last executing test programs:

3.376240457s ago: executing program 0 (id=1345):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x2, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="0000000400000000000000004000010000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
close(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=<r5=>r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r6=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', <r7=>0x0, 0x2f, 0x9, 0x70, 0x100, 0x5, @private0, @loopback, 0x7848, 0x8, 0x80, 0x6}})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYRESDEC=r6, @ANYRESOCT, @ANYRES32=r5, @ANYRES32=r4, @ANYRESDEC=r6], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', r7, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYRESDEC=r6, @ANYRESOCT, @ANYRES32=r5, @ANYRES32=r4, @ANYRESDEC=r6], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', r7, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000340)=@raw=[@generic={0x7b, 0xa, 0x1, 0xfff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x5}, @generic={0x79, 0x1, 0xa, 0xfff8}, @generic={0x95}], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc)

3.185717937s ago: executing program 0 (id=1347):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x6, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000380)='.\x00', &(0x7f00000003c0)=[0x401], 0x0, 0x2000000026fe, 0x1, 0x1}}, 0x40)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000840)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0xbfff8000}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
r10 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r10, &(0x7f0000000980)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
sendmmsg(r10, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x8080, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004540000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30000000002800038024000080100001800c0001000000000000000000"], 0x100}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[], 0x6c}}, 0x0)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="050003000008ffdbdf250600000008000300", @ANYRES32=r13, @ANYBLOB="0c0017800400040004000507780008000500060000005f0d25bb212d55609198755a474106ec39afccfe24de62f2aaa00213d8d3200ed8c92590bc5e9f76cc5cd2014e8db368cfe3e7eef00626be43091b8f8cadada55275608679a3a4a77672462afa9546992f7f166d1ea86b6d434664b17a3cb76b316ddad4e85f86802876fa2f3ab260b62c2d14103837247854ee3b1ebf239efa699074ce911abe7295409187186e9fc5190000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20008881}, 0x40800)
r14 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r14, 0x84, 0xb, &(0x7f0000000c40)={0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe)
shutdown(r14, 0x0)

2.797230303s ago: executing program 2 (id=1348):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40840000000000, 0x800000000000000}, 0x8165, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="a00000002100010000000000fefffffffe8000000000000000000000000000aa00000000000000000000000000000000fffe0000000200000a00e08087000000", @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="020000000000000050001100b7a141c13f1904f37f762aae2d67633f32dfe701c9810f3d4b1c81d88bcb76d268a46661edc23ab8d5b3665a335e1506e03ac9da3cd5a8c6514692c15f0a1e09a7069f796393c3a6b830c7c1f96dcf5d1ad5248fd9472686a657b6e7c124dc962c3349efe5370673ea8731263d6eaadb08b7f3a51b80e4901d4cf59d0951a16224b8e31a95c77d38c08558374f1fd2325ef05704b5076a72697088deb267584972ee35cc94b1a027"], 0xa0}, 0x1, 0x0, 0x0, 0x880}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0xa, 0xd2, &(0x7f00000004c0)=""/210, 0x0, 0x8}, 0x94)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000640), 0xc, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140426bd7000fcdbdf2513000000050003000d00000005000300070000000c0400000003aaaaaaaaaaaa06000800ffff000006000800a0aa0000"], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x4080)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r3)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x3c65e5a12d2f864f)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r6)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='$\x00'}]}, 0x1c}}, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x68, r7, 0x5, 0x0, 0x0, {0x1, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x68}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000d00)={0x60, r7, 0x5, 0x70bd2b, 0x0, {0x5, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x60}}, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind(r9, &(0x7f0000000dc0)=@generic={0x5, "226f1a2b857e0605e2d5fe5e979a5bafb045196240f0cbd0ba291c16111cee2f3e501c593598b99f713b38971ae0ee2d270c505f96ab780c54da80fd553c5985f491938dde0b1e81f28256c2da9d844489471e05adec5d43d3ecb901d41f67fb50eaa3114093e19fffbcf6936d4a8db37135e9a186d8c32bd3ddb724e28a"}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000e40)={0xc}, 0x8)
syz_genetlink_get_family_id$batadv(&(0x7f0000000e80), 0xffffffffffffffff)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r10, &(0x7f0000000ec0)='hello\x00', 0x5, 0x0, &(0x7f0000000f00)={0xa, 0x1f90, 0x0, @local}, 0x1c)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='memory.events\x00', 0x275a, 0x0)
write$tun(r11, &(0x7f0000000f80)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x0)

2.556757881s ago: executing program 0 (id=1349):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x11dcff2c700de38, 0xffffffffffffffff, 0x2000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000380)={@val={0x3, 0x800}, @val={0x3, 0x0, 0x0, 0x8492, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @multicast1}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x4, 0x0, @local, @loopback}}}}, 0x3e)

2.361066241s ago: executing program 3 (id=1351):
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) (rerun: 64)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000b40)={'syzkaller1\x00', 0x5001}) (async, rerun: 64)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000b80)=0xc) (async, rerun: 64)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000bc0)=0x1, 0x4) (async)
bind$inet6(r1, &(0x7f0000000c00)={0xa, 0x20e6, 0x5, @empty}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x4008004)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000c40)={'syzkaller1\x00', 0x1}) (async)
write$tun(r0, &(0x7f0000000c80)=ANY=[@ANYBLOB="010530000a00140006000000600000000030114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64)

2.286103368s ago: executing program 4 (id=1352):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001440), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller1\x00', 0xc201}) (async)
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000014c0)={'syzkaller1\x00', @broadcast}) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001500)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) (async)
write$tun(r0, &(0x7f0000001700)=ANY=[@ANYBLOB="0800080005000600000014000f0045bf002800640000080690780a010101ac14143e4e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="89e9d73b1f"], 0xfdef)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r5, 0x29, 0x33, 0x0, &(0x7f00000012c0))
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x840)
unshare(0x2c020400)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=@newtaction={0x8c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x16e}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0x10001, 0x8, 0x34a, {0x0, 0x1, 0x0, 0x3, 0x86}, {0x5, 0x1, 0x6, 0x5, 0x7f, 0x2}, 0xff, 0x2, 0xfffffff8}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810)
r13 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r14 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r14, 0x0, 0x80, &(0x7f0000000540)=@nat={'nat\x00', 0x19, 0x3, 0xcd0, [0x200000003980, 0x0, 0x0, 0x2000000039b0, 0x200000004548], 0x0, 0x0, &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x3, 0x22, 0x890d, 'netpci0\x00', 'veth0_macvtap\x00', 'pim6reg0\x00', 'dummy0\x00', @multicast, [0x0, 0x0, 0xff, 0xff, 0xff], @empty, [0x0, 0xff, 0xff], 0x0, 0x9b8, 0xa40, 0xa70, [@among={{'among\x00', 0x0, 0x8b0}, {{@offset=0xc, @offset=0x480, 0x2, {[0x1, 0x27d, 0x27d, 0x3, 0x9, 0x7e1, 0x8, 0x4, 0x9, 0xfffffffa, 0x3, 0x5, 0x1, 0x3, 0x3, 0x4, 0x4, 0xaa83, 0x7, 0x46a, 0x2, 0xfffffffb, 0x2, 0x6, 0x6, 0x3ff, 0xe9, 0x7, 0x0, 0x1, 0x1, 0x7fffffff, 0x0, 0x8, 0x7, 0xaa8e, 0xa, 0xfffffffe, 0x0, 0x2, 0x8, 0x7f, 0x3, 0x6, 0x1, 0x9a, 0x9, 0xa0c, 0x9, 0x4, 0xf6, 0x0, 0x9, 0x3, 0x7cb, 0xcd, 0x8, 0x5, 0xffffff5e, 0x4, 0x6, 0x1, 0x131, 0x4, 0x3, 0x5, 0x8, 0x2, 0x1fd4, 0x1, 0x4, 0x8, 0xc, 0xb, 0x3, 0xd, 0x7, 0x80000001, 0xfff, 0x8, 0xffff2ba4, 0xffffffff, 0x64, 0x3, 0xb, 0x0, 0xf, 0x16, 0x8, 0x40, 0x8, 0x506a, 0x63, 0x5, 0x81, 0x1ff, 0x0, 0x5, 0x9, 0x3, 0xbee2, 0x2c, 0xfffffffb, 0x0, 0x3, 0x100, 0x6, 0x81, 0x3, 0x81, 0x80, 0x8, 0xb, 0x10001, 0x400, 0xffffffff, 0x9, 0x0, 0x6, 0x7, 0x0, 0x0, 0x977, 0xfffffec0, 0x800, 0x80000, 0x8, 0x2, 0x0, 0x2, 0x3, 0xffff, 0x668b, 0x7, 0x0, 0x2, 0x10000, 0x8, 0xfffffed9, 0x8, 0x74fa0ddd, 0x7, 0x2, 0xbd, 0x800, 0xb, 0x5, 0xb7, 0x81, 0x7fff, 0xa01, 0x7, 0x1, 0x102c, 0x5, 0x80000000, 0xfff, 0xe08, 0x1, 0x6, 0x1, 0x4, 0x7ff, 0x4, 0x8000, 0xf1135a8f, 0x7, 0x401, 0x180, 0x114, 0xc9e1, 0xc1e, 0x2, 0x77c, 0x80, 0x7ff, 0xfffffff8, 0x401, 0x6fce, 0x6, 0x9, 0x9, 0x7, 0x55a, 0x200, 0x3, 0xf0, 0x5, 0x9, 0x1a, 0x90, 0xf, 0x0, 0x1, 0x9, 0xb, 0xc49b, 0x5, 0x8000, 0x7, 0x8, 0x2, 0xc78, 0xc4, 0x7, 0xc96e, 0x6, 0xdc, 0x800, 0xdad, 0x6, 0x8, 0x7, 0x7ff, 0x9e, 0x0, 0xe3, 0x2, 0x1, 0x4, 0xffffffb3, 0x401, 0xc0000, 0x63, 0x8, 0xfff, 0x4, 0xffff, 0x401, 0x8, 0xb76, 0x1, 0x400000, 0xc8a, 0x3, 0x6, 0x1, 0x54, 0x9, 0x4, 0xbb, 0x6, 0x638, 0xfffffffd, 0x1, 0x8, 0x7, 0x1, 0xfe, 0x7, 0x80000001, 0x8, 0x5, 0x2, 0x6365, 0x77e2db41, 0x6], 0x9, [{[0x2, 0x81], @broadcast}, {[0x443, 0xffffffff], @empty}, {[0x4, 0x3d], @dev={0xac, 0x14, 0x14, 0x1d}}, {[0x7f, 0x7f], @multicast1}, {[0x7, 0x5], @empty}, {[0x8], @initdev={0xac, 0x1e, 0x0, 0x0}}, {[0x4, 0xa8], @multicast2}, {[0x9, 0x9], @dev={0xac, 0x14, 0x14, 0x26}}, {[0x8, 0x1], @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {[0x400, 0x9, 0xe, 0x2, 0x7ff, 0x0, 0x7ff, 0x100, 0xfffffcda, 0x80000001, 0x8, 0x9, 0x900, 0x0, 0x8, 0xfffffff9, 0x0, 0x4, 0x0, 0x4, 0x400, 0x1, 0x5, 0x5, 0x218, 0x0, 0xe36, 0xffffff27, 0x2a, 0x9, 0xffffffff, 0x7ff, 0x4, 0xfffffffb, 0x4, 0xb532, 0x4, 0x5, 0x4, 0x7, 0x8, 0x5, 0x5, 0x4, 0x2, 0xa, 0x6, 0x1, 0xe, 0x4, 0x688000, 0x80, 0x2, 0x5, 0x5cd, 0x1, 0x2cbb, 0xff, 0x7, 0x6b10, 0x5, 0x8, 0x9, 0x6, 0x7, 0x426a, 0x7, 0x28, 0x1, 0x8000, 0x5, 0x5, 0x100, 0x4, 0x7fff, 0x7e, 0x7f, 0x3ff, 0x22, 0x6, 0x0, 0xe, 0x400, 0x4, 0x2, 0x82, 0x5, 0xfaf2, 0x2, 0x4, 0x2, 0x5, 0xaec, 0xfffffff0, 0x1, 0x9e, 0x100, 0x3, 0x200, 0x1000, 0x7, 0x6, 0x6, 0x80, 0x5, 0x7, 0x9e1, 0x9, 0x2, 0x4, 0x0, 0x7ff, 0x9, 0x2, 0x3f, 0x9, 0x4, 0xcde, 0x2, 0x1, 0x7, 0x5d88711a, 0x5, 0x6, 0x8, 0x3, 0x10, 0x1, 0xb7d, 0xe, 0x6, 0x4, 0x6, 0x200, 0x0, 0x9, 0xb, 0x0, 0x80, 0x2, 0x3, 0x2, 0x8, 0x6, 0x5, 0x4, 0x4, 0x4, 0x3, 0x9000000, 0x1ff, 0x80000000, 0x4, 0xa, 0x4, 0x9, 0x1ff, 0x0, 0x3ff, 0xe0b, 0x1, 0xa, 0x1, 0x8000, 0x9, 0xd, 0x5, 0x6, 0x6, 0x5, 0x21c, 0x1, 0xffffffff, 0x8, 0x4, 0x562, 0x3ff, 0x153d, 0x81, 0x0, 0x6, 0x54ce, 0xfffffffa, 0x5, 0x9, 0x7, 0x8d1, 0x5, 0x0, 0x5, 0x7, 0x2, 0x6, 0x3, 0xff, 0x7ff, 0xdc2f, 0x9, 0x4, 0x7, 0x2, 0xfffffffe, 0x1d57d23, 0xe2, 0x6, 0x7, 0x3, 0x7, 0x6, 0x9, 0x5, 0x7, 0x4, 0x2, 0xe26, 0x0, 0x1, 0x3, 0xd9, 0x9, 0x6, 0x3, 0x9, 0x8000, 0x0, 0x6, 0x6, 0x7, 0x1, 0xff, 0x2, 0x4, 0x5, 0xb84, 0xfffffffc, 0x80, 0x3, 0x9, 0x2, 0x80000001, 0x1, 0x2, 0x8, 0x8, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x602a, 0x2, 0x5, 0x4, 0xfffffffa, 0x4], 0x3, [{[0x7, 0x9], @dev={0xac, 0x14, 0x14, 0x10}}, {[0x2, 0xfffffffe], @loopback}, {[0x3, 0x1], @multicast2}]}}}}, @stp={{'stp\x00', 0x0, 0x48}, {{0x5, {0x3, 0x3a6, 0x1, @broadcast, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0xa, 0x5, 0x9, 0x8, @empty, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x4e22, 0x4e22, 0x0, 0x7, 0x3, 0x3, 0x8, 0x5, 0x8, 0x5}, 0x4a0, 0x4}}}], [@common=@log={'log\x00', 0x28, {{0x5, "c8b74bdeedad59677d4a4539c7fc8b3fb08237cf59a67067206f71d30f21", 0xc}}}, @snat={'snat\x00', 0x10, {{@multicast, 0xffffffffffffffff}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}, {0x3, 0x0, 0x7, 'team_slave_1\x00', 'veth1_to_team\x00', 'wg2\x00', 'veth1_to_bridge\x00', @remote, [0x0, 0xff, 0xff, 0xff, 0x0, 0x80], @random="a3cb2decf3d6", [0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0xc0, 0xc0, 0xf8, [@helper={{'helper\x00', 0x0, 0x28}, {{0x1}}}], [], @snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x11, 0x67, 0xf7, 'bridge0\x00', 'bridge_slave_1\x00', 'macvlan1\x00', 'wg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], @multicast, [0xff, 0xff, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa8, [], [], @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}}]}]}, 0xd48) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f00000001c0)=0x10) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000240)={0x1, [<r15=>0x0]}, &(0x7f0000000340)=0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000000380)={r15, 0x8001}, 0x8) (async)
ioctl(r10, 0x8924, &(0x7f0000000000)='veth0:') (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.059292343s ago: executing program 0 (id=1354):
write(0xffffffffffffffff, &(0x7f0000000000)="38000000240001040100000000000000000000000100", 0x16)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
socket$packet(0x11, 0x3, 0x300)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
r6 = accept(r5, 0x0, &(0x7f00000001c0))
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000200)=0x3, 0xfffffffffffffe32)
getsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x4000000000006, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x32}, 0xa, @in6=@empty, 0x6, 0x4, 0x2}]}]}, 0xfc}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="6000000010001fff03000000fdfffeff00000000", @ANYRES32=0x0, @ANYBLOB="0000000040cc0300380012800b00010067656e657665000028000280140007000000000000000000000000000000000105000c00ffffffff050009000100000008000a00", @ANYRES32=r2], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r8 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r8, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

2.058801977s ago: executing program 2 (id=1355):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1b41, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 64)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64)
close(r1)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000014c0)={0xffffffffffffffff, 0x20, &(0x7f0000001480)={&(0x7f0000000440)=""/4096, 0x1000, <r2=>0x0, &(0x7f0000001440)=""/38, 0x26}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1808000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) (async)
mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1000009, 0x11, r4, 0xd371f000) (async)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x12, r3, 0x12574000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000002c0), 0x1000, r5}, 0x38)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000180), 0x54) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) (async)
r7 = socket$netlink(0x10, 0x3, 0xc) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66)

1.697432147s ago: executing program 1 (id=1357):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae5}, {0x6, 0x2, 0x7, 0x2}]}, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000a40)={0x24, r1, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x142, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0) (async, rerun: 64)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x20, 0x5, 0x0, 0x8, 0x27, 0x2, 0x5, 0x1, 0x57, 0x48, 0xfffffffe, 0x2, 0x8008, 0xff, 0x9a, 0x45, [0x4]}})

1.626143712s ago: executing program 4 (id=1358):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=<r1=>0x0) (async)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=<r2=>0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
recvmsg(r3, &(0x7f0000001fc0)={&(0x7f0000000bc0)=@generic, 0x80, &(0x7f0000001f40)=[{&(0x7f0000002380)=""/112, 0x70}, {&(0x7f0000000cc0)=""/247, 0xf7}, {&(0x7f0000000dc0)=""/76, 0x4c}, {&(0x7f0000000e40)=""/4086, 0xff6}, {&(0x7f0000001e40)=""/3, 0x3}, {&(0x7f0000001e80)=""/54, 0x36}, {&(0x7f0000001ec0)}, {&(0x7f0000000c40)=""/14, 0xe}], 0x8}, 0x10001) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000020c0)=ANY=[@ANYBLOB="001000000000000002004e207f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e2ff18df29a4f21d500000000000800"/153], 0x90)
r6 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000080010401030000000000000000020034f70c29c5297ac7d888e068bb6e3d55191f82b5f4e1"], 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000000) (async)
sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x8000) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000940)=0x7, 0x4)
sendmsg$nl_route_sched(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x23}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) (async)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000026c0)={0x18, 0x10, &(0x7f0000002780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20008c, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@call={0x85, 0x0, 0x0, 0xc4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000002800)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) (async)
r10 = socket$tipc(0x1e, 0x2, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000002200), r11) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000002240)={'batadv0\x00', <r13=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002300)={0x2c, r12, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0xdd}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040080) (async)
mmap(&(0x7f0000a49000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x0) (async)
r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002480)={0x6, 0x10, &(0x7f0000002540)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r14, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f00000025c0)='syzkaller\x00', 0x4, 0x8d, &(0x7f0000002600)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async)
sendmsg$nl_generic(r0, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000340)={0x564, 0x3a, 0x300, 0x70bd2d, 0x25dfdbfe, {0x12}, [@generic="ffda82da58b237c83c07644bd4a36b9d3b587ffc806d6058599c7feb77d9c7a5efc6feeadfc5db2238479dc6f7f501d40cf5828d82cbc0b0db645cf66e9e0090a45dd7ece6249da080d2c386f2a9995ec8dd441784fd4634c0567f604abcfe296630ed88902b9e60e304e153b9bd4f24110c79808e4b155f48e3a919c1b7d4bf1e73c4ed0952ca3b11da24b72631db04", @typed={0x8, 0xc3, 0x0, 0x0, @pid=r1}, @generic="3cc5e7837abbdd1725cdaa5b6d37296b535c7a4bab8ef60e2547535d6e06cbe7560f5f1a54a8ed88256f5dd619df56111dd532f01ab41910276e86029c80e36d6aff37a2353ccf009e78fbb99b01a373615eb7024f9be86cfb0581917191b6de810f6e79768dc429da6bb23727", @generic="b5af9855153a7708f219323284ba357742fd7ff2078181140af62cc4f360c355899fae22d085c9c86ea91c3e0b791eefa3707ee2ade4dd0200f51f25803bdc610ddbc71b425e773d663a6f947f14e94a14c6b0da15153ee01e824849444015e53581cd26d2779970d489e2fbb3ccc46e39a1eb534029e5f490e7a9d48f1d4474aa5a5cce2e5bb822ad263666c8328f985f2575a4ef1cd0ab5e12e2de046be67605", @nested={0x1c4, 0x41, 0x0, 0x1, [@nested={0x4, 0x98}, @generic="05b87edf7931819745706afb369a15f864735bd6284c269506950f9c8eb18e1469981e6ffc9f3e122a0bb55d389c1d61da8ea6d257446f6c5e8255838a65b2fbe5d4aaa49bc36ef96ef07fbbd08b3a5057ac2def47058bc5b2b59ddf97b1b39b6997cfe0ba67c04c1ea1e13c81271add57321094e05c831c5f625f8e8645e6b5277a45c1bfdabbb9047569713672adbf60dc59a856edbc4240ade17e33b97eb7f73ae6a7cfedd9b169358c9f788005db3dcafe47236b7c87b3ab2c76cffbdf", @generic="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"]}, @typed={0x8, 0x31, 0x0, 0x0, @pid=r2}, @generic="8aedcfc2e886b3009b8c825071fce3c3b84753a5349f37a9c6a39184d29dd5a985f8890d356c407c3882c155cea44998e5baa2fd6eb35c62006a1d8894bd582a23cb0f3162116b9b9660c6f8b706165866ca31f371343a17b125d836f933c0301fb1106a9a579d47f56e48042db179cb3126a94e7aabf2e49de0de9c94e992cc8af13cd761799f0ca0399539d3c6b97986342671dd36d29d33502fbc6231f324763e885f345ce2471a70bc4d76396b7b11208e1fd1a922a2850d9f4d5d79d241a4c8901d13275cd2969aa24aff89bad0b46f22158e83c6bad6955aeffd1396cfdde848", @typed={0x4, 0x22}, @generic="c9d820bfa08e3470e0e0942d0bec222187d9701bd6cef43e0319fc9a8e22c4e05b578848c5901fde62f671c50a9c6f86df79b37c42ee0729742205fe644a006b87a0a3fe480879d1c068e19a0f1a6c0bb106abf94ea9f865981608b195ef448876e20b70b600b3a31a4e93c16af0ab655e934cad6144f2dda2a4ed075e28ce46dcc83457b8cdf87060f595258822fab0a83562066254d3b91db2d55fbe5b543c70b5557cf0f5d05e5550c183ad86be822f43dab103571dacb518102d80ea99734c253827689c662ca553059ac3a679e224e1147b7a0d1876736fbc24513f404e63e63829f8997ed954e02de8e58b558dcac3fdf1f7d3"]}, 0x564}, 0x1, 0x0, 0x0, 0x44450}, 0x40)

