a405969cdc119b8340c7", 0x99}, {&(0x7f000000d1c0)="989cf6f681284ccb2787f9c14894c81e2a1e9a63eb2530cd2c17f68c1e73a8dd85e6f2fc66cd2eb3189de352d9592b12d2faad4a10b4a4a22e4955c91b0b2554dceb78e0fefbdd7ae130e7", 0x4b}, {&(0x7f000000d240)="ff93941bfac5998a84b767d07aad33f0d5d1d7d3086fb4ddb3818f177aba1dda515b8ff35a55a117f4e44e3602bd08f0ae1c4cb6192dd5cd9bb4aeb4f484a4d8d7c5a9d971f2b95cdca5f4a54bba07f8a12b", 0x52}, {&(0x7f000000d2c0)="15e485d542", 0x5}, {&(0x7f000000d3c0)="c34f64e90c5ef31171a283", 0xb}], 0x6, 0x0, 0x0, 0x20000805}}], 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@ifindex, 0x2e, 0x1, 0xba22, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="84d00200080000029908b7d4", @ANYRES32, @ANYBLOB, @ANYRES64=r5], 0x20) openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r1, 0xffffffffffffffff, 0x37, 0x0, @void}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=@newqdisc={0x88, 0x24, 0x100, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0xa, 0xfff1}, {0xffff, 0xffff}}, [@TCA_STAB={0x64, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0xb, 0x7, 0x93, 0x0, 0x1, 0x9, 0x7}}, {0x12, 0x2, [0xbe, 0x51, 0x2fc, 0x4a77, 0x7, 0x3, 0x81]}}, {{0x1c, 0x1, {0x9, 0x9, 0x511, 0xfffffffe, 0x2, 0xaf, 0xff, 0x8}}, {0x14, 0x2, [0x200, 0x670b, 0x724, 0x2, 0x27af, 0x2, 0x8, 0x7]}}]}]}, 0x88}}, 0x20040084) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x1, 0x0, 0xf, 0x11, 0x7, 0x4, 0xa, 0xf, 0x6, 0x3, 0x7, 0x2, 0x4, 0xa, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0x1, 0x4, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x34ae, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x43, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) socket$packet(0x11, 0x2, 0x300) 720.472748ms ago: executing program 1 (id=3395): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000000f0000149500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x21, 0x0, &(0x7f0000000200)="e0b9547ed387dbe1abc89b6f5bec14e7f383eb2b000000009daed41b42956c8c3a", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000c40)=ANY=[@ANYRES8=r0], 0xb4}, 0x1, 0x0, 0x0, 0x20008850}, 0x8840) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000300000a600000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000340003800d00000008000340000000022400008008000340000000020c00054000000000000000050c0004400000000000000f81140000001100010000000000000000000300000a"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = accept$alg(r3, 0x0, 0x0) recvmsg(r5, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)=""/239}, {&(0x7f0000000900)=""/167}, {&(0x7f00000009c0)=""/226}, {&(0x7f0000000ac0)=""/138}, {&(0x7f0000000b80)=""/25}], 0x0, 0x0, 0x4b}, 0x0) sendmmsg$alg(r5, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4001044}], 0x1, 0x24008844) sendmmsg$inet(r5, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ec0767137af7e7d890debdedb6aba1a8b4ede604461087e87bc1e54d08a4c58d94481c59aaedb0d8e7dcf67b286f2eb812797a31410d9f1522c112a7fa390a471160d1c4d0832a4639", 0x49}, {&(0x7f0000000100)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2", 0x21}], 0x2}}], 0x1, 0x8058) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c000180060001"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000000) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4048050) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) socket$kcm(0x10, 0x2, 0x0) 568.612508ms ago: executing program 2 (id=3396): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x6, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x5, 0x2, 0x8, 0x93, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000006000)=""/4100, 0x1004}, {&(0x7f0000002840)=""/197, 0xc5}, {&(0x7f0000002980)=""/117, 0x75}, {&(0x7f0000002a00)=""/203, 0xcb}, {&(0x7f0000002b00)=""/183, 0xb7}], 0x5}, 0x8}, {{0x0, 0x0, &(0x7f0000005140)=[{&(0x7f0000002dc0)=""/184, 0xb8}, {&(0x7f0000002e80)=""/135, 0x87}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000000680)=""/20, 0x14}, {&(0x7f0000003f80)=""/4096, 0x1000}, {&(0x7f0000004f80)=""/247, 0xf7}, {&(0x7f0000000000)=""/188, 0xbc}], 0x7}, 0x8}], 0x2, 0x2000, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="50000000070603000000000000000000020800061e00000008080006400000000205000100070000000900020073797a30379b7423e94e79a37e640000000008000640000000040800064000000002000000e9ff0000000000003d1c4a4016315ee7f5f7fd1adb"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800) r4 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x80, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86bf8a4f4eb7063b1e9451d78893f960d69c2"}, &(0x7f0000000080)=0x88) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000580)={r5, 0xec, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd420f2e53b802a1fd96ba89fc8d56e42d1266c3c0609f878c889dd7fcde33b07909908730606100f79630269a"}, &(0x7f0000000180)=0xf4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x1, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x200000, @remote, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x3, 0x8, 0x1]}}, 0x5c) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) 511.316682ms ago: executing program 0 (id=3397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast2, 0x3}}, {{0xa, 0x0, 0x0, @empty, 0x8000}}}, 0x108) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000280)="f5", 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e2, @local}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 481.230966ms ago: executing program 1 (id=3398): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x2a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x2a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x14}], 0x18, 0x20000040}], 0x1, 0x8040) sendto$inet(r5, &(0x7f0000000c40)="168935fadd8bde2b2f3fbe4e0e1dbe089d8f21a8a28be921448ec64e4fd082b2386a1adcfa7b4de85175536263416a275a8d25d9a6e5300e7743dfa54977a1fa50808c7f602673c57af0580af97ea1dd27cac4de7a52cc06d1a9b2f2af00afec8b22fa37d670e77267e3c63d67e783ad19625f5f60", 0x75, 0x20000001, 0x0, 0x0) (async) sendto$inet(r5, &(0x7f0000000c40)="168935fadd8bde2b2f3fbe4e0e1dbe089d8f21a8a28be921448ec64e4fd082b2386a1adcfa7b4de85175536263416a275a8d25d9a6e5300e7743dfa54977a1fa50808c7f602673c57af0580af97ea1dd27cac4de7a52cc06d1a9b2f2af00afec8b22fa37d670e77267e3c63d67e783ad19625f5f60", 0x75, 0x20000001, 0x0, 0x0) recvmsg$can_bcm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/99, 0x63}, {&(0x7f0000000440)=""/123, 0x7b}], 0x2}, 0x100) socket$key(0xf, 0x3, 0x2) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffc, 0xffffffffffffffff, 0xfff, 0x10001, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x58b6c42b, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x40, 0x0, 0x1, 0x0, 0x1}, {{@in=@multicast1, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) 400.882171ms ago: executing program 3 (id=3399): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB, @ANYRES16=r0, @ANYRES16=r0], 0x94}, 0x1, 0x0, 0x0, 0x20008004}, 0x40851) r1 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40e000, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000240), 0x36, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x80, 0x5, {}, {}, {0x3, 0x0, 0x1}, 0x1, @canfd={{0x3, 0x1, 0x1, 0x1}, 0x14, 0x0, 0x0, 0x0, "3437393cf791d76fa2361d605d4b8a6e6661914597d12bc4cf86ed46b2df582f32e1b60c4e325ef2a0215bdbf9f8c1600970fa5ab14270f41521b6a40d8897fc"}}, 0x62}, 0x1, 0x0, 0x0, 0x40000}, 0x44850) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) (async) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000002ec0)=ANY=[@ANYBLOB="0800080003000400fdff140000004589001c00690000600290780000ff14f3305280f125e60000000000"], 0xfdef) 336.365473ms ago: executing program 2 (id=3400): r0 = socket(0x18, 0x4, 0xfffffffa) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000791000000000000095"], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 263.504494ms ago: executing program 0 (id=3401): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8408001e}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000500)={@val={0x0, 0x22f0}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x6558, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x6, 0x40, 0x68, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @multicast1}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x1, 0xb, 0x0, 0x2, 0x400, 0x0, 0x3, 0x0, 0x1, 0x1, 0xe3, 0x9, 0x0, 0x4e22, 0x4e24}, 0x4}, 0x1, 0x3}, 0x3}}}}}}}}, 0x5a) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) 165.120921ms ago: executing program 2 (id=3402): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000000101040000000000000000020010002400028014000180080001"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004010) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x80000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x14, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18001700", @ANYRES16=r6, @ANYBLOB="11002dbd7000fcdbdf251b00000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4008810}, 0x1000c810) r7 = socket$inet6(0xa, 0x3, 0x88) r8 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x1}, 0x8) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x12, 0x0, 0x70bd2a, 0x25dfdbfc, {0xa, 0x6, 0x7, 0x18, {0x4e22, 0x4e22, [0x1b6da31e, 0x7fffffff, 0x80000001, 0xca], [0xc, 0xe6, 0xba, 0xd], 0x0, [0x5, 0x7fff]}, 0xba, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x8841}, 0x1) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000002c0)={0x3, 0xfc3}) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000980)={{{@in=@empty, @in6=@remote, 0x4e1f, 0x0, 0xfffe, 0x3, 0x2}, {0x10000, 0x200000004, 0x8000000000000000, 0x6811221d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0xfffffffffffffffd, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@loopback, 0x0, 0x6c}, 0x2, @in=@loopback, 0x34fe, 0x1, 0x0, 0x0, 0x1, 0x6}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xf, 0x0, &(0x7f0000000000)="dc9f4d600cdf96b768606406000000", 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 164.491874ms ago: executing program 3 (id=3403): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="8c000000150041cc25bd7000ffdbdf250a108000", @ANYRES32=0x0, @ANYBLOB="140001000000000000000000000000000000000114"], 0x8c}}, 0x8c0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) socket$inet6(0xa, 0x2, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) (async) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r4, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="8c000000150041cc25bd7000ffdbdf250a108000", @ANYRES32=0x0, @ANYBLOB="140001000000000000000000000000000000000114"], 0x8c}}, 0x8c0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) 144.409581ms ago: executing program 4 (id=3404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) close(0x3) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r2, 0x9) sendmmsg$inet_sctp(r2, &(0x7f0000004840)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x6, 0x4, 0x8c, 0x6, 0xd, 0x3ff}}], 0x30}], 0x1, 0xc004) sendto$inet(r2, &(0x7f0000000000)="6a00f8a7021745891f3a570e3b1483a5e67f97fa847f23c9c471ba48eb451b01ac58b1d35839fdd7f4736ab48cda9c983445c6032ed1d445efc6483e0d3adcd19f5a77d4fae396f370f52c8817ef458f3b1d44d0141222376e2e74eda71732e73087e5b7356795d2c566f11ed415168a2d7bcb91831aad8bd620e8596c18a54c624f6e967ee9ea61ad3f00d72482c74e403459", 0x93, 0x40801, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000001000000000000004b00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000170000850000008600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r5}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000440)={{0x1000, 0x7}, 0x100, './file0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 0s ago: executing program 1 (id=3405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd23, 0xffffffff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40c0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettaction={0xac, 0x32, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa8f7}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) kernel console output (not intermixed with test programs): [T13764] syz_tun: tun_net_xmit 42 [ 267.214087][T13764] syz_tun: tun_net_xmit 42 [ 267.230786][T13764] syz_tun: tun_net_xmit 42 [ 267.248099][T13764] syz_tun: tun_net_xmit 42 [ 267.264193][T13764] syz_tun: tun_net_xmit 42 [ 267.267272][T13980] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2051'. [ 267.271944][T13764] syz_tun: tun_net_xmit 42 [ 267.292909][T13764] syz_tun: tun_net_xmit 42 [ 267.305080][T13764] syz_tun: tun_net_xmit 42 [ 267.319560][T13764] syz_tun: tun_net_xmit 42 [ 267.344907][T13764] syz_tun: tun_net_xmit 42 [ 267.349638][T13764] syz_tun: tun_net_xmit 42 [ 267.354310][T13764] syz_tun: tun_net_xmit 42 [ 267.376698][T13764] syz_tun: tun_net_xmit 42 [ 267.394106][T13764] syz_tun: tun_net_xmit 42 [ 267.405149][T13764] syz_tun: tun_net_xmit 42 [ 267.415899][ T8661] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.430135][T13764] syz_tun: tun_net_xmit 42 [ 267.445759][T13764] syz_tun: tun_net_xmit 42 [ 267.450350][ T8661] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.467087][T13764] syz_tun: tun_net_xmit 42 [ 267.478630][T13764] syz_tun: tun_net_xmit 42 [ 267.483325][ T8661] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.493331][T13764] syz_tun: tun_net_xmit 42 [ 267.497981][ T8661] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.508306][T13764] syz_tun: tun_net_xmit 42 [ 267.516762][T13764] syz_tun: tun_net_xmit 42 [ 267.526498][T13764] syz_tun: tun_net_xmit 42 [ 267.534599][T13764] syz_tun: tun_net_xmit 42 [ 267.544463][T13764] syz_tun: tun_net_xmit 42 [ 267.550748][T13764] syz_tun: tun_net_xmit 42 [ 267.555706][T13764] syz_tun: tun_net_xmit 42 [ 267.560483][T13764] syz_tun: tun_net_xmit 42 [ 267.565531][T13764] syz_tun: tun_net_xmit 42 [ 267.570274][T13764] syz_tun: tun_net_xmit 42 [ 267.583446][T13764] syz_tun: tun_net_xmit 42 [ 267.583781][T13996] netlink: 'syz.2.2056': attribute type 6 has an invalid length. [ 267.605077][T13764] syz_tun: tun_net_xmit 42 [ 267.618459][T13764] syz_tun: tun_net_xmit 42 [ 267.620527][T13996] netlink: 'syz.2.2056': attribute type 6 has an invalid length. [ 267.624764][T13764] syz_tun: tun_net_xmit 42 [ 267.636283][T13764] syz_tun: tun_net_xmit 42 [ 267.647988][T13764] syz_tun: tun_net_xmit 42 [ 267.657161][T13764] syz_tun: tun_net_xmit 42 [ 267.669219][T13764] syz_tun: tun_net_xmit 42 [ 267.677047][T13764] syz_tun: tun_net_xmit 42 [ 267.686791][T13764] syz_tun: tun_net_xmit 42 [ 267.695166][T13764] syz_tun: tun_net_xmit 42 [ 267.705445][T13764] syz_tun: tun_net_xmit 42 [ 267.721369][T13764] syz_tun: tun_net_xmit 42 [ 267.737925][T13764] syz_tun: tun_net_xmit 42 [ 267.754558][T13764] syz_tun: tun_net_xmit 42 [ 267.769241][T13764] syz_tun: tun_net_xmit 42 [ 267.774033][T13764] syz_tun: tun_net_xmit 42 [ 267.784233][T14006] tipc: Enabled bearer , priority 0 [ 267.794199][T13764] syz_tun: tun_net_xmit 42 [ 267.799769][T13764] syz_tun: tun_net_xmit 42 [ 267.808931][T13764] syz_tun: tun_net_xmit 42 [ 267.817401][T13764] syz_tun: tun_net_xmit 42 [ 267.819651][T14005] tipc: Enabling of bearer rejected, already enabled [ 267.831693][T13764] syz_tun: tun_net_xmit 42 [ 267.848619][T13764] syz_tun: tun_net_xmit 42 [ 267.858956][T14006] syzkaller0: entered promiscuous mode [ 267.864255][T13764] syz_tun: tun_net_xmit 42 [ 267.872496][T13764] syz_tun: tun_net_xmit 42 [ 267.876003][T14006] syzkaller0: entered allmulticast mode [ 267.887188][T13764] syz_tun: tun_net_xmit 42 [ 267.891693][T14010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.892027][T13764] syz_tun: tun_net_xmit 42 [ 267.908369][T13764] syz_tun: tun_net_xmit 42 [ 267.913882][T14006] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 267.923322][T13764] syz_tun: tun_net_xmit 42 [ 267.935316][T13764] syz_tun: tun_net_xmit 42 [ 267.940110][T14014] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 267.946433][T13764] syz_tun: tun_net_xmit 42 [ 267.961377][T13764] syz_tun: tun_net_xmit 42 [ 267.980768][T13764] syz_tun: tun_net_xmit 42 [ 268.000774][T13764] syz_tun: tun_net_xmit 42 [ 268.010998][T13764] syz_tun: tun_net_xmit 42 [ 268.021926][T13764] syz_tun: tun_net_xmit 42 [ 268.040176][T13764] syz_tun: tun_net_xmit 42 [ 268.046453][T14020] bond9: entered promiscuous mode [ 268.051965][T14020] 8021q: adding VLAN 0 to HW filter on device bond9 [ 268.052564][T13764] syz_tun: tun_net_xmit 42 [ 268.064155][T14005] tipc: Resetting bearer [ 268.072506][T13764] syz_tun: tun_net_xmit 42 [ 268.081372][T13764] syz_tun: tun_net_xmit 42 [ 268.083571][T14018] lo speed is unknown, defaulting to 1000 [ 268.098138][T13764] syz_tun: tun_net_xmit 42 [ 268.102888][T13764] syz_tun: tun_net_xmit 42 [ 268.109935][T13764] syz_tun: tun_net_xmit 42 [ 268.117304][T13764] syz_tun: tun_net_xmit 42 [ 268.131332][T14021] 8021q: adding VLAN 0 to HW filter on device bond9 [ 268.140200][T13764] syz_tun: tun_net_xmit 42 [ 268.148258][T13764] syz_tun: tun_net_xmit 42 [ 268.155035][T14021] bond9: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 268.169773][T13764] syz_tun: tun_net_xmit 42 [ 268.178124][T13764] syz_tun: tun_net_xmit 42 [ 268.187452][T13764] syz_tun: tun_net_xmit 42 [ 268.193729][T14021] bond9: (slave ip6gre3): Error -95 calling set_mac_address [ 268.205591][T13764] syz_tun: tun_net_xmit 42 [ 268.213602][T13764] syz_tun: tun_net_xmit 42 [ 268.230174][T14004] tipc: Resetting bearer [ 268.247178][T14004] tipc: Disabling bearer [ 268.257850][T13764] syz_tun: tun_net_xmit 42 [ 268.280133][T13764] syz_tun: tun_net_xmit 42 [ 268.287943][T13764] syz_tun: tun_net_xmit 42 [ 268.295169][T13764] syz_tun: tun_net_xmit 42 [ 268.303062][T13764] syz_tun: tun_net_xmit 42 [ 268.319699][T13764] syz_tun: tun_net_xmit 42 [ 268.333762][T13764] syz_tun: tun_net_xmit 42 [ 268.349826][T13764] syz_tun: tun_net_xmit 42 [ 268.374952][T13764] syz_tun: tun_net_xmit 42 [ 268.390751][T13764] syz_tun: tun_net_xmit 42 [ 268.407128][T13764] syz_tun: tun_net_xmit 42 [ 268.421688][T13764] syz_tun: tun_net_xmit 42 [ 268.437449][T13764] syz_tun: tun_net_xmit 42 [ 268.452086][T13764] syz_tun: tun_net_xmit 42 [ 268.467196][T14036] netlink: 'syz.2.2065': attribute type 14 has an invalid length. [ 268.468878][T13764] syz_tun: tun_net_xmit 42 [ 268.488206][T14036] netlink: 'syz.2.2065': attribute type 12 has an invalid length. [ 268.506130][T13764] syz_tun: tun_net_xmit 42 [ 268.516493][T13764] syz_tun: tun_net_xmit 42 [ 268.523996][T13764] syz_tun: tun_net_xmit 42 [ 268.532016][T13764] syz_tun: tun_net_xmit 42 [ 268.537607][T13764] syz_tun: tun_net_xmit 42 [ 268.542423][T13764] syz_tun: tun_net_xmit 42 [ 268.547668][T13764] syz_tun: tun_net_xmit 42 [ 268.552702][T13764] syz_tun: tun_net_xmit 42 [ 268.559661][T13764] syz_tun: tun_net_xmit 42 [ 268.565645][T13764] syz_tun: tun_net_xmit 42 [ 268.570471][T13764] syz_tun: tun_net_xmit 42 [ 268.575649][T13764] syz_tun: tun_net_xmit 42 [ 268.580758][T13764] syz_tun: tun_net_xmit 42 [ 268.585970][T13764] syz_tun: tun_net_xmit 42 [ 268.590819][T13764] syz_tun: tun_net_xmit 42 [ 268.599313][T13764] syz_tun: tun_net_xmit 42 [ 268.615229][T13764] syz_tun: tun_net_xmit 42 [ 268.624423][T13764] syz_tun: tun_net_xmit 42 [ 268.633691][T13764] syz_tun: tun_net_xmit 42 [ 268.642663][T13764] syz_tun: tun_net_xmit 42 [ 268.653714][T13764] syz_tun: tun_net_xmit 42 [ 268.663109][T13764] syz_tun: tun_net_xmit 42 [ 268.680760][T13764] syz_tun: tun_net_xmit 42 [ 268.696807][T13764] syz_tun: tun_net_xmit 42 [ 268.713172][T13764] syz_tun: tun_net_xmit 42 [ 268.731105][T13764] syz_tun: tun_net_xmit 42 [ 268.736493][T13764] syz_tun: tun_net_xmit 42 [ 268.741298][T13764] syz_tun: tun_net_xmit 42 [ 268.747148][T13764] syz_tun: tun_net_xmit 42 [ 268.751955][T13764] syz_tun: tun_net_xmit 42 [ 268.756931][T13764] syz_tun: tun_net_xmit 42 [ 268.762011][T13764] syz_tun: tun_net_xmit 42 [ 268.781330][T13764] syz_tun: tun_net_xmit 42 [ 268.799407][T13764] syz_tun: tun_net_xmit 42 [ 268.804261][T13764] syz_tun: tun_net_xmit 42 [ 268.810030][T13764] syz_tun: tun_net_xmit 42 [ 268.815822][T13764] syz_tun: tun_net_xmit 42 [ 268.820634][T13764] syz_tun: tun_net_xmit 42 [ 268.829094][T13764] syz_tun: tun_net_xmit 42 [ 268.859972][T13764] syz_tun: tun_net_xmit 42 [ 268.892823][T13764] syz_tun: tun_net_xmit 42 [ 268.921697][T13764] syz_tun: tun_net_xmit 42 [ 268.947241][T13764] syz_tun: tun_net_xmit 42 [ 268.967229][T13764] syz_tun: tun_net_xmit 42 [ 268.987595][T13764] syz_tun: tun_net_xmit 42 [ 269.002829][T13764] syz_tun: tun_net_xmit 42 [ 269.016526][T13764] syz_tun: tun_net_xmit 42 [ 269.027574][T13764] syz_tun: tun_net_xmit 42 [ 269.043908][T13764] syz_tun: tun_net_xmit 42 [ 269.055222][T13764] syz_tun: tun_net_xmit 42 [ 269.062729][T13764] syz_tun: tun_net_xmit 42 [ 269.081658][T13764] syz_tun: tun_net_xmit 42 [ 269.099568][T13764] syz_tun: tun_net_xmit 42 [ 269.107076][T14066] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 269.114789][T13764] syz_tun: tun_net_xmit 42 [ 269.120907][T13764] syz_tun: tun_net_xmit 42 [ 269.140123][T13764] syz_tun: tun_net_xmit 42 [ 269.164367][T13764] syz_tun: tun_net_xmit 42 [ 269.190904][T13764] syz_tun: tun_net_xmit 42 [ 269.211263][T13764] syz_tun: tun_net_xmit 42 [ 269.247277][T13764] syz_tun: tun_net_xmit 42 [ 269.271448][T13764] syz_tun: tun_net_xmit 42 [ 269.286182][T13764] syz_tun: tun_net_xmit 42 [ 269.299409][T13764] syz_tun: tun_net_xmit 42 [ 269.312046][T13764] syz_tun: tun_net_xmit 42 [ 269.332790][T13764] syz_tun: tun_net_xmit 42 [ 269.353149][T13764] syz_tun: tun_net_xmit 42 [ 269.377439][T13764] syz_tun: tun_net_xmit 42 [ 269.395266][T13764] syz_tun: tun_net_xmit 42 [ 269.413958][T13764] syz_tun: tun_net_xmit 42 [ 269.469056][T13764] syz_tun: tun_net_xmit 42 [ 269.494251][T13764] syz_tun: tun_net_xmit 42 [ 269.509861][T13764] syz_tun: tun_net_xmit 42 [ 269.517513][T13764] syz_tun: tun_net_xmit 42 [ 269.522303][T13764] syz_tun: tun_net_xmit 42 [ 269.527358][T13764] syz_tun: tun_net_xmit 42 [ 269.532068][T13764] syz_tun: tun_net_xmit 42 [ 269.538901][T13764] syz_tun: tun_net_xmit 42 [ 269.548099][T13764] syz_tun: tun_net_xmit 42 [ 269.552889][T13764] syz_tun: tun_net_xmit 42 [ 269.557945][T13764] syz_tun: tun_net_xmit 42 [ 269.562680][T13764] syz_tun: tun_net_xmit 42 [ 269.568379][T13764] syz_tun: tun_net_xmit 42 [ 269.573108][T13764] syz_tun: tun_net_xmit 42 [ 269.582522][T13764] syz_tun: tun_net_xmit 42 [ 269.587488][T13764] syz_tun: tun_net_xmit 42 [ 269.592260][T13764] syz_tun: tun_net_xmit 42 [ 269.598321][T13764] syz_tun: tun_net_xmit 42 [ 269.603019][T13764] syz_tun: tun_net_xmit 42 [ 269.616566][T13764] syz_tun: tun_net_xmit 42 [ 269.621308][T13764] syz_tun: tun_net_xmit 42 [ 269.626741][T13764] syz_tun: tun_net_xmit 42 [ 269.631445][T13764] syz_tun: tun_net_xmit 42 [ 269.636933][T13764] syz_tun: tun_net_xmit 42 [ 269.641660][T13764] syz_tun: tun_net_xmit 42 [ 269.647453][T13764] syz_tun: tun_net_xmit 42 [ 269.652184][T13764] syz_tun: tun_net_xmit 42 [ 269.661842][T13764] syz_tun: tun_net_xmit 42 [ 269.667193][T13764] syz_tun: tun_net_xmit 42 [ 269.671790][T13764] syz_tun: tun_net_xmit 42 [ 269.676714][T13764] syz_tun: tun_net_xmit 42 [ 269.681408][T13764] syz_tun: tun_net_xmit 42 [ 269.688171][T13764] syz_tun: tun_net_xmit 42 [ 269.692804][T13764] syz_tun: tun_net_xmit 42 [ 269.698096][T13764] syz_tun: tun_net_xmit 42 [ 269.702751][T13764] syz_tun: tun_net_xmit 42 [ 269.708105][T13764] syz_tun: tun_net_xmit 42 [ 269.712735][T13764] syz_tun: tun_net_xmit 42 [ 269.717647][T13764] syz_tun: tun_net_xmit 42 [ 269.722366][T13764] syz_tun: tun_net_xmit 42 [ 269.727831][T13764] syz_tun: tun_net_xmit 42 [ 269.732429][T13764] syz_tun: tun_net_xmit 42 [ 269.737321][T13764] syz_tun: tun_net_xmit 42 [ 269.741907][T13764] syz_tun: tun_net_xmit 42 [ 269.746626][T13764] syz_tun: tun_net_xmit 42 [ 269.751240][T13764] syz_tun: tun_net_xmit 42 [ 269.756380][T13764] syz_tun: tun_net_xmit 42 [ 269.760995][T13764] syz_tun: tun_net_xmit 42 [ 269.765780][T13764] syz_tun: tun_net_xmit 42 [ 269.770406][T13764] syz_tun: tun_net_xmit 42 [ 269.775073][T13764] syz_tun: tun_net_xmit 42 [ 269.779681][T13764] syz_tun: tun_net_xmit 42 [ 269.784257][T13764] syz_tun: tun_net_xmit 42 [ 269.789392][T13764] syz_tun: tun_net_xmit 42 [ 269.793963][T13764] syz_tun: tun_net_xmit 42 [ 269.799005][T13764] syz_tun: tun_net_xmit 42 [ 269.803646][T13764] syz_tun: tun_net_xmit 42 [ 269.808388][T13764] syz_tun: tun_net_xmit 42 [ 269.813023][T13764] syz_tun: tun_net_xmit 42 [ 269.818647][T13764] syz_tun: tun_net_xmit 42 [ 269.823243][T13764] syz_tun: tun_net_xmit 42 [ 269.828022][T13764] syz_tun: tun_net_xmit 42 [ 269.832639][T13764] syz_tun: tun_net_xmit 42 [ 269.837394][T13764] syz_tun: tun_net_xmit 42 [ 269.842019][T13764] syz_tun: tun_net_xmit 42 [ 269.847174][T13764] syz_tun: tun_net_xmit 42 [ 269.851761][T13764] syz_tun: tun_net_xmit 42 [ 269.856431][T13764] syz_tun: tun_net_xmit 42 [ 269.861026][T13764] syz_tun: tun_net_xmit 42 [ 269.865787][T13764] syz_tun: tun_net_xmit 42 [ 269.870365][T13764] syz_tun: tun_net_xmit 42 [ 269.875504][T13764] syz_tun: tun_net_xmit 42 [ 269.880078][T13764] syz_tun: tun_net_xmit 42 [ 269.884817][T13764] syz_tun: tun_net_xmit 42 [ 269.889462][T13764] syz_tun: tun_net_xmit 42 [ 269.894011][T13764] syz_tun: tun_net_xmit 42 [ 269.898718][T13764] syz_tun: tun_net_xmit 42 [ 269.903359][T13764] syz_tun: tun_net_xmit 42 [ 269.909260][T13764] syz_tun: tun_net_xmit 42 [ 269.913878][T13764] syz_tun: tun_net_xmit 42 [ 269.919424][T13764] syz_tun: tun_net_xmit 42 [ 269.924081][T13764] syz_tun: tun_net_xmit 42 [ 269.929363][T13764] syz_tun: tun_net_xmit 42 [ 269.934110][T13764] syz_tun: tun_net_xmit 42 [ 269.938953][T13764] syz_tun: tun_net_xmit 42 [ 269.943574][T13764] syz_tun: tun_net_xmit 42 [ 269.948340][T13764] syz_tun: tun_net_xmit 42 [ 269.952997][T13764] syz_tun: tun_net_xmit 42 [ 269.957698][T13764] syz_tun: tun_net_xmit 42 [ 269.962277][T13764] syz_tun: tun_net_xmit 42 [ 269.967225][T13764] syz_tun: tun_net_xmit 42 [ 269.971892][T13764] syz_tun: tun_net_xmit 42 [ 269.976804][T13764] syz_tun: tun_net_xmit 42 [ 269.981372][T13764] syz_tun: tun_net_xmit 42 [ 269.986065][T13764] syz_tun: tun_net_xmit 42 [ 269.990661][T13764] syz_tun: tun_net_xmit 42 [ 269.995418][T13764] syz_tun: tun_net_xmit 42 [ 270.000006][T13764] syz_tun: tun_net_xmit 42 [ 270.004660][T13764] syz_tun: tun_net_xmit 42 [ 270.009366][T13764] syz_tun: tun_net_xmit 42 [ 270.013948][T13764] syz_tun: tun_net_xmit 42 [ 270.018986][T13764] syz_tun: tun_net_xmit 42 [ 270.023685][T13764] syz_tun: tun_net_xmit 42 [ 270.028986][T13764] syz_tun: tun_net_xmit 42 [ 270.033644][T13764] syz_tun: tun_net_xmit 42 [ 270.038888][T13764] syz_tun: tun_net_xmit 42 [ 270.043467][T13764] syz_tun: tun_net_xmit 42 [ 270.049219][T13764] syz_tun: tun_net_xmit 42 [ 270.053837][T13764] syz_tun: tun_net_xmit 42 [ 270.058584][T13764] syz_tun: tun_net_xmit 42 [ 270.063219][T13764] syz_tun: tun_net_xmit 42 [ 270.068078][T13764] syz_tun: tun_net_xmit 42 [ 270.072754][T13764] syz_tun: tun_net_xmit 42 [ 270.077569][T13764] syz_tun: tun_net_xmit 42 [ 270.082192][T13764] syz_tun: tun_net_xmit 42 [ 270.087121][T13764] syz_tun: tun_net_xmit 42 [ 270.091762][T13764] syz_tun: tun_net_xmit 42 [ 270.096922][T13764] syz_tun: tun_net_xmit 42 [ 270.101525][T13764] syz_tun: tun_net_xmit 42 [ 270.106233][T13764] syz_tun: tun_net_xmit 42 [ 270.110856][T13764] syz_tun: tun_net_xmit 42 [ 270.115624][T13764] syz_tun: tun_net_xmit 42 [ 270.120238][T13764] syz_tun: tun_net_xmit 42 [ 270.125180][T13764] syz_tun: tun_net_xmit 42 [ 270.129815][T13764] syz_tun: tun_net_xmit 42 [ 270.134372][T13764] syz_tun: tun_net_xmit 42 [ 270.139241][T13764] syz_tun: tun_net_xmit 42 [ 270.143908][T13764] syz_tun: tun_net_xmit 42 [ 270.149868][T13764] syz_tun: tun_net_xmit 42 [ 270.154531][T13764] syz_tun: tun_net_xmit 42 [ 270.159238][T13764] syz_tun: tun_net_xmit 42 [ 270.163836][T13764] syz_tun: tun_net_xmit 42 [ 270.168545][T13764] syz_tun: tun_net_xmit 42 [ 270.173153][T13764] syz_tun: tun_net_xmit 42 [ 270.178023][T13764] syz_tun: tun_net_xmit 42 [ 270.182634][T13764] syz_tun: tun_net_xmit 42 [ 270.187354][T13764] syz_tun: tun_net_xmit 42 [ 270.191941][T13764] syz_tun: tun_net_xmit 42 [ 270.196730][T13764] syz_tun: tun_net_xmit 42 [ 270.201316][T13764] syz_tun: tun_net_xmit 42 [ 270.206313][T13764] syz_tun: tun_net_xmit 42 [ 270.210887][T13764] syz_tun: tun_net_xmit 42 [ 270.216054][T13764] syz_tun: tun_net_xmit 42 [ 276.365007][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 282.765025][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 286.746093][T14120] netlink: 'syz.0.2083': attribute type 1 has an invalid length. [ 286.830804][T14120] bond5: entered promiscuous mode [ 286.847922][T14120] 8021q: adding VLAN 0 to HW filter on device bond5 [ 286.919948][T14120] bond5: (slave veth11): making interface the new active one [ 286.927665][T14120] veth11: entered promiscuous mode [ 286.936325][T14120] bond5: (slave veth11): Enslaving as an active interface with an up link [ 287.015998][T14139] vlan2: entered allmulticast mode [ 287.036280][T14139] bond0: entered allmulticast mode [ 287.054271][T14141] __nla_validate_parse: 9 callbacks suppressed [ 287.054291][T14141] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2089'. [ 287.086367][T14139] bond_slave_0: entered allmulticast mode [ 287.143462][T14141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.160308][T14141] bond_slave_0: left allmulticast mode [ 287.179285][T14141] bond0 (unregistering): Released all slaves [ 287.337693][T14150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2094'. [ 287.523381][T14167] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2099'. [ 287.547299][T14159] bond10 (unregistering): Released all slaves [ 287.557151][T14168] sctp: [Deprecated]: syz.4.2097 (pid 14168) Use of int in maxseg socket option. [ 287.557151][T14168] Use struct sctp_assoc_value instead [ 287.561470][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2099'. [ 287.593114][T14166] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 287.595693][T14168] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2097'. [ 287.683013][T14176] netlink: 'syz.2.2101': attribute type 1 has an invalid length. [ 287.694107][T14176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.741157][T14179] syzkaller0: entered promiscuous mode [ 287.757445][T14186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2102'. [ 287.768384][T14179] syzkaller0: entered allmulticast mode [ 287.776519][T14185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2102'. [ 287.787756][T14187] tipc: Enabled bearer , priority 0 [ 287.814472][T14179] tipc: Resetting bearer [ 287.836198][T14179] tipc: Disabling bearer [ 287.998421][T14200] netlink: 'syz.3.2105': attribute type 10 has an invalid length. [ 288.028087][T14200] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2105'. [ 288.081343][T14206] netlink: 'syz.2.2109': attribute type 1 has an invalid length. [ 288.142431][T14208] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2111'. [ 288.153003][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2111'. [ 288.163793][T14209] netlink: 'syz.2.2109': attribute type 20 has an invalid length. [ 288.183504][T14209] netlink: 'syz.2.2109': attribute type 21 has an invalid length. [ 288.193217][T14208] tunl0: Caught tx_queue_len zero misconfig [ 288.407772][T14221] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 288.421316][T14213] xt_limit: Overflow, try lower: 268435456/134217728 [ 288.428183][T14221] bond10 (unregistering): Released all slaves [ 288.472708][T14227] netlink: 'syz.1.2117': attribute type 1 has an invalid length. [ 288.603344][T14232] veth0_macvtap: left promiscuous mode [ 288.739272][T14221] syzkaller0: entered promiscuous mode [ 288.745293][T14221] syzkaller0: entered allmulticast mode [ 288.790195][ T8661] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 288.820425][ T8661] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.848035][ T8661] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 288.880668][ T8661] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.040161][T14233] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 289.067323][T14233] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.083594][ T8661] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 289.115719][ T8661] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.641501][T14287] lo: Caught tx_queue_len zero misconfig [ 289.672303][T14287] netlink: 'syz.0.2125': attribute type 14 has an invalid length. [ 289.893983][T14305] netlink: 'syz.0.2134': attribute type 178 has an invalid length. [ 290.055563][T14317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.475417][T14347] netlink: 'syz.1.2144': attribute type 1 has an invalid length. [ 290.488619][T14347] sctp: [Deprecated]: syz.1.2144 (pid 14347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.488619][T14347] Use struct sctp_sack_info instead [ 290.815332][T14378] sctp: [Deprecated]: syz.2.2150 (pid 14378) Use of int in maxseg socket option. [ 