1.586621366s ago: executing program 3 (id=1359):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', 0x0}) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00')
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)=ANY=[@ANYBLOB='..']) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000340)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/ipc\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000040000000800100014100000", @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32], 0x50) (async)
openat$cgroup(r4, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtfilter={0x4d40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_TCP_DST={0x6}]}}, @filter_kind_options=@f_basic={{0xa}, {0x4cac, 0x2, [@TCA_BASIC_ACT={0xf0, 0x3, [@m_gact={0xec, 0x10, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffff7, 0x14ce, 0x20000000, 0x8000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1311}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1d1b, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x951, 0x2}}]}, {0x82, 0x6, "1d10f2cb9bcd72be11d68f780709784041b02110255a928acd9d33ba2e23dfe2b23d4ea70314d84df0a3a7e70b4c24838b6c82abbbcfcc74f079be46bfb72cc06535724dcb4961e7c696ccd7f0ef811278ca64842feb59689de0ddb1f30ecca69aa06759fb67b7946b85890f61d387480765f914fca5c271756a0618980a"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_EMATCHES={0x26c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd07}}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x6, 0x4, 0x800}, [@TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_VAR="0a0c97cf", @TCF_META_TYPE_VAR="324486390b4613", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x6]}]}}, @TCF_EM_IPT={0x28, 0x2, 0x0, 0x0, {{0x60df, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x20}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xec}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x3}, "80c03e"}}]}, @TCA_EMATCH_TREE_LIST={0x200, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x2, 0x0, 0x0, {{0x6226, 0x9, 0x10}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x4, 0x8, 0x2}, {0x4, 0x5, 0x2}}}, @TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0x5, 0x9, 0x5}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2, 0x8, 0x14ef}, {0x3}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x0, 0x8, 0xae}, {0x3, 0x6, 0x4}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9, 0x7, 0x1}, {{0x4, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x81}, {0x400, 0x5, 0x0, "0ea0fb7034"}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0x5}, {{0x4}, {0x4, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x48, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x7}, "04b4a23971a86c83e270ba9e03066dfdd2d0ddb12c4ce1d7ded1317e39b65ea7cf46476b43b308a31cd81b8e479d769d80edd082e05bda58c4a4"}}, @TCF_EM_IPT={0x110, 0x1, 0x0, 0x0, {{0xed56, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0xe3, 0x5, "a4cb67dcce774f9633138da30ecb3470caa5c977fa4d5bec5d4d88c6f2492324a69ba6d6cffad2e20a271913fa5a17d4ee51a29b16a9d19f56f42c9ff2ce30220c1836a13428d589d2fff1a65ee2d18ca0cbb04ea0b6fec7801d37a0fa99867e4d6ca5bec8d9fa72fe0a884393ef8c6e0bb076af191f9e39b75996eacd89438cf83d2264500928d7cf5c2b9fced72fd00e58511abd77d49e2c7f0ead2e088b822a21916dc311430d6f9b91f2c97c300b25eee42e7e4679b1cca434f60b39b3db168b492e22cc25034122a4c1f192b4d6131635e3e0eb7119ade8cc6783be43"}]}}]}]}, @TCA_BASIC_ACT={0x494c, 0x3, [@m_xt={0x138, 0x15, 0x0, 0x0, {{0x7}, {0xf4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0xce, 0x6, {0x2, 'raw\x00', 0xa9, 0x9, "ce884db03ecf3bb667ac2a3dc0871c34d94883d29dc15d8c5d3dd2acc9ed80e86cbc9510d947024e72e811026cc1106852911b28333fa45f6d338c4320feba60733ee6a397fb50d42dfa1d8bd2a6ced9393ee639685b90fa4559b767a149aeb4ac7033d260d9b81f7d0e833d7e3d1eddb5c9482106de1ed5842b2a2e95b78db01cb0526c0dae7b31a1a9be9b65b920e4e405a30a1e2bfc83d1e41579b955418af544df99"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8}]}, {0x1d, 0x6, "f3252e3aaa4b73cde3646c47412675cd4f213d10f042266adc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x124, 0x11, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xde, 0x6, "41fd8cf28e6cf846fc5e3135e78f0f0d1bae0466a0d1c40c8594e4098b6c0ef59e2f19586a13989918fd5ee481e03f2a8acd2863de81b44409cc815e8474fbef61f11d6477691e30ed0ed7d56058a81347aa0dfe291f3b157081a8511e1c5c4e322f6929dbd305b4b96b63520fafddf3d67d43e21f01fce8301663509010a847032320a776788e39b9b4dec2923848452b1f218d904593f4066a7b59cc1efd22e41ce052f5dbfc50469b726d47fc4a1baaba0590c70cce4453f78c3ffc7fc8a0d577808bc5b6f75970e72d802ee3edf6ed79dae91ee532e8577e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x42e4, 0xb, 0x0, 0x0, {{0xb}, {0x4230, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x68000000, 0x991, 0xfffc, 0x4, 0x9390, 0x0, 0x4, 0x3, 0x78, 0x3, 0x1, 0x2, 0x2c784874, 0x7, 0x3, 0xa, 0x5, 0x5, 0x5, 0x10001, 0xc19, 0xd, 0x4, 0x80000000, 0x37, 0xfffffffd, 0x1, 0x7fff, 0x1, 0xa85, 0x1, 0x5, 0x2, 0x6, 0x8, 0x6, 0x3, 0x7fff, 0x409, 0x5, 0x9, 0xffffffff, 0x7, 0x67c6cf09, 0x3, 0xd2c, 0x4, 0x6, 0xf, 0x2, 0x9, 0xc, 0xa8e2, 0x3, 0x9cd7, 0x2, 0x3ff, 0x5651, 0x8, 0xfffffff3, 0x8000, 0xf, 0x9, 0x4, 0x8, 0x7, 0xdeb, 0x7, 0xd2f5, 0x3, 0xfffffff8, 0x9, 0x2, 0x1c75, 0x1, 0x8, 0x4, 0xf2d5, 0x9000, 0x44ab, 0x13e5, 0x4, 0x7, 0x9, 0x101, 0xffffffff, 0x8, 0x100, 0x7, 0x200, 0x6, 0x1ff, 0x1ff, 0xe, 0xc3, 0x0, 0x6, 0x9, 0x0, 0x10001, 0xfbb, 0xb, 0x800, 0x0, 0x4, 0x4, 0x598, 0x7, 0x2, 0x8, 0xf, 0x10001, 0x53, 0x200, 0x0, 0x0, 0x80, 0x1, 0x799, 0x1, 0x5, 0x4, 0x9, 0x100, 0x5, 0x7, 0xfffffffe, 0x3, 0x6, 0x4, 0x1, 0x8, 0x6, 0xbb8, 0x80000000, 0x78a35cc5, 0x7, 0x80000000, 0x8000, 0xa3, 0x8, 0x5, 0x0, 0x3, 0x3, 0xd, 0x7fff, 0x5, 0x5, 0x0, 0x1, 0x9, 0x80000001, 0xc, 0x4, 0x3, 0x8, 0x8, 0x5, 0x7, 0x76b, 0x9, 0x401, 0x1, 0x3ce, 0x6, 0x6, 0x401, 0x2, 0x7fff, 0x8, 0x5, 0x4, 0x6, 0xfffffffa, 0x3, 0x7, 0x1, 0x800, 0x9, 0x0, 0x2, 0x1, 0x3, 0x6ea8f572, 0xffff, 0x3, 0x4, 0x7, 0x0, 0x9, 0x6, 0x9, 0x3ff, 0x6, 0x80000000, 0x9, 0x30, 0x3, 0x8001, 0x1, 0xfffff97d, 0x1, 0x401, 0x4, 0x2, 0x1, 0x7, 0xfff, 0x3, 0x7f, 0x4, 0x6, 0x10, 0xf74, 0x3, 0x1, 0x5, 0x5, 0x8, 0x5, 0x5, 0xc, 0x7, 0x4, 0xce, 0x4, 0x6, 0x8, 0xb, 0x9, 0x4, 0x3, 0x8, 0x9cd, 0x1, 0x6, 0x97, 0xffff, 0x9, 0x2, 0x7fff, 0x9, 0x1, 0x3, 0x4, 0x9, 0x6bc14604, 0x9, 0x0, 0x3, 0x5, 0x0, 0xfffffff8, 0x4]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x101, 0x80000001, 0x5, 0x3, 0x9, 0x1, 0x7fff, 0x5c7c, 0x3, 0x7, 0x552, 0x8, 0x1, 0x9, 0x0, 0x7fff, 0xaa, 0x1, 0x2, 0x9, 0x16e, 0x0, 0x61104b26, 0x2, 0x7, 0x10001, 0x3, 0x5, 0x7, 0x0, 0x2, 0x80000000, 0x401, 0x7, 0x6, 0x9, 0x6, 0x7, 0x4, 0xfd, 0x2, 0x2, 0x0, 0x1, 0x800, 0xffffffff, 0x8, 0x8, 0x2, 0x8, 0x1, 0x10, 0x2, 0xbf9d, 0x1, 0x2, 0xc, 0x6, 0xff, 0x2, 0x1, 0x36, 0x9, 0x2, 0x0, 0x0, 0x8, 0xa, 0x9, 0x3, 0x4, 0x8, 0x101, 0x2, 0x7fffffff, 0xfffffffd, 0x7, 0x8, 0x80000001, 0xfffffffb, 0x6, 0x9, 0x81, 0x9, 0x7, 0xc90, 0x263, 0x0, 0x401, 0x56fa7d00, 0xffffffff, 0x5, 0x75, 0x3, 0x8, 0x2, 0x4, 0x2, 0x6de, 0x0, 0x8000, 0x8, 0xfffffa4f, 0x2, 0x6, 0x8, 0xfffff000, 0x0, 0x38, 0x0, 0x26de, 0x0, 0x5, 0x7, 0x8, 0x1000, 0x436a, 0x5, 0xfff, 0xfffffff7, 0x108000, 0x7, 0x9, 0x7, 0x3, 0x80000001, 0x4, 0x5, 0x4, 0x4, 0x80, 0x80000001, 0x2, 0x101, 0x4, 0x3, 0x9, 0x9, 0x7f, 0x9, 0x5, 0x4, 0x4, 0xb, 0x6, 0x3, 0xc, 0x0, 0x7f, 0x8000, 0x5b, 0x80, 0x9, 0x10001, 0x9, 0x5, 0x3ad, 0xfffffffa, 0x5, 0x84, 0x1, 0x7, 0xa, 0x9, 0x6, 0x7, 0x6, 0x2, 0xfffffff7, 0xfffffffe, 0xffffffff, 0x4, 0x2, 0x4, 0x7, 0x0, 0x8, 0x0, 0x7642662e, 0x101, 0x6, 0x5, 0x5, 0x5, 0x0, 0xa, 0xb3, 0xf, 0x6, 0x3301, 0x2324, 0x8, 0x2, 0x4, 0xfffffffd, 0xa, 0x6fad, 0x32d97eee, 0x0, 0x4, 0x0, 0x2, 0x7, 0x4, 0x4, 0x7, 0x22cb, 0xd, 0x9, 0x2, 0xffffffea, 0x2, 0x4, 0x9, 0x3, 0x6, 0x1, 0xab, 0xffff1dbd, 0xcc5, 0xb, 0x8a, 0x5, 0x9, 0x8, 0x0, 0x77f, 0x8, 0x81, 0x7, 0x0, 0x1, 0x9, 0x5, 0x9, 0x3, 0x401, 0x80, 0x590, 0x5, 0x0, 0x0, 0x1, 0x22c, 0x8, 0x3, 0x80000001, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, 0xabbb, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x35, 0x4, 0xfffffffa, {0x8, 0x1, 0x0, 0x0, 0x3, 0x7}, {0x7, 0x0, 0x800, 0x297, 0xff, 0xfffffffb}, 0x73, 0x7, 0xa7df}}, @TCA_POLICE_RATE={0x404, 0x2, [0xa, 0xfffff800, 0x3, 0x107, 0x9, 0x80000001, 0x6, 0x12c, 0x3, 0x6, 0x0, 0x9, 0x7, 0x4, 0x3cf9, 0x9, 0x800, 0x3, 0x401, 0x1, 0x1, 0x3, 0x794, 0x8, 0x4, 0x1, 0xaa, 0xbdb, 0x8, 0x8, 0x8, 0x5, 0x1, 0x2, 0xffffffff, 0xffffffff, 0x4, 0x4000, 0x9, 0x1, 0x6, 0x8, 0xef, 0x3, 0x4, 0x1, 0xd, 0x0, 0x4, 0x15, 0x2, 0xffffffff, 0x0, 0x3, 0x0, 0x380e306f, 0x0, 0x1, 0x5, 0x25, 0xfffffff9, 0xc, 0x7, 0x9, 0x3, 0x10, 0x3, 0x6, 0x6, 0xffffb67d, 0x7, 0x7, 0x8, 0x1, 0xc, 0x8, 0xff, 0x5, 0x6, 0x2, 0x0, 0x100, 0xfffffff9, 0x1000, 0x40, 0x4, 0x7, 0xffffff30, 0x6, 0x8, 0x1cd5, 0xa, 0x2111, 0x5, 0x4000000, 0x8327, 0x10000, 0xa00, 0x200, 0xfff, 0x0, 0x8, 0x9, 0xffffff80, 0x8, 0x3a53e268, 0x5, 0x2, 0x1, 0x6, 0x81, 0x1, 0x9e, 0xfffff582, 0x80000001, 0x0, 0x5, 0xffff0000, 0x8, 0x1, 0x2, 0x0, 0x6, 0xa, 0x9, 0x4, 0x7, 0x1, 0x6b0d8619, 0x5, 0x4, 0x5, 0x8, 0x6a, 0x2, 0xa, 0x6, 0xff, 0x3, 0x18ef, 0x400, 0x7f, 0x8001, 0x3, 0x2, 0x7, 0x2, 0x7, 0x0, 0xfffffffd, 0x8, 0x6, 0x10, 0x4, 0x3, 0x0, 0x3, 0x9, 0x51, 0x5, 0xa, 0x1, 0x10000, 0x8, 0xc43, 0x7, 0x0, 0x6c7e, 0x11, 0xd9, 0x8, 0x968, 0x6, 0x300000, 0xfffffff9, 0x6, 0x3ff, 0xffff8b3e, 0x7, 0x200, 0x3, 0x4, 0x0, 0x81, 0x9, 0x80000001, 0x1, 0xffffffff, 0x7, 0x109, 0x4, 0x80000001, 0x7, 0x2, 0x3ff, 0x842, 0x4, 0x3ff, 0x54, 0x5, 0x10000, 0x80000000, 0x9, 0x42, 0x8001, 0x9e, 0x0, 0x5, 0x9, 0x8, 0x0, 0x7, 0x1000, 0x0, 0x101, 0x7, 0x6, 0x6, 0xece3, 0x2, 0xd0, 0x0, 0x3, 0x4, 0x4, 0x80000000, 0x2, 0x6, 0xb24, 0xfd65, 0x6, 0x0, 0x5, 0x8, 0x4, 0x5, 0x9, 0x7f, 0x3, 0xea1, 0x3, 0x81, 0x2d, 0x1ff, 0x3, 0x1, 0x6, 0x1ff, 0x81, 0x0, 0x6, 0xffffffb4, 0x5, 0x4, 0xb6a, 0x3ff]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1ae, 0xc, 0x6, 0x9, 0x7ff, 0x4, 0x3, 0xb89, 0xa9, 0x8000, 0x3, 0x7fff, 0x1, 0x17e5ba87, 0x101, 0x4, 0x7, 0x64, 0x6, 0x7fff, 0x5, 0x10000, 0x9, 0x200, 0x5, 0x8225, 0x1, 0x2, 0xffff5c54, 0x7, 0x6, 0xfffff9aa, 0x80000001, 0xd, 0x1, 0x5, 0x9, 0x8, 0x50, 0x2be3, 0x2, 0x453, 0xffff, 0x295, 0x1000, 0xfa7, 0x4a, 0x0, 0x5, 0x0, 0xfffffff9, 0xffffffff, 0x3, 0xa, 0x6, 0x2c, 0x4, 0xfffffffe, 0x0, 0x80, 0x9, 0x8000, 0x8, 0x10000, 0x4, 0x80000001, 0x7, 0x8001, 0x8, 0x7fff, 0x10, 0x2, 0x2, 0x100, 0x8000, 0x3, 0x0, 0x8, 0x5, 0x0, 0x8a, 0x4, 0xf, 0x3, 0x1, 0x800, 0x800, 0x1, 0x0, 0x5, 0x7, 0x5, 0x3, 0xd, 0x3, 0x7fffffff, 0xd, 0x6, 0xfffffff7, 0xd, 0x0, 0x1e, 0x5, 0x800, 0x400, 0xbc, 0xcb4, 0x1, 0x8, 0xb8, 0x5, 0x80000000, 0xfffffffd, 0x3, 0x8, 0x2, 0x401, 0x9, 0x3, 0x9, 0xa79, 0x80, 0x40b, 0x1, 0x6, 0x2, 0x1, 0x7, 0x6, 0x0, 0xff, 0x40, 0x31e7, 0x3, 0x401, 0x3, 0xbe8, 0x2, 0x2, 0x4, 0x2, 0x9, 0x401, 0xfffffffd, 0x5, 0x55, 0x37d, 0xe3b0, 0x7, 0x6, 0xfffffff1, 0xfffffff7, 0xd1ea, 0x5, 0x4, 0x1, 0xfffffff7, 0xffff, 0x5, 0x0, 0x1, 0x200, 0x2, 0x1c0, 0xffffffff, 0x0, 0x0, 0xfffffff9, 0x1, 0xfffff6fe, 0x81, 0x0, 0xb, 0xffff, 0x1, 0xffffffff, 0x1, 0x5, 0xb, 0x0, 0xfffffff8, 0x6, 0xee5a, 0x0, 0x6, 0xb286, 0x2, 0x9a, 0x1, 0x7, 0x923, 0x5, 0x10, 0x3, 0x2, 0x1, 0x1ff, 0x967, 0x1, 0x1, 0x0, 0x6, 0x4000000, 0x3, 0x101, 0x3ff, 0x6, 0x5, 0x80000000, 0x6, 0x0, 0x1, 0x3, 0x5, 0x7, 0x119, 0x4, 0x100, 0x7, 0x7, 0x7, 0x78f3ff20, 0x6, 0x44, 0x1, 0x3, 0x8, 0x4, 0x7, 0x1, 0x9e, 0x7, 0x3, 0x3, 0xfffffffb, 0x7, 0x3, 0x1, 0x0, 0xbb1, 0x8000, 0x5, 0x80000000, 0x4b4b, 0x4, 0x4, 0x8, 0x10000, 0x75, 0x5, 0xe, 0x9, 0x7, 0x7d, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xd7, 0x6, 0x74, 0x80000000, 0x8, 0x4, 0xffff, 0x5a7d, 0x7, 0x3, 0x3, 0x781, 0x0, 0x2, 0x3, 0x4, 0xfffffffd, 0x8, 0x8, 0x8, 0xffffffff, 0x81, 0x1ff, 0xfffffde3, 0xfffffff9, 0x9, 0x7fff, 0xfffffffb, 0x4, 0x6edc745f, 0x9, 0x9, 0x2, 0x28, 0x1ff, 0x8, 0xf, 0xc890, 0x2, 0x8, 0x5, 0x7, 0x9, 0x10001, 0x3, 0xe, 0x7fff, 0x2, 0xb, 0x5, 0x0, 0x100, 0x1, 0x8000, 0x6, 0x10001, 0x100, 0x7, 0x7ff, 0x1, 0x2, 0x2, 0x5, 0x2, 0x4, 0x7ff, 0x8, 0x5, 0x8000, 0x7fffffff, 0x8, 0x6648, 0x7fffffff, 0xe1f, 0x4, 0x3f, 0x5, 0x8, 0x1, 0x8, 0x3, 0x5, 0x2, 0x7, 0x3, 0x1, 0xdf5d, 0x3, 0x4b, 0x8, 0x2, 0x4, 0xfffff046, 0x9, 0x9, 0x3, 0x1, 0x8, 0x1ff, 0x8, 0xd, 0x8001, 0x0, 0x8, 0x101, 0x5, 0x5, 0x8000, 0x8, 0x5, 0xb, 0xf, 0x2, 0x6, 0x3, 0x7ff, 0x6000, 0x5, 0x8, 0x7ff, 0x401, 0x81, 0x3, 0x6, 0x72, 0x5, 0x80c, 0x8, 0xf, 0xe8, 0xfffffffe, 0x40, 0x85c, 0x1, 0x257, 0x2, 0x5, 0xffffffff, 0x1, 0x1, 0x0, 0x9, 0x6, 0x5, 0x3, 0x0, 0xffffffff, 0x9, 0x5, 0x8000, 0x3ff, 0x4, 0xffffffff, 0x1, 0xfffffffe, 0x80, 0x1, 0x4, 0x2, 0x0, 0x2, 0x2, 0xa, 0xffffff81, 0x7, 0x4, 0x80, 0x0, 0x10, 0x4, 0xfffffffa, 0x5, 0x8000, 0x3, 0xfffffffa, 0x5, 0x242, 0x3, 0x7, 0x1, 0x0, 0xff, 0x4, 0x7, 0x4fe3, 0x6, 0x2, 0x1, 0x4, 0x7, 0x8, 0x8, 0x3, 0xd7f, 0x3, 0x101, 0x7fff, 0x3, 0x3, 0xd, 0x18d2, 0x8, 0x2, 0x7, 0x6, 0x10001, 0x6, 0x45, 0x8, 0x10, 0x8, 0x3ff, 0x100, 0x81, 0xe7, 0x18000, 0x2, 0x1000, 0xfffffff8, 0x17, 0x4, 0x1, 0x4e79, 0x9, 0x9, 0x4, 0x4000, 0x6, 0x2, 0xb, 0x10, 0x6, 0x5, 0x0, 0x1000, 0x2, 0x1, 0x56d, 0xe1e3, 0x7, 0x2, 0x6, 0x8, 0x7, 0x8a, 0x6, 0x8, 0x1, 0x5, 0xffffff0d, 0x7f, 0x8, 0x2, 0x194, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x4, 0x8, 0x80000000, 0x1, 0x1, 0x652, 0x1, 0x3, 0x8001, 0x3, 0x7, 0x4, 0x754, 0x7f, 0x7, 0x9, 0x6, 0x0, 0x6, 0x1, 0x69a355f6, 0x400, 0x0, 0x3, 0x200, 0x7, 0xf15, 0xbab3, 0x1, 0x480, 0x5, 0x9, 0x5, 0x7cb, 0x5, 0x7, 0x6, 0x80000000, 0xa, 0x4e8c, 0x13c, 0x5, 0xf, 0xab, 0x8001, 0x0, 0xfffffff9, 0x0, 0x0, 0xc, 0x4, 0xa4, 0x9, 0x5, 0x8, 0x5, 0x6, 0x1, 0x8, 0x2, 0x16, 0x7dae, 0x9, 0x1ff, 0x9ad, 0x9, 0x5, 0x40000000, 0x4, 0x3, 0x3, 0x800, 0x4, 0x400, 0xfffffff9, 0x0, 0x5a079378, 0x81, 0x2, 0x6, 0x9, 0x8, 0x6, 0x29, 0x0, 0x6, 0x4, 0x4, 0x8, 0x5, 0x6, 0x9, 0xb, 0xa0000, 0x80000000, 0x8, 0x80000000, 0x3ff, 0x4fd8, 0xd, 0x1, 0xff, 0x7, 0x10001, 0x8704, 0x7, 0x5, 0x8, 0x80, 0x101, 0x7, 0xe, 0x3, 0x2, 0x7, 0x3, 0x7, 0x0, 0x3, 0x7fffffff, 0x2, 0x4, 0x1f6, 0x8, 0x0, 0x14000, 0x1, 0x62d6, 0x17c5, 0x6, 0x1, 0x3, 0xfffffff0, 0x5, 0x5, 0x9, 0x9d, 0xbb58, 0x4f, 0x7, 0x5, 0x8, 0x7, 0x2, 0x3, 0xe, 0xffffb17b, 0x2, 0x1, 0xc3e, 0x245, 0x9, 0x7d31, 0x1, 0x1, 0x400, 0x9, 0xffffffff, 0xfffffffb, 0x4, 0x6, 0xfffffffc, 0x0, 0xfff, 0x3, 0x80000001, 0xd9, 0x100000, 0x1, 0x2, 0x3, 0x6, 0x5, 0xbc, 0x1000, 0xac, 0x10000, 0x9, 0x1, 0x840, 0x8a3, 0x3, 0x5, 0x2, 0x4, 0x7, 0x8, 0xa3, 0xc0, 0x777, 0x4, 0x10001, 0xb, 0x80, 0xff, 0x101, 0x80, 0xb, 0x48ee, 0x80000001, 0x9, 0x7, 0x80000000, 0x2537, 0x7, 0xdb6c, 0xb8, 0x800, 0xb, 0x92c, 0x6, 0xa, 0xa, 0x0, 0x401, 0x8, 0x884a3fd, 0xf1, 0x2, 0x9, 0xffffffff, 0x6, 0x0, 0x8, 0x1, 0x4, 0x1, 0xa, 0x0, 0x4, 0x0, 0x8d6e, 0x2, 0x8, 0x7, 0x1a, 0x7fffffff, 0x10, 0x8, 0x8, 0x3ff, 0x1, 0x7, 0x2, 0x4, 0x8001, 0x7f, 0x8, 0x2, 0x9, 0x9, 0x40000000, 0x4349, 0x3, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xbc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1, 0x5, 0x2, 0x7, 0x1, 0x131, 0x0, 0x0, 0x4, 0x6, 0x0, 0xc, 0x200, 0x9, 0x3, 0x1, 0x1605, 0x700, 0xda1, 0xa58f, 0x7, 0xcd4a, 0x1, 0x7, 0x3, 0x10000, 0x101, 0xfffffbff, 0xff, 0x9, 0x2, 0x1, 0x0, 0x3ff, 0x6, 0x94, 0x900e2b0, 0x8, 0xb, 0x3, 0x8001, 0x0, 0x3ff, 0x8, 0x6, 0x8, 0x8, 0x9, 0xaed, 0xce, 0x10000, 0x8, 0x1, 0x3, 0x6, 0x401, 0x8, 0xa, 0x5, 0x3f2c9028, 0x4, 0x0, 0x7ff, 0x7, 0x643, 0x1, 0xfe96, 0x2, 0xfffffff8, 0x8, 0x1, 0xa, 0x4, 0x980, 0xda, 0x80000000, 0x6c24131a, 0x9, 0x2, 0x10000, 0x0, 0x7, 0x8, 0xfffffffb, 0x5, 0x1, 0x0, 0x10, 0xfffffffd, 0x4, 0x4, 0x0, 0x93e, 0x0, 0x10, 0xfffffffd, 0x64e670bb, 0x0, 0x3, 0x5, 0x0, 0x9, 0xfffffff9, 0x3, 0x0, 0x0, 0x200, 0x5, 0x65, 0x8b3, 0xf1, 0x7, 0x9, 0xfffffffd, 0x4, 0x2, 0x5, 0xed61, 0x4, 0x2, 0x5, 0x4, 0x9, 0x3, 0x5, 0x6, 0x0, 0x1, 0x3, 0x2, 0x9, 0x7, 0x5, 0x8, 0x0, 0x7, 0x5, 0x1, 0x1ff, 0x40, 0x6, 0x9ce7, 0x8672, 0x5d, 0x80, 0x400, 0x8, 0x3d2, 0x6, 0xe, 0x5, 0x8001, 0x5, 0xfffffff3, 0x1000, 0x6, 0x8, 0x2, 0x10000, 0x5, 0x9, 0x0, 0xa4, 0x2, 0x8, 0xf8, 0x9, 0x1000, 0x3, 0xaea0, 0x3650, 0x747161b9, 0x8, 0x0, 0x4, 0xc, 0x6a4, 0xbc, 0xb04, 0xca, 0x6, 0x2, 0x2, 0x10, 0x80, 0xf, 0x6cac6109, 0x6, 0x2f9, 0x8, 0x374d, 0x8, 0x6, 0x80, 0x9, 0x0, 0x400, 0x2, 0xffffffff, 0xffffffff, 0x4, 0x1, 0x2, 0xc, 0x3, 0x6, 0xdce7, 0x7ff, 0x401, 0x2, 0x44f7, 0x1, 0x3, 0x5, 0x400, 0xbf, 0x1000, 0x1, 0x8, 0x4, 0xfffffffa, 0x800, 0x27e4, 0xe64, 0x519e, 0x6f1, 0x2, 0x3, 0x6, 0x6, 0x3, 0x0, 0x7, 0x0, 0x8, 0x0, 0xfffffff8, 0x4, 0x40, 0xcce, 0x8, 0x1, 0x6, 0xd, 0x2, 0x3ff, 0x5, 0x180000, 0x80000001, 0x1, 0x5, 0x9, 0x8, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x265}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffff6599}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10000, 0x80000001, 0x1, 0x80, 0x709a, 0x54ef, 0x8, 0x7f, 0x400, 0x8000, 0x3, 0x0, 0x7ff, 0x5, 0xfff, 0x7, 0xb822, 0x3, 0x1, 0x187, 0x6, 0x9, 0x8, 0xf, 0xd182, 0xb64, 0x3, 0x4, 0x2, 0xfff, 0x2, 0x1000, 0x8000, 0x2bb553f, 0x9, 0x1, 0x400, 0xfffffffa, 0x0, 0x1, 0x80000001, 0x2, 0x1, 0x7ff, 0x0, 0x8, 0xe, 0x8, 0x2, 0x3, 0x1, 0x1, 0x5, 0x48, 0x3ff, 0x4, 0x3, 0x7fff, 0x3, 0x50, 0x0, 0x3ff, 0x6, 0x80000001, 0x9, 0x8, 0x5, 0x4, 0x9, 0x0, 0x9, 0x1, 0x8, 0x20c, 0xa, 0xfffffffc, 0xb77, 0x8, 0xe, 0x80000000, 0x9, 0xd, 0xc09, 0x3, 0x53, 0x8, 0x4, 0x2, 0x99, 0x10, 0xff, 0x8, 0x1, 0x4, 0xe75, 0x8, 0x8, 0x7ff, 0xfffffff7, 0x4eb, 0x9, 0x3, 0x7, 0x56b7, 0x2baa, 0x3, 0x80000000, 0xc, 0x3, 0x7, 0x4f2, 0x8, 0x9, 0x8, 0x4, 0x596, 0xfffeffff, 0x3, 0x80, 0x9, 0x8, 0x9, 0x6, 0x80, 0x8, 0x7, 0x5, 0x1, 0x0, 0x81, 0x9f1, 0x0, 0x8, 0x2, 0x6, 0x1ff, 0x5, 0x6, 0x8000, 0x2, 0x3, 0x8c, 0x2f, 0x7, 0x8, 0x4, 0x469, 0x7, 0x1, 0xfffffc00, 0x3, 0x895, 0x4, 0xfffffc90, 0x2, 0x7, 0x5, 0x0, 0xd88a, 0x2, 0x6, 0x8, 0xf, 0xfffffffe, 0x4, 0x4a, 0x8001, 0x1, 0x1, 0x5, 0x5, 0x0, 0x4, 0x6, 0x9, 0x0, 0xf, 0x1a0, 0x1, 0x8, 0x4, 0x8001, 0x7, 0xda8e, 0x531d, 0xffff3b1d, 0xfffffffb, 0x4, 0xc772, 0x6, 0x4, 0x4, 0x8, 0x0, 0x40, 0x9, 0x1000, 0x4, 0x2, 0x5ae1, 0x5, 0xce4, 0x6, 0x400, 0x3, 0x5484000, 0x100, 0x2, 0x6f, 0x3, 0x4, 0x7, 0x800, 0x2, 0x6, 0x5, 0x624, 0x3, 0x6a3, 0x4, 0xfff, 0x8, 0x8, 0x1, 0x3, 0x7fff, 0x59c, 0x8, 0x8, 0x2, 0xffff, 0x9, 0xfc, 0x6, 0x10001, 0x4, 0x6, 0x5, 0x3ae, 0x6, 0x1, 0x3, 0x10, 0x0, 0x7, 0x7, 0x6, 0x2, 0x7fffffff, 0x61545646, 0x0, 0x7, 0x9, 0x1, 0x8, 0xfff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x7, 0x0, 0x100, 0x1, 0x750, 0x401, 0xb4e, 0xfff, 0xfca2, 0x81, 0x1, 0x5, 0x5, 0x0, 0x4, 0x81, 0xc3ab, 0x6, 0xfffffffd, 0x2, 0x9, 0x1, 0xf, 0x9, 0xfd4, 0x3, 0x5, 0x6, 0x2e, 0x200, 0x4, 0x3, 0x2, 0x10, 0x80000000, 0x297104fe, 0x0, 0x11, 0x20001, 0xce88, 0x80000001, 0xa8, 0x6, 0x6, 0x7, 0x1a2d, 0x0, 0x401, 0x6, 0x3, 0x2, 0x1, 0xed, 0x4, 0x7f, 0xf05, 0x0, 0x8, 0x6, 0x1000, 0x81, 0xf1, 0x3, 0x5, 0x3, 0x5, 0x1, 0x40, 0x1, 0x9, 0x7, 0x5, 0x6, 0x2, 0x5, 0x10, 0xfff, 0x0, 0x101, 0xffffffe9, 0x1, 0x8, 0x18, 0x5, 0xaa, 0x5, 0x0, 0xb, 0xfffffffd, 0x6, 0xfff, 0x3, 0x8, 0x2800000, 0x8, 0x5, 0x1, 0x4, 0x10001, 0x5, 0xaa, 0xa, 0x9, 0x4, 0x0, 0x6, 0x5, 0x1, 0x6, 0xe, 0x4, 0x88b, 0x6, 0xffff, 0xe22f, 0x4, 0x96, 0x0, 0xcc6e, 0x1, 0x800, 0x20f, 0x0, 0x7f, 0x8, 0x3, 0x1, 0x6, 0x6, 0xfff, 0x7fff, 0x7, 0x100, 0x8, 0x4f29, 0x6, 0x4, 0x2, 0x7, 0x6, 0x2, 0x1, 0x800, 0x4, 0xe8, 0xfffff6a4, 0x5, 0x7, 0xfffffffc, 0x1, 0x0, 0x6, 0xbb8, 0x18dc81c0, 0xc, 0x10000, 0xfffffffb, 0x3, 0x0, 0x3, 0x10000, 0x25ab, 0x8, 0x40, 0x1, 0x10, 0x4, 0x4, 0xd, 0x1, 0x9, 0x4, 0x4, 0x2, 0x3, 0x3, 0x200, 0x2, 0xffffff01, 0x9bd, 0x8, 0xffffffff, 0x6, 0xc3, 0x7, 0x3, 0x3, 0x7fffffff, 0x1, 0x8000, 0x6, 0x5, 0x7, 0x2000, 0x7f, 0xe8a, 0x2, 0x55a, 0x7, 0x400, 0xfffffffb, 0x10001, 0x80, 0x5, 0x3, 0x3ff, 0x4, 0x6f8, 0x44, 0x0, 0x17, 0x5, 0xffffff6a, 0x9, 0x7, 0x80000000, 0x0, 0x6, 0x1, 0x80, 0x3, 0x3, 0x0, 0xc815, 0xb, 0x52, 0x5, 0x83fc, 0x15b47633, 0xb4, 0x5, 0x4, 0xc296, 0xe, 0x7fff, 0x9, 0x7, 0x1000, 0x8, 0x3, 0x5, 0xfffffffa, 0x5, 0x1, 0x6, 0x4, 0x1, 0x3, 0x4f, 0x0, 0x7, 0x80000000, 0x7, 0x40]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x7, 0x5, 0x1, 0xb, {0xb7, 0x0, 0x2, 0x4, 0x100, 0xb}, {0x2, 0x1, 0x1000, 0x8, 0x1, 0x8}, 0x28c0, 0x1, 0x30000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x2, 0x7, 0xfffffffb, 0x9, 0xffffffff, 0x5, 0x6, 0x80000000, 0x3, 0x7f, 0x7, 0x3, 0x1, 0x10001, 0xfffffffa, 0x8, 0x7, 0x5, 0x8, 0x3, 0x800, 0x2, 0xe115420, 0xc4c, 0x2, 0xfffffffd, 0x6, 0x4, 0x6, 0x10001, 0x2, 0x80000001, 0x800, 0x741, 0x7, 0x0, 0x7e5, 0x1, 0x5, 0x8, 0xffffff01, 0x7, 0x9f7e, 0x401, 0xd3da, 0x3, 0x6a7b, 0xfffffffa, 0x7, 0x101, 0xfffffffc, 0xffffff00, 0x0, 0x61, 0x7704, 0x6d, 0x0, 0x3, 0x8, 0x4, 0x6, 0x6, 0x0, 0x4a, 0xffffffff, 0x7f, 0x101, 0x7ff, 0xfffffffd, 0x9, 0x1, 0x7, 0xd, 0x4, 0x3, 0x7000000, 0x381, 0xfffffffc, 0xd7e, 0x8, 0x7fffffff, 0x799, 0x3, 0x5, 0xfffffff7, 0x6, 0x1, 0x42, 0x8, 0x5, 0x1, 0x4, 0x7, 0x7, 0x5, 0x9, 0x100, 0x4, 0x8, 0x7, 0x0, 0xff, 0x10, 0x77c5, 0x0, 0x345, 0x66d, 0xffff, 0x400, 0xffff, 0x80000000, 0x7, 0x0, 0xa, 0x1ff, 0x1, 0xb, 0x194, 0x6, 0xfff, 0x8000, 0x7, 0x9, 0x3ff, 0xa14, 0x8, 0xdaf, 0x8001, 0x7, 0x8000, 0x3, 0x4699, 0x0, 0x7, 0x77cdb99e, 0x2, 0x401, 0x8, 0x0, 0x9, 0xa8, 0x60000000, 0x4, 0x1, 0x7, 0x3, 0xd1, 0x9, 0x199, 0x3, 0x7, 0xeaa8, 0x8, 0x5, 0x6, 0x6, 0x200000, 0x5, 0xffffe75f, 0x2bb8, 0x7805, 0x8, 0x2, 0xfff, 0x1ab884b0, 0x2, 0x7, 0x3, 0x5, 0x7fffffff, 0x2, 0x1, 0x1, 0xccb5, 0x5ca2, 0xffffff80, 0x9, 0x8, 0xffff, 0x81, 0x2bd, 0x0, 0x0, 0x3, 0x3, 0x4, 0x8, 0xb6f0, 0xfff, 0x60a, 0x3ff, 0x6, 0x800, 0xa, 0xbb6, 0x0, 0x7ff, 0x5, 0x7, 0x800, 0x10, 0x1, 0x98c, 0x2, 0xd3fd, 0x8, 0x101, 0x4, 0x80, 0x0, 0x8, 0x81, 0x1, 0x2, 0xfffffffc, 0xfb01, 0x1, 0x7f, 0x0, 0x1, 0x8, 0x7fffffff, 0xfffffffd, 0x80000000, 0x0, 0x8, 0x8, 0x0, 0x6, 0x7, 0x7, 0x2, 0x4, 0x6, 0x0, 0x2, 0x1000, 0x400, 0x80000001, 0x1, 0x3, 0xf553, 0x42c1, 0x8, 0x240, 0xffffffff, 0x2, 0x1000, 0x9, 0x6, 0x4, 0x9, 0x5, 0x2, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x8, 0x100, 0xd, 0x0, 0x1, 0x2, 0x8000, 0xa8f, 0x0, 0xe6ae, 0x9, 0xbed0, 0x8, 0x5, 0x8, 0xfffffc01, 0x1487, 0x3, 0x6, 0x525, 0x7, 0x0, 0x7, 0x7f, 0xa, 0x800, 0x6, 0x3, 0x0, 0x15b0, 0x3, 0xffffffff, 0xdc5e, 0x4, 0xff, 0x3, 0x6, 0xe99b, 0x4, 0xd386, 0x9, 0x9, 0x92, 0x800, 0x4, 0x6, 0x6, 0x9, 0xfa, 0xe2, 0x4, 0x8, 0x5, 0x7, 0x15f, 0x2f0, 0x5, 0xfffffe00, 0x4, 0x3, 0x75, 0x10, 0x0, 0x2, 0xfffffffb, 0x5, 0x6, 0x3, 0x1, 0x100, 0x9, 0x7fff, 0x3, 0x0, 0x98de, 0x100, 0x8, 0x67e4, 0x4, 0x0, 0x0, 0x4, 0x9e, 0x3, 0x20, 0x8, 0x5, 0x3, 0x2, 0xe7, 0x8001, 0x1, 0x5e7f734b, 0x10000, 0xfffffff5, 0x30, 0x0, 0xe849, 0x7, 0x200, 0x7ff, 0xfffff945, 0xa, 0x5, 0x8, 0x81, 0x80, 0x10001, 0x100, 0xb, 0x60, 0x9b63, 0x6, 0x4, 0x0, 0x9, 0x6, 0x4, 0x400, 0x10b, 0x6, 0x8, 0x1, 0x7, 0x5, 0x101, 0x18, 0xc14, 0x2, 0x9de, 0x65, 0x9, 0x99, 0xfffffff9, 0x9, 0x3, 0xfffffff8, 0x9, 0x2, 0x2, 0x6, 0x3, 0x7, 0x2, 0x9, 0x7f, 0x6, 0x2634, 0x4, 0x8, 0x5, 0xee3, 0x0, 0x2, 0xfff, 0x4, 0x8, 0x5, 0x6, 0x4, 0x0, 0x18b4, 0x7, 0x6, 0x5, 0x0, 0x3ff, 0x9, 0x0, 0xc, 0x3, 0x10001, 0x7, 0x78b2ca94, 0xb, 0x8bf9, 0x3, 0x8001, 0x0, 0x3, 0x1, 0x6b50, 0xb2e0, 0x1b9600, 0x3, 0x3, 0xfffffe00, 0x4, 0x7f, 0x4, 0x2, 0x4, 0x7433ae29, 0x9, 0xfff, 0x6, 0x1, 0x6, 0x4, 0x4, 0x9fe, 0xa219, 0x0, 0x1ff, 0x7, 0x7, 0x5, 0x3, 0x5, 0x10001, 0x1, 0x4800, 0x8, 0x10000000, 0x400, 0x0, 0x5, 0x8, 0x7ff, 0x5919add4, 0xffffff17, 0x1, 0xa, 0x1, 0x5, 0xfffffdc7, 0x8001, 0x1, 0xfffffff7, 0x2, 0x5e7, 0xe0000000, 0x3, 0x3, 0xffffff05, 0x7ff, 0x6, 0x8001, 0xf, 0x6, 0x3, 0x9, 0x15c, 0xffffffff, 0x7, 0x1, 0x3ff, 0x2, 0x10001, 0x2, 0x7, 0x0, 0x10000, 0xa98]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7f}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x2, 0xc, {0x8, 0x1, 0x5, 0xb, 0x5, 0xffffa438}, {0x3, 0xbd4289656466523f, 0x0, 0x5, 0x8, 0x3}, 0x5, 0xb}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x3, 0x9, 0x80000001, 0x2, {0x4a, 0x0, 0x4b6, 0xe7cb, 0x80, 0x2}, {0xff, 0x2, 0x375a, 0x3, 0x8, 0x5}, 0x7, 0xff, 0x7ff}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x6, 0x69, 0xfffffffa, 0x6, 0x1, 0x4, 0x3, 0x2, 0x9, 0x8, 0x4735974e, 0x5, 0x3, 0x8, 0x9, 0x6, 0x2, 0xffff8001, 0x4b52, 0x7, 0x9, 0x7f, 0x1, 0x501, 0x9, 0x10001, 0x4, 0x4, 0x10, 0x4, 0x4, 0xfffffff9, 0x4, 0x2, 0xffffffff, 0x6, 0x3, 0x0, 0x8000, 0x7, 0x6, 0x6, 0x2, 0x8, 0x8000, 0x2, 0x1, 0x80000000, 0x67, 0xff, 0x5, 0xa, 0x6, 0x5, 0xa80e, 0x5, 0x8001, 0x1000, 0x10, 0x1, 0xe863, 0xfffffff7, 0x100, 0x9, 0x5, 0x4, 0x7, 0x8, 0x5, 0x7f, 0x5770, 0x4, 0x4bc, 0x9, 0xb061, 0x1, 0x0, 0x58eb25b3, 0x2, 0x7, 0x6, 0xf1, 0x7f, 0x8, 0x6, 0x6, 0x8001, 0x82, 0x3800, 0x6, 0x7, 0x0, 0x9, 0x5, 0xc7d, 0x4, 0xb77, 0x3, 0x140, 0xf90, 0x2, 0x7, 0x2, 0x6, 0x3, 0x80000001, 0x8b5, 0x7, 0x101, 0x401, 0x4, 0x10001, 0xfffffff9, 0x7fffffff, 0xc1e, 0x3, 0xff, 0x1, 0x8, 0x1, 0x6, 0x9, 0x6, 0xfffff471, 0xb8fa4a17, 0x2, 0x3, 0x6, 0x2, 0x6, 0x6, 0x3, 0x9, 0x8, 0x2, 0x9, 0x0, 0xfffeffff, 0x5, 0x57e1, 0x5, 0x76f9, 0x101, 0x10000, 0x1, 0x100, 0xffc000, 0x6, 0x2, 0x9, 0x1, 0x5, 0x296, 0xd, 0xd, 0x8, 0x7, 0xfffffffb, 0x7, 0x1, 0x3, 0x2, 0xe70, 0x5, 0x1, 0xffff, 0xf8, 0x3ad, 0x100, 0x4, 0x7fffffff, 0x8, 0x8, 0x5, 0x9, 0x80000000, 0x7fffffff, 0x7, 0x0, 0x0, 0x7, 0x80, 0x1, 0x80000001, 0x8, 0x8, 0x6, 0x5, 0x7, 0xa5, 0x7fffffff, 0x6, 0x7c, 0x1, 0x7, 0x6, 0x5, 0x1, 0x9, 0x1ff, 0x9, 0x1, 0x9f, 0x6, 0x1, 0x0, 0x6, 0xf, 0x9, 0xcf34, 0x5, 0x6, 0x3, 0x7, 0x5, 0x1, 0x1, 0x3, 0x1, 0x2, 0x92c2, 0x400, 0x6, 0x8, 0xffffffff, 0x2, 0x2, 0x80000000, 0x5, 0x40, 0x9, 0x1, 0x1f46, 0x1, 0x5, 0x6, 0x1b, 0x0, 0x4, 0x90f9, 0xbf4c, 0x5, 0x3, 0x6, 0xfffffffc, 0x2, 0x33, 0x1, 0xe, 0x7, 0x80000000, 0x10, 0xfffffe6a, 0x2, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x8, 0x80, 0x0, 0x200, 0x1, 0x0, 0xfffffbff, 0x800, 0xc6e, 0x5, 0x2, 0x8, 0x80, 0x1, 0x5, 0xeab5, 0x4, 0xf, 0xfffffffa, 0xc, 0x1, 0x401, 0x6504851a, 0x6, 0xa8, 0x800, 0x7, 0x8, 0x9, 0x2, 0x1, 0xb, 0x0, 0xbb1, 0x1, 0x9, 0x69a1c3cb, 0x3, 0x1, 0x9, 0x25, 0xd1b0, 0x5, 0xdecf28e, 0x2, 0x101, 0x87, 0xf, 0x3ff, 0x0, 0x8, 0x3ff, 0x400000, 0x4, 0x2, 0xfffffffa, 0x6ba, 0x0, 0x2, 0x2, 0x6, 0x4, 0x9, 0x23, 0x8000, 0x6, 0x1, 0x2, 0x2, 0x6, 0x9, 0x100, 0x10001, 0x4, 0x4, 0xd, 0x14000, 0xd93, 0x400, 0x0, 0x231, 0x1, 0x8, 0x7, 0x58, 0x0, 0x9456, 0x400, 0x1, 0x7fff, 0x5, 0x101, 0x4, 0x9, 0x8, 0x4139, 0xfff, 0x4, 0x40, 0xe74, 0xfff, 0x81, 0x4, 0xb9, 0xf86, 0x400, 0x9, 0x4, 0x4, 0x7, 0x1, 0x7, 0x250, 0x6, 0xfe, 0x1, 0x8, 0x7, 0x7fffffff, 0x3, 0x3, 0x80000001, 0xfffff801, 0x8001, 0xffffffff, 0x6, 0xfffffffc, 0xfffffff9, 0xffffffff, 0x117, 0xfffffffb, 0x7, 0x7, 0x5, 0x6, 0x7, 0x3, 0x7, 0x6, 0x3, 0x2, 0x0, 0xfff, 0xd29, 0xdeb7, 0x9, 0x101, 0x7fffffff, 0x2, 0x2, 0x8, 0x11b, 0x9, 0x1, 0x3, 0xfffffff9, 0x2, 0x580, 0xbe2, 0x100, 0x101, 0x1, 0x8, 0x6, 0xc, 0x1, 0x7, 0x6, 0x3885, 0x1, 0x10000, 0x10, 0x5, 0x74, 0x0, 0xfffffff8, 0xfffffe01, 0x10, 0x8, 0x40, 0x4, 0x2, 0x4, 0x8f47, 0x101, 0x40, 0x95, 0x80000001, 0x9, 0x7, 0x1, 0x2, 0x100, 0x6, 0x5, 0x3, 0x3, 0xfc, 0x0, 0xf5e, 0x9, 0x4, 0x9, 0x10000, 0x6, 0x7, 0x8, 0x2, 0x9, 0x3, 0x1, 0x80, 0xff, 0x6e4b1ce3, 0x6, 0xff, 0x10001, 0x9, 0x6, 0x3800, 0xd2, 0x6, 0x8, 0x40, 0xfff, 0x9, 0x8, 0x868, 0x6, 0x8001, 0xfffffff7, 0xc33, 0x10001, 0xb, 0x200, 0x6, 0xb697, 0x1, 0x4, 0x81, 0x0, 0x3, 0x80000000, 0x5, 0xffff6a8d, 0x7, 0x2, 0x9, 0x1, 0xf, 0x6e9e, 0x8, 0x19, 0x8, 0x80000001]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xfffffff9, 0x8001, 0x9, 0x7fffffff, 0xc, 0x0, 0xfd, 0x0, 0x1, 0x7fff, 0x101, 0x3, 0x589, 0x9, 0xf, 0x46, 0x7, 0x5, 0x1, 0x1, 0xfff, 0x7, 0x1, 0x6, 0x0, 0x800, 0x9, 0x0, 0xcd, 0x8, 0x7, 0xb, 0x6, 0x3ff, 0xa, 0xb46c, 0x0, 0x8, 0x5, 0xdea7, 0xf968, 0x7, 0x6, 0x101, 0x6, 0x2, 0x9, 0x2, 0x9, 0x8, 0x7fff, 0xaf8, 0x2, 0x8, 0x60000, 0x1, 0xc, 0x6, 0x2, 0xf4c8, 0x8001, 0x7, 0x0, 0x1ff, 0x5, 0xa, 0x10000, 0x1229, 0x1, 0x3, 0x7, 0x7fffffff, 0x8, 0x200, 0x4, 0x401, 0x8, 0x5, 0x7676, 0x8, 0x9, 0x3800000, 0xe, 0x3, 0x5, 0x8, 0x99, 0x3, 0x8001, 0x1, 0x6, 0x3, 0xd, 0x80000, 0x60e1008d, 0x56, 0xff, 0x400000, 0x5b, 0x9c28, 0x5, 0xffff8000, 0x5, 0x1, 0x4, 0x2, 0xffff, 0x1, 0x1, 0x8000, 0x6, 0x10000, 0x1, 0x5, 0x5, 0x1, 0x3, 0x1, 0xfffffffa, 0x5a71, 0x0, 0xb7, 0x200, 0x4, 0x5, 0x7, 0x7, 0x54b9, 0x4, 0x0, 0x1000, 0x7, 0x0, 0x6, 0x2, 0x6, 0x5fd, 0x8001, 0xfffffff9, 0x400, 0x200, 0x7, 0xa81, 0x80000000, 0x2, 0x5, 0x10001, 0x890, 0x76821f32, 0x9, 0x3, 0xf, 0x8a, 0x6, 0x5, 0x404, 0x8, 0x8, 0x2, 0xa, 0x0, 0x101, 0x2, 0x3, 0x3, 0x7ff, 0xed, 0xe872, 0xff, 0x6, 0x7fffffff, 0x25b, 0x5, 0x400, 0x825e, 0x8001, 0xa038, 0x6, 0x1, 0x2, 0x7, 0x1, 0x2, 0xb, 0xfffffffc, 0x5, 0x1ff, 0x800, 0x3, 0x0, 0x8, 0xe0000000, 0x8001, 0x1a2, 0xf9b, 0x5, 0x3, 0x0, 0x633, 0x0, 0x6, 0x3, 0xa, 0x66, 0x10000, 0x6, 0x0, 0x4, 0xc, 0x9, 0xffffffff, 0x4, 0xe, 0x40, 0x6, 0xe8e, 0x1, 0x10, 0x7, 0x8000, 0x5, 0x2, 0x9, 0x40, 0x5, 0xca66, 0x86c, 0x100, 0x800, 0x5, 0x1d49, 0x4, 0x200, 0x6, 0x6, 0x8, 0x0, 0x20000000, 0x1, 0x9, 0x401, 0x2, 0x0, 0x0, 0xa, 0xfffffaa8, 0x3, 0x80000001, 0x0, 0x8000, 0x8001, 0xfffffff7, 0x7, 0x8, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x5e, 0x4, 0x7, 0x80, 0x2, 0x2, 0x9d, 0x6, 0x0, 0x0, 0xd6, 0x1, 0xe581, 0x2, 0x7, 0x6, 0x8, 0xb, 0x2, 0x7fff, 0x883c, 0x0, 0x4, 0x40, 0x5, 0x2, 0x8, 0x6, 0x4, 0x2, 0x2, 0x2, 0x8233, 0x2, 0x17e4, 0xc, 0x5, 0x7b81, 0x0, 0xfd9, 0x1, 0x401, 0x10, 0x1936, 0x4, 0xd8ac, 0x6, 0x200, 0xffff, 0x8001, 0x7, 0x2, 0x7fffffff, 0x33, 0x1, 0x2, 0x400, 0x1, 0x10000, 0x85, 0x2, 0x3, 0x2, 0xc, 0x8000, 0x9, 0x0, 0x7844, 0xffffff00, 0x40e, 0xd2a, 0x49, 0x77b9, 0xffff, 0xffffffff, 0x6, 0x4, 0x7, 0xffffffff, 0x80000000, 0x2, 0x6, 0x80, 0x1, 0xffff7b49, 0x0, 0x8964, 0x5, 0x7ff, 0x8, 0x9, 0x93, 0x68, 0x4, 0x4, 0x6a5, 0x1000, 0x3, 0x7, 0x4, 0x6, 0x6, 0x5, 0xfff, 0x3, 0x7, 0x4, 0x7fff, 0x400, 0x1, 0x3, 0x9147, 0xda73, 0x80000000, 0xf520, 0x7, 0xfffffff8, 0x2, 0x5, 0x1, 0xba7, 0x8, 0x6, 0x6, 0x7720b31a, 0x2, 0x9, 0xf, 0x7fff, 0x6, 0x9, 0xa9c3, 0x45a5, 0xfffffff8, 0x8, 0x4, 0x3, 0x6, 0x6, 0x7, 0xabf, 0x2000000, 0x4, 0x6, 0x7, 0x4, 0x3d8e0e0d, 0x8a5, 0x800, 0x3, 0x1, 0x0, 0x96ef, 0x9, 0xe2, 0x7, 0x1000, 0x3, 0x8000, 0x0, 0x1000, 0x5, 0x7, 0x74, 0x6, 0x6, 0x655, 0x5, 0xfff, 0xe, 0x8d5, 0x7, 0x7f, 0x9, 0xf, 0x1, 0xe0e, 0x1, 0x7, 0xf2, 0x5, 0x10, 0x9, 0x400, 0xd177, 0xffff7c9c, 0x7fffffff, 0x9, 0x7, 0x2, 0x6, 0x2, 0x4, 0x9, 0x5, 0x2, 0x3, 0x2, 0x1, 0x0, 0x6, 0xfffffffa, 0xff, 0x1, 0x26, 0x3d86, 0x4, 0x6, 0x5, 0x6, 0x1, 0x3, 0x6, 0xd, 0x9, 0x454, 0x1ff, 0x4, 0x7fff, 0x6, 0x0, 0xc58867, 0x4, 0x0, 0x7, 0x7, 0x2, 0x1, 0x1, 0x80000001, 0x1, 0x881, 0x4, 0x4, 0xb, 0x3, 0x1a65, 0x0, 0xd, 0x10001, 0x2, 0xd, 0x7, 0x10, 0x7ff, 0x10001, 0x3, 0x5, 0x52e, 0x3, 0x2, 0x14000, 0x5, 0x3, 0x7fff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x0, 0x1, 0x5bc, 0x1, {0x9, 0x2, 0x4, 0x3, 0x64, 0x7}, {0x6, 0x1, 0x5, 0x4, 0xdadc, 0x5}, 0x9, 0xc, 0xfffffe01}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xde, 0x3, 0x80, 0x7, 0x4, 0xb, 0x81, 0x10, 0x81be, 0xfffffff8, 0x1, 0x9, 0x2, 0x6, 0x3, 0x9, 0x1, 0x9c, 0x2, 0x76, 0x19141b82, 0x3, 0x8, 0x9, 0xffffffff, 0x2, 0x3, 0x94ef, 0x0, 0x1ff, 0x9, 0x88d, 0xfffffff9, 0xf, 0x4, 0x2, 0x2b, 0x2a94, 0x7, 0x7, 0x1, 0x1, 0x3, 0xab1, 0xffff, 0x1ff, 0x3, 0x1, 0x3, 0x8, 0x6, 0x7f, 0xff, 0x401, 0xf, 0x2fe, 0x8058, 0x2, 0x7f, 0x1, 0x40, 0x40, 0x9, 0x969, 0x5b, 0x8, 0x4, 0x401, 0x8, 0x4, 0x8, 0xfffffc00, 0x8000, 0x8, 0x6, 0x1, 0x2, 0x4d67b34c, 0x80, 0x5, 0xce, 0xffffffff, 0x9, 0x3, 0x4, 0x10001, 0x1, 0x1, 0xffffa94f, 0xb11c, 0x6, 0x7, 0x7f, 0x9, 0x2, 0x10000, 0x1, 0x3ff, 0xcdb7, 0x9, 0x2, 0x8, 0x7f, 0x400, 0x3f0, 0x0, 0x6, 0x8, 0xa7, 0x9, 0x1000, 0x8, 0x5, 0x5, 0xfff, 0x1000, 0x4, 0x2, 0x1, 0x8001, 0x7, 0xf, 0xa97e, 0x0, 0x3, 0x1ff, 0x10001, 0x8, 0x3, 0x7, 0xfffffff7, 0x8, 0x1, 0x6, 0x5, 0x7, 0x200, 0xe, 0x9468, 0x1, 0x82, 0x3, 0x81, 0x3, 0x7ff, 0x1, 0xc27, 0x6, 0x0, 0xe018, 0x7, 0x0, 0x3, 0x1, 0x401, 0x9, 0xfffffffe, 0x5, 0x0, 0x3, 0xefad, 0x29e, 0x200, 0x8, 0x9, 0x8, 0xfffffffb, 0xfffffffd, 0x1ff, 0x2, 0x10001, 0x2, 0xf00000, 0x2, 0x0, 0x7, 0x0, 0x3, 0xfffffff8, 0x1000, 0x65, 0x5, 0x5, 0x3, 0x8, 0x9, 0x4, 0x38866615, 0x0, 0x4, 0x1, 0x3, 0x80, 0x825e, 0x1, 0x81, 0x7, 0x0, 0x3, 0x1ff, 0x2, 0x7, 0x4, 0x1, 0x5, 0x3ff, 0xfffff800, 0x2, 0x9, 0x1, 0x3, 0x3a29, 0x81, 0x7fffffff, 0x2968, 0x7f, 0x7f, 0xa, 0x9, 0x1, 0x1904, 0x5, 0x7fff, 0x2, 0xac1f8000, 0x80000000, 0xffffff00, 0x8, 0x7fff, 0x9, 0x1, 0x400, 0x9727, 0x7, 0xfffffffa, 0x3, 0x3, 0x6, 0x9, 0x2, 0x9, 0x3, 0x100, 0x2, 0x2, 0x4, 0x5, 0x5, 0x1, 0x4, 0x7ff, 0x0, 0x9, 0x9, 0x8, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2b0000}]]}, {0x89, 0x6, "6eac7f9ae000d7a6774b91e91b1a38b28973cfcbe6c7aa0faf1bf188cd01399fde24805396eceea7a6c7465c7b1a68d29ef0f8bfbc3bd89e9d5753cbc278fb6512358a0d455f168f5f60a829e46ae652baf5826bc234e57f5158703c733df4eef92702d9325d21ee2b8e3cdb45ea297f09ab1320c839f7cd5476ae04803aadada90b3eb447"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x164, 0xf, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xd72b}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x1}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0x42}]}]}, {0xcc, 0x6, "97ec0eb32d0b5646523e124e6a783368d52578eb5aaa80ea756f6ccd1d66c6f6b2499a0361f35d686e4d4ffdd805956f454fa19b57d089ddca45cc370d8006562fd28fea86728a5877b997c909e6a5b298b33abab85b2aaac4dbcd7804a8a4e25cba894ab8baee5869fafd6ee66d57b1e5bfb5fda34200598133febc1bcbe41521f5438e9e62f2a62792d9d077ddbb4837dfea36a25033836ae7a4fd4e3659f77ab9604b1798bd18ce9fc7a50e70236c98feca00356e812bf73de2006defb77c2d268652e964778e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_csum={0x108, 0x15, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x9, 0x2, 0x1, 0x9}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x380000, 0x8, 0x5, 0x8000, 0x6}, 0x25}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd4, 0x31, 0x20000000, 0x3, 0x3}, 0x3c}}]}, {0x85, 0x6, "0975f6c7f60752503aa8e65217f8f43f0be8a216e9e094a7e50035cb68dcebc6fa6196d72578eb490ceb1ab0373107ec0fd4ae55719576e1d9932083778465746be0d1b5e6231675aa8fabd11a410a09b47c017609f94becd0ecca7d4164591f479c7990dad86d13047df5f57f72c6a8d930888d2cdd090212acee23223dc1e196"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x3}}}}, @m_ct={0x10c, 0x9, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "fd19dbb7d759ae408b644cd9a9b1cccf"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}]}, {0xba, 0x6, "870d953cb0a5a046cb50f1322b176c746b0bb38b737a753f01843ebe03cb6233658f39bd87be38c07a9a7674574ffd0c7467de641446042b56cf182ca2b8934c1095c56d5cb518a228ec56659ef8c6713884b90e90bd42f430b19db36371ebbf48397f72313e0e7a8a7e767c3e00ce1e2f5a383ab0e392fce302409190cf3fad4cb5d682aa08b566b8b502eb7385f3f8813a42a122b3a9e5f0c0c52dd56aa968f90cb3f374d0db58396ca469dc8388d879547b7c04c4"}, {0xc}, {0xc}}}, @m_mpls={0x90, 0xe, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x4, 0x5, 0x372, 0xd}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0xf6}]}, {0x38, 0x6, "5689cee422b1f6ac1936589f9f546464b88bad1307ea79fa972b1aefe4453e18cd3dfef4748309c24aefff6a8eee33b6d3cab5b9"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @mcast2}, @TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0x1}, @TCA_FLOWER_KEY_CT_STATE={0x6}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xfc}}]}, 0x4d40}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0xfc, 0x0, 0x0, 0x7, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4054}, 0x4044004) (async)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
write(r0, &(0x7f0000000080)="040000000000", 0x6) (async)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r7, 0x400448ca, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r8, 0x400448df, &(0x7f0000000040)={0x0, 0x0, '\x00\b\x00'})