290.815332][T14378] Use struct sctp_assoc_value instead [ 291.110726][T14396] IPv6: NLM_F_CREATE should be specified when creating new route [ 292.010543][ T29] audit: type=1804 audit(1782051335.639:9): pid=14434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2158" name="/newroot/441/cgroup.controllers" dev="tmpfs" ino=2275 res=1 errno=0 [ 292.045154][T14434] mac80211_hwsim hwsim9 syzkaller1: entered promiscuous mode [ 292.055231][T14434] mac80211_hwsim hwsim9 syzkaller1: entered allmulticast mode [ 292.071991][ T29] audit: type=1800 audit(1782051335.659:10): pid=14434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2158" name="cgroup.controllers" dev="tmpfs" ino=2275 res=0 errno=0 [ 292.280423][T14448] __nla_validate_parse: 20 callbacks suppressed [ 292.280444][T14448] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2163'. [ 292.321523][T14448] netlink: 'syz.0.2163': attribute type 11 has an invalid length. [ 292.431830][T14454] netlink: 'syz.3.2165': attribute type 27 has an invalid length. [ 292.474306][T14454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2165'. [ 292.509735][T14461] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2166'. [ 292.903774][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2173'. [ 292.949312][T14488] veth1_to_bond: Caught tx_queue_len zero misconfig [ 293.055565][T14491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.102896][T14498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2177'. [ 293.133400][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2177'. [ 293.143680][T14498] IPv6: NLM_F_CREATE should be specified when creating new route [ 293.154570][T14498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2177'. [ 293.349078][T14517] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2183'. [ 293.543793][T14534] syzkaller1: entered promiscuous mode [ 293.556607][T14534] syzkaller1: entered allmulticast mode [ 293.789357][T14555] netlink: 'syz.1.2191': attribute type 29 has an invalid length. [ 293.843025][T14561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2193'. [ 293.855383][T14561] unsupported nla_type 48896 [ 293.990921][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2196'. [ 294.080583][T14573] lo speed is unknown, defaulting to 1000 [ 294.465139][ T6521] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 294.869387][ T6521] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 295.512465][T14652] netlink: 'syz.3.2212': attribute type 2 has an invalid length. [ 295.989255][T14675] mac80211_hwsim hwsim9 syzkaller1: left promiscuous mode [ 296.015450][T14675] mac80211_hwsim hwsim9 syzkaller1: left allmulticast mode [ 296.055590][ T8658] wlan1: Trigger new scan to find an IBSS to join [ 296.184075][T14665] netlink: 'syz.0.2215': attribute type 61 has an invalid length. [ 296.205892][T14685] syz_tun: entered allmulticast mode [ 296.210913][T14665] netlink: 'syz.0.2215': attribute type 105 has an invalid length. [ 296.649229][T14719] xt_l2tp: v2 sid > 0xffff: 262144 [ 296.962514][T14743] openvswitch: netlink: Flow actions attr not present in new flow. [ 296.984516][T14683] syz_tun: left allmulticast mode [ 297.025573][T14745] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 297.213937][T14757] netlink: 'syz.2.2234': attribute type 1 has an invalid length. [ 297.249483][T14765] tipc: Enabling of bearer rejected, failed to enable media [ 297.355448][T14767] block nbd2: server does not support multiple connections per device. [ 297.364392][T14767] block nbd2: shutting down sockets [ 297.495992][T14785] __nla_validate_parse: 18 callbacks suppressed [ 297.496018][T14785] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2244'. [ 297.609095][T14792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2247'. [ 297.807267][T14799] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2249'. [ 297.830152][T14807] netlink: 'syz.4.2252': attribute type 10 has an invalid length. [ 297.839969][T14807] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2252'. [ 297.850582][T14807] team0: entered promiscuous mode [ 297.854251][T14799] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2249'. [ 297.856345][T14807] team0: entered allmulticast mode [ 297.871838][T14807] bridge0: port 1(team0) entered blocking state [ 297.878408][T14807] bridge0: port 1(team0) entered disabled state [ 298.027450][T14813] syzkaller0: entered promiscuous mode [ 298.032981][T14813] syzkaller0: entered allmulticast mode [ 298.056144][T14813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2255'. [ 298.312047][T14829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.322986][T14829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.337787][T14840] netlink: 'syz.2.2263': attribute type 13 has an invalid length. [ 298.420142][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2262'. [ 298.681975][ T8669] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.694017][ T8669] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 298.709699][T14837] lo speed is unknown, defaulting to 1000 [ 298.715601][ T8669] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.729418][ T8669] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 298.750023][ T8669] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.768407][ T8669] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 298.792837][ T8669] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.809134][ T8669] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 299.029453][T14862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2268'. [ 299.038940][T14862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2268'. [ 299.082830][T14864] IPv6: NLM_F_REPLACE set, but no existing node found! [ 299.091705][ T8661] wlan1: Trigger new scan to find an IBSS to join [ 299.112556][T14862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2268'. [ 299.147843][T14865] lo speed is unknown, defaulting to 1000 [ 299.318781][T14874] mac80211_hwsim hwsim9 syzkaller1: entered promiscuous mode [ 299.334811][T14874] mac80211_hwsim hwsim9 syzkaller1: entered allmulticast mode [ 299.344064][T14876] netlink: 'syz.2.2271': attribute type 1 has an invalid length. [ 299.476980][T14881] netlink: 'syz.4.2273': attribute type 18 has an invalid length. [ 299.566041][T14876] bond11: (slave bridge9): making interface the new active one [ 299.574541][T14876] bond11: (slave bridge9): Enslaving as an active interface with an up link [ 299.584317][T14882] bond11: entered promiscuous mode [ 299.590155][T14882] bridge9: entered promiscuous mode [ 299.595775][T14882] bond11: entered allmulticast mode [ 299.601025][T14882] bridge9: entered allmulticast mode [ 299.608594][T14882] 8021q: adding VLAN 0 to HW filter on device bond11 [ 299.644376][T14878] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 299.692456][T14887] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 299.742602][T14887] erspan1: left allmulticast mode [ 299.750039][T14887] gre1: left promiscuous mode [ 299.755858][T14887] bond2: left promiscuous mode [ 299.761150][T14887] gtp0: left allmulticast mode [ 299.771239][T14887] bond4: left promiscuous mode [ 299.778129][T14887] bridge4: left promiscuous mode [ 299.783771][T14887] bond4: left allmulticast mode [ 299.789682][T14887] bridge4: left allmulticast mode [ 299.795953][T14887] macsec0: left promiscuous mode [ 299.801138][T14887] ip6gre2: left promiscuous mode [ 299.817575][T14887] ip6gre2: left allmulticast mode [ 299.830335][T14887] bond5: left promiscuous mode [ 299.839631][T14887] vti0: left promiscuous mode [ 300.240555][T14927] netlink: 'syz.0.2285': attribute type 2 has an invalid length. [ 300.542021][T14944] mac80211_hwsim hwsim9 syzkaller1: left promiscuous mode [ 300.564830][T14944] mac80211_hwsim hwsim9 syzkaller1: left allmulticast mode [ 302.045038][ T8649] wlan1: Trigger new scan to find an IBSS to join [ 302.925528][ T8656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.151255][T14930] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.294558][T14966] netlink: 'syz.2.2297': attribute type 16 has an invalid length. [ 303.317760][T14966] __nla_validate_parse: 7 callbacks suppressed [ 303.317782][T14966] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2297'. [ 303.345484][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2297'. [ 303.355088][T14966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2297'. [ 303.364055][T14966] netlink: 'syz.2.2297': attribute type 14 has an invalid length. [ 303.372661][T14966] netlink: 'syz.2.2297': attribute type 12 has an invalid length. [ 303.392833][T14969] syzkaller0: entered promiscuous mode [ 303.419111][T14969] syzkaller0: entered allmulticast mode [ 303.452484][T14969] netlink: 'syz.1.2299': attribute type 1 has an invalid length. [ 303.498054][T14981] netlink: 'syz.4.2298': attribute type 1 has an invalid length. [ 303.513279][T14969] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2299'. [ 303.552792][T14981] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2298'. [ 303.595868][T14981] netlink: 'syz.4.2298': attribute type 1 has an invalid length. [ 303.634759][T14981] netlink: 634 bytes leftover after parsing attributes in process `syz.4.2298'. [ 303.683138][T14981] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2298'. [ 304.142122][T15034] netlink: 'syz.2.2313': attribute type 8 has an invalid length. [ 304.172515][T15034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2313'. [ 304.211711][T15034] nbd: couldn't find a device at index 0 [ 304.258423][T15030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2313'. [ 304.276204][T15041] netlink: 'syz.3.2315': attribute type 2 has an invalid length. [ 304.286968][T15030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2313'. [ 304.314991][T15030] netlink: 'syz.2.2313': attribute type 13 has an invalid length. [ 304.370878][T15047] netlink: 'syz.0.2317': attribute type 62 has an invalid length. [ 304.458727][T15050] syzkaller0: entered promiscuous mode [ 304.487321][T15050] syzkaller0: entered allmulticast mode [ 305.227523][T15104] x_tables: ip_tables: osf match: only valid for protocol 6 [ 305.418000][T15118] bond5: (slave dummy0): Releasing active interface [ 305.609183][T15126] lo speed is unknown, defaulting to 1000 [ 305.656710][T15133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.084949][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 307.093014][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 307.381804][T15175] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 307.469304][T15179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.518131][T15179] syz_tun: entered promiscuous mode [ 307.533403][T15179] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 308.353786][T15113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 308.482199][T15188] __nla_validate_parse: 3 callbacks suppressed [ 308.482220][T15188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2352'. [ 308.499828][T15185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2351'. [ 308.561433][T15185] 8021q: adding VLAN 0 to HW filter on device bond11 [ 308.801590][T15212] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2358'. [ 308.823061][T15212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2358'. [ 308.889290][T15221] tipc: Can't bind to reserved service type 2 [ 309.012864][T15234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2366'. [ 309.013529][T15229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2367'. [ 309.108296][T15234] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 309.146373][T15241] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 309.333607][T15250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2371'. [ 309.362300][T15250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2371'. [ 309.385944][T15250] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2371'. [ 309.395897][T15250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2371'. [ 309.640393][T15272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.641661][T15273] validate_nla: 4 callbacks suppressed [ 309.641704][T15273] netlink: 'syz.3.2377': attribute type 1 has an invalid length. [ 309.774212][T15273] bond12: option lacp_active: invalid value (8) [ 309.787965][T15273] bond12 (unregistering): Released all slaves [ 309.951772][ T8656] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.983166][ T8656] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.007062][ T8656] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.020283][ T8656] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.079459][T15295] vlan0: Caught tx_queue_len zero misconfig [ 310.162894][T15303] @0Ù: renamed from bond_slave_1 (while UP) [ 310.337655][T15314] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.388962][T15318] pim6reg1: entered promiscuous mode [ 310.393674][T15322] xt_ecn: cannot match TCP bits for non-tcp packets [ 310.394508][T15318] pim6reg1: entered allmulticast mode [ 310.491976][T15323] tipc: Enabling of bearer rejected, failed to enable media [ 310.505578][T15314] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.570390][T15314] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.649192][T15314] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.772310][ T8669] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.803539][ T8669] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.834470][ T8656] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.858361][ T8668] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.077908][T15351] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 311.300698][T15361] can: request_module (can-proto-0) failed. [ 311.414012][T15361] netlink: 'syz.2.2402': attribute type 1 has an invalid length. [ 312.303822][T15430] tunl0: entered allmulticast mode [ 312.363466][T15434] netlink: 'syz.0.2422': attribute type 1 has an invalid length. [ 312.430344][T15434] bond6: (slave veth13): Enslaving as an active interface with a down link [ 312.463847][T15434] bond6: (slave veth15): Enslaving as an active interface with a down link [ 312.491903][T15445] netlink: 'syz.3.2425': attribute type 4 has an invalid length. [ 312.529454][T15445] .