1.497088972s ago: executing program 2 (id=1360):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000ce0100000000d0085a168d0bf46d32345653600648d0a00120002000a", 0x3f, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004894}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in6=@loopback, {}, {0x3}, {0x4}, 0x70bd25, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}, 0x40000}}]}, 0x138}}, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44)
sendmmsg(r1, &(0x7f0000000280), 0x400000000000235, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800)
setsockopt$inet6_int(r1, 0x29, 0x1f, &(0x7f0000000440)=0x8, 0x4)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000001c0)={0x3, 0x1, 0x7ff, 0x4}, 0x10)

1.472464149s ago: executing program 0 (id=1361):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014004000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) (async)
recvmmsg(r4, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x400003}, {{0x0, 0x0, 0x0}, 0x2b}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)=""/59, 0x3b}, {&(0x7f0000007ac0)=""/268, 0x10c}, {&(0x7f0000007c00)=""/24, 0x18}, {&(0x7f0000007c40)=""/4096, 0x1000}], 0x4}, 0x8}], 0x4, 0x40, 0x0) (async, rerun: 64)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="540000000406010100000002000000000000000305000100070000000900020073797a300000000005000100070000000900020073797a3200000000050001000700000005000100070000000500010007000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000014}, 0x44040) (rerun: 64)
syz_genetlink_get_family_id$ethtool(&(0x7f0000008c40), r4) (async, rerun: 32)
r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r6}, &(0x7f0000000c00)=0x2, 0x0}, 0x20) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'vcan0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x19, 0x4, 0x4, 0xf}, 0x50)
r7 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000d00)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x44}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x10, 0x10}}]}}}]}, 0x40}}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001000)=@gettaction={0x22c, 0x32, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff25}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9b70}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x92}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x81, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x13}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdeee}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffffa}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async, rerun: 64)
syz_genetlink_get_family_id$ipvs(&(0x7f0000008c80), r5) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000008cc0), r4) (async)
r10 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_linger(r10, 0x1, 0x3d, &(0x7f0000000800)={0x1}, 0x8) (async)
sendmmsg$sock(r10, &(0x7f0000000840)=[{{&(0x7f0000000880)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0}}], 0x1, 0x8800) (async)
read(r4, &(0x7f0000008d00)=""/4096, 0x1000) (async, rerun: 32)
r11 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32)
setsockopt$inet6_int(r11, 0x29, 0x35, &(0x7f0000000900)=0x8000, 0x4) (async)
setsockopt$inet6_IPV6_HOPOPTS(r11, 0x29, 0x36, &(0x7f0000000940)=ANY=[], 0x8)

1.463833698s ago: executing program 1 (id=1362):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0x21}, {0x9, 0x6, "812ce6ce98"}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket(0x2, 0x80805, 0x0) (async)
socketpair(0x0, 0x5, 0x8, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x28, 0xd, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001180), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x1d, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040194)
getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9)

1.304837212s ago: executing program 4 (id=1363):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fe8000000000000000000000000000bb000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000040000feffffffffffffff0000002abd700005350000020001002000000000000000480003006465666c61746500"/231], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@private1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0xfb5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x140}}, 0x844)
r2 = socket(0x1d, 0x2, 0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', <r4=>0x0})
bind$can_j1939(r2, &(0x7f0000000500)={0x1d, r4, 0x200000000003}, 0x18)
recvfrom$unix(r2, 0x0, 0x0, 0x40, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x3, 0x0, 0x4, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94)

1.282460925s ago: executing program 3 (id=1364):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100d0c7ed4dfedbdf2508"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000000)=@buf)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0xa, 0x0, 0xa, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x58}, 0x94)

1.25640744s ago: executing program 2 (id=1365):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r0, &(0x7f0000000040)="4c00000011000f14001100020000080002000000200000", 0x17)
syz_emit_ethernet(0x67, &(0x7f0000000240)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x31, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "7a1d79", 0x0, 0x89, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [], "cd"}}}}}}}, 0x0)

1.12478739s ago: executing program 4 (id=1366):
socket$nl_route(0x10, 0x3, 0x0)
socket(0xa, 0x5, 0x0) (async)
socket(0x2, 0x80805, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) (async)
unshare(0x22020400) (async, rerun: 32)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000010000000000000000000000911149000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)

1.035675795s ago: executing program 2 (id=1367):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0) (async)
r2 = socket(0xa8b0e392e48afa0e, 0x1, 0x8)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f00000000c0), 0x4)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000190001002bbd700000000000ff010000000000000000000000000001fe80000000040000000000000000000f00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000729900000000000002000000000000080100000000000000010000000000000044000500fc020000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/180], 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r5, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async)
connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e23, 0x8020000c, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000040)={0x2f}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r7=>0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000280)={r7, 0xffff}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', <r8=>0x0}) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2)
sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x60, r9, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x2b}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1ff, 0xb74d}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x14}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0xc0c4) (async)
r10 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r10, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
r11 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000003000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a", 0x39}, {&(0x7f0000000680)="ff", 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x40804) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r12=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x2001c004)

1.010668774s ago: executing program 1 (id=1368):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xfde, &(0x7f0000001e00)=""/4062, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94)

1.010413843s ago: executing program 3 (id=1369):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000300)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0)

908.880154ms ago: executing program 1 (id=1370):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000800)=0x9, 0x4)
pipe(&(0x7f0000000840)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x6, 0x4)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000380)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x1f4, 0xe, 0x0, &(0x7f0000000480)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50)

865.312984ms ago: executing program 0 (id=1371):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={<r3=>0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000300)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e24, 0x800, @private1, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf9}, &(0x7f0000000400)=0x9c)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_MAX_SP={0x5}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x88}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x2100, 0x0, &(0x7f00000002c0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000ec0)={0x28, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x1a}, @nested={0x4, 0x37}]}, 0x28}], 0x1}, 0x4040010)
socket$netlink(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000300)=0x10) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e24, 0x800, @private1, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf9}, &(0x7f0000000400)=0x9c) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_MAX_SP={0x5}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x88}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x2100, 0x0, &(0x7f00000002c0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000ec0)={0x28, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x1a}, @nested={0x4, 0x37}]}, 0x28}], 0x1}, 0x4040010) (async)

819.000243ms ago: executing program 3 (id=1372):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2d, 0x25dfdc03, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0x10, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8800)
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x7)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'tunl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x4}}}]}, 0x3c}}, 0x4000010)
sendmmsg$inet(r4, &(0x7f0000000b00)=[{{0x0, 0x4b, &(0x7f0000000b40), 0x1}}], 0x1, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xef}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000380), 0x2)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x4, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x1, 0x3, 0x760cda05bcf95fa0}]}, &(0x7f0000000c40)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r8}, 0x0, &(0x7f0000000580)=r9}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f0000000680)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c000000"], &(0x7f0000000840)='GPL\x00', 0x5, 0xbf, &(0x7f0000000880)=""/191}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'syz_tun\x00', <r14=>0x0})
r15 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockname(r15, 0x0, &(0x7f0000000c80))
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r13, r14, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, &(0x7f00000009c0), 0x401}}, 0x30)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000a00)=r10, 0x4)
sendmsg$inet(r12, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x20000000)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0)

709.083587ms ago: executing program 1 (id=1373):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@delchain={0x48, 0x64, 0xf31, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff3, 0xffff}, {0xf, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'rose0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c4}, 0x4804)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x8, 0x2}, 0xe)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000580)=@nat={'nat\x00', 0x19, 0x3, 0x490, [0x2000000000c0, 0x0, 0x0, 0x2000000000f0, 0x200000000460], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x9, 0x3, 0x10, 'pimreg0\x00', 'ip6_vti0\x00', 'ip6tnl0\x00', 'bond_slave_0\x00', @multicast, [0xff, 0xff, 0xff, 0xff], @broadcast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0x0, 0xc0, 0xe0, 0x130, [], [@snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, 0xffffffffffffffff}}}, @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffc}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0xc, {0x2d}}}}}, {0x3, 0x40, 0x0, 'ipvlan0\x00', 'pimreg0\x00', 'veth1_to_batadv\x00', 'pim6reg0\x00', @empty, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x0, 0x198, 0x198, 0x210, [@comment={{'comment\x00', 0x0, 0x100}}], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0xb9a8, 0x7, 0x0, 0x0, "fd881d953b2cabf9bfb234c134a63312f25a93d7d792bddf03a8aeddcb764bbd8ea2917de956ea7708f7c42b0f40e9554e7bf95a968d718e98954c70d8e3c620"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x3, 0x20, 0x6003, 'team0\x00', '\x00', 'macvlan1\x00', 'batadv0\x00', @broadcast, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @random="89db1dce4373", [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xc0, [], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x5, 'syz1\x00', {0x3}}}}}]}]}, 0x508)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) (async)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) (async)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@delchain={0x48, 0x64, 0xf31, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff3, 0xffff}, {0xf, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'rose0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c4}, 0x4804) (async)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x8, 0x2}, 0xe) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000580)=@nat={'nat\x00', 0x19, 0x3, 0x490, [0x2000000000c0, 0x0, 0x0, 0x2000000000f0, 0x200000000460], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x9, 0x3, 0x10, 'pimreg0\x00', 'ip6_vti0\x00', 'ip6tnl0\x00', 'bond_slave_0\x00', @multicast, [0xff, 0xff, 0xff, 0xff], @broadcast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0x0, 0xc0, 0xe0, 0x130, [], [@snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, 0xffffffffffffffff}}}, @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffc}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0xc, {0x2d}}}}}, {0x3, 0x40, 0x0, 'ipvlan0\x00', 'pimreg0\x00', 'veth1_to_batadv\x00', 'pim6reg0\x00', @empty, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x0, 0x198, 0x198, 0x210, [@comment={{'comment\x00', 0x0, 0x100}}], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0xb9a8, 0x7, 0x0, 0x0, "fd881d953b2cabf9bfb234c134a63312f25a93d7d792bddf03a8aeddcb764bbd8ea2917de956ea7708f7c42b0f40e9554e7bf95a968d718e98954c70d8e3c620"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x3, 0x20, 0x6003, 'team0\x00', '\x00', 'macvlan1\x00', 'batadv0\x00', @broadcast, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @random="89db1dce4373", [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xc0, [], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x5, 'syz1\x00', {0x3}}}}}]}]}, 0x508) (async)

492.903806ms ago: executing program 3 (id=1374):
syz_emit_ethernet(0xed, &(0x7f0000000280)={@link_local, @remote, @void, {@llc={0x4, {@llc={0x80, 0x4, "d6", "9106d9946538cf6cebf449e9a4ca906809645ef1c3642d9cade5ebcce8d03a2f070e22f4fdfd8cc400179c659504a98d1c2a2498500a6a92a44f70e67ec905d1adc3426bda0da530a37d05e1f8fdd62b43876bbd456bb05edd51b8b9376d8f56174d9a6c194db911e7da020da7ced657ae879b235eeac39eb8f3ce62d0dfbce3c3372738c8704d4ec3b3f48f2039d9daf66d86e5b0850e99927cecb8aa5e5fbdd644ab0191139c36905bf32a87be2f881f060c24100d8ab422d940e8a6e6346d216e9480a3c8b557774251870fd46dc27a53d2e9332465ca5112ebf9"}}}}}, 0x0) (async, rerun: 64)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gre0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) (async)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000380)=0xe9, 0x4) (async, rerun: 64)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000003c0)=0x4, 0x4) (async, rerun: 64)
sendmsg$netlink(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="0201140084dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x14048802}, 0x40488d0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r4, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) (async)
r6 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x0, 0x10, r6, 0x0)

316.658143ms ago: executing program 4 (id=1375):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$unix(r0, &(0x7f0000000080)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x24, {0x0, 0xee01}}}], 0x20, 0x10000}, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9, 0x32, 0xffffffffffffffff, 0x34d4c000)
r1 = socket$kcm(0xa, 0x3, 0x87)
sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x5, @loopback, 0x1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000380)="1b", 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x20040004)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x80000002, r2}, 0x38)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
shutdown(r3, 0x1)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000c00)={r2, &(0x7f00000001c0)=')', &(0x7f0000000000)=@buf="abdefa7570d6348e9ec86043d864cee111c02d7bcb28bcd59469fe75d39ca2af86ed2962bea4baa309abeb5a1d54117c73da09f206c50052cee500000000000000", 0x2}, 0x20)

177.466105ms ago: executing program 1 (id=1376):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
r0 = socket(0x840000000002, 0x3, 0x100)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, 0x0, 0x0) (async)
close(0x3) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async, rerun: 32)
r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) (async)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) (async, rerun: 32)
connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10) (async, rerun: 32)
bind$inet(r3, &(0x7f0000000980)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f00000009c0)=0x4, 0x4) (async)
connect$inet(r3, &(0x7f0000000a00)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) (async)
sendmmsg$inet(r0, &(0x7f0000000a80), 0x4000095, 0x0) (async, rerun: 32)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 32)
bind$bt_l2cap(r5, 0x0, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x6, 0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) (async, rerun: 32)
openat$cgroup_ro(r5, &(0x7f0000000d80)='cgroup.controllers\x00', 0x0, 0x0) (async, rerun: 32)
socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 64)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000dc0)=0x40000004, 0xfffffe5b) (async, rerun: 64)
bind$inet(0xffffffffffffffff, &(0x7f0000000e00)={0x2, 0x4e23, @multicast1}, 0x10) (async)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e40), 0x0, 0x40080) (async)
r6 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r6, &(0x7f0000000e80)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24)
sendmsg(r1, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x109, 0x1, "03"}, {0x10, 0x103, 0xe}, {0x38, 0x88, 0x3, "743c43c144cb4241f4c745ed799394436bfb038117b6afa1d85c65b0f4de07f028578d99de0dd0"}], 0x60}, 0x0) (async)
socket$rxrpc(0x21, 0x2, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@base={0x4, 0x4, 0x4, 0xc, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)

569.865µs ago: executing program 4 (id=1377):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='memory.events\x00', 0x275a, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
write$cgroup_subtree(r0, &(0x7f0000000880)=ANY=[], 0x32600)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r0, 0x206000)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000008c0)=0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000000740)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
close(0x3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x70, r5, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r0}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg1\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_FD={0x40, 0x17, @l2tp6=r0}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xcf}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r0}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048094}, 0x80)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000400)={'bridge0\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f00000004c0), 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="0500098c42987189bf6c880000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001000000000000400803000014c31b63f215eeb3"], 0x48}}, 0x0)
sendmsg$can_bcm(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000b80)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000660000000000000000000000000900000000000078418038438fdce0cd2b3838281032e4fba5ca0b62079268d0d61316bb154d6b91538ead42d93cfa28511f31bfad9a05e18640dfd2a4053e80b641b459"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000480)={'bridge0\x00', @broadcast})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x80200, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x40000)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400101a170a0103000000f80300000002000008"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x8094)
sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000818}, 0x8010)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010200000000000000000200000a0900010073797a30000000000900030073797a300000000014000480080001400000000408000240fffffffe74000000060a010400000000000000000200000a0900010073797a30000000000900020073797a300000000048000480440001800a000100717565756500000034000280060001400000000006000340000200000600034000010000060002"], 0xfc}}, 0x4000)
syz_genetlink_get_family_id$team(&(0x7f0000000380), r3)

0s ago: executing program 2 (id=1378):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x3, 0x80000001, 0x2e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @remote}, 0x20, 0x8, 0x101, 0x1}})
getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000000000)=""/95, &(0x7f0000000080)=0x5f)

kernel console output (not intermixed with test programs):