`: renamed from bond0 [ 313.215027][T15475] 8021q: adding VLAN 0 to HW filter on device bond12 [ 313.295556][T15480] ip6erspan0: entered allmulticast mode [ 313.342219][T15486] lo speed is unknown, defaulting to 1000 [ 315.353844][T15440] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 315.364848][T15456] netlink: 'syz.0.2427': attribute type 4 has an invalid length. [ 315.380167][T15456] __nla_validate_parse: 18 callbacks suppressed [ 315.380185][T15456] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2427'. [ 315.530235][T15499] syzkaller0: entered promiscuous mode [ 315.537014][T15499] syzkaller0: entered allmulticast mode [ 315.549232][T15505] netlink: 'syz.0.2440': attribute type 83 has an invalid length. [ 315.560442][T15505] SET target dimension over the limit! [ 315.642780][T15510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2441'. [ 315.781635][T15520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2442'. [ 315.817471][T15525] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2446'. [ 315.840202][T15525] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 315.967644][T15534] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 315.998972][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2449'. [ 316.543930][T15577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2461'. [ 316.554159][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2461'. [ 316.853470][T15597] IPVS: Error connecting to the multicast addr [ 317.301891][T15632] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2478'. [ 317.325594][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 317.326203][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 317.343333][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.563972][T15650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2482'. [ 317.586615][T15649] syzkaller0: entered promiscuous mode [ 317.596438][T15649] syzkaller0: entered allmulticast mode [ 317.611917][T15649] : entered promiscuous mode [ 317.649780][T15649] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 317.662112][T15650] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2482'. [ 318.120348][T15680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.163377][T15680] netlink: 'syz.0.2489': attribute type 2 has an invalid length. [ 318.197773][T15680] netlink: 'syz.0.2489': attribute type 1 has an invalid length. [ 318.333401][T15694] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 318.376081][T15694] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 318.418397][T15694] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 318.510297][T15703] sctp: [Deprecated]: syz.4.2496 (pid 15703) Use of int in maxseg socket option. [ 318.510297][T15703] Use struct sctp_assoc_value instead [ 318.859098][T15725] syzkaller0: entered promiscuous mode [ 318.865508][T15725] syzkaller0: entered allmulticast mode [ 318.927482][T15721] netlink: 'syz.3.2492': attribute type 2 has an invalid length. [ 319.417018][T15761] netlink: 'syz.0.2508': attribute type 362 has an invalid length. [ 319.552863][T15775] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 319.779670][T15787] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 319.779670][T15787] Please contact the netfilter-devel mailing list or update your nftables rules. [ 319.816602][T15790] xt_bpf: check failed: parse error [ 319.950292][T15796] netlink: 'syz.0.2518': attribute type 4 has an invalid length. [ 319.977787][T15796] netlink: 'syz.0.2518': attribute type 4 has an invalid length. [ 319.990460][T15799] ipip0: entered promiscuous mode [ 319.999820][T15799] ipip0: entered allmulticast mode [ 320.270464][T15806] IPVS: Scheduler module ip_vs_sip not found [ 320.277139][T15811] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 320.457476][T15819] __nla_validate_parse: 10 callbacks suppressed [ 320.457498][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2523'. [ 320.495560][T15822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2525'. [ 320.654076][T15834] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20001 [ 321.048623][T15865] openvswitch: netlink: IP tunnel dst address not specified [ 321.067282][T15865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.328319][T15822] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 321.340993][T15822] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 321.353670][T15890] syzkaller1: entered allmulticast mode [ 321.361506][T15890] netlink: 'syz.0.2540': attribute type 1 has an invalid length. [ 321.370021][T15890] netlink: 'syz.0.2540': attribute type 1 has an invalid length. [ 321.384540][T15890] netlink: 'syz.0.2540': attribute type 2 has an invalid length. [ 321.395833][T15890] netlink: 'syz.0.2540': attribute type 1 has an invalid length. [ 321.406952][T15822] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 321.412967][T15822] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 321.431821][T15822] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 321.447825][T15822] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 321.471003][T15822] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 321.486576][T15894] syzkaller0: entered promiscuous mode [ 321.492938][T15822] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 321.507109][T15894] syzkaller0: entered allmulticast mode [ 321.516049][T15894] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2541'. [ 321.602109][T15904] netlink: 'syz.3.2542': attribute type 3 has an invalid length. [ 321.880632][T15915] netlink: 'syz.0.2544': attribute type 1 has an invalid length. [ 322.005310][T15915] 8021q: adding VLAN 0 to HW filter on device bond7 [ 322.032957][T15929] netlink: 'syz.0.2544': attribute type 10 has an invalid length. [ 322.075079][T15929] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2544'. [ 322.109807][T15925] bond2: (slave dummy0): Releasing active interface [ 322.121281][T15936] netlink: 57 bytes leftover after parsing attributes in process `syz.1.2549'. [ 322.130451][T15936] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2549'. [ 322.151226][T15925] bond7: (slave dummy0): making interface the new active one [ 322.162558][T15925] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 322.173649][T15929] dummy0: entered promiscuous mode [ 322.233349][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2549'. [ 322.255790][T15944] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2549'. [ 322.266541][T15931] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2548'. [ 322.366379][T15929] bond7: (slave dummy0): Releasing active interface [ 322.432443][T15936] netlink: 57 bytes leftover after parsing attributes in process `syz.1.2549'. [ 322.469633][T15951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.755599][T15980] xt_l2tp: v2 sid > 0xffff: 262144 [ 322.859463][T15987] tipc: Enabled bearer , priority 0 [ 322.893812][T15985] tipc: Resetting bearer [ 322.997789][T15992] IPVS: set_ctl: invalid protocol: 136 100.1.1.2:20001 [ 323.058791][T16003] macsec0: entered promiscuous mode [ 323.116207][T16003] macsec0 (unregistering): left promiscuous mode [ 323.253125][T16010] bond14: Removing last ns target with arp_interval on [ 323.429498][T16032] ipt_REJECT: ECHOREPLY no longer supported. [ 323.432760][T16031] ipt_REJECT: ECHOREPLY no longer supported. [ 323.594113][T16044] syzkaller0: left promiscuous mode [ 323.612172][T16044] syzkaller0: left allmulticast mode [ 323.632358][T16044] tipc: Resetting bearer [ 323.767629][T16055] 8021q: adding VLAN 0 to HW filter on device bond10 [ 323.846279][T16058] bond10: (slave veth11): Enslaving as an active interface with an up link [ 323.891614][ T8649] tipc: Resetting bearer [ 323.912134][T16055] tc_dump_action: action bad kind [ 323.993399][T16071] syzkaller0: entered promiscuous mode [ 324.012554][T16071] syzkaller0: entered allmulticast mode [ 324.157088][T16086] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 324.206743][T16086] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 324.244538][T16090] netlink: 'syz.3.2579': attribute type 1 has an invalid length. [ 324.306928][T16091] tipc: Resetting bearer [ 324.623266][T16119] bond8: option min_links: invalid value (18446744073709551612) [ 324.633395][T16119] bond8: option min_links: allowed values 0 - 2147483647 [ 324.641925][T16119] bond8 (unregistering): Released all slaves [ 325.141438][T16166] netlink: 'syz.0.2599': attribute type 1 has an invalid length. [ 325.156691][T16165] netlink: 'syz.0.2599': attribute type 1 has an invalid length. [ 325.195584][T16166] 8021q: adding VLAN 0 to HW filter on device bond8 [ 325.432356][T16185] sctp: [Deprecated]: syz.1.2603 (pid 16185) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.432356][T16185] Use struct sctp_sack_info instead [ 325.476198][T16182] __nla_validate_parse: 16 callbacks suppressed [ 325.476219][T16182] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2601'. [ 325.578709][T16186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2601'. [ 325.862527][T16206] sctp: [Deprecated]: syz.1.2610 (pid 16206) Use of int in max_burst socket option. [ 325.862527][T16206] Use struct sctp_assoc_value instead [ 325.976681][T16210] lo speed is unknown, defaulting to 1000 [ 326.537987][T16245] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2624'. [ 327.067928][T16292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2633'. [ 327.459144][T16319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2641'. [ 327.512310][T16326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.856708][T16346] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2649'. [ 327.963622][T16356] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2650'. [ 327.988638][T16358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2651'. [ 327.989032][T16359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2651'. [ 328.025272][T16356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2650'. [ 328.079054][T16356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.259704][T16374] validate_nla: 3 callbacks suppressed [ 328.259725][T16374] netlink: 'syz.3.2655': attribute type 63 has an invalid length. [ 328.706943][T16422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.798883][T16422] bond8: Removing last ns target with arp_interval on [ 328.932004][T16446] netlink: 'syz.0.2671': attribute type 1 has an invalid length. [ 328.956647][T16446] 8021q: adding VLAN 0 to HW filter on device bond9 [ 329.125896][T16461] team0: No ports can be present during mode change [ 329.151671][T16464] netlink: 'syz.2.2676': attribute type 1 has an invalid length. [ 329.478423][T16485] gre5: entered allmulticast mode [ 329.671885][T16496] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 330.025916][T16526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.100431][T16528] GUP no longer grows the stack in syz.3.2690 (16528): 200000003000-20000000a000 (200000001000) [ 330.115529][T16528] CPU: 1 UID: 0 PID: 16528 Comm: syz.3.2690 Not tainted syzkaller #0 PREEMPT(full) [ 330.115560][T16528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 330.115576][T16528] Call Trace: [ 330.115586][T16528] [ 330.115595][T16528] dump_stack_lvl+0xe8/0x150 [ 330.115623][T16528] __get_user_pages+0x238c/0x2720 [ 330.115650][T16528] ? __gup_longterm_locked+0xc3b/0x15c0 [ 330.115689][T16528] __gup_longterm_locked+0xd52/0x15c0 [ 330.115715][T16528] ? gup_fast_fallback+0xbc4/0x20d0 [ 330.115748][T16528] ? rcu_is_watching+0x15/0xb0 [ 330.115773][T16528] ? rcu_is_watching+0x15/0xb0 [ 330.115798][T16528] gup_fast_fallback+0x1d82/0x20d0 [ 330.115839][T16528] ? __pfx_gup_fast_fallback+0x10/0x10 [ 330.115860][T16528] ? lock_release+0x4b/0x3c0 [ 330.115889][T16528] ? __fget_files+0x2a/0x420 [ 330.115910][T16528] ? is_valid_gup_args+0x11f/0x200 [ 330.115932][T16528] ? get_user_pages_fast+0x4d/0xb0 [ 330.115955][T16528] __iov_iter_get_pages_alloc+0x378/0xa40 [ 330.115986][T16528] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 330.116016][T16528] iov_iter_get_pages2+0x5e/0xa0 [ 330.116045][T16528] __se_sys_vmsplice+0x7b5/0x1660 [ 330.116086][T16528] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 330.116110][T16528] ? __pfx_futex_wait+0x10/0x10 [ 330.116172][T16528] ? rcu_is_watching+0x15/0xb0 [ 330.116195][T16528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.116216][T16528] do_syscall_64+0x174/0x580 [ 330.116244][T16528] ? trace_irq_disable+0x3b/0x140 [ 330.116273][T16528] ? clear_bhb_loop+0x40/0x90 [ 330.116296][T16528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.116316][T16528] RIP: 0033:0x7f5569f9ce59 [ 330.116334][T16528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.116352][T16528] RSP: 002b:00007f556ad7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 330.116373][T16528] RAX: ffffffffffffffda RBX: 00007f556a216090 RCX: 00007f5569f9ce59 [ 330.116389][T16528] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 330.116403][T16528] RBP: 00007f556a032e6f R08: 0000000000000000 R09: 0000000000000000 [ 330.116416][T16528] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 330.116427][T16528] R13: 00007f556a216128 R14: 00007f556a216090 R15: 00007fff01cccc18 [ 330.116454][T16528] [ 330.116618][T16530] tc_dump_action: action bad kind [ 330.362276][T16533] dummy0: left promiscuous mode [ 330.371860][T16533] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 330.379783][T16533] tipc: Resetting bearer [ 330.393630][T16533] bond1: left promiscuous mode [ 330.408116][T16533] bridge1: left promiscuous mode [ 330.425594][T16533] ip6gre1: left promiscuous mode [ 330.436204][T16533] ip6gre1: left allmulticast mode [ 330.442939][T16533] bond3: left promiscuous mode [ 330.451022][T16533] xfrm1: left promiscuous mode [ 330.461523][T16533] xfrm1: left allmulticast mode [ 330.472518][T16533] bond4: left promiscuous mode [ 330.478441][T16533] veth7: left promiscuous mode [ 330.483346][T16533] veth7: left allmulticast mode [ 330.488937][T16533] sit1: left promiscuous mode [ 330.494039][T16533] bridge3: left allmulticast mode [ 330.500244][T16533] vxlan0: left promiscuous mode [ 330.507118][T16533] ip6gre2: left promiscuous mode [ 330.512180][T16533] ip6gre2: left allmulticast mode [ 330.518878][T16533] bond5: left promiscuous mode [ 330.523764][T16533] veth11: left promiscuous mode [ 330.578388][T16545] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚Y‡°”õËí [ 330.578388][T16545] 3ìUH†5rºBnœæ [ 330.644611][T16548] __nla_validate_parse: 10 callbacks suppressed [ 330.644643][T16548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2697'. [ 330.729731][T16548] hsr_slave_1 (unregistering): left promiscuous mode [ 330.771962][T16553] syzkaller0: entered allmulticast mode [ 330.783761][T16553] tipc: Resetting bearer [ 330.896452][T16545] lo speed is unknown, defaulting to 1000 [ 330.916122][T16568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2701'. [ 331.274077][T16593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2709'. [ 331.449591][T16584] ipt_REJECT: TCP_RESET invalid for non-tcp [ 331.559770][T16603] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2710'. [ 331.571450][T16603] netlink: 'syz.1.2710': attribute type 1 has an invalid length. [ 331.619739][T16608] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2712'. [ 331.643695][T16610] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2712'. [ 331.853881][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2715'. [ 331.899904][T16624] sctp: [Deprecated]: syz.0.2718 (pid 16624) Use of int in max_burst socket option deprecated. [ 331.899904][T16624] Use struct sctp_assoc_value instead [ 331.916371][T16621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.946466][T16624] syzkaller1: entered promiscuous mode [ 331.964198][T16624] syzkaller1: entered allmulticast mode [ 331.979968][T16625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2719'. [ 331.992489][T16621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.059998][T16632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.278896][T16650] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2725'. [ 332.296233][T16650] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2725'. [ 332.401514][T16655] netlink: 'syz.3.2727': attribute type 1 has an invalid length. [ 332.470289][T16664] netlink: 'syz.4.2729': attribute type 1 has an invalid length. [ 332.519123][T16664] bond11: entered promiscuous mode [ 332.529060][T16664] 8021q: adding VLAN 0 to HW filter on device bond11 [ 332.810272][T16682] tc_dump_action: action bad kind [ 332.810776][T16678] xt_hashlimit: size too large, truncated to 1048576 [ 332.837605][T16682] syzkaller0: entered promiscuous mode [ 332.851452][T16682] syzkaller0: entered allmulticast mode [ 332.863054][T16685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.910308][T16683] xt_hashlimit: size too large, truncated to 1048576 [ 332.939125][T16683] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 333.310138][T16714] lo speed is unknown, defaulting to 1000 [ 333.320040][T16723] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20004 [ 334.384223][T16771] syzkaller0: entered promiscuous mode [ 334.393992][T16771] syzkaller0: entered allmulticast mode [ 334.448783][T16771] nbd: must specify at least one socket [ 334.778542][T16818] xt_CT: You must specify a L4 protocol and not use inversions on it [ 334.830277][T16818] wg1: entered allmulticast mode [ 334.942994][T16834] netlink: 'syz.0.2772': attribute type 33 has an invalid length. [ 334.981831][T16834] openvswitch: netlink: Missing valid actions attribute. [ 335.000975][T16834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.537732][T16854] xt_CT: No such helper "snmp" [ 335.555277][T16875] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 335.662937][T16879] 8021q: adding VLAN 0 to HW filter on device bond16 [ 335.698465][T16879] 8021q: adding VLAN 0 to HW filter on device bond17 [ 335.707009][T16879] bond16: (slave bond17): Enslaving as an active interface with an up link [ 335.867898][T16893] tipc: Enabled bearer , priority 0 [ 335.878734][T16901] tipc: Enabling of bearer rejected, already enabled [ 335.889889][T16893] syzkaller0: entered promiscuous mode [ 335.896655][T16893] syzkaller0: entered allmulticast mode [ 335.916004][T16904] __nla_validate_parse: 19 callbacks suppressed [ 335.916024][T16904] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2785'. [ 335.940682][T16893] sch_tbf: burst 14 is lower than device syzkaller0 mtu (1514) ! [ 335.962077][T16893] tipc: Resetting bearer [ 335.982192][T16892] tipc: Resetting bearer [ 336.000744][T16892] tipc: Disabling bearer [ 336.009276][T16906] netlink: 'syz.1.2786': attribute type 13 has an invalid length. [ 336.307402][T16938] netlink: 'syz.4.2793': attribute