89][ T5860] Zero length message leads to an empty skb
[   84.082482][ T5860] netlink: 276 bytes leftover after parsing attributes in process `syz.0.12'.
[   84.083595][ T5860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'.
[   84.117079][ T5860] netlink: 276 bytes leftover after parsing attributes in process `syz.0.12'.
[   84.117512][ T5863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'.
[   84.135097][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.135115][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.305385][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.305404][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.401820][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.401840][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.965288][ T5893] syzkaller1: entered allmulticast mode
[   85.096993][ T5875] netlink: 'syz.0.14': attribute type 1 has an invalid length.
[   85.417593][ T5891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'.
[   85.905494][ T5928] bridge_slave_0: left allmulticast mode
[   85.905518][ T5928] bridge_slave_0: left promiscuous mode
[   85.906187][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.957495][ T5928] bridge_slave_1: left allmulticast mode
[   85.957520][ T5928] bridge_slave_1: left promiscuous mode
[   85.957721][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.000314][ T5928] bond0: (slave bond_slave_0): Releasing backup interface
[   86.026827][ T5928] bond0: (slave bond_slave_1): Releasing backup interface
[   86.065494][ T5928] team0: Port device team_slave_0 removed
[   86.079456][ T5928] team0: Port device team_slave_1 removed
[   86.083100][ T5928] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.083121][ T5928] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.085951][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'.
[   86.086091][ T5938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.29'.
[   86.129653][ T5928] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.129673][ T5928] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.133444][ T5928] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   86.221828][ T5943] netlink: 'syz.1.31': attribute type 4 has an invalid length.
[   86.515998][ T5788] rxe_eth0 speed is unknown, defaulting to 1000
[   86.663614][   T10] cfg80211: failed to load regulatory.db
[   86.798791][ T5965] netlink: 'syz.3.37': attribute type 9 has an invalid length.
[   86.807765][ T5965] bridge1: entered promiscuous mode
[   87.162421][ T5978] xt_IDLETIMER: timeout value is zero
[   87.401618][ T5994] syzkaller0: entered promiscuous mode
[   87.401651][ T5994] syzkaller0: entered allmulticast mode
[   87.501957][ T6003] bridge0: mtu less than device minimum
[   87.539948][ T5640] udevd[5640]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[   87.544604][ T5640] udevd[5640]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[   87.635731][ T6007] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   87.984281][ T6019] netlink: 'syz.4.50': attribute type 1 has an invalid length.
[   88.075215][ T6026] block nbd0: server does not support multiple connections per device.
[   88.083984][ T6026] block nbd0: shutting down sockets
[   88.305640][ T6032] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   88.347120][ T6032] bond1: (slave lo): Enslaving as an active interface with an up link
[   88.363954][ T6032] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   88.501591][ T6003] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   88.727739][ T6044] __nla_validate_parse: 5 callbacks suppressed
[   88.727758][ T6044] netlink: 260 bytes leftover after parsing attributes in process `syz.3.57'.
[   88.767291][ T6048] Illegal XDP return value 4294967294 on prog  (id 56) dev N/A, expect packet loss!
[   88.830476][ T6059] xt_hashlimit: invalid rate
[   88.973100][ T6044] vxcan1: tx drop: invalid sa for name 0x0000000000000001
[   89.032286][ T6070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.64'.
[   89.074706][ T6071] netlink: 96 bytes leftover after parsing attributes in process `syz.2.63'.
[   89.075095][ T6071] netlink: get zone limit has 4 unknown bytes
[   89.263428][ T6078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.67'.
[   89.443443][ T6078] syzkaller0: entered promiscuous mode
[   89.443465][ T6078] syzkaller0: entered allmulticast mode
[   89.671097][ T6095] Cannot find del_set index 1 as target
[   89.944049][ T6111] netlink: 'syz.3.75': attribute type 4 has an invalid length.
[   90.023936][ T6112] netlink: 260 bytes leftover after parsing attributes in process `syz.3.75'.
[   90.087429][ T6121] netlink: 220 bytes leftover after parsing attributes in process `syz.0.77'.
[   90.087451][ T6121] tc_dump_action: action bad kind
[   90.109052][ T6121] netlink: 220 bytes leftover after parsing attributes in process `syz.0.77'.
[   90.109072][ T6121] tc_dump_action: action bad kind
[   90.140678][ T6129] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.76'.
[   90.140873][ T6129] 0ªX¹¦Dö»: renamed from gretap0 (while UP)
[   90.153605][ T6129] 0ªX¹¦Dö»: entered allmulticast mode
[   90.396614][ T6138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.80'.
[   90.414734][ T6138] ipvlan2: entered allmulticast mode
[   90.414757][ T6138] syz_tun: entered allmulticast mode
[   90.526961][ T6142] netlink: 60 bytes leftover after parsing attributes in process `syz.2.82'.
[   90.527214][ T6142] unsupported nlmsg_type 40
[   90.828586][ T6147] veth0: entered allmulticast mode
[   91.105304][ T6151] bond1: (slave lo): Releasing backup interface
[   91.203744][ T6151] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[   91.326385][ T6151] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   91.327823][ T6159] vlan0: entered promiscuous mode
[   91.387234][ T6159] team0: Port device vlan0 added
[   91.604512][ T6164] sch_tbf: burst 48 is lower than device ip6gre0 mtu (1282) !
[   91.704411][ T6166] ip_tables: iptables: counters copy to user failed while replacing table
[   91.801696][ T6173] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   92.606025][ T6207] syzkaller1: entered promiscuous mode
[   92.606048][ T6207] syzkaller1: entered allmulticast mode
[   92.639980][ T6211] gretap0: entered promiscuous mode
[   92.643766][ T6211] vlan2: entered promiscuous mode
[   92.874817][ T6232] netlink: 'syz.4.107': attribute type 21 has an invalid length.
[   92.911132][ T6232] netlink: 'syz.4.107': attribute type 1 has an invalid length.
[   93.209784][ T6254] gre0: Caught tx_queue_len zero misconfig
[   93.440842][ T6261] sctp: [Deprecated]: syz.3.116 (pid 6261) Use of int in max_burst socket option deprecated.
[   93.440842][ T6261] Use struct sctp_assoc_value instead
[   93.485690][ T6264] xt_hashlimit: size too large, truncated to 1048576
[   93.532965][ T6268] Bluetooth: MGMT ver 1.23
[   93.547783][ T6268] Bluetooth: MGMT ver 1.23
[   93.549480][ T6268] Bluetooth: MGMT ver 1.23
[   93.551324][ T6268] Bluetooth: MGMT ver 1.23
[   94.185811][ T6322] __nla_validate_parse: 10 callbacks suppressed
[   94.185830][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'.
[   94.211328][ T6328] x_tables: duplicate underflow at hook 1
[   94.222168][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'.
[   94.361819][ T6335] netlink: 'syz.1.132': attribute type 6 has an invalid length.
[   94.361907][ T6335] netlink: 'syz.1.132': attribute type 6 has an invalid length.
[   94.430334][ T6339] netlink: 'syz.1.132': attribute type 6 has an invalid length.
[   94.430363][ T6339] netlink: 'syz.1.132': attribute type 6 has an invalid length.
[   95.012964][ T6361] netlink: 'syz.0.136': attribute type 22 has an invalid length.
[   95.193602][ T6373] netlink: 36 bytes leftover after parsing attributes in process `syz.2.137'.
[   95.193625][ T6373] netlink: 24 bytes leftover after parsing attributes in process `syz.2.137'.
[   95.307619][ T6381] netlink: 84 bytes leftover after parsing attributes in process `syz.1.141'.
[   95.327841][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.142'.
[   95.327856][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.142'.
[   95.347052][ T6384] erspan0: entered promiscuous mode
[   95.356159][ T6384] macvtap1: entered allmulticast mode
[   95.356179][ T6384] erspan0: entered allmulticast mode
[   95.367962][ T6384] netlink: 144 bytes leftover after parsing attributes in process `syz.0.142'.
[   95.463427][ T6387] netlink: 'syz.4.143': attribute type 1 has an invalid length.
[   95.803046][ T6404] ip6gre1: entered allmulticast mode
[   95.864155][ T6404] netlink: 'syz.3.151': attribute type 3 has an invalid length.
[   95.864177][ T6404] netlink: 16 bytes leftover after parsing attributes in process `syz.3.151'.
[   95.877382][ T6414] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   96.119926][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.159'.
[   96.333086][ T6450] xt_l2tp: missing protocol rule (udp|l2tpip)
[   96.856590][ T6481] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   97.250249][ T6493] syzkaller1: entered promiscuous mode
[   97.250270][ T6493] syzkaller1: entered allmulticast mode
[   97.520780][ T6510] netlink: 'syz.0.180': attribute type 39 has an invalid length.
[   97.715814][ T6530] netlink: 'syz.3.182': attribute type 10 has an invalid length.
[   97.760680][ T6530] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   98.116195][ T6550] TC_ACT_REPEAT abuse ?
[   98.118190][ T6548] TC_ACT_REPEAT abuse ?
[   98.503822][ T6573] dvmrp8: entered allmulticast mode
[   98.744733][ T6582] bridge0: port 3(vlan2) entered blocking state
[   98.744848][ T6582] bridge0: port 3(vlan2) entered disabled state
[   98.745006][ T6582] vlan2: entered allmulticast mode
[   98.770962][ T6590] netlink: 'syz.1.191': attribute type 2 has an invalid length.
[   98.775485][ T6582] vlan2: entered promiscuous mode
[   98.896885][ T6589] bond1 (unregistering): Released all slaves
[   99.002893][ T6590] !;: entered promiscuous mode
[   99.019692][ T6590] netlink: 'syz.1.191': attribute type 2 has an invalid length.
[   99.039523][ T6610] syzkaller0: entered promiscuous mode
[   99.039544][ T6610] syzkaller0: entered allmulticast mode
[   99.057405][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.062939][ T6590] netlink: 'syz.1.191': attribute type 2 has an invalid length.
[   99.065966][ T6590] netlink: 'syz.1.191': attribute type 2 has an invalid length.
[   99.072162][ T6590] netlink: 'syz.1.191': attribute type 2 has an invalid length.
[   99.099343][ T6588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.426232][ T6629] Bluetooth: MGMT ver 1.23
[  100.222611][ T6677] validate_nla: 43 callbacks suppressed
[  100.222630][ T6677] netlink: 'syz.1.201': attribute type 16 has an invalid length.
[  100.222642][ T6677] netlink: 'syz.1.201': attribute type 17 has an invalid length.
[  100.462057][ T6677] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  100.904035][ T6700] IPVS: ip_vs_add_dest(): tunnel port is zero
[  100.917284][ T6697] netlink: 'syz.1.210': attribute type 83 has an invalid length.
[  101.185296][ T6719] openvswitch: netlink: Port 536870913 exceeds max allowable 65535
[  101.306455][ T4947] block nbd0: Receive control failed (result -32)
[  101.306455][ T5651] block nbd0: Receive control failed (result -32)
[  101.459484][ T4947] Bluetooth: hci4: command 0x0405 tx timeout
[  101.617062][ T6749] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0
[  101.817856][ T6763] netlink: 'syz.4.224': attribute type 10 has an invalid length.
[  101.920172][ T6767] ip_tables: iptables: counters copy to user failed while replacing table
[  101.927705][ T6766] ip_tables: iptables: counters copy to user failed while replacing table
[  102.113744][ T6731] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  102.113767][ T6731] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  102.195670][ T6780] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  102.234379][ T6731] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  102.234399][ T6731] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  102.500178][ T6794] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  102.558851][ T6731] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  102.558873][ T6731] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  102.656038][ T6731] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  102.656062][ T6731] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  102.722835][ T6731] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  102.722856][ T6731] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  102.764949][ T6802] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  102.815919][ T6804] __nla_validate_parse: 41 callbacks suppressed
[  102.815939][ T6804] netlink: 48 bytes leftover after parsing attributes in process `syz.4.235'.
[  102.929364][ T6806] xt_bpf: check failed: parse error
[  103.255672][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.242'.
[  103.608803][ T6851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.245'.
[  104.323665][ T6896] netlink: 'syz.3.255': attribute type 1 has an invalid length.
[  104.479976][ T6896] bond0: (slave dummy0): Releasing backup interface
[  104.531149][ T6896] batman_adv: batadv0: Adding interface: dummy0
[  104.531168][ T6896] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.531193][ T6896] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  104.569746][ T6896] netlink: 'syz.3.255': attribute type 10 has an invalid length.
[  104.569765][ T6896] netlink: 40 bytes leftover after parsing attributes in process `syz.3.255'.
[  104.569790][ T6896] batadv0: entered promiscuous mode
[  104.569804][ T6896] batadv0: entered allmulticast mode
[  104.570533][ T6896] bridge0: port 1(batadv0) entered blocking state
[  104.570647][ T6896] bridge0: port 1(batadv0) entered disabled state
[  104.592564][ T6896] bridge0: port 1(batadv0) entered blocking state
[  104.592677][ T6896] bridge0: port 1(batadv0) entered forwarding state
[  105.019090][   T51] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  105.019109][   T51] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  105.117131][ T6940] netlink: 'syz.3.266': attribute type 1 has an invalid length.
[  105.117155][ T6940] nbd: illegal input index 393236
[  105.135366][ T6940] IPVS: stopping backup sync thread 6749 ...
[  105.200640][ T6941] netlink: 24 bytes leftover after parsing attributes in process `syz.2.264'.
[  105.514084][ T6959] netlink: 'syz.0.269': attribute type 1 has an invalid length.
[  105.623452][ T6960] SET target dimension over the limit!
[  105.623603][ T6960] SET target dimension over the limit!
[  105.623725][ T6960] SET target dimension over the limit!
[  105.623839][ T6960] SET target dimension over the limit!
[  105.623949][ T6960] SET target dimension over the limit!
[  105.624060][ T6960] SET target dimension over the limit!
[  105.624174][ T6960] SET target dimension over the limit!
[  105.624307][ T6960] SET target dimension over the limit!
[  105.624434][ T6960] SET target dimension over the limit!
[  105.657369][ T6960] SET target dimension over the limit!
[  105.701964][ T6966] netlink: 'syz.4.271': attribute type 1 has an invalid length.
[  105.744632][ T6958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.270'.
[  105.805998][ T6966] 8021q: adding VLAN 0 to HW filter on device bond2
[  105.964850][ T6980] bond2: (slave gretap1): making interface the new active one
[  105.967302][ T6980] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  105.984987][ T6982] tc_dump_action: action bad kind
[  106.191241][   T13] IPVS: starting estimator thread 0...
[  106.196771][ T6995] IPVS: ip_vs_edit_dest(): server weight less than zero
[  106.279648][ T6998] IPVS: using max 26 ests per chain, 62400 per kthread
[  106.803272][ T7027] netlink: 'syz.1.283': attribute type 1 has an invalid length.
[  106.806995][ T7026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.283'.
[  107.001017][ T7027] 8021q: adding VLAN 0 to HW filter on device bond1
[  107.015418][ T7028] bond1: (slave geneve2): making interface the new active one
[  107.025905][ T7028] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  107.029631][ T7023] netlink: 'syz.4.282': attribute type 2 has an invalid length.
[  107.302862][ T7054] ip6gretap0: entered promiscuous mode
[  107.304880][ T7054] vlan2: entered promiscuous mode
[  107.353309][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.287'.
[  107.539561][ T7073] netlink: 52 bytes leftover after parsing attributes in process `syz.3.293'.
[  107.675269][ T7082] netlink: 'syz.0.296': attribute type 2 has an invalid length.
[  107.690315][ T7082] netlink: 'syz.0.296': attribute type 2 has an invalid length.
[  108.015299][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'.
[  108.015543][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'.
[  108.073907][ T7112] netlink: 20 bytes leftover after parsing attributes in process `syz.4.304'.
[  108.103222][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'.
[  108.103279][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'.
[  108.443757][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'.
[  108.443812][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'.
[  108.725459][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.311'.
[  108.901171][ T7154] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.938967][ T7154] bridge_slave_1: left allmulticast mode
[  108.938992][ T7154] bridge_slave_1: left promiscuous mode
[  108.939220][ T7154] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.974235][ T7154] bond0: (slave bond_slave_0): Releasing backup interface
[  108.992275][ T7154] bond0: (slave bond_slave_1): Releasing backup interface
[  109.003358][ T7154] team0: Port device team_slave_0 removed
[  109.011441][ T7154] team0: Port device team_slave_1 removed
[  109.012258][ T7154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.012276][ T7154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.014157][ T7154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.014175][ T7154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  109.025240][ T7154] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  109.078808][ T7157] team0: Port device xfrm0 added
[  109.079079][ T7159] tipc: Started in network mode
[  109.079103][ T7159] tipc: Node identity ba62a275625b, cluster identity 4711
[  109.079824][ T7159] tipc: Enabled bearer <eth:team0>, priority 0
[  109.543258][ T7197] FAULT_INJECTION: forcing a failure.
[  109.543258][ T7197] name failslab, interval 1, probability 0, space 0, times 1
[  109.543471][ T7197] CPU: 0 UID: 0 PID: 7197 Comm: syz.2.323 Not tainted syzkaller #0 PREEMPT(full) 
[  109.543493][ T7197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  109.543512][ T7197] Call Trace:
[  109.543527][ T7197]  <TASK>
[  109.543536][ T7197]  dump_stack_lvl+0xe8/0x150
[  109.543568][ T7197]  should_fail_ex+0x410/0x560
[  109.543601][ T7197]  should_failslab+0xa8/0x100
[  109.543630][ T7197]  __kmalloc_cache_noprof+0x9e/0x600
[  109.543653][ T7197]  ? bpf_mark_reg_not_init+0x5f/0x1c0
[  109.543675][ T7197]  ? bpf_is_state_visited+0x2e49/0x48b0
[  109.543695][ T7197]  ? bpf_is_state_visited+0x2e49/0x48b0
[  109.543722][ T7197]  bpf_is_state_visited+0x2e49/0x48b0
[  109.543752][ T7197]  ? verbose+0x11d/0x1a0
[  109.543771][ T7197]  ? __pfx_bpf_verifier_log_write+0x10/0x10
[  109.543801][ T7197]  ? bpf_vlog_reset+0x1db/0x340
[  109.543831][ T7197]  do_check_common+0x2272/0x5660
[  109.543898][ T7197]  ? __pfx_do_check_common+0x10/0x10
[  109.543923][ T7197]  ? __pfx_verbose+0x10/0x10
[  109.543941][ T7197]  ? __pfx_bpf_disasm_kfunc_name+0x10/0x10
[  109.543974][ T7197]  do_check_main+0xa2/0x1f0
[  109.544000][ T7197]  bpf_check+0x2775/0x2ef0
[  109.544038][ T7197]  ? __pfx_bpf_check+0x10/0x10
[  109.544063][ T7197]  ? bpf_obj_name_cpy+0x194/0x1e0
[  109.544083][ T7197]  bpf_prog_load+0x14d1/0x1c20
[  109.544116][ T7197]  ? __pfx_bpf_prog_load+0x10/0x10
[  109.544164][ T7197]  __sys_bpf+0xd0d/0xd90
[  109.544194][ T7197]  ? __pfx___sys_bpf+0x10/0x10
[  109.544226][ T7197]  ? __fget_files+0x2a/0x420
[  109.544259][ T7197]  ? ksys_write+0x242/0x270
[  109.544281][ T7197]  ? __pfx_ksys_write+0x10/0x10
[  109.544307][ T7197]  __x64_sys_bpf+0xba/0xd0
[  109.544330][ T7197]  do_syscall_64+0x166/0x520
[  109.544347][ T7197]  ? trace_irq_disable+0x3b/0x140
[  109.544368][ T7197]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.544386][ T7197]  ? clear_bhb_loop+0x70/0xc0
[  109.544408][ T7197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.544426][ T7197] RIP: 0033:0x7f7b9f19f559
[  109.544451][ T7197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  109.544465][ T7197] RSP: 002b:00007f7ba00a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  109.544490][ T7197] RAX: ffffffffffffffda RBX: 00007f7b9f425fa0 RCX: 00007f7b9f19f559
[  109.544503][ T7197] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005
[  109.544522][ T7197] RBP: 00007f7ba00a4090 R08: 0000000000000000 R09: 0000000000000000
[  109.544532][ T7197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  109.544543][ T7197] R13: 00007f7b9f426038 R14: 00007f7b9f425fa0 R15: 00007ffccd41e468
[  109.544574][ T7197]  </TASK>
[  109.856832][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.324'.
[  109.922985][ T7203] tipc: Resetting bearer <eth:team0>
[  110.106005][ T7210] netlink: 'syz.3.327': attribute type 4 has an invalid length.
[  110.107171][ T7209] netlink: 'syz.3.327': attribute type 4 has an invalid length.
[  110.202953][ T5737] tipc: Node number set to 3627655797
[  110.316213][ T7222] netlink: 20 bytes leftover after parsing attributes in process `syz.0.330'.
[  110.560028][ T7200] syz.2.324 (7200) used greatest stack depth: 18056 bytes left
[  110.628995][ T7239] syzkaller0: entered promiscuous mode
[  110.629017][ T7239] syzkaller0: entered allmulticast mode
[  110.681028][ T7223] syzkaller1: entered promiscuous mode
[  110.681049][ T7223] syzkaller1: entered allmulticast mode
[  111.754620][ T7282] netlink: 'syz.2.339': attribute type 1 has an invalid length.
[  112.385080][   T12] IPVS: starting estimator thread 0...
[  112.449057][ T7291] bond1: (slave gretap0): making interface the new active one
[  112.449681][ T7291] bond1: (slave gretap0): Enslaving as an active interface with an up link
[  112.468130][ T7303] IPVS: using max 30 ests per chain, 72000 per kthread
[  112.572856][ T7301] bridge_slave_1: Caught tx_queue_len zero misconfig
[  112.608472][ T7311] wg2 speed is unknown, defaulting to 1000
[  112.608567][ T7311] wg2 speed is unknown, defaulting to 1000
[  112.609543][ T7311] wg2 speed is unknown, defaulting to 1000
[  112.610587][ T7311] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  112.610618][ T7311] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  112.610655][ T7311] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  112.700633][ T7311] wg2 speed is unknown, defaulting to 1000
[  112.707375][ T7311] wg2 speed is unknown, defaulting to 1000
[  112.720931][ T7311] wg2 speed is unknown, defaulting to 1000
[  112.722703][ T7311] wg2 speed is unknown, defaulting to 1000
[  112.724416][ T7311] wg2 speed is unknown, defaulting to 1000
[  112.920904][ T7319] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  112.924013][ T7319] bond2: (slave macvlan2): making interface the new active one
[  112.925241][ T7319] bond2: (slave macvlan2): Enslaving as an active interface with an up link
[  112.926242][ T5737] bond_slave_0: entered promiscuous mode
[  112.926274][ T5737] bond_slave_1: entered promiscuous mode
[  113.041392][ T7332] __nla_validate_parse: 4 callbacks suppressed
[  113.041410][ T7332] netlink: 20 bytes leftover after parsing attributes in process `syz.1.349'.
[  114.450964][ T7332] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  114.450998][ T7332] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  114.451034][ T7332] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  114.619071][ T7345] netlink: 20 bytes leftover after parsing attributes in process `syz.4.351'.
[  114.651944][ T7345] netlink: 28 bytes leftover after parsing attributes in process `syz.4.351'.
[  114.689672][ T7343] netlink: 'syz.4.351': attribute type 29 has an invalid length.
[  114.718467][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'.
[  115.363992][ T7386] netlink: 120 bytes leftover after parsing attributes in process `syz.4.361'.
[  115.542555][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'.
[  115.542633][ T7400] ip6tnl0: Caught tx_queue_len zero misconfig
[  115.542658][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.364'.
[  115.733314][ T7410] netlink: 36 bytes leftover after parsing attributes in process `syz.3.368'.
[  115.862162][ T7425] tipc: Resetting bearer <eth:team0>
[  115.864629][ T7425] team0: entered promiscuous mode
[  115.864649][ T7425] xfrm0: entered promiscuous mode
[  115.866716][ T7425] team0: entered allmulticast mode
[  115.866732][ T7425] xfrm0: entered allmulticast mode
[  115.869560][ T7421] block nbd0: reconnected socket
[  115.874760][ T5648] block nbd0: Receive control failed (result -32)
[  115.962222][ T7431] netlink: 52 bytes leftover after parsing attributes in process `syz.4.372'.
[  116.025547][ T7428] bridge2: entered promiscuous mode
[  116.025567][ T7428] bridge2: entered allmulticast mode
[  116.030769][ T7428] team0: Port device bridge2 added
[  116.163949][ T7451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.377'.
[  116.225748][ T7451] bond3: entered promiscuous mode
[  116.225771][ T7451] bond3: entered allmulticast mode
[  116.364382][ T7454] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  116.371084][   T10] wg2 speed is unknown, defaulting to 1000
[  117.344541][ T7494] netlink: 'syz.3.387': attribute type 1 has an invalid length.
[  117.354257][ T7494] gretap1: entered allmulticast mode
[  117.596540][ T7506] netlink: 'syz.3.389': attribute type 1 has an invalid length.
[  118.440574][ T7532] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  118.664224][ T7550] raw_sendmsg: syz.4.399 forgot to set AF_INET. Fix it!
[  118.703355][ T7552] lo: Caught tx_queue_len zero misconfig
[  118.710396][ T7550] __nla_validate_parse: 5 callbacks suppressed
[  118.710414][ T7550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.399'.
[  118.710466][ T7550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.399'.
[  118.740731][ T7555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.741565][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.928558][ T7564] netlink: 2108 bytes leftover after parsing attributes in process `syz.3.403'.
[  118.930502][ T7565] netlink: 28 bytes leftover after parsing attributes in process `syz.3.403'.
[  118.979071][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.012376][ T7568] xt_IDLETIMER: label is empty or not nul-terminated
[  119.130136][ T7581] veth0: Caught tx_queue_len zero misconfig
[  119.440297][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'.
[  119.440318][ T7604] netlink: 20 bytes leftover after parsing attributes in process `syz.2.416'.
[  119.489794][ T1160] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  119.489838][ T1160] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  119.489869][ T1160] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  119.489899][ T1160] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  119.618308][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.662788][ T7616] netlink: 27 bytes leftover after parsing attributes in process `syz.0.424'.
[  119.682248][ T7617] SET target dimension over the limit!
[  119.845540][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.425'.
[  119.901880][ T7631] netlink: 'syz.3.426': attribute type 1 has an invalid length.
[  119.934918][ T7645] netlink: 'syz.4.429': attribute type 13 has an invalid length.
[  120.038598][ T7632] veth3: entered allmulticast mode
[  120.066097][ T7631] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  120.150499][ T7657] netlink: 72 bytes leftover after parsing attributes in process `syz.0.433'.
[  120.174402][ T7657] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  120.335507][ T7666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.433'.
[  120.394440][ T7673] syzkaller0: entered promiscuous mode
[  120.394462][ T7673] syzkaller0: entered allmulticast mode
[  120.585138][ T7692] bridge1: entered promiscuous mode
[  120.585159][ T7692] bridge1: entered allmulticast mode
[  120.635926][ T7687] syzkaller1: entered promiscuous mode
[  120.635945][ T7687] syzkaller1: entered allmulticast mode
[  120.658290][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.658499][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.362435][ T7740] netlink: 'syz.3.453': attribute type 1 has an invalid length.
[  121.452953][ T7744] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.472223][ T7744] syzkaller1: entered promiscuous mode
[  121.472243][ T7744] syzkaller1: entered allmulticast mode
[  121.699179][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.699365][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.903857][ T7774] netlink: 'syz.0.463': attribute type 7 has an invalid length.
[  122.023136][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.502703][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.502945][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.703416][ T7824] netlink: 'syz.4.469': attribute type 11 has an invalid length.
[  122.742308][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.742483][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.149430][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.782266][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  124.071995][ T7839] netlink: 'syz.3.472': attribute type 1 has an invalid length.
[  124.072016][ T7839] __nla_validate_parse: 8 callbacks suppressed
[  124.072028][ T7839] netlink: 224 bytes leftover after parsing attributes in process `syz.3.472'.
[  124.191300][ T7846] netlink: 'syz.0.475': attribute type 1 has an invalid length.
[  124.191988][ T7846] netlink: 'syz.0.475': attribute type 3 has an invalid length.
[  124.275793][ T7854] netlink: 20 bytes leftover after parsing attributes in process `syz.3.477'.
[  124.361909][ T7865] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  124.388064][ T7867] netlink: 'syz.1.480': attribute type 1 has an invalid length.
[  124.438737][ T7865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.477'.
[  124.438760][ T7865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.477'.
[  124.567566][ T7314] udevd[7314]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  124.587194][ T7314] udevd[7314]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  124.619671][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.483'.
[  124.640575][ T7883] netlink: 96 bytes leftover after parsing attributes in process `syz.1.482'.
[  124.755518][ T7887] netlink: 'syz.0.485': attribute type 1 has an invalid length.
[  124.755541][ T7887] netlink: 'syz.0.485': attribute type 1 has an invalid length.
[  124.885012][ T7900] xt_l2tp: v2 sid > 0xffff: 33554432
[  125.036196][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'.
[  125.370007][ T7938] netlink: 96 bytes leftover after parsing attributes in process `syz.1.496'.
[  125.518722][ T7941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.497'.
[  125.683946][ T7946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.498'.
[  126.243548][ T7973] syzkaller0: entered promiscuous mode
[  126.243571][ T7973] syzkaller0: entered allmulticast mode
[  126.371890][ T7986] netlink: 'syz.0.506': attribute type 2 has an invalid length.
[  127.923435][ T7999] netlink: 'syz.2.510': attribute type 10 has an invalid length.
[  127.997365][ T7999] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  128.014678][ T7999] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[  128.014878][ T7999] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  128.014950][ T7999] team0: Device netdevsim1 is of different type
[  128.223969][ T8000] netlink: 'syz.2.510': attribute type 10 has an invalid length.
[  128.267215][ T8000] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  128.288573][ T8000] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  129.014138][ T8077] net_ratelimit: 9 callbacks suppressed
[  129.014158][ T8077] netlink: get zone limit has 4 unknown bytes
[  129.226041][ T8086] netlink: 'syz.2.528': attribute type 83 has an invalid length.
[  129.645252][ T8092] __nla_validate_parse: 4 callbacks suppressed
[  129.645272][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.529'.
[  129.789639][ T8101] x_tables: duplicate entry at hook 2
[  129.790154][ T8101] netlink: 'syz.1.530': attribute type 44 has an invalid length.
[  129.846722][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.529'.
[  129.846744][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'.
[  129.846766][ T8102] netlink: 'syz.2.529': attribute type 12 has an invalid length.
[  129.846778][ T8102] netlink: 'syz.2.529': attribute type 14 has an invalid length.
[  130.027224][ T8111] netlink: 352 bytes leftover after parsing attributes in process `syz.1.532'.
[  130.088851][ T8113] ip_tables: iptables: counters copy to user failed while replacing table
[  130.765640][ T8123] netlink: 'syz.1.536': attribute type 11 has an invalid length.
[  130.765663][ T8123] netlink: 140 bytes leftover after parsing attributes in process `syz.1.536'.
[  131.029759][ T8084] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.029775][ T8084] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.031159][ T8084] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.031178][ T8084] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.088688][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.529'.