type 2 has an invalid length. [ 336.348385][T16940] netlink: 'syz.3.2792': attribute type 11 has an invalid length. [ 336.419091][T16951] bridge0: port 1(vlan1) entered blocking state [ 336.436307][T16951] bridge0: port 1(vlan1) entered disabled state [ 336.483375][T16951] vlan1: entered allmulticast mode [ 336.509381][T16951] geneve0: entered allmulticast mode [ 336.556031][T16934] gre3: entered promiscuous mode [ 336.620995][T16961] pimreg: entered allmulticast mode [ 336.645926][T16954] pimreg: left allmulticast mode [ 337.363530][T17009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.428167][T17014] pimreg: tun_chr_ioctl cmd 1074025677 [ 337.434255][T17014] pimreg: linktype set to 6 [ 337.480263][T17016] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2810'. [ 337.597082][T17020] lo speed is unknown, defaulting to 1000 [ 338.562933][T17085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2829'. [ 338.584878][T17080] netlink: 'syz.3.2828': attribute type 1 has an invalid length. [ 338.737793][T17095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2832'. [ 338.763800][T17095] netlink: 'syz.2.2832': attribute type 1 has an invalid length. [ 338.870182][T17095] 8021q: adding VLAN 0 to HW filter on device bond14 [ 338.906817][T17093] syzkaller0: entered promiscuous mode [ 338.921646][T17093] syzkaller0: entered allmulticast mode [ 338.947531][T17111] netlink: 'syz.3.2838': attribute type 1 has an invalid length. [ 338.983288][T17115] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2836'. [ 339.010898][T17116] tipc: Resetting bearer [ 339.108175][T17121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2840'. [ 339.210598][T17128] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2842'. [ 339.221881][T17128] mac80211_hwsim hwsim6 »»»»»»: renamed from wlan0 [ 339.256601][T17135] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c) [ 339.283310][T17132] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 339.295417][T17132] batman_adv: batadv0: Adding interface: gretap2 [ 339.301860][T17132] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 339.323618][T17132] batman_adv: batadv0: Interface activated: gretap2 [ 339.874243][T17166] batman_adv: batadv0: Interface deactivated: gretap2 [ 340.026115][T17177] ip6tnl0: Caught tx_queue_len zero misconfig [ 340.263516][T17199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2859'. [ 340.804135][T17174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 340.957153][T17223] netlink: 'syz.3.2870': attribute type 89 has an invalid length. [ 341.036525][T17227] bond15: entered promiscuous mode [ 341.056731][T17227] 8021q: adding VLAN 0 to HW filter on device bond15 [ 341.418939][T17257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2875'. [ 341.493197][T17259] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 341.637785][T17266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2877'. [ 341.972200][T17280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2881'. [ 342.052517][T17282] tipc: Enabled bearer , priority 0 [ 342.066453][T17281] tipc: Disabling bearer [ 342.548709][T17299] netlink: 'syz.4.2886': attribute type 16 has an invalid length. [ 342.566943][T17299] netlink: 'syz.4.2886': attribute type 17 has an invalid length. [ 342.589214][T17299] erspan0: left promiscuous mode [ 342.608398][T17299] bridge0: left promiscuous mode [ 342.617176][T17299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.629247][T17299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.663649][T17299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 342.675337][T17299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.689437][T17299] veth1_vlan: left promiscuous mode [ 342.696045][T17299] veth0_vlan: left promiscuous mode [ 342.702359][T17299] veth0_vlan: entered promiscuous mode [ 342.712361][T17299] veth1_vlan: entered promiscuous mode [ 342.721541][T17299] veth1_macvtap: left promiscuous mode [ 342.728685][T17299] veth0_macvtap: entered promiscuous mode [ 342.736004][T17299] veth1_macvtap: entered promiscuous mode [ 342.774141][T17299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 342.786083][T17299] 8021q: adding VLAN 0 to HW filter on device bond2 [ 342.796155][T17299] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 342.812061][T15969] bridge0: entered promiscuous mode [ 342.851471][ T8669] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 4352 - 0 [ 342.863604][ T8669] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.872611][ T8669] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 4352 - 0 [ 342.882051][ T8669] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.891043][T17318] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2889'. [ 342.902549][ T8669] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 4352 - 0 [ 342.919341][ T8669] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.937976][T17316] syzkaller0: entered promiscuous mode [ 342.949641][T17316] tipc: Resetting bearer [ 342.956693][ T8669] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 4352 - 0 [ 342.967563][ T8669] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.977743][T17316] tipc: Enabling of bearer rejected, already enabled [ 343.002070][T17321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2891'. [ 343.012534][T17321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2891'. [ 343.032513][T17321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.104245][T17325] syzkaller0: entered promiscuous mode [ 343.110610][T17325] syzkaller0: entered allmulticast mode [ 343.122786][T17325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2893'. [ 343.286565][T17336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2897'. [ 343.443941][T17346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2900'. [ 343.701221][T17343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2897'. [ 343.907648][T17354] syzkaller0: entered promiscuous mode [ 343.916579][T17354] syzkaller0: entered allmulticast mode [ 343.935366][T17359] bridge0: port 2(vlan3) entered blocking state [ 343.952317][T17359] bridge0: port 2(vlan3) entered disabled state [ 343.961177][T17359] vlan3: entered allmulticast mode [ 343.966794][T17359] bridge0: entered allmulticast mode [ 343.974331][T17359] vlan3: left allmulticast mode [ 343.981788][T17359] bridge0: left allmulticast mode [ 344.229648][T17375] can: request_module (can-proto-0) failed. [ 344.385229][T17390] netlink: 'syz.1.2912': attribute type 1 has an invalid length. [ 344.476218][T17405] tipc: Enabling of bearer rejected, failed to enable media [ 345.245601][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 345.253334][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 345.261810][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 345.270600][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 345.280516][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.721112][T17477] openvswitch: netlink: IP tunnel dst address not specified [ 345.952416][ T5630] .`: (slave syz_tun): Releasing backup interface [ 346.078498][ T8649] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.122377][ T8649] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.143658][T17505] netlink: 'syz.0.2937': attribute type 1 has an invalid length. [ 346.152562][T17447] lo speed is unknown, defaulting to 1000 [ 346.203485][ T8649] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.231804][ T8649] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.322692][ T8649] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.346494][ T8649] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.495843][T17525] netlink: 'syz.0.2942': attribute type 21 has an invalid length. [ 346.550981][T17525] __nla_validate_parse: 13 callbacks suppressed [ 346.551000][T17525] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2942'. [ 346.581031][T17531] netlink: 74 bytes leftover after parsing attributes in process `syz.0.2942'. [ 346.611979][ T8649] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.627249][ T8649] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.761360][ T8649] bridge_slave_1: left allmulticast mode [ 346.774983][ T8649] bridge_slave_1: left promiscuous mode [ 346.787459][ T8649] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.797028][ T8649] bridge_slave_0: left allmulticast mode [ 346.802919][ T8649] bridge_slave_0: left promiscuous mode [ 346.809576][ T8649] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.846770][ T8649] tunl0: left allmulticast mode [ 347.089843][ T8649] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 347.099200][ T8649] bridge4 (unregistering): left allmulticast mode [ 347.128246][ T8649] bond7 (unregistering): (slave bridge6): Releasing backup interface [ 347.137266][ T8649] bridge6 (unregistering): left promiscuous mode [ 347.188771][ T8649] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.208472][ T8649] .` (unregistering): (slave c@0Ù): Releasing backup interface [ 347.223830][ T8649] .` (unregistering): Released all slaves [ 347.233828][ T8649] bond1 (unregistering): Released all slaves [ 347.250500][ T8649] bond2 (unregistering): (slave veth3): Releasing active interface [ 347.260321][ T8649] bond2 (unregistering): Released all slaves [ 347.273175][ T8649] bond3 (unregistering): Released all slaves [ 347.287588][ T8649] bond4 (unregistering): Released all slaves [ 347.298982][ T8649] bond5 (unregistering): (slave veth5): Releasing active interface [ 347.308535][ T8649] bond5 (unregistering): Released all slaves [ 347.320733][ T8649] bond6 (unregistering): Released all slaves [ 347.327226][ T5619] Bluetooth: hci5: command tx timeout [ 347.345835][ T8649] bond7 (unregistering): Released all slaves [ 347.358181][ T8649] bond8 (unregistering): Released all slaves [ 347.370173][ T8649] bond9 (unregistering): Released all slaves [ 347.385839][ T8649] bond10 (unregistering): Released all slaves [ 347.401428][ T8649] bond11 (unregistering): Released all slaves [ 347.428357][ T8649] bond12 (unregistering): Released all slaves [ 347.457469][ T8649] bond0 (unregistering): Released all slaves [ 347.481082][ T8649] bond13 (unregistering): Released all slaves [ 347.497121][ T8649] bond14 (unregistering): Released all slaves [ 347.514169][ T8649] bond15 (unregistering): Released all slaves [ 347.542638][ T8649] bond16 (unregistering): (slave bond17): Releasing backup interface [ 347.559697][ T8649] bond16 (unregistering): Released all slaves [ 347.579316][ T8649] bond17 (unregistering): Released all slaves [ 347.593227][T17547] netlink: 1028 bytes leftover after parsing attributes in process `syz.4.2947'. [ 347.602776][T17547] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 347.761867][ T8649] tipc: Left network mode [ 347.803413][ T8649] IPVS: stopping backup sync thread 7033 ... [ 347.831974][T17566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.938631][T17447] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.957733][T17447] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.968895][T17447] bridge_slave_0: entered allmulticast mode [ 347.978882][T17447] bridge_slave_0: entered promiscuous mode [ 347.993051][T17447] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.000662][T17447] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.008386][T17447] bridge_slave_1: entered allmulticast mode [ 348.015811][T17447] bridge_slave_1: entered promiscuous mode [ 348.114615][T17447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.191802][T17447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.221493][T17594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2959'. [ 348.231840][T17592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2958'. [ 348.289638][T17447] team0: Port device team_slave_0 added [ 348.308421][T17447] team0: Port device team_slave_1 added [ 348.377284][T17600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2959'. [ 348.405507][T17447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.424053][T17447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.479095][T17447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.577846][T17447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.587989][T17447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.625692][T17447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.753687][T17611] tipc: Enabled bearer , priority 0 [ 348.766791][T17619] smc: net device wlan0 erased user defined pnetid SYZ0 [ 348.774976][T17612] syzkaller0: entered promiscuous mode [ 348.798798][T17612] syzkaller0: entered allmulticast mode [ 348.834932][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 348.870848][T17628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2963'. [ 348.925883][T17618] tipc: Resetting bearer [ 348.938288][T17618] tipc: Disabling bearer [ 348.999458][T17447] hsr_slave_0: entered promiscuous mode [ 349.027544][T17447] hsr_slave_1: entered promiscuous mode [ 349.070029][T17632] lo speed is unknown, defaulting to 1000 [ 349.170550][T17638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2966'. [ 349.228453][T17643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2967'. [ 349.348119][T17643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2967'. [ 349.404778][ T5619] Bluetooth: hci5: command tx timeout [ 349.493735][ T8649] hsr_slave_0: left promiscuous mode [ 349.505016][ T8649] hsr_slave_1: left promiscuous mode [ 349.516377][ T8649] veth1_macvtap: left allmulticast mode [ 349.522016][ T8649] veth1_macvtap: left promiscuous mode [ 349.621094][ T8649] team0 (unregistering): Port device team_slave_1 removed [ 349.863761][ T8649] IPVS: stop unused estimator thread 0... [ 351.484805][ T5619] Bluetooth: hci5: command tx timeout [ 351.725553][T17623] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 351.737121][T17447] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 351.758689][T17447] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 351.770978][T17447] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 351.793411][T17447] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 351.821350][T17447] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 351.850767][T17447] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 351.879540][T17447] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 351.922475][T17447] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 352.119854][T17689] syz_tun: entered allmulticast mode [ 352.168998][T17689] dvmrp6: entered allmulticast mode [ 352.191151][T17687] syz_tun: left allmulticast mode [ 352.229690][T17447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.262130][T17447] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.291672][ T8668] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.298892][ T8668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.318691][T17704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2981'. [ 352.364289][ T8668] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.371510][ T8668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.391914][T17704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2981'. [ 352.751140][T17732] netlink: 'syz.4.2987': attribute type 21 has an invalid length. [ 352.761079][T17732] IPv6: NLM_F_CREATE should be specified when creating new route [ 352.772844][T17732] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.780165][T17732] IPv6: NLM_F_CREATE should be set when creating new route [ 352.787485][T17732] IPv6: NLM_F_CREATE should be set when creating new route [ 352.794774][T17732] IPv6: NLM_F_CREATE should be set when creating new route [ 352.804021][T17734] netlink: 'syz.4.2987': attribute type 21 has an invalid length. [ 352.812552][T17734] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.887692][T17734] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2987'. [ 353.065032][T17746] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 353.108817][T17749] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 353.130702][T17755] netlink: 'syz.1.2989': attribute type 11 has an invalid length. [ 353.324819][T17761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2991'. [ 353.335061][T17447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.460059][T17447] veth0_vlan: entered promiscuous mode [ 353.472718][T17773] openvswitch: netlink: Actions may not be safe on all matching packets [ 353.482868][T17773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.517491][T17447] veth1_vlan: entered promiscuous mode [ 353.519280][T17773] openvswitch: netlink: Actions may not be safe on all matching packets [ 353.567367][ T5619] Bluetooth: hci5: command tx timeout [ 353.622500][T17447] veth0_macvtap: entered promiscuous mode [ 353.684410][T17447] veth1_macvtap: entered promiscuous mode [ 353.708420][T17786] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.2997'. [ 353.766914][T17447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.823896][T17447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.870641][ T8668] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.902196][ T8669] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.920332][ T8669] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.931255][ T8669] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.026455][ T8669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.057301][ T8669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.124442][ T8658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.152378][ T8658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.205879][T17817] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 354.757007][T17831] bridge_slave_0: Caught tx_queue_len zero misconfig [ 354.951414][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 354.962927][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 354.973094][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 354.984079][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 355.005453][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 355.332226][T17871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3009'. [ 355.344341][T17871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3009'. [ 355.487173][T17883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.513673][T17885] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3011'. [ 355.539805][T17885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3011'. [ 355.584442][T17885] geneve4: entered promiscuous mode [ 355.619961][T17852] lo speed is unknown, defaulting to 1000 [ 355.697851][T17876] IPVS: length: 35 != 24 [ 355.724495][T17900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3013'. [ 355.776730][T17900] ip6gre1: entered promiscuous mode [ 355.792855][T17900] ip6gre1: entered allmulticast mode [ 355.896807][T17909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.006971][T17915] geneve5: entered allmulticast mode [ 356.281676][T17852] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.295662][T17852] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.303032][T17852] bridge_slave_0: entered allmulticast mode [ 356.312354][T17852] bridge_slave_0: entered promiscuous mode [ 356.320990][T17852] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.328289][T17852] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.335963][T17852] bridge_slave_1: entered allmulticast mode [ 356.342544][T17930] netlink: 'syz.1.3021': attribute type 1 has an invalid length. [ 356.344452][T17852] bridge_slave_1: entered promiscuous mode [ 356.374431][T17930] netlink: 'syz.1.3021': attribute type 1 has an invalid length. [ 356.383793][T17852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.393128][T17930] netlink: 'syz.1.3021': attribute type 2 has an invalid length. [ 356.402628][T17930] netlink: 'syz.1.3021': attribute type 1 has an invalid length. [ 356.412832][T17852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.448883][T17852] team0: Port device team_slave_0 added [ 356.457596][T17852] team0: Port device team_slave_1 added [ 356.530527][T17852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.550987][T17852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.595690][T17852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.625971][T17852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.639304][T17852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.667674][T17852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.718105][T17944] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 356.729850][T17939] bond1 (unregistering): Released all slaves [ 356.835389][T17852] hsr_slave_0: entered promiscuous mode [ 356.842253][T17852] hsr_slave_1: entered promiscuous mode [ 356.849517][T17852] debugfs: 'hsr0' already exists in 'hsr' [ 356.855931][T17852] Cannot create hsr debugfs directory [ 356.862435][T17952] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 356.962219][T17956] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 357.012204][T17852] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 357.032044][T17852] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.085533][ T5619] Bluetooth: hci3: command tx timeout [ 357.104383][T17962] netlink: 'syz.1.3033': attribute type 1 has an invalid length. [ 357.143415][T17962] 8021q: adding VLAN 0 to HW filter on device bond9 [ 357.152980][T17852] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 357.165323][T17852] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.192915][T17962] bond9: (slave geneve6): making interface the new active one [ 357.207852][T17962] bond9: (slave geneve6): Enslaving as an active interface with an up link [ 357.249269][ T8655] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.263542][ T8655] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.290005][T17852] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 357.309441][T17852] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.340037][ T8655] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.364112][ T8655] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.378031][T17974] bridge_slave_1: left allmulticast mode [ 357.383946][T17974] bridge_slave_1: left promiscuous mode [ 357.390987][T17974] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.400588][T17974] bridge_slave_0: left allmulticast mode [ 357.409359][T17974] bridge_slave_0: left promiscuous mode [ 357.424816][T17974] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.492882][T17852] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 357.528132][T17852] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.711033][T17997] __nla_validate_parse: 37 callbacks suppressed [ 357.711069][T17997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3042'. [ 357.782574][T17852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 357.818935][T17852] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 357.832807][T18005] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3044'. [ 357.855405][T17852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 357.873094][T17852] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 357.894115][T17852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 357.917184][T17852] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 357.928827][T18005] gretap0: entered promiscuous mode [ 357.945071][T17852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 357.970321][T18005] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3044'. [ 357.990986][T17852] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 357.994381][T18013] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3045'. [ 358.015238][T18005] 0ªî{X¹¦: renamed from gretap0 [ 358.025497][T18005] 0ªî{X¹¦: left promiscuous mode [ 358.035246][T18005] 0ªî{X¹¦: entered allmulticast mode [ 358.050886][T18005] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 358.129753][T18027] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 358.157870][T18027] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 358.299262][T18027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.381276][T17852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.433866][T17852] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.476132][ T8658] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.483296][ T8658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.524883][ T8655] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.532047][ T8655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.898494][T18083] netlink: 'syz.0.3057': attribute type 1 has an invalid length. [ 358.908541][T18083] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3057'. [ 358.924348][T18083] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3057'. [ 358.963405][T18083] netlink: 'syz.0.3057': attribute type 1 has an invalid length. [ 358.982417][T18088] bridge_slave_1: Caught tx_queue_len zero misconfig [ 358.991477][T18083] netlink: 'syz.0.3057': attribute type 8 has an invalid length. [ 359.002527][T18083] netlink: 606 bytes leftover after parsing attributes in process `syz.0.3057'. [ 359.059668][T18083] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3057'. [ 359.165138][ T5619] Bluetooth: hci3: command tx timeout [ 359.177696][T17852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.346382][T18103] netlink: 'syz.2.3060': attribute type 1 has an invalid length. [ 359.629076][T17852] veth0_vlan: entered promiscuous mode [ 359.658243][T17852] veth1_vlan: entered promiscuous mode [ 359.719381][T17852] veth0_macvtap: entered promiscuous mode [ 359.721642][T18119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3063'. [ 359.742894][T17852] veth1_macvtap: entered promiscuous mode [ 359.779286][T17852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.805365][T17852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.831840][ T8649] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.849321][ T8649] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.880422][ T8649] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.896489][ T8649] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.968716][ T8668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.986240][ T8668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.020326][ T8661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.034905][ T8661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.230817][T18146] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3003'. [ 360.559380][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.568911][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.582672][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.591566][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.600004][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.217843][T18198] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 361.244809][ T5619] Bluetooth: hci3: command tx timeout [ 361.252754][T18198] bond1 (unregistering): Released all slaves [ 361.337688][T18210] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 361.348207][T18206] netlink: 'syz.4.3082': attribute type 1 has an invalid length. [ 361.358263][T18206] netlink: 'syz.4.3082': attribute type 1 has an invalid length. [ 361.397394][T18160] lo speed is unknown, defaulting to 1000 [ 361.561130][T18224] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 361.614271][T18224] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 361.646790][T18224] net_ratelimit: 2 callbacks suppressed [ 361.646811][T18224] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 362.411027][T18160] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.418420][T18160] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.426069][T18160] bridge_slave_0: entered allmulticast mode [ 362.433325][T18160] bridge_slave_0: entered promiscuous mode [ 362.442344][T18160] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.450447][T18160] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.458109][T18160] bridge_slave_1: entered allmulticast mode [ 362.465646][T18160] bridge_slave_1: entered promiscuous mode [ 362.499573][T18160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.522503][T18160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.566617][T18160] team0: Port device team_slave_0 added [ 362.575455][T18160] team0: Port device team_slave_1 added [ 362.605013][T18160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.620120][T18160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.652597][T18160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.669381][T18160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.678889][T18160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.704876][ T5619] Bluetooth: hci0: command tx timeout [ 362.711298][T18160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.768287][T18281] __nla_validate_parse: 11 callbacks suppressed [ 362.770575][T18281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3097'. [ 362.827133][T18160] hsr_slave_0: entered promiscuous mode [ 362.843322][T18160] hsr_slave_1: entered promiscuous mode [ 362.859373][T18160] debugfs: 'hsr0' already exists in 'hsr' [ 362.878110][T18160] Cannot create hsr debugfs directory [ 362.942071][T18290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3099'. [ 362.968400][T18295] netlink: 'syz.0.3101': attribute type 1 has an invalid length. [ 363.069266][T18295] 8021q: adding VLAN 0 to HW filter on device bond11 [ 363.120635][T18292] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 363.138660][T18292] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 363.150762][T18292] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 363.165441][T18300] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 363.196826][T18307] sctp: [Deprecated]: syz.3.3103 (pid 18307) Use of int in maxseg socket option. [ 363.196826][T18307] Use struct sctp_assoc_value instead [ 363.206118][T18300] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 363.229198][T18300] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 363.321955][T18160] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.333771][ T5619] Bluetooth: hci3: command tx timeout [ 363.401403][T18318] tipc: Resetting bearer [ 363.414281][T18160] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.563982][T18160] team0: Port device netdevsim1 removed [ 363.571269][T18160] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.587525][T18316] tipc: Resetting bearer [ 363.664388][T18160] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.833680][T18160] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 363.869252][T18160] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.879035][T18160] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 363.926711][T18160] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 363.941344][T18160] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 363.952268][T18160] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 363.969846][T18160] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 363.986291][T18160] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 364.080235][T18348] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3114'. [ 364.132199][T18160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.149651][ T8649] tipc: Resetting bearer [ 364.162355][T18348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3114'. [ 364.215177][T18358] tipc: Enabling of bearer rejected, already enabled [ 364.244137][T18160] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.269769][ T8649] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.276986][ T8649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.286864][ T8649] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.294078][ T8649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.739054][T18160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.768792][ T5619] Bluetooth: hci0: command tx timeout [ 364.800998][T18160] veth0_vlan: entered promiscuous mode [ 364.816636][T18160] veth1_vlan: entered promiscuous mode [ 364.848392][T18160] veth0_macvtap: entered promiscuous mode [ 364.859487][T18160] veth1_macvtap: entered promiscuous mode [ 364.879742][T18160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.897339][T18160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.931216][ T8668] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.955719][ T8668] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.969847][ T8668] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.990771][ T8668] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.519948][ T8655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.555850][ T8655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.599857][ T8669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.609193][ T8669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.915290][T18400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3070'. [ 