[  131.088709][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'.
[  131.088732][ T8102] netlink: 'syz.2.529': attribute type 12 has an invalid length.
[  131.088745][ T8102] netlink: 'syz.2.529': attribute type 14 has an invalid length.
[  131.245093][ T8130] netlink: 96 bytes leftover after parsing attributes in process `syz.4.537'.
[  131.245156][ T8130] netlink: get zone limit has 4 unknown bytes
[  131.285656][ T8128] netlink: 44 bytes leftover after parsing attributes in process `syz.1.538'.
[  131.302521][ T8133] netlink: 'syz.2.539': attribute type 7 has an invalid length.
[  131.302542][ T8133] netlink: 224 bytes leftover after parsing attributes in process `syz.2.539'.
[  131.306562][ T8128] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.307619][ T8128] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.559678][ T8131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.723074][ T8131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.777274][ T8140] tc_dump_action: action bad kind
[  131.881925][ T8131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.058620][ T8131] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.175510][ T8176] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.175593][ T8176] bridge0: port 2(bridge_slave_1) entered listening state
[  132.175806][ T8176] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.175907][ T8176] bridge0: port 1(bridge_slave_0) entered listening state
[  132.244446][ T8176] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  132.265395][ T8177] sctp: [Deprecated]: syz.1.549 (pid 8177) Use of struct sctp_assoc_value in delayed_ack socket option.
[  132.265395][ T8177] Use struct sctp_sack_info instead
[  132.352652][  T191] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.352743][  T191] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.391849][  T191] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.399973][  T191] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.746205][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  132.955894][ T8220] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  133.943685][ T8275] validate_nla: 1 callbacks suppressed
[  133.943707][ T8275] netlink: 'syz.2.572': attribute type 15 has an invalid length.
[  134.207751][ T8285] tc action pedit offset 0 out of bounds
[  134.207772][ T8285] tc action pedit offset 0 out of bounds
[  134.207781][ T8285] tc action pedit offset 0 out of bounds
[  134.207790][ T8285] tc action pedit offset 0 out of bounds
[  134.207800][ T8285] tc action pedit offset 0 out of bounds
[  134.207809][ T8285] tc action pedit offset 0 out of bounds
[  134.207818][ T8285] tc action pedit offset 0 out of bounds
[  134.207827][ T8285] tc action pedit offset 0 out of bounds
[  134.207836][ T8285] tc action pedit offset 0 out of bounds
[  134.207845][ T8285] tc action pedit offset 0 out of bounds
[  134.207866][ T8285] 0: reclassify loop, rule prio 0, protocol 800
[  134.217417][ T8286] netlink: 'syz.1.574': attribute type 62 has an invalid length.
[  134.234052][ T8284] 0: reclassify loop, rule prio 0, protocol 800
[  134.669865][ T8306] ip_tables: iptables: counters copy to user failed while replacing table
[  134.774087][ T8313] SET target dimension over the limit!
[  134.780401][ T8316] SET target dimension over the limit!
[  134.846970][ T8323] __nla_validate_parse: 12 callbacks suppressed
[  134.846989][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'.
[  134.944771][ T8302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.947589][ T8328] tunl0: Caught tx_queue_len zero misconfig
[  135.106781][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'.
[  135.106806][ T8330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.583'.
[  135.106830][ T8330] netlink: 'syz.3.583': attribute type 7 has an invalid length.
[  135.193864][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'.
[  135.193886][ T8330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.583'.
[  135.193909][ T8330] netlink: 'syz.3.583': attribute type 7 has an invalid length.
[  135.202217][ T8335] netlink: 16 bytes leftover after parsing attributes in process `syz.1.585'.
[  135.258836][ T6870] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  135.261336][ T6871] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  135.261386][ T6871] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  135.261419][ T6871] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  135.795603][ T8358] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  135.902987][ T8365] netlink: 'syz.1.594': attribute type 8 has an invalid length.
[  136.137359][ T8376] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  136.171215][ T8382] netlink: 'syz.0.601': attribute type 1 has an invalid length.
[  136.253590][ T8382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.601'.
[  136.336473][ T8387] bond1: (slave veth0_to_bond): making interface the new active one
[  136.352028][ T8387] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  136.437224][ T8382] macvlan2: entered promiscuous mode
[  136.437247][ T8382] macvlan2: entered allmulticast mode
[  136.437876][ T8382] bond1: entered promiscuous mode
[  136.438080][ T8382] veth0_to_bond: entered promiscuous mode
[  136.448557][ T8382] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  136.476436][ T8382] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond
[  136.491229][ T8382] bond1: left promiscuous mode
[  136.491249][ T8382] veth0_to_bond: left promiscuous mode
[  137.072966][ T8423] netlink: 'syz.0.610': attribute type 1 has an invalid length.
[  137.159914][ T8423] bond2: entered promiscuous mode
[  137.160291][ T8423] 8021q: adding VLAN 0 to HW filter on device bond2
[  137.189090][ T8425] 8021q: adding VLAN 0 to HW filter on device bond2
[  137.195622][ T8425] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  137.195645][ T8425] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  137.215855][ T8425] bond2: (slave ip6gre1): making interface the new active one
[  137.215877][ T8425] ip6gre1: entered promiscuous mode
[  137.219635][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.612'.
[  137.225568][ T8425] bond2: (slave ip6gre1): Enslaving as an active interface with an up link
[  137.978612][ T8470] Bluetooth: hci0: invalid length 0, exp 2 for type 14
[  138.246569][ T8476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.623'.
[  138.716717][ T8499] netlink: 50 bytes leftover after parsing attributes in process `syz.3.627'.
[  139.089313][ T8524] netlink: 'syz.4.632': attribute type 4 has an invalid length.
[  139.158028][    C0] vcan0: j1939_tp_rxtimer: 0xffff888068353400: rx timeout, send abort
[  139.159588][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888068352c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  139.232555][ T8535] netlink: 'syz.4.634': attribute type 4 has an invalid length.
[  139.233552][ T8535] netlink: 'syz.4.634': attribute type 4 has an invalid length.
[  139.276180][ T8535] netlink: 'syz.4.634': attribute type 4 has an invalid length.
[  139.282692][ T8538] netlink: 'syz.4.634': attribute type 4 has an invalid length.
[  139.471968][ T8549] netlink: 'syz.4.635': attribute type 2 has an invalid length.
[  139.658953][    C0] vcan0: j1939_tp_rxtimer: 0xffff888068353400: abort rx timeout. Force session deactivation
[  139.751155][ T8559] netlink: get zone limit has 4 unknown bytes
[  139.924091][ T8566] __nla_validate_parse: 1 callbacks suppressed
[  139.924110][ T8566] netlink: 72 bytes leftover after parsing attributes in process `syz.0.637'.
[  140.123987][ T8578] tipc: Resetting bearer <eth:team0>
[  140.126076][ T8578] 8021q: adding VLAN 0 to HW filter on device team0
[  140.240435][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.641'.
[  141.332060][ T8620] syzkaller1: entered promiscuous mode
[  141.332087][ T8620] syzkaller1: entered allmulticast mode
[  141.362527][ T8620] sctp: [Deprecated]: syz.1.651 (pid 8620) Use of struct sctp_assoc_value in delayed_ack socket option.
[  141.362527][ T8620] Use struct sctp_sack_info instead
[  141.886313][    C1] vcan0: j1939_tp_rxtimer: 0xffff888033b5f000: rx timeout, send abort
[  141.886554][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033b5c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  141.933869][ T8652] FAULT_INJECTION: forcing a failure.
[  141.933869][ T8652] name failslab, interval 1, probability 0, space 0, times 0
[  141.933903][ T8652] CPU: 1 UID: 0 PID: 8652 Comm: syz.1.658 Not tainted syzkaller #0 PREEMPT(full) 
[  141.933915][ T8652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  141.933921][ T8652] Call Trace:
[  141.933925][ T8652]  <TASK>
[  141.933931][ T8652]  dump_stack_lvl+0xe8/0x150
[  141.933960][ T8652]  should_fail_ex+0x410/0x560
[  141.933978][ T8652]  should_failslab+0xa8/0x100
[  141.933998][ T8652]  __kmalloc_cache_noprof+0x9e/0x600
[  141.934013][ T8652]  ? push_stack+0x7e/0x380
[  141.934023][ T8652]  ? push_stack+0x7e/0x380
[  141.934037][ T8652]  push_stack+0x7e/0x380
[  141.934049][ T8652]  do_check_insn+0x8194/0x17d00
[  141.934080][ T8652]  ? __pfx_do_check_insn+0x10/0x10
[  141.934106][ T8652]  ? vscnprintf+0x5c/0x90
[  141.934121][ T8652]  ? bpf_verifier_vlog+0x3d1/0x900
[  141.934140][ T8652]  ? verbose+0x11d/0x1a0
[  141.934150][ T8652]  ? __pfx_bpf_verifier_log_write+0x10/0x10
[  141.934164][ T8652]  ? __pfx_verbose+0x10/0x10
[  141.934176][ T8652]  ? bpf_push_jmp_history+0x27d/0x6d0
[  141.934191][ T8652]  ? print_insn_state+0x135/0x170
[  141.934205][ T8652]  do_check_common+0x363e/0x5660
[  141.934239][ T8652]  ? __pfx_do_check_common+0x10/0x10
[  141.934252][ T8652]  ? __pfx_verbose+0x10/0x10
[  141.934262][ T8652]  ? __pfx_bpf_disasm_kfunc_name+0x10/0x10
[  141.934279][ T8652]  do_check_main+0xa2/0x1f0
[  141.934294][ T8652]  bpf_check+0x2775/0x2ef0
[  141.934316][ T8652]  ? __pfx_bpf_check+0x10/0x10
[  141.934330][ T8652]  ? bpf_obj_name_cpy+0x194/0x1e0
[  141.934342][ T8652]  bpf_prog_load+0x14d1/0x1c20
[  141.934362][ T8652]  ? __pfx_bpf_prog_load+0x10/0x10
[  141.934389][ T8652]  __sys_bpf+0xd0d/0xd90
[  141.934406][ T8652]  ? __pfx___sys_bpf+0x10/0x10
[  141.934425][ T8652]  ? __fget_files+0x2a/0x420
[  141.934445][ T8652]  ? ksys_write+0x242/0x270
[  141.934459][ T8652]  ? __pfx_ksys_write+0x10/0x10
[  141.934473][ T8652]  __x64_sys_bpf+0xba/0xd0
[  141.934486][ T8652]  do_syscall_64+0x166/0x520
[  141.934496][ T8652]  ? trace_irq_disable+0x3b/0x140
[  141.934507][ T8652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.934517][ T8652]  ? clear_bhb_loop+0x70/0xc0
[  141.934531][ T8652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.934541][ T8652] RIP: 0033:0x7f544019f559
[  141.934555][ T8652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  141.934563][ T8652] RSP: 002b:00007f54410db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  141.934578][ T8652] RAX: ffffffffffffffda RBX: 00007f5440425fa0 RCX: 00007f544019f559
[  141.934585][ T8652] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005
[  141.934591][ T8652] RBP: 00007f54410db090 R08: 0000000000000000 R09: 0000000000000000
[  141.934604][ T8652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  141.934610][ T8652] R13: 00007f5440426038 R14: 00007f5440425fa0 R15: 00007ffe34802f78
[  141.934626][ T8652]  </TASK>
[  142.287328][ T8657] tipc: Started in network mode
[  142.287347][ T8657] tipc: Node identity 00000000000000000300000000000001, cluster identity 4711
[  142.287378][ T8657] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  142.386366][    C1] vcan0: j1939_tp_rxtimer: 0xffff888033b5f000: abort rx timeout. Force session deactivation
[  142.545309][ T8679] bridge_slave_0: left allmulticast mode
[  142.545336][ T8679] bridge_slave_0: left promiscuous mode
[  142.545541][ T8679] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.584652][ T8679] bridge_slave_1: left allmulticast mode
[  142.584677][ T8679] bridge_slave_1: left promiscuous mode
[  142.584900][ T8679] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.660060][ T8679] bond0: (slave bond_slave_0): Releasing backup interface
[  142.691481][ T8679] bond0: (slave bond_slave_1): Releasing backup interface
[  142.745770][ T8679] team0: Port device team_slave_0 removed
[  142.793613][ T8679] team0: Port device team_slave_1 removed
[  142.794491][ T8679] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.794511][ T8679] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.813014][ T8688] FAULT_INJECTION: forcing a failure.
[  142.813014][ T8688] name failslab, interval 1, probability 0, space 0, times 0
[  142.813044][ T8688] CPU: 1 UID: 0 PID: 8688 Comm: syz.0.669 Not tainted syzkaller #0 PREEMPT(full) 
[  142.813064][ T8688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  142.813074][ T8688] Call Trace:
[  142.813082][ T8688]  <TASK>
[  142.813089][ T8688]  dump_stack_lvl+0xe8/0x150
[  142.813121][ T8688]  should_fail_ex+0x410/0x560
[  142.813153][ T8688]  should_failslab+0xa8/0x100
[  142.813181][ T8688]  __kmalloc_node_track_caller_noprof+0xf6/0x720
[  142.813212][ T8688]  ? copy_array+0x71/0x100
[  142.813230][ T8688]  ? copy_array+0x71/0x100
[  142.813251][ T8688]  ? copy_array+0x71/0x100
[  142.813271][ T8688]  krealloc_node_align_noprof+0x19a/0x390
[  142.813300][ T8688]  copy_array+0x71/0x100
[  142.813321][ T8688]  bpf_copy_verifier_state+0xad/0x1170
[  142.813341][ T8688]  ? push_stack+0x7e/0x380
[  142.813358][ T8688]  ? push_stack+0x7e/0x380
[  142.813382][ T8688]  push_stack+0x1b9/0x380
[  142.813404][ T8688]  do_check_insn+0x8194/0x17d00
[  142.813457][ T8688]  ? __pfx_do_check_insn+0x10/0x10
[  142.813492][ T8688]  ? vscnprintf+0x5c/0x90
[  142.813517][ T8688]  ? bpf_verifier_vlog+0x3d1/0x900
[  142.813549][ T8688]  ? verbose+0x11d/0x1a0
[  142.813568][ T8688]  ? __pfx_bpf_verifier_log_write+0x10/0x10
[  142.813592][ T8688]  ? __pfx_verbose+0x10/0x10
[  142.813613][ T8688]  ? bpf_push_jmp_history+0x27d/0x6d0
[  142.813643][ T8688]  ? print_insn_state+0x135/0x170
[  142.813667][ T8688]  do_check_common+0x363e/0x5660
[  142.813727][ T8688]  ? __pfx_do_check_common+0x10/0x10
[  142.813751][ T8688]  ? __pfx_verbose+0x10/0x10
[  142.813768][ T8688]  ? __pfx_bpf_disasm_kfunc_name+0x10/0x10
[  142.813800][ T8688]  do_check_main+0xa2/0x1f0
[  142.813825][ T8688]  bpf_check+0x2775/0x2ef0
[  142.813865][ T8688]  ? __pfx_bpf_check+0x10/0x10
[  142.813890][ T8688]  ? bpf_obj_name_cpy+0x194/0x1e0
[  142.813912][ T8688]  bpf_prog_load+0x14d1/0x1c20
[  142.813949][ T8688]  ? __pfx_bpf_prog_load+0x10/0x10
[  142.813998][ T8688]  __sys_bpf+0xd0d/0xd90
[  142.814028][ T8688]  ? __pfx___sys_bpf+0x10/0x10
[  142.814062][ T8688]  ? __fget_files+0x2a/0x420
[  142.814098][ T8688]  ? ksys_write+0x242/0x270
[  142.814120][ T8688]  ? __pfx_ksys_write+0x10/0x10
[  142.814146][ T8688]  __x64_sys_bpf+0xba/0xd0
[  142.814169][ T8688]  do_syscall_64+0x166/0x520
[  142.814187][ T8688]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.814210][ T8688]  ? clear_bhb_loop+0x70/0xc0
[  142.814231][ T8688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.814248][ T8688] RIP: 0033:0x7f3f6599f559
[  142.814266][ T8688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  142.814280][ T8688] RSP: 002b:00007f3f668bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  142.814299][ T8688] RAX: ffffffffffffffda RBX: 00007f3f65c25fa0 RCX: 00007f3f6599f559
[  142.814311][ T8688] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005
[  142.814322][ T8688] RBP: 00007f3f668bb090 R08: 0000000000000000 R09: 0000000000000000
[  142.814332][ T8688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  142.814343][ T8688] R13: 00007f3f65c26038 R14: 00007f3f65c25fa0 R15: 00007ffed2e6f8a8
[  142.814373][ T8688]  </TASK>
[  142.820286][ T8679] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.820306][ T8679] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.847258][ T8679] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  142.853497][ T8681] team0: Mode changed to "broadcast"
[  142.977775][ T8686] vlan0: entered promiscuous mode
[  143.054593][ T8686] team0: Port device vlan0 added
[  143.056480][ T8689] tipc: Started in network mode
[  143.056502][ T8689] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  143.056680][ T8689] tipc: Enabled bearer <eth:team0>, priority 0
[  143.258434][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'.
[  143.367966][ T8695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.672'.
[  143.367994][ T8695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.672'.
[  143.895490][   T13] IPVS: starting estimator thread 0...
[  143.944885][ T8732] netlink: 64 bytes leftover after parsing attributes in process `syz.1.679'.
[  143.978223][ T8729] IPVS: using max 29 ests per chain, 69600 per kthread
[  144.125614][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.682'.
[  144.125640][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'.
[  144.140683][ T8732] bond4: entered promiscuous mode
[  144.140726][ T8732] bond4: entered allmulticast mode
[  144.141199][ T8732] 8021q: adding VLAN 0 to HW filter on device bond4
[  144.158578][ T8718] syzkaller1: entered promiscuous mode
[  144.158599][ T8718] syzkaller1: entered allmulticast mode
[  144.168094][ T5788] tipc: Node number set to 11578026
[  144.367923][ T8742] netlink: 20 bytes leftover after parsing attributes in process `syz.0.684'.
[  144.485894][ T8745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.685'.
[  144.537444][ T8752] syzkaller0: entered promiscuous mode
[  144.537464][ T8752] syzkaller0: entered allmulticast mode
[  144.696720][ T8763] netlink: 'syz.0.690': attribute type 18 has an invalid length.
[  144.724886][ T8763] netlink: 'syz.0.690': attribute type 18 has an invalid length.
[  144.738222][ T6870] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  144.738278][ T6870] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  144.738308][ T6870] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  144.738338][ T6870] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  144.940618][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807dd29000: rx timeout, send abort
[  144.940902][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807dd29400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  145.034544][ T8780] __nla_validate_parse: 4 callbacks suppressed
[  145.034564][ T8780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.697'.
[  145.066025][ T8781] syz_tun: entered allmulticast mode
[  145.067771][ T8781] sctp: [Deprecated]: syz.1.697 (pid 8781) Use of int in maxseg socket option.
[  145.067771][ T8781] Use struct sctp_assoc_value instead
[  145.165047][ T8784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  145.440673][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807dd29000: abort rx timeout. Force session deactivation
[  145.837710][ T8803] netlink: 'syz.4.702': attribute type 39 has an invalid length.
[  146.122411][ T8806] ip_tables: iptables: counters copy to user failed while replacing table
[  146.139116][ T8806] netlink: 14 bytes leftover after parsing attributes in process `syz.1.703'.
[  146.224319][ T8806] hsr_slave_0 (unregistering): left promiscuous mode
[  146.253544][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.704'.
[  146.383157][ T8826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.709'.
[  146.441765][   T30] audit: type=1800 audit(1792917949.718:2): pid=8828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.708" name="blkio.bfq.time_recursive" dev="tmpfs" ino=720 res=0 errno=-22
[  146.534638][ T8836] netlink: 'syz.4.713': attribute type 1 has an invalid length.
[  146.568377][ T8834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.711'.
[  146.568412][ T8834] netlink: 'syz.2.711': attribute type 7 has an invalid length.
[  146.568424][ T8834] netlink: 'syz.2.711': attribute type 8 has an invalid length.
[  146.568435][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'.
[  146.573696][ T8836] 8021q: adding VLAN 0 to HW filter on device bond3
[  146.635545][ T8836] macvlan2: entered promiscuous mode
[  146.635567][ T8836] macvlan2: entered allmulticast mode
[  146.636703][ T8836] bond3: entered promiscuous mode
[  146.637650][ T8836] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  146.663925][ T8836] bond3: left promiscuous mode
[  146.724850][ T8842] FAULT_INJECTION: forcing a failure.
[  146.724850][ T8842] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  146.724879][ T8842] CPU: 1 UID: 0 PID: 8842 Comm: syz.0.715 Not tainted syzkaller #0 PREEMPT(full) 
[  146.724899][ T8842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  146.724910][ T8842] Call Trace:
[  146.724917][ T8842]  <TASK>
[  146.724925][ T8842]  dump_stack_lvl+0xe8/0x150
[  146.724957][ T8842]  should_fail_ex+0x410/0x560
[  146.724990][ T8842]  _copy_to_user+0x31/0xb0
[  146.725019][ T8842]  bpf_log_attr_finalize+0x124/0x1e0
[  146.725044][ T8842]  ? __pfx_bpf_log_attr_finalize+0x10/0x10
[  146.725068][ T8842]  ? ktime_get+0x45/0x220
[  146.725090][ T8842]  ? ktime_get+0x1f5/0x220
[  146.725112][ T8842]  bpf_check+0x1d66/0x2ef0
[  146.725155][ T8842]  ? __pfx_bpf_check+0x10/0x10
[  146.725181][ T8842]  ? bpf_obj_name_cpy+0x194/0x1e0
[  146.725204][ T8842]  bpf_prog_load+0x14d1/0x1c20
[  146.725241][ T8842]  ? __pfx_bpf_prog_load+0x10/0x10
[  146.725300][ T8842]  __sys_bpf+0xd0d/0xd90
[  146.725333][ T8842]  ? __pfx___sys_bpf+0x10/0x10
[  146.725368][ T8842]  ? __fget_files+0x2a/0x420
[  146.725407][ T8842]  ? ksys_write+0x242/0x270
[  146.725431][ T8842]  ? __pfx_ksys_write+0x10/0x10
[  146.725458][ T8842]  __x64_sys_bpf+0xba/0xd0
[  146.725483][ T8842]  do_syscall_64+0x166/0x520
[  146.725501][ T8842]  ? trace_irq_disable+0x3b/0x140
[  146.725521][ T8842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.725540][ T8842]  ? clear_bhb_loop+0x70/0xc0
[  146.725563][ T8842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.725581][ T8842] RIP: 0033:0x7f3f6599f559
[  146.725598][ T8842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  146.725611][ T8842] RSP: 002b:00007f3f668bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  146.725631][ T8842] RAX: ffffffffffffffda RBX: 00007f3f65c25fa0 RCX: 00007f3f6599f559
[  146.725643][ T8842] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005
[  146.725655][ T8842] RBP: 00007f3f668bb090 R08: 0000000000000000 R09: 0000000000000000
[  146.725666][ T8842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  146.725676][ T8842] R13: 00007f3f65c26038 R14: 00007f3f65c25fa0 R15: 00007ffed2e6f8a8
[  146.725708][ T8842]  </TASK>
[  146.873034][ T8847] ip_tables: iptables: counters copy to user failed while replacing table
[  146.894624][ T8844] netlink: 40 bytes leftover after parsing attributes in process `syz.2.716'.
[  146.894647][ T8844] nbd: must specify at least one socket
[  147.006940][ T8847] tipc: Resetting bearer <eth:team0>
[  147.013746][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'.
[  147.085113][ T8847] vlan0: left promiscuous mode
[  147.114215][ T8847] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[  147.150366][ T5788] wg2 speed is unknown, defaulting to 1000
[  147.150578][ T5788] syz2: Port: 1 Link DOWN
[  147.180239][  T191] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.180362][  T191] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.198114][ T6870] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.198158][ T6870] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.307819][ T8864] netlink: 48 bytes leftover after parsing attributes in process `syz.3.721'.
[  147.323998][ T8870] netlink: 48 bytes leftover after parsing attributes in process `syz.3.721'.
[  147.343698][ T8868] tun0: tun_chr_ioctl cmd 1074812117
[  147.420993][ T8874] syzkaller0: entered promiscuous mode
[  147.421016][ T8874] syzkaller0: entered allmulticast mode
[  147.460189][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  147.460813][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  147.589836][ T8876] xt_hashlimit: size too large, truncated to 1048576
[  147.649192][ T8879] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.661523][ T8885] FAULT_INJECTION: forcing a failure.
[  147.661523][ T8885] name failslab, interval 1, probability 0, space 0, times 0
[  147.661551][ T8885] CPU: 0 UID: 0 PID: 8885 Comm: syz.4.728 Not tainted syzkaller #0 PREEMPT(full) 
[  147.661570][ T8885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  147.661580][ T8885] Call Trace:
[  147.661588][ T8885]  <TASK>
[  147.661595][ T8885]  dump_stack_lvl+0xe8/0x150
[  147.661625][ T8885]  should_fail_ex+0x410/0x560
[  147.661656][ T8885]  should_failslab+0xa8/0x100
[  147.661683][ T8885]  __kmalloc_node_track_caller_noprof+0xf6/0x720
[  147.661709][ T8885]  ? diag_suggestion+0x15d/0x260
[  147.661743][ T8885]  ? diag_suggestion+0x15d/0x260
[  147.661775][ T8885]  kvasprintf+0xeb/0x1a0
[  147.661804][ T8885]  ? __pfx_kvasprintf+0x10/0x10
[  147.661841][ T8885]  diag_suggestion+0x15d/0x260
[  147.661873][ T8885]  ? __pfx_diag_suggestion+0x10/0x10
[  147.661911][ T8885]  bpf_diag_call_type+0x580/0x6f0
[  147.661943][ T8885]  ? __pfx_bpf_diag_call_type+0x10/0x10
[  147.661972][ T8885]  ? bpf_diag_vfmt+0x121/0x190
[  147.661995][ T8885]  ? string+0x28a/0x2d0
[  147.662019][ T8885]  ? __pfx_bpf_diag_vfmt+0x10/0x10
[  147.662045][ T8885]  bpf_diag_call_arg+0x17f/0x1b0
[  147.662077][ T8885]  bpf_diag_call_arg_fmt+0x109/0x160
[  147.662103][ T8885]  ? __pfx_reg_type_str+0x10/0x10
[  147.662122][ T8885]  ? number+0xc60/0xed0
[  147.662146][ T8885]  ? __pfx_bpf_diag_call_arg_fmt+0x10/0x10
[  147.662172][ T8885]  ? __pfx_number+0x10/0x10
[  147.662200][ T8885]  check_reg_type+0x12d4/0x1640
[  147.662235][ T8885]  do_check_insn+0xe307/0x17d00
[  147.662278][ T8885]  ? format_decode+0xc0/0xda0
[  147.662308][ T8885]  ? __pfx_do_check_insn+0x10/0x10
[  147.662360][ T8885]  ? verbose+0x11d/0x1a0
[  147.662378][ T8885]  ? __pfx_bpf_verifier_log_write+0x10/0x10
[  147.662403][ T8885]  ? __pfx_verbose+0x10/0x10
[  147.662424][ T8885]  ? bpf_vlog_reset+0x1db/0x340
[  147.662446][ T8885]  ? print_insn_state+0x106/0x170
[  147.662469][ T8885]  do_check_common+0x363e/0x5660
[  147.662531][ T8885]  ? __pfx_do_check_common+0x10/0x10
[  147.662554][ T8885]  ? __pfx_verbose+0x10/0x10
[  147.662571][ T8885]  ? __pfx_bpf_disasm_kfunc_name+0x10/0x10
[  147.662603][ T8885]  do_check_main+0xa2/0x1f0
[  147.662628][ T8885]  bpf_check+0x2775/0x2ef0
[  147.662667][ T8885]  ? __pfx_bpf_check+0x10/0x10
[  147.662692][ T8885]  ? bpf_obj_name_cpy+0x194/0x1e0
[  147.662713][ T8885]  bpf_prog_load+0x14d1/0x1c20
[  147.662753][ T8885]  ? __pfx_bpf_prog_load+0x10/0x10
[  147.662801][ T8885]  __sys_bpf+0xd0d/0xd90
[  147.662832][ T8885]  ? __pfx___sys_bpf+0x10/0x10
[  147.662865][ T8885]  ? __fget_files+0x2a/0x420
[  147.662902][ T8885]  ? ksys_write+0x242/0x270
[  147.662924][ T8885]  ? __pfx_ksys_write+0x10/0x10
[  147.662950][ T8885]  __x64_sys_bpf+0xba/0xd0
[  147.662973][ T8885]  do_syscall_64+0x166/0x520
[  147.662990][ T8885]  ? trace_irq_disable+0x3b/0x140
[  147.663009][ T8885]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.663027][ T8885]  ? clear_bhb_loop+0x70/0xc0
[  147.663049][ T8885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.663066][ T8885] RIP: 0033:0x7f1b5399f559
[  147.663083][ T8885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  147.663096][ T8885] RSP: 002b:00007f1b54944028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  147.663115][ T8885] RAX: ffffffffffffffda RBX: 00007f1b53c25fa0 RCX: 00007f1b5399f559
[  147.663128][ T8885] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005
[  147.663139][ T8885] RBP: 00007f1b54944090 R08: 0000000000000000 R09: 0000000000000000
[  147.663150][ T8885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  147.663160][ T8885] R13: 00007f1b53c26038 R14: 00007f1b53c25fa0 R15: 00007fff7f56cd18
[  147.663190][ T8885]  </TASK>
[  147.681464][    C0] vcan0: j1939_tp_rxtimer: 0xffff888078956000: rx timeout, send abort
[  147.681666][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888078954000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  147.752124][ T8879] bridge_slave_0 (unregistering): left allmulticast mode
[  147.752148][ T8879] bridge_slave_0 (unregistering): left promiscuous mode
[  147.752248][ T8879] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.181526][    C0] vcan0: j1939_tp_rxtimer: 0xffff888078956000: abort rx timeout. Force session deactivation
[  150.868670][ T8914] netlink: 'syz.0.734': attribute type 4 has an invalid length.
[  150.886165][ T8914] netlink: 'syz.0.734': attribute type 4 has an invalid length.
[  150.977324][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.977348][ T8926] tun0: persist disabled
[  150.977448][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.977459][ T8926] tun0: persist disabled
[  150.977574][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.977585][ T8926] tun0: persist disabled
[  150.977668][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.977680][ T8926] tun0: persist disabled
[  150.977775][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.977787][ T8926] tun0: persist disabled
[  150.977866][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.977877][ T8926] tun0: persist disabled
[  150.979147][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.979161][ T8926] tun0: persist disabled
[  150.979235][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.979246][ T8926] tun0: persist disabled
[  150.979330][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.979340][ T8926] tun0: persist disabled
[  150.979412][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.979424][ T8926] tun0: persist disabled
[  150.979503][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.979514][ T8926] tun0: persist disabled
[  150.979585][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.979596][ T8926] tun0: persist disabled
[  150.979667][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.979678][ T8926] tun0: persist disabled
[  150.979749][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.979765][ T8926] tun0: persist disabled
[  150.979839][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.993136][ T8926] tun0: persist disabled
[  150.993238][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.993250][ T8926] tun0: persist disabled
[  150.993322][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.993334][ T8926] tun0: persist disabled
[  150.993408][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.993419][ T8926] tun0: persist disabled
[  150.993501][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.993512][ T8926] tun0: persist disabled
[  150.993586][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.993597][ T8926] tun0: persist disabled
[  150.993675][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.993686][ T8926] tun0: persist disabled
[  150.993767][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.993778][ T8926] tun0: persist disabled
[  150.993851][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.993862][ T8926] tun0: persist disabled
[  150.994752][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.994767][ T8926] tun0: persist disabled
[  150.994847][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.994858][ T8926] tun0: persist disabled
[  150.994930][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.994941][ T8926] tun0: persist disabled
[  150.995011][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.995023][ T8926] tun0: persist disabled
[  150.995094][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.995104][ T8926] tun0: persist disabled
[  150.995178][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.995189][ T8926] tun0: persist disabled
[  150.995261][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  150.995271][ T8926] tun0: persist disabled
[  150.998921][ T8930] macsec0: entered promiscuous mode
[  151.009019][ T8930] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  151.009539][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.009555][ T8926] tun0: persist disabled
[  151.009653][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.009664][ T8926] tun0: persist disabled
[  151.009751][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.009762][ T8926] tun0: persist disabled
[  151.009838][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.009848][ T8926] tun0: persist disabled
[  151.009922][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.009932][ T8926] tun0: persist disabled
[  151.010002][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.010013][ T8926] tun0: persist disabled
[  151.010084][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.010095][ T8926] tun0: persist disabled
[  151.010171][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.010182][ T8926] tun0: persist disabled
[  151.010254][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.010264][ T8926] tun0: persist disabled
[  151.010336][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.010346][ T8926] tun0: persist disabled
[  151.010435][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.010446][ T8926] tun0: persist disabled
[  151.010527][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.010538][ T8926] tun0: persist disabled
[  151.013182][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.013198][ T8926] tun0: persist disabled
[  151.013276][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.013287][ T8926] tun0: persist disabled
[  151.013360][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.013371][ T8926] tun0: persist disabled
[  151.013446][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.013457][ T8926] tun0: persist disabled
[  151.015547][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.015562][ T8926] tun0: persist disabled
[  151.015638][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.015650][ T8926] tun0: persist disabled