366.020042][T18400] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 366.068372][T18400] netlink: 'syz.1.3070': attribute type 46 has an invalid length. [ 366.131359][T18406] syzkaller0: entered promiscuous mode [ 366.147756][T18406] syzkaller0: entered allmulticast mode [ 366.150842][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 366.171608][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 366.173698][T18407] xt_TCPMSS: Only works on TCP SYN packets [ 366.186582][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 366.194374][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 366.203335][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 366.378699][T18417] netlink: 'syz.1.3130': attribute type 1 has an invalid length. [ 366.404814][T18417] netlink: 'syz.1.3130': attribute type 1 has an invalid length. [ 366.529216][ T5631] syz_tun (unregistering): left promiscuous mode [ 366.624530][T18433] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3133'. [ 366.656890][T18433] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3133'. [ 366.693360][ T8655] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.809471][ T8655] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.845029][ T50] Bluetooth: hci0: command tx timeout [ 366.899151][ T8655] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.923870][T18450] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3138'. [ 366.948170][T18324] Set syz1 is full, maxelem 65536 reached [ 366.985713][T18452] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3138'. [ 367.035937][T18408] lo speed is unknown, defaulting to 1000 [ 367.048128][ T8655] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.380277][ T8655] vlan1: left allmulticast mode [ 367.395519][ T8655] geneve0: left allmulticast mode [ 367.421233][ T8655] bridge0: port 1(vlan1) entered disabled state [ 367.472802][ T8655] erspan0: left allmulticast mode [ 367.490903][ T8655] erspan0: left promiscuous mode [ 367.508571][ T8655] bridge7: port 1(erspan0) entered disabled state [ 367.607817][ T8655] ip6gretap0 (unregistering): left promiscuous mode [ 367.891304][ T8655] bond1 (unregistering): (slave geneve2): Releasing active interface [ 367.982275][ T8655] team0: Port device bridge4 removed [ 368.012102][ T8655] team0: Port device bridge5 removed [ 368.032986][T15970] IPVS: starting estimator thread 0... [ 368.039102][T18492] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3147'. [ 368.063803][ T8655] bond6 (unregistering): (slave bridge8): Releasing backup interface [ 368.086558][ T8655] bond11 (unregistering): (slave bridge9): Releasing active interface [ 368.103370][ T8655] bridge9 (unregistering): left promiscuous mode [ 368.110094][ T8655] bridge9 (unregistering): left allmulticast mode [ 368.141992][ T8655] bond0 (unregistering): Released all slaves [ 368.149689][T18493] IPVS: using max 41 ests per chain, 98400 per kthread [ 368.176643][ T8655] bond1 (unregistering): Released all slaves [ 368.199972][ T8655] bond2 (unregistering): Released all slaves [ 368.218846][ T8655] bond3 (unregistering): Released all slaves [ 368.229375][ T8655] bond4 (unregistering): Released all slaves [ 368.240483][ T8655] bond5 (unregistering): Released all slaves [ 368.253472][ T8655] bond6 (unregistering): Released all slaves [ 368.265506][ T8655] bond7 (unregistering): Released all slaves [ 368.277550][ T8655] bond8 (unregistering): Released all slaves [ 368.284786][ T50] Bluetooth: hci1: command tx timeout [ 368.298344][ T8655] bond9 (unregistering): (slave veth3): Releasing backup interface [ 368.306599][ T8655] veth3: left promiscuous mode [ 368.313138][ T8655] bond9 (unregistering): Released all slaves [ 368.323711][ T8655] bond10 (unregistering): Released all slaves [ 368.334416][ T8655] bond11 (unregistering): Released all slaves [ 368.346520][ T8655] bond12 (unregistering): Released all slaves [ 368.359175][ T8655] bond13 (unregistering): Released all slaves [ 368.371745][ T8655] bond14 (unregistering): Released all slaves [ 368.383190][ T8655] bond15 (unregistering): Released all slaves [ 368.393806][ T8655] bond16 (unregistering): Released all slaves [ 368.448312][T18489] bond1 (unregistering): Released all slaves [ 368.542349][ T8655] hmac(sha2: left promiscuous mode [ 368.619029][ T8655] : left promiscuous mode [ 368.718199][ T8655] tipc: Disabling bearer [ 368.731003][ T8655] tipc: Left network mode [ 368.879914][T18538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3154'. [ 368.925296][ T50] Bluetooth: hci0: command tx timeout [ 369.167873][T18408] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.199214][T18408] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.212104][T18408] bridge_slave_0: entered allmulticast mode [ 369.219398][T18408] bridge_slave_0: entered promiscuous mode [ 369.227544][T18408] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.234953][T18408] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.242213][T18408] bridge_slave_1: entered allmulticast mode [ 369.252298][T18408] bridge_slave_1: entered promiscuous mode [ 369.378652][T18408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.441732][T18408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.469203][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 369.535337][ T8655] hsr_slave_0: left promiscuous mode [ 369.630664][ T8655] team0 (unregistering): Port device team_slave_0 removed [ 369.711490][ T8661] smc: removing ib device syz1 [ 369.738558][ T8661] smbdirect: ib_dev[syz1] removed [ 369.752235][T18408] team0: Port device team_slave_0 added [ 369.778381][T18408] team0: Port device team_slave_1 added [ 369.928881][T18408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.946132][T18579] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 369.954473][T18408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.002130][T18578] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 370.028010][T18408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.062992][T18408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.086387][T18408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.123043][T18408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.138860][T18589] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 370.371459][ T50] Bluetooth: hci1: command tx timeout [ 370.461983][T18589] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 370.502679][T18592] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 370.529287][T18592] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 370.652797][T18408] hsr_slave_0: entered promiscuous mode [ 370.672366][T18408] hsr_slave_1: entered promiscuous mode [ 370.732288][T18408] debugfs: 'hsr0' already exists in 'hsr' [ 370.741181][T18408] Cannot create hsr debugfs directory [ 371.061330][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 371.765695][T18636] sctp: [Deprecated]: syz.3.3170 (pid 18636) Use of int in maxseg socket option. [ 371.765695][T18636] Use struct sctp_assoc_value instead [ 371.821730][ T8655] IPVS: stop unused estimator thread 0... [ 371.861726][T18641] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3171'. [ 371.878931][T18646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3172'. [ 372.071518][T18652] netlink: 'syz.3.3174': attribute type 10 has an invalid length. [ 372.127681][T18658] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3177'. [ 372.232262][T18665] gretap1: entered promiscuous mode [ 372.269684][T18669] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3177'. [ 372.344060][T18662] nbd: must specify a device to reconfigure [ 372.381507][T18408] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 372.446352][ T50] Bluetooth: hci1: command 0x040f tx timeout [ 372.530867][T18408] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 372.566411][T18408] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 372.601268][T18408] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 372.620676][T18408] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 372.625530][T14118] udevd[14118]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 372.647836][T18408] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 372.714426][T18701] openvswitch: netlink: IPv4 tun info is not correct [ 372.751313][T18696] bond1 (unregistering): Released all slaves [ 372.773846][T18701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3182'. [ 372.793247][T18408] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 372.804364][T18408] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 372.812625][T18700] netlink: 'syz.0.3183': attribute type 3 has an invalid length. [ 372.961275][T18718] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3186'. [ 372.989069][T18408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.057669][T18723] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 373.126953][T18408] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.167827][ T8661] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.175037][ T8661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.237234][ T8669] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.244404][ T8669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.630532][T18768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3196'. [ 373.640395][T18769] tipc: Enabling of bearer rejected, failed to enable media [ 373.682943][T18769] openvswitch: netlink: Flow actions attr not present in new flow. [ 373.797577][T18779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3198'. [ 373.971089][T18786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3199'. [ 374.008641][T18786] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3199'. [ 374.176595][T18804] netlink: 'syz.3.3202': attribute type 1 has an invalid length. [ 374.369495][T18408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.410746][T18408] veth0_vlan: entered promiscuous mode [ 374.422379][T18408] veth1_vlan: entered promiscuous mode [ 374.453034][T18408] veth0_macvtap: entered promiscuous mode [ 374.462984][T18408] veth1_macvtap: entered promiscuous mode [ 374.482361][T18408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.496936][T18408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.509077][ T8669] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.522676][ T8669] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.532348][ T50] Bluetooth: hci1: command 0x040f tx timeout [ 374.544182][ T8669] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.556704][ T8669] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.611451][ T8649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.632796][ T8649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.660370][ T8669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.670985][ T8669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.738636][T18824] netlink: 'syz.2.3126': attribute type 1 has an invalid length. [ 376.604804][ T50] Bluetooth: hci1: command 0x040f tx timeout [ 378.685001][ T50] Bluetooth: hci1: command 0x040f tx timeout [ 378.765613][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 393.782430][T18867] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3209'. [ 393.802115][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 393.815915][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 393.824013][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 393.832602][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 393.840994][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 393.951722][ T29] audit: type=1800 audit(1782051437.579:11): pid=18865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3210" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=112 res=0 errno=0 [ 394.055605][T18883] Cannot find del_set index 3 as target [ 394.139100][T18887] batman_adv: batadv0: Adding interface: dummy0 [ 394.159868][T18887] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.232252][T18887] batman_adv: batadv0: Interface activated: dummy0 [ 394.292686][T18890] bond1 (unregistering): Released all slaves [ 394.406190][T18898] gretap0: entered promiscuous mode [ 394.415074][T18898] gretap0: left promiscuous mode [ 394.519088][T18916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3213'. [ 394.581800][T18919] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3218'. [ 394.646420][T18921] netlink: 'syz.2.3219': attribute type 1 has an invalid length. [ 394.694143][T18925] netlink: 'syz.2.3219': attribute type 10 has an invalid length. [ 394.714695][T18925] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3219'. [ 394.846415][T18925] dummy0: entered promiscuous mode [ 395.710544][T18871] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.761882][T18871] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.769828][T18957] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3229'. [ 395.787507][T18871] bridge_slave_0: entered allmulticast mode [ 395.796298][T18871] bridge_slave_0: entered promiscuous mode [ 395.834200][T18871] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.854098][T18871] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.865342][T18871] bridge_slave_1: entered allmulticast mode [ 395.876522][T18871] bridge_slave_1: entered promiscuous mode [ 395.884692][ T50] Bluetooth: hci4: command tx timeout [ 395.929208][T18871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.941731][T18871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.007197][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3231'. [ 396.017527][T18871] team0: Port device team_slave_0 added [ 396.034296][T18871] team0: Port device team_slave_1 added [ 396.087732][T18968] bond1: option tlb_dynamic_lb: invalid value (115) [ 396.115753][T18968] bond1 (unregistering): Released all slaves [ 396.177001][T18871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.198594][T18871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.250734][T18871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.278264][T18871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.292865][T18871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.320732][T18871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.389671][T18871] hsr_slave_0: entered promiscuous mode [ 396.397174][T18871] hsr_slave_1: entered promiscuous mode [ 396.403531][T18871] debugfs: 'hsr0' already exists in 'hsr' [ 396.410018][T18871] Cannot create hsr debugfs directory [ 396.499266][T18980] xt_hashlimit: size too large, truncated to 1048576 [ 396.718059][T18985] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.725604][T18985] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.754800][T18985] bridge0: entered allmulticast mode [ 396.776949][T18985] bridge_slave_1: left allmulticast mode [ 396.789682][T18985] bridge_slave_1: left promiscuous mode [ 396.802225][T18985] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.821707][T18985] bridge_slave_0: left allmulticast mode [ 396.837595][T18985] bridge_slave_0: left promiscuous mode [ 396.856797][T18985] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.080584][T18871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 397.099720][T18871] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 397.118473][T18871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 397.167161][T18871] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 397.178605][T18871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 397.189407][T18871] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 397.202389][T18871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 397.227665][T18871] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 397.372666][T18871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.390756][T18871] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.403323][ T8655] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.410811][ T8655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.464418][ T8655] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.471632][ T8655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.541993][T19014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3244'. [ 397.964863][ T50] Bluetooth: hci4: command tx timeout [ 398.331112][T18871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.413121][T18871] veth0_vlan: entered promiscuous mode [ 398.430020][T18871] veth1_vlan: entered promiscuous mode [ 398.462862][T18871] veth0_macvtap: entered promiscuous mode [ 398.487624][T18871] veth1_macvtap: entered promiscuous mode [ 398.533997][T18871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.571158][T18871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.608582][ T8656] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.627609][ T8656] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.640586][T19066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3253'. [ 398.658529][ T8656] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.671608][ T8656] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.044972][ T50] Bluetooth: hci4: command tx timeout [ 400.295944][T19024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 400.373973][ T8655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.406139][ T8655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.429829][T19089] netlink: 'syz.3.3258': attribute type 7 has an invalid length. [ 400.479374][T19090] syzkaller0: entered promiscuous mode [ 400.486743][T19090] syzkaller0: entered allmulticast mode [ 400.494502][ T8665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.509447][T19095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.522695][ T8665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.558353][T19090] tipc: Started in network mode [ 400.573213][T19099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3262'. [ 400.581496][T19090] tipc: Node identity cacd59dcd2c8, cluster identity 4711 [ 400.590851][T19090] tipc: Enabled bearer , priority 0 [ 400.617717][T19099] ip6tnl1: entered allmulticast mode [ 400.631866][T19090] netlink: 'syz.2.3259': attribute type 1 has an invalid length. [ 400.656309][ T8656] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 400.678305][T19090] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3259'. [ 400.725983][T19087] tipc: Resetting bearer [ 400.760227][T19087] tipc: Disabling bearer [ 400.800051][T19113] netlink: 'syz.0.3265': attribute type 61 has an invalid length. [ 400.808552][T19113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3265'. [ 400.953241][T19118] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3267'. [ 400.992017][T19118] tipc: Enabled bearer , priority 0 [ 401.017837][T19119] tipc: Enabling of bearer rejected, already enabled [ 401.030196][T19116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3266'. [ 401.063521][T19126] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3269'. [ 401.110210][T19118] syzkaller0: entered promiscuous mode [ 401.116658][T19118] syzkaller0: entered allmulticast mode [ 401.123001][T19118] tipc: Resetting bearer [ 401.162845][T19136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3271'. [ 401.207241][T19117] tipc: Resetting bearer [ 401.318783][T19146] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 401.389465][T19117] tipc: Disabling bearer [ 401.441134][T19155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3275'. [ 401.479916][T19149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3275'. [ 401.598736][T19165] x_tables: duplicate underflow at hook 2 [ 401.617745][T19165] netlink: 'syz.2.3278': attribute type 10 has an invalid length. [ 401.652434][T19165] dummy0: left promiscuous mode [ 401.677627][T19175] netlink: 'syz.2.3278': attribute type 10 has an invalid length. [ 401.702808][T19165] team0: Failed to send options change via netlink (err -105) [ 401.729401][T19165] team0: Port device dummy0 added [ 401.745500][T19175] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 401.767503][T19175] team0: Failed to send options change via netlink (err -105) [ 401.775395][T19175] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 401.785858][T19175] team0: Port device dummy0 removed [ 401.800069][T19175] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 401.881920][T19185] netlink: 'syz.0.3283': attribute type 1 has an invalid length. [ 401.927724][T19183] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3283'. [ 402.034419][T19192] syzkaller1: entered promiscuous mode [ 402.049189][T19192] syzkaller1: entered allmulticast mode [ 402.129134][ T50] Bluetooth: hci4: command tx timeout [ 402.188565][T19212] syzkaller0: entered promiscuous mode [ 402.194107][T19212] syzkaller0: entered allmulticast mode [ 402.212512][T19213] netlink: 'syz.2.3290': attribute type 62 has an invalid length. [ 402.452264][T19225] hsr0: entered promiscuous mode [ 402.482892][T19225] gretap1: entered allmulticast mode [ 402.730206][T19238] bridge1: entered allmulticast mode [ 402.746408][ T8668] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.769428][ T8668] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.790127][ T8668] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.816435][ T8668] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.862051][T19244] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 402.973510][T19251] bond1: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 402.983212][T19251] bond1: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 402.993611][T19251] bond1: entered allmulticast mode [ 403.811909][T19267] syzkaller0: entered promiscuous mode [ 403.817993][T19267] syzkaller0: entered allmulticast mode [ 403.942956][T19254] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 403.962024][T19277] netlink: 'syz.0.3310': attribute type 4 has an invalid length. [ 404.453477][T19306] syzkaller0: entered promiscuous mode [ 404.465982][T19306] syzkaller0: entered allmulticast mode [ 404.604726][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 404.771128][T19323] syzkaller0: entered promiscuous mode [ 404.788328][T19323] syzkaller0: entered allmulticast mode [ 405.279963][T19358] netlink: 'syz.3.3334': attribute type 6 has an invalid length. [ 405.288214][T19358] netlink: 'syz.3.3334': attribute type 5 has an invalid length. [ 405.335271][T19359] syzkaller1: entered promiscuous mode [ 405.349108][T19359] syzkaller1: entered allmulticast mode [ 405.395205][T19366] gtp0: entered promiscuous mode [ 405.400398][T19366] gtp0: entered allmulticast mode [ 405.407715][T19366] team0: Device gtp0 is of different type [ 405.962381][T19392] netlink: 'syz.4.3343': attribute type 1 has an invalid length. [ 406.022618][T19392] gretap1: entered allmulticast mode [ 406.034016][T19392] bond1: (slave gretap1): making interface the new active one [ 406.046375][T19392] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 406.062363][T19398] 8021q: VLANs not supported on gre0 [ 406.267188][T19417] __nla_validate_parse: 12 callbacks suppressed [ 406.267209][T19417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3351'. [ 406.272301][T19418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3351'. [ 406.305177][T19418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3351'. [ 406.313538][T19417] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3351'. [ 406.329524][T19421] netlink: 'syz.1.3352': attribute type 1 has an invalid length. [ 406.352902][T19421] bond1: entered promiscuous mode [ 406.359637][T19421] 8021q: adding VLAN 0 to HW filter on device bond1 [ 406.368418][T19423] sctp: [Deprecated]: syz.4.3349 (pid 19423) Use of int in maxseg socket option. [ 406.368418][T19423] Use struct sctp_assoc_value instead [ 406.403323][T19421] bond1: (slave bridge1): making interface the new active one [ 406.411263][T19421] bridge1: entered promiscuous mode [ 406.419284][T19421] bridge1: left promiscuous mode [ 406.458489][ T4936] block nbd2: Receive control failed (result -32) [ 406.461568][ T5619] block nbd2: Receive control failed (result -32) [ 406.473681][ T50] block nbd2: Receive control failed (result -32) [ 406.514228][T19428] IPVS: set_ctl: invalid protocol: 50 172.20.20.58:20001 [ 406.558270][T19430] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3354'. [ 406.569000][T19430] netlink: 47 bytes leftover after parsing attributes in process `syz.4.3354'. [ 406.578711][T19430] netlink: 'syz.4.3354': attribute type 6 has an invalid length. [ 406.587213][T19430] netlink: 'syz.4.3354': attribute type 6 has an invalid length. [ 406.738454][T19441] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3360'. [ 406.774270][T19441] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3360'. [ 406.932627][T19461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3365'. [ 407.018557][T19466] veth0: entered promiscuous mode [ 407.049678][T19464] veth0: left promiscuous mode [ 407.215570][T19479] bond1: entered promiscuous mode [ 407.423602][T19494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3376'. [ 407.731990][T19504] netlink: 'syz.4.3379': attribute type 5 has an invalid length. [ 407.777060][T19508] netlink: 'syz.0.3380': attribute type 1 has an invalid length. [ 407.785677][T19507] netlink: 'syz.0.3380': attribute type 1 has an invalid length. [ 408.176652][T19541] 8021q: adding VLAN 0 to HW filter on device bond2 [ 408.423611][T19563] netlink: 'syz.0.3391': attribute type 2 has an invalid length. [ 408.632503][T19572] syzkaller0: entered promiscuous mode [ 408.650979][T19572] syzkaller0: entered allmulticast mode [ 409.337344][ T8668] ------------[ cut here ]------------ [ 409.342919][ T8668] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band [ 409.356725][ T8668] WARNING: net/mac80211/tx.c:757 at ieee80211_tx_h_rate_ctrl+0xbd5/0x1760, CPU#1: kworker/u8:32/8668 [ 409.367687][ T8668] Modules linked in: [ 409.371636][ T8668] CPU: 1 UID: 0 PID: 8668 Comm: kworker/u8:32 Not tainted syzkaller #0 PREEMPT(full) [ 409.381275][ T8668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 409.391434][ T8668] Workqueue: events_unbound cfg80211_wiphy_work [ 409.397798][ T8668] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 409.404263][ T8668] Code: bf 09 00 00 48 8b 44 24 10 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 08 b8 a3 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 dd 01 00 00 e8 a5 b3 a3 f6 48 [ 409.423970][ T8668] RSP: 0018:ffffc900046df4a0 EFLAGS: 00010293 [ 409.430123][ T8668] RAX: ffffffff8b224258 RBX: ffffffff90430cd0 RCX: 0000000000000005 [ 409.438168][ T8668] RDX: ffff88807b380044 RSI: ffff888056c49998 RDI: ffffffff90430cd0 [ 409.446227][ T8668] RBP: ffffc900046df610 R08: ffff888073832abf R09: 1ffff1100e706557 [ 409.454235][ T8668] R10: dffffc0000000000 R11: ffffed100e706558 R12: ffff88807b380044 [ 409.462338][ T8668] R13: 0000000000000001 R14: ffff888056c49998 R15: dffffc0000000000 [ 409.470407][ T8668] FS: 0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 409.479432][ T8668] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.486103][ T8668] CR2: 0000001b30423ffc CR3: 00000000699c8000 CR4: 00000000003526f0 [ 409.494136][ T8668] Call Trace: [ 409.497618][ T8668] [ 409.500595][ T8668] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 409.506751][ T8668] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 409.512980][ T8668] invoke_tx_handlers_late+0xb5/0x1830 [ 409.518535][ T8668] ? sta_info_get+0x2ec/0x300 [ 409.523269][ T8668] ? invoke_tx_handlers_early+0xa30/0x1cf0 [ 409.529185][ T8668] ieee80211_tx+0x2d7/0x4b0 [ 409.533781][ T8668] ? __pfx_ieee80211_tx+0x10/0x10 [ 409.539303][ T8668] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 409.544845][ T8668] ? ieee80211_xmit+0x2e5/0x3c0 [ 409.549746][ T8668] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 409.555822][ T8668] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 409.561779][ T8668] ? ieee80211_scan_state_send_probe+0x4e6/0xa00 [ 409.568220][ T8668] ieee80211_scan_state_send_probe+0x5b3/0xa00 [ 409.574494][ T8668] ieee80211_scan_work+0x488/0x1ab0 [ 409.579818][ T8668] cfg80211_wiphy_work+0x29e/0x420 [ 409.585034][ T8668] ? process_scheduled_works+0xa20/0x14e0 [ 409.590807][ T8668] process_scheduled_works+0xa8e/0x14e0 [ 409.596484][ T8668] ? __pfx_process_scheduled_works+0x10/0x10 [ 409.602524][ T8668] ? do_raw_spin_lock+0x12b/0x2f0 [ 409.607656][ T8668] ? assign_work+0x3cf/0x5d0 [ 409.612311][ T8668] worker_thread+0xa47/0xfb0 [ 409.617022][ T8668] kthread+0x388/0x470 [ 409.621145][ T8668] ? __pfx_worker_thread+0x10/0x10 [ 409.626332][ T8668] ? __pfx_kthread+0x10/0x10 [ 409.630962][ T8668] ret_from_fork+0x514/0xb70 [ 409.635655][ T8668] ? __pfx_ret_from_fork+0x10/0x10 [ 409.640805][ T8668] ? __switch_to+0xc89/0x1420 [ 409.645572][ T8668] ? __pfx_kthread+0x10/0x10 [ 409.650195][ T8668] ret_from_fork_asm+0x1a/0x30 [ 409.655059][ T8668] [ 409.658125][ T8668] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 409.665436][ T8668] CPU: 1 UID: 0 PID: 8668 Comm: kworker/u8:32 Not tainted syzkaller #0 PREEMPT(full) [ 409.675022][ T8668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 409.685116][ T8668] Workqueue: events_unbound cfg80211_wiphy_work [ 409.691418][ T8668] Call Trace: [ 409.694737][ T8668] [ 409.697704][ T8668] vpanic+0x56c/0xa60 [ 409.701729][ T8668] ? __pfx__printk+0x10/0x10 [ 409.706363][ T8668] ? __pfx_vpanic+0x10/0x10 [ 409.710890][ T8668] ? is_bpf_text_address+0x292/0x2b0 [ 409.716243][ T8668] ? is_bpf_text_address+0x26/0x2b0 [ 409.721493][ T8668] panic+0xc5/0xd0 [ 409.725240][ T8668] ? __pfx_panic+0x10/0x10 [ 409.729682][ T8668] ? ret_from_fork_asm+0x1a/0x30 [ 409.734647][ T8668] __warn+0x315/0x4c0 [ 409.738650][ T8668] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 409.744490][ T8668] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 409.750348][ T8668] __report_bug+0x331/0x530 [ 409.754906][ T8668] ? arch_stack_walk+0x11b/0x150 [ 409.759874][ T8668] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 409.765704][ T8668] ? __pfx___report_bug+0x10/0x10 [ 409.770853][ T8668] ? stack_depot_save_flags+0x33/0x800 [ 409.776337][ T8668] report_bug_entry+0x19a/0x290 [ 409.781215][ T8668] ? ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 409.787066][ T8668] ? ieee80211_tx_h_rate_ctrl+0xc4b/0x1760 [ 409.792898][ T8668] handle_bug+0xce/0x200 [ 409.797183][ T8668] exc_invalid_op+0x1a/0x50 [ 409.801716][ T8668] asm_exc_invalid_op+0x1a/0x20 [ 409.806582][ T8668] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 409.813021][ T8668] Code: bf 09 00 00 48 8b 44 24 10 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 08 b8 a3 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 dd 01 00 00 e8 a5 b3 a3 f6 48 [ 409.832665][ T8668] RSP: 0018:ffffc900046df4a0 EFLAGS: 00010293 [ 409.838937][ T8668] RAX: ffffffff8b224258 RBX: ffffffff90430cd0 RCX: 0000000000000005 [ 409.846930][ T8668] RDX: ffff88807b380044 RSI: ffff888056c49998 RDI: ffffffff90430cd0 [ 409.854937][ T8668] RBP: ffffc900046df610 R08: ffff888073832abf R09: 1ffff1100e706557 [ 409.862942][ T8668] R10: dffffc0000000000 R11: ffffed100e706558 R12: ffff88807b380044 [ 409.870952][ T8668] R13: 0000000000000001 R14: ffff888056c49998 R15: dffffc0000000000 [ 409.878966][ T8668] ? ieee80211_tx_h_rate_ctrl+0xc38/0x1760 [ 409.884858][ T8668] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 409.890951][ T8668] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 409.897131][ T8668] invoke_tx_handlers_late+0xb5/0x1830 [ 409.902618][ T8668] ? sta_info_get+0x2ec/0x300 [ 409.907587][ T8668] ? invoke_tx_handlers_early+0xa30/0x1cf0 [ 409.913425][ T8668] ieee80211_tx+0x2d7/0x4b0 [ 409.917947][ T8668] ? __pfx_ieee80211_tx+0x10/0x10 [ 409.922996][ T8668] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 409.928476][ T8668] ? ieee80211_xmit+0x2e5/0x3c0 [ 409.933351][ T8668] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 409.939358][ T8668] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 409.945191][ T8668] ? ieee80211_scan_state_send_probe+0x4e6/0xa00 [ 409.951543][ T8668] ieee80211_scan_state_send_probe+0x5b3/0xa00 [ 409.958020][ T8668] ieee80211_scan_work+0x488/0x1ab0 [ 409.963257][ T8668] cfg80211_wiphy_work+0x29e/0x420 [ 409.968392][ T8668] ? process_scheduled_works+0xa20/0x14e0 [ 409.974158][ T8668] process_scheduled_works+0xa8e/0x14e0 [ 409.979739][ T8668] ? __pfx_process_scheduled_works+0x10/0x10 [ 409.985746][ T8668] ? do_raw_spin_lock+0x12b/0x2f0 [ 409.990792][ T8668] ? assign_work+0x3cf/0x5d0 [ 409.995407][ T8668] worker_thread+0xa47/0xfb0 [ 410.000036][ T8668] kthread+0x388/0x470 [ 410.004120][ T8668] ? __pfx_worker_thread+0x10/0x10 [ 410.009251][ T8668] ? __pfx_kthread+0x10/0x10 [ 410.013861][ T8668] ret_from_fork+0x514/0xb70 [ 410.018470][ T8668] ? __pfx_ret_from_fork+0x10/0x10 [ 410.023628][ T8668] ? __switch_to+0xc89/0x1420 [ 410.028337][ T8668] ? __pfx_kthread+0x10/0x10 [ 410.032941][ T8668] ret_from_fork_asm+0x1a/0x30 [ 410.037741][ T8668] [ 410.041388][ T8668] Kernel Offset: disabled [ 410.045726][ T8668] Rebooting in 86400 seconds..