[  151.015721][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.015732][ T8926] tun0: persist disabled
[  151.015807][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.015817][ T8926] tun0: persist disabled
[  151.015889][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.015900][ T8926] tun0: persist disabled
[  151.015972][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.015982][ T8926] tun0: persist disabled
[  151.016054][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.016065][ T8926] tun0: persist disabled
[  151.016138][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.016149][ T8926] tun0: persist disabled
[  151.016221][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.016232][ T8926] tun0: persist disabled
[  151.016303][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.016315][ T8926] tun0: persist disabled
[  151.021517][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.021532][ T8926] tun0: persist disabled
[  151.021614][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.021625][ T8926] tun0: persist disabled
[  151.021697][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.021708][ T8926] tun0: persist disabled
[  151.021799][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.021810][ T8926] tun0: persist disabled
[  151.021882][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.021893][ T8926] tun0: persist disabled
[  151.028743][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.028758][ T8926] tun0: persist disabled
[  151.028842][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.028853][ T8926] tun0: persist disabled
[  151.028926][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.028937][ T8926] tun0: persist disabled
[  151.029008][ T8926] tun0: tun_chr_ioctl cmd 1074025675
[  151.029019][ T8926] tun0: persist disabled
[  151.795454][ T8949] netlink: 'syz.0.743': attribute type 11 has an invalid length.
[  151.795488][ T8949] __nla_validate_parse: 7 callbacks suppressed
[  151.795498][ T8949] netlink: 244 bytes leftover after parsing attributes in process `syz.0.743'.
[  151.796359][ T8949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.743'.
[  151.834055][ T8949] netlink: 'syz.0.743': attribute type 11 has an invalid length.
[  151.834074][ T8949] netlink: 244 bytes leftover after parsing attributes in process `syz.0.743'.
[  151.835512][ T8951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.743'.
[  152.086991][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'.
[  152.103220][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'.
[  152.103251][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'.
[  152.107778][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'.
[  152.107807][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'.
[  152.152016][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'.
[  152.221897][ T8969] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.222226][ T8969] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.226140][ T8969] bond_slave_0: left promiscuous mode
[  152.226209][ T8969] bond_slave_1: left promiscuous mode
[  152.331294][ T8969] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.343171][ T8969] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.538181][ T6871] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.538260][ T6871] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.538292][ T6871] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.538322][ T6871] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.627572][ T8978] caif0: tun_chr_ioctl cmd 1074025681
[  152.730835][ T8983] macvlan2: entered allmulticast mode
[  152.730858][ T8983] dummy0: entered allmulticast mode
[  152.733728][ T8987] netlink: 'syz.1.754': attribute type 1 has an invalid length.
[  152.797872][ T8987] 8021q: adding VLAN 0 to HW filter on device bond5
[  152.806805][ T8986] syzkaller0: entered promiscuous mode
[  152.806826][ T8986] syzkaller0: entered allmulticast mode
[  152.846688][ T8992] ip_tables: iptables: counters copy to user failed while replacing table
[  152.850463][ T8992] netlink: 'syz.4.757': attribute type 1 has an invalid length.
[  152.869038][ T8987] bond5: (slave gretap1): making interface the new active one
[  152.873233][ T8987] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  152.908373][ T8987] netlink: 'syz.1.754': attribute type 1 has an invalid length.
[  152.990346][ T8992] 8021q: adding VLAN 0 to HW filter on device bond4
[  154.022975][ T9063] ip_tables: iptables: counters copy to user failed while replacing table
[  154.376392][ T9075] nbd: socks must be embedded in a SOCK_ITEM attr
[  154.376634][ T9075] block nbd1: shutting down sockets
[  154.493731][ T9088] netlink: 'syz.1.770': attribute type 1 has an invalid length.
[  154.597189][ T9091] netlink: 'syz.0.771': attribute type 1 has an invalid length.
[  154.640829][ T9091] 8021q: adding VLAN 0 to HW filter on device bond3
[  154.677406][ T9091] bond3: (slave veth5): Enslaving as an active interface with a down link
[  154.689641][ T9091] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.692938][ T9091] bond3: (slave batadv0): making interface the new active one
[  154.694539][ T9091] batadv0: entered promiscuous mode
[  154.695161][ T9091] bond3: (slave batadv0): Enslaving as an active interface with an up link
[  155.322908][ T9126] netlink: 'syz.2.778': attribute type 1 has an invalid length.
[  155.322929][ T9126] netlink: 'syz.2.778': attribute type 12 has an invalid length.
[  156.451160][ T9174] sctp: [Deprecated]: syz.4.789 (pid 9174) Use of int in maxseg socket option.
[  156.451160][ T9174] Use struct sctp_assoc_value instead
[  156.451196][ T9174] sctp: [Deprecated]: syz.4.789 (pid 9174) Use of int in maxseg socket option.
[  156.451196][ T9174] Use struct sctp_assoc_value instead
[  156.451217][ T9174] sctp: [Deprecated]: syz.4.789 (pid 9174) Use of int in maxseg socket option.
[  156.451217][ T9174] Use struct sctp_assoc_value instead
[  156.451237][ T9174] sctp: [Deprecated]: syz.4.789 (pid 9174) Use of int in maxseg socket option.
[  156.451237][ T9174] Use struct sctp_assoc_value instead
[  156.451258][ T9174] sctp: [Deprecated]: syz.4.789 (pid 9174) Use of int in maxseg socket option.
[  156.451258][ T9174] Use struct sctp_assoc_value instead
[  156.451278][ T9174] sctp: [Deprecated]: syz.4.789 (pid 9174) Use of int in maxseg socket option.
[  156.451278][ T9174] Use struct sctp_assoc_value instead
[  156.451299][ T9174] sctp: [Deprecated]: syz.4.789 (pid 9174) Use of int in maxseg socket option.
[  156.451299][ T9174] Use struct sctp_assoc_value instead
[  156.451320][ T9174] sctp: [Deprecated]: syz.4.789 (pid 9174) Use of int in maxseg socket option.
[  156.451320][ T9174] Use struct sctp_assoc_value instead
[  156.451341][ T9174] sctp: [Deprecated]: syz.4.789 (pid 9174) Use of int in maxseg socket option.
[  156.451341][ T9174] Use struct sctp_assoc_value instead
[  156.451361][ T9174] sctp: [Deprecated]: syz.4.789 (pid 9174) Use of int in maxseg socket option.
[  156.451361][ T9174] Use struct sctp_assoc_value instead
[  156.453913][ T9173] netlink: 'syz.4.789': attribute type 39 has an invalid length.
[  156.454532][ T9173] netlink: 'syz.4.789': attribute type 39 has an invalid length.
[  156.454632][ T9173] netlink: 'syz.4.789': attribute type 39 has an invalid length.
[  156.454724][ T9173] netlink: 'syz.4.789': attribute type 39 has an invalid length.
[  156.454822][ T9173] netlink: 'syz.4.789': attribute type 39 has an invalid length.
[  156.455434][ T9173] netlink: 'syz.4.789': attribute type 39 has an invalid length.
[  156.455696][ T9173] netlink: 'syz.4.789': attribute type 39 has an invalid length.
[  156.455790][ T9173] netlink: 'syz.4.789': attribute type 39 has an invalid length.
[  156.455877][ T9173] netlink: 'syz.4.789': attribute type 39 has an invalid length.
[  156.456080][ T9173] netlink: 'syz.4.789': attribute type 39 has an invalid length.
[  156.763871][    C0] vcan0: j1939_tp_rxtimer: 0xffff888029c07400: rx timeout, send abort
[  156.764150][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888029c07800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  156.820635][ T9183] erspan0: entered promiscuous mode
[  156.820776][ T9183] __nla_validate_parse: 183 callbacks suppressed
[  156.820788][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.792'.
[  156.823981][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.792'.
[  156.846575][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.793'.
[  156.886937][ T9188] bond5: option resend_igmp: invalid value (2878)
[  156.887077][ T9188] bond5: option resend_igmp: allowed values 0 - 255
[  156.889636][ T9188] bond5 (unregistering): Released all slaves
[  157.255368][ T9211] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  157.263923][    C0] vcan0: j1939_tp_rxtimer: 0xffff888029c07400: abort rx timeout. Force session deactivation
[  157.303903][ T9215] trusted_key: syz.3.801 sent an empty control message without MSG_MORE.
[  157.364370][ T9219] syzkaller1: entered promiscuous mode
[  157.364391][ T9219] syzkaller1: entered allmulticast mode
[  157.403474][ T9225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.803'.
[  157.501501][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.806'.
[  157.531235][ T9238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.807'.
[  157.532796][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.807'.
[  157.532834][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'.
[  157.558992][ T9237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.807'.
[  157.559330][ T9237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.807'.
[  157.935441][ T9254] bond6: entered promiscuous mode
[  157.935483][ T9254] bond6: entered allmulticast mode
[  157.935748][ T9254] 8021q: adding VLAN 0 to HW filter on device bond6
[  158.261743][ T9273] bond2: option mode: unable to set because the bond device has slaves
[  158.809558][ T9301] xt_l2tp: invalid flags combination: 8
[  158.842090][ T9292] macsec1: entered promiscuous mode
[  159.369188][ T9333] hsr_slave_1 (unregistering): left promiscuous mode
[  159.455784][ T9338] bond3: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms
[  159.457835][ T9338] bond3 (unregistering): Released all slaves
[  159.545520][ T9340] tipc: Started in network mode
[  159.545550][ T9340] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  159.561983][ T9340] tipc: Enabled bearer <udp:syz0>, priority 10
[  159.631448][ T9338] vxlan: RTM_NEWNEIGH with invalid state 0x9
[  160.022656][ T9352] bond7: option mode: invalid value (222)
[  160.048007][ T9352] bond7 (unregistering): Released all slaves
[  160.693671][ T5788] tipc: Node number set to 4269801488
[  161.041317][ T9407] nbd: device at index 64 is going down
[  161.071911][ T5780] IPVS: starting estimator thread 0...
[  161.124043][ T9408] xt_IDLETIMER: timeout value is zero
[  161.159319][ T9409] xt_IDLETIMER: timeout value is zero
[  161.171553][ T9424] IPVS: using max 36 ests per chain, 86400 per kthread
[  161.210959][ T9156] udevd[9156]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  161.233458][ T9045] udevd[9045]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  162.106040][ T9435] bond0 (unregistering): Released all slaves
[  162.850236][ T9503] __nla_validate_parse: 37 callbacks suppressed
[  162.850257][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.870'.
[  163.263377][ T9521] netlink: 40 bytes leftover after parsing attributes in process `syz.4.873'.
[  163.385056][ T9528] xt_CT: No such helper "syz0"
[  163.495965][ T9528] syzkaller0: renamed from gre1
[  163.552818][ T9533] netlink: 260 bytes leftover after parsing attributes in process `syz.0.877'.
[  164.110208][ T9566] tipc: Enabling of bearer <ib:vcan0> rejected, failed to enable media
[  164.113290][ T9566] validate_nla: 27 callbacks suppressed
[  164.113308][ T9566] netlink: 'syz.2.885': attribute type 4 has an invalid length.
[  164.115558][ T9569] x_tables: duplicate underflow at hook 2
[  164.225544][ T9567] macsec1: entered promiscuous mode
[  164.606351][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.892'.
[  164.621724][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.890'.
[  164.625601][ T9594] bridge_slave_1: left allmulticast mode
[  164.625624][ T9594] bridge_slave_1: left promiscuous mode
[  164.625853][ T9594] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.824152][ T9606] netlink: 212332 bytes leftover after parsing attributes in process `syz.3.895'.
[  164.957713][ T9614] netlink: 40 bytes leftover after parsing attributes in process `syz.0.898'.
[  164.973674][ T9614] ip6tnl1: entered allmulticast mode
[  165.024366][ T9613] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20000
[  165.051179][ T9619] x_tables: duplicate entry at hook 3
[  165.162330][ T9626] batadv_slave_1: entered promiscuous mode
[  165.168694][ T9625] batadv_slave_1: left promiscuous mode
[  165.170341][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'.
[  165.170670][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'.
[  165.566669][ T9651] netlink: 212332 bytes leftover after parsing attributes in process `syz.3.907'.
[  167.477125][ T9674] syzkaller0: entered promiscuous mode
[  167.477147][ T9674] syzkaller0: entered allmulticast mode
[  167.510024][ T9683] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  167.647256][ T9697] syzkaller0: entered promiscuous mode
[  167.647282][ T9697] syzkaller0: entered allmulticast mode
[  168.084300][ T9726] __nla_validate_parse: 4 callbacks suppressed
[  168.084319][ T9726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.920'.
[  169.214274][ T9715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.921'.
[  169.219282][ T9721] lo: entered allmulticast mode
[  169.319561][ T6871] batadv0: left promiscuous mode
[  169.379526][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.924'.
[  169.391106][ T9738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.924'.
[  169.440820][ T9730] lo: left allmulticast mode
[  169.464157][ T9748] ip_tables: iptables: counters copy to user failed while replacing table
[  169.465503][ T9748] netlink: 'syz.1.926': attribute type 1 has an invalid length.
[  169.591575][ T9758] netlink: 181284 bytes leftover after parsing attributes in process `syz.4.929'.
[  169.677004][ T9764] syzkaller0: left promiscuous mode
[  169.677024][ T9764] syzkaller0: left allmulticast mode
[  169.902874][ T9777] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  169.907163][ T9777] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  169.929584][ T9777] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  169.931160][ T9777] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  169.931479][ T9777] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  169.932266][ T9777] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  169.932605][ T9777] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  169.933234][ T9777] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  170.062582][ T9761] virtio_blk virtio5: 1/0/0 default/read/poll queues
[  170.086597][ T9761] virtio_blk virtio5: [vda] 262144 512-byte logical blocks (134 MB/128 MiB)
[  170.706874][ T9805] netlink: 181284 bytes leftover after parsing attributes in process `syz.1.940'.
[  170.854695][ T9811] Bluetooth: hci1: Opcode 0x0401 failed: -22
[  171.726838][ T9829] netlink: 44 bytes leftover after parsing attributes in process `syz.2.945'.
[  171.726903][ T9828] netlink: 44 bytes leftover after parsing attributes in process `syz.2.945'.
[  171.927238][ T9849] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  172.055760][ T9860] netlink: 181284 bytes leftover after parsing attributes in process `syz.1.952'.
[  172.107164][ T9863] pim6reg: entered allmulticast mode
[  172.275810][ T9862] pim6reg: left allmulticast mode
[  172.330761][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'.
[  172.842771][ T9929] net_ratelimit: 58 callbacks suppressed
[  172.842791][ T9929] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  173.147373][ T9941] __nla_validate_parse: 75 callbacks suppressed
[  173.147393][ T9941] netlink: 56 bytes leftover after parsing attributes in process `syz.0.973'.
[  173.153157][ T9943] syzkaller0: entered promiscuous mode
[  173.153176][ T9943] syzkaller0: entered allmulticast mode
[  173.325273][ T9949] netlink: 164 bytes leftover after parsing attributes in process `syz.2.977'.
[  173.676381][ T9963] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  173.685802][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'.
[  173.685820][ T9967] netlink: 44 bytes leftover after parsing attributes in process `syz.2.980'.
[  173.686192][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'.
[  173.686205][ T9967] netlink: 44 bytes leftover after parsing attributes in process `syz.2.980'.
[  173.686418][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'.
[  173.686431][ T9967] netlink: 44 bytes leftover after parsing attributes in process `syz.2.980'.
[  173.688946][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'.
[  173.688962][ T9967] netlink: 44 bytes leftover after parsing attributes in process `syz.2.980'.
[  174.090786][ T9993] netlink: 'syz.3.985': attribute type 14 has an invalid length.
[  174.161402][ T9986] 8021q: adding VLAN 0 to HW filter on device bond7
[  174.175484][ T9986] bridge0: port 3(bond7) entered blocking state
[  174.175596][ T9986] bridge0: port 3(bond7) entered disabled state
[  174.175775][ T9986] bond7: entered allmulticast mode
[  174.206643][ T9986] bond7: entered promiscuous mode
[  174.247533][T10001] ip_tables: iptables: counters copy to user failed while replacing table
[  174.603098][T10028] netlink: 'syz.3.989': attribute type 3 has an invalid length.
[  174.836634][T10034] IPv6: sit1: Disabled Multicast RS
[  174.965401][T10043] netlink: 'syz.3.997': attribute type 32 has an invalid length.
[  175.004298][T10043] bond3: option coupled_control: invalid value (10)
[  175.018227][T10043] bond3 (unregistering): Released all slaves
[  175.023511][T10046] sctp: [Deprecated]: syz.2.996 (pid 10046) Use of int in max_burst socket option.
[  175.023511][T10046] Use struct sctp_assoc_value instead
[  175.644564][T10080] netlink: 'syz.0.1006': attribute type 1 has an invalid length.
[  175.732917][T10080] bond4: entered promiscuous mode
[  175.733422][T10080] 8021q: adding VLAN 0 to HW filter on device bond4
[  175.792079][T10018] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  175.845080][T10084] 8021q: adding VLAN 0 to HW filter on device bond4
[  175.860734][T10084] bond4: (slave gre1): The slave device specified does not support setting the MAC address
[  175.860758][T10084] bond4: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  175.878114][T10084] bond4: (slave gre1): making interface the new active one
[  175.878136][T10084] gre1: entered promiscuous mode
[  175.892632][T10092] netlink: 'syz.3.1007': attribute type 17 has an invalid length.
[  175.895165][T10084] bond4: (slave gre1): Enslaving as an active interface with an up link
[  176.040828][T10084] bond4 (unregistering): (slave gre1): Releasing backup interface
[  176.040856][T10084] gre1: left promiscuous mode
[  176.064594][T10084] bond4 (unregistering): Released all slaves
[  176.694125][T10143] Bluetooth: ISO socket layer initialized
[  176.876038][T10152] netlink: 'syz.2.1018': attribute type 4 has an invalid length.
[  177.604902][T10174] cfg80211: Invalid regulatory domain detected: BB
[  177.794275][T10179] netlink: 'syz.2.1026': attribute type 12 has an invalid length.
[  177.804526][T10179] netlink: 'syz.2.1026': attribute type 12 has an invalid length.
[  178.430519][T10213] 0ªX¹¦Dö»: left allmulticast mode
[  178.688595][T10213] tipc: Resetting bearer <eth:team0>
[  178.688670][T10213] team0: left promiscuous mode
[  178.688683][T10213] xfrm0: left promiscuous mode
[  178.689747][T10213] team0: left allmulticast mode
[  178.689762][T10213] xfrm0: left allmulticast mode
[  178.980752][T10261] netlink: 'syz.0.1035': attribute type 28 has an invalid length.
[  178.980775][T10261] netlink: 'syz.0.1035': attribute type 3 has an invalid length.
[  178.980787][T10261] __nla_validate_parse: 69 callbacks suppressed
[  178.980798][T10261] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1035'.
[  179.655611][T10213] macsec1: left promiscuous mode
[  179.888175][ T1160] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  179.888209][ T1160] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.888891][ T7821] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  179.888917][ T7821] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.888951][ T7821] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  179.888977][ T7821] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.889010][ T7821] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  179.889032][ T7821] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.320366][T10283] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1042'.
[  180.403368][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1039'.
[  180.412214][T10283] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  180.425824][T10283] bond0 (unregistering): Released all slaves
[  180.529575][T10294] syzkaller0: left promiscuous mode
[  180.529597][T10294] syzkaller0: left allmulticast mode
[  180.535384][T10275] vxcan0: tx drop: invalid sa for name 0x0000000000000003
[  180.560311][ T5788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  180.584454][T10279] x_tables: ip_tables: osf match: only valid for protocol 6
[  180.584607][T10278] x_tables: ip_tables: osf match: only valid for protocol 6
[  180.650656][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1044'.
[  180.758456][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  180.955085][T10324] netlink: 'syz.4.1049': attribute type 10 has an invalid length.
[  180.973205][T10324] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  180.975697][T10324] team0: Port device netdevsim1 added
[  180.976566][T10324] netlink: 'syz.4.1049': attribute type 10 has an invalid length.
[  181.011029][T10328] netlink: 'syz.3.1050': attribute type 10 has an invalid length.
[  181.011051][T10328] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1050'.
[  181.015903][T10329] netlink: 'syz.4.1049': attribute type 10 has an invalid length.
[  181.018166][ T5780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.055138][T10329] team0: Port device netdevsim1 removed
[  181.297251][T10336] batman_adv: batadv0: Interface activated: dummy0
[  181.318157][ T7821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.318449][ T7821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.321429][T10341] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1053'.
[  181.321448][T10341] A link change request failed with some changes committed already. Interface 
00ªX¹¦Dö» may have been left with an inconsistent configuration, please check.
[  181.338241][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.975751][T10387] netlink: 'syz.1.1060': attribute type 8 has an invalid length.
[  182.098455][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  185.072826][T10423] bond0: (slave bond_slave_1): Releasing backup interface
[  185.077720][T10423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  185.115173][T10425] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1072'.
[  185.396733][T10433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1073'.
[  185.618292][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  186.021167][T10469] xt_cgroup: invalid path, errno=-2
[  186.644701][T10495] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1084'.
[  186.644725][T10495] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1084'.
[  186.788413][T10510] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1087'.
[  186.796611][T10509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1087'.
[  186.796648][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1087'.
[  187.673419][T10541] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1094'.
[  187.673483][T10541] netlink: get zone limit has 4 unknown bytes
[  187.701622][T10539] ip_tables: iptables: counters copy to user failed while replacing table
[  188.749893][T10584] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1105'.
[  188.749964][T10584] netlink: get zone limit has 4 unknown bytes
[  189.263126][T10607] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1112'.
[  189.827228][T10634] syzkaller0: entered promiscuous mode
[  189.827252][T10634] syzkaller0: entered allmulticast mode
[  190.112845][T10650] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  190.307396][T10657] syzkaller0: entered promiscuous mode
[  190.307418][T10657] syzkaller0: entered allmulticast mode
[  190.384278][T10657] 0: reclassify loop, rule prio 0, protocol 700
[  190.556384][T10670] __nla_validate_parse: 4 callbacks suppressed
[  190.556404][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1126'.
[  190.694301][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1128'.
[  190.694334][T10677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1128'.
[  190.811919][T10671] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1125'.
[  190.824224][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 4352 - 0
[  190.824318][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 4352 - 0
[  190.826429][ T7821] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 4352 - 0
[  190.826461][ T7821] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 4352 - 0
[  191.098971][T10701] tipc: Started in network mode
[  191.099002][T10701] tipc: Node identity aaaaaaaaaa2d, cluster identity 4711
[  191.099364][T10701] tipc: Enabled bearer <eth:veth0_virt_wifi>, priority 20
[  191.207069][T10705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  191.383124][T10719] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1137'.
[  191.383189][T10719] netlink: get zone limit has 4 unknown bytes
[  192.144036][T10747] syzkaller0: entered promiscuous mode
[  192.144058][T10747] syzkaller0: entered allmulticast mode
[  192.218015][   T10] tipc: Node number set to 8891050
[  192.377428][T10762] Cannot find add_set index 34 as target
[  192.635411][   T30] audit: type=1804 audit(1792917995.908:3): pid=10774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1151" name="/newroot/226/cgroup.controllers" dev="tmpfs" ino=1171 res=1 errno=0
[  192.667651][   T30] audit: type=1800 audit(1792917995.948:4): pid=10774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1151" name="cgroup.controllers" dev="tmpfs" ino=1171 res=0 errno=-22
[  192.699360][   T30] audit: type=1800 audit(1792917995.978:5): pid=10774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1151" name="cgroup.controllers" dev="tmpfs" ino=1171 res=0 errno=-22
[  192.700410][   T30] audit: type=1800 audit(1792917995.978:6): pid=10774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1151" name="cgroup.controllers" dev="tmpfs" ino=1171 res=0 errno=-22
[  192.735641][   T30] audit: type=1800 audit(1792917996.008:7): pid=10774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1151" name="cgroup.controllers" dev="tmpfs" ino=1171 res=0 errno=-22
[  192.755280][T10780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1152'.
[  192.801264][   T30] audit: type=1800 audit(1792917996.078:8): pid=10774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1151" name="cgroup.controllers" dev="tmpfs" ino=1171 res=0 errno=-22
[  192.801312][   T30] audit: type=1800 audit(1792917996.078:9): pid=10774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1151" name="cgroup.controllers" dev="tmpfs" ino=1171 res=0 errno=-22
[  192.881666][   T30] audit: type=1800 audit(1792917996.158:10): pid=10774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1151" name="cgroup.controllers" dev="tmpfs" ino=1171 res=0 errno=-22
[  192.935754][   T30] audit: type=1800 audit(1792917996.208:11): pid=10774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1151" name="cgroup.controllers" dev="tmpfs" ino=1171 res=0 errno=-22
[  193.080343][   T30] audit: type=1800 audit(1792917996.358:12): pid=10774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1151" name="cgroup.controllers" dev="tmpfs" ino=1171 res=0 errno=-22
[  193.171623][T10795] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  193.230282][ T5291] veth0_macvtap: left promiscuous mode
[  193.322844][T10798] ip6gre2: entered allmulticast mode
[  193.533457][T10803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1154'.
[  193.766362][T10812] netlink: 'syz.1.1154': attribute type 1 has an invalid length.
[  193.766599][T10812] netlink: 'syz.1.1154': attribute type 1 has an invalid length.
[  193.766800][T10812] netlink: 'syz.1.1154': attribute type 1 has an invalid length.
[  193.766985][T10812] netlink: 'syz.1.1154': attribute type 1 has an invalid length.
[  193.767164][T10812] netlink: 'syz.1.1154': attribute type 1 has an invalid length.
[  193.767356][T10812] netlink: 'syz.1.1154': attribute type 1 has an invalid length.
[  193.767540][T10812] netlink: 'syz.1.1154': attribute type 1 has an invalid length.
[  193.767717][T10812] netlink: 'syz.1.1154': attribute type 1 has an invalid length.
[  193.782179][T10812] netlink: 'syz.1.1154': attribute type 1 has an invalid length.
[  193.782373][T10812] netlink: 'syz.1.1154': attribute type 1 has an invalid length.
[  194.592388][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1161'.
[  194.592476][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1161'.
[  195.125441][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'.
[  195.435636][T10883] SET target dimension over the limit!
[  195.839857][T10899] __nla_validate_parse: 4 callbacks suppressed
[  195.839874][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1174'.
[  196.345824][T10926] smc: net device lo applied user defined pnetid SYZ0
[  196.464790][T10935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1182'.
[  196.532124][T10941] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1181'.
[  196.865343][T10966] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1188'.
[  197.009596][T10972] x_tables: unsorted entry at hook 2
[  197.372216][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1191'.
[  197.462033][T10999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1196'.
[  197.480483][T10992] netlink: ct family unspecified
[  197.496538][T10984] veth5: entered allmulticast mode
[  197.547122][T10989] 8021q: adding VLAN 0 to HW filter on device bond8
[  197.547769][T10995] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  197.579669][T11006] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  197.685832][T11012] x_tables: duplicate underflow at hook 2
[  197.689119][T11012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1197'.
[  197.905855][T11026] syzkaller0: entered promiscuous mode
[  197.905875][T11026] syzkaller0: entered allmulticast mode
[  197.925149][T11026] x_tables: duplicate underflow at hook 1
[  197.936964][T11032] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1202'.
[  197.936987][T11032] FAULT_INJECTION: forcing a failure.
[  197.936987][T11032] name failslab, interval 1, probability 0, space 0, times 0
[  197.937011][T11032] CPU: 0 UID: 0 PID: 11032 Comm: syz.4.1202 Not tainted syzkaller #0 PREEMPT(full) 
[  197.937032][T11032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  197.937044][T11032] Call Trace:
[  197.937051][T11032]  <TASK>
[  197.937060][T11032]  dump_stack_lvl+0xe8/0x150
[  197.937093][T11032]  should_fail_ex+0x410/0x560
[  197.937123][T11032]  ? __alloc_skb+0x1db/0x7a0
[  197.937148][T11032]  should_failslab+0xa8/0x100
[  197.937176][T11032]  ? __alloc_skb+0x1db/0x7a0
[  197.937198][T11032]  kmem_cache_alloc_node_noprof+0x9c/0x600
[  197.937220][T11032]  ? __alloc_skb+0x18d/0x7a0
[  197.937245][T11032]  ? __alloc_skb+0x1db/0x7a0
[  197.937277][T11032]  __alloc_skb+0x1db/0x7a0
[  197.937306][T11032]  ovs_ct_limit_cmd_get+0x16a/0xf70
[  197.937339][T11032]  ? rcu_is_watching+0x16/0xb0
[  197.937365][T11032]  ? trace_kmalloc+0x2a/0xf0
[  197.937387][T11032]  ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10
[  197.937410][T11032]  ? __kmalloc_noprof+0x387/0x710
[  197.937436][T11032]  ? __nla_parse+0x40/0x60
[  197.937458][T11032]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  197.937484][T11032]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  197.937512][T11032]  genl_family_rcv_msg_doit+0x233/0x340
[  197.937546][T11032]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  197.937588][T11032]  ? __lock_acquire+0x747/0x2de0
[  197.937618][T11032]  genl_rcv_msg+0x614/0x7a0
[  197.937652][T11032]  ? __pfx_genl_rcv_msg+0x10/0x10
[  197.937679][T11032]  ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10
[  197.937716][T11032]  netlink_rcv_skb+0x226/0x4a0
[  197.937740][T11032]  ? __pfx_genl_rcv_msg+0x10/0x10
[  197.937767][T11032]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  197.937806][T11032]  ? down_read+0x2b9/0x320
[  197.937831][T11032]  genl_rcv+0x28/0x40
[  197.937856][T11032]  netlink_unicast+0x8ef/0xa80
[  197.937890][T11032]  netlink_sendmsg+0x7f0/0xb20
[  197.937917][T11032]  ? __pfx_netlink_sendmsg+0x10/0x10
[  197.937941][T11032]  ? aa_sock_msg_perm+0x144/0x210
[  197.937967][T11032]  ? apparmor_socket_sendmsg+0x98/0x360
[  197.937990][T11032]  ? __pfx_netlink_sendmsg+0x10/0x10
[  197.938011][T11032]  sock_sendmsg_nosec+0x14e/0x190
[  197.938036][T11032]  ____sys_sendmsg+0x54e/0x850
[  197.938068][T11032]  ? __pfx_____sys_sendmsg+0x10/0x10
[  197.938105][T11032]  ? import_iovec+0x73/0xa0
[  197.938136][T11032]  ___sys_sendmsg+0x2a5/0x360
[  197.938161][T11032]  ? __lock_acquire+0x747/0x2de0
[  197.938186][T11032]  ? __pfx____sys_sendmsg+0x10/0x10
[  197.938253][T11032]  ? __fget_files+0x3a2/0x420
[  197.938272][T11032]  ? __fget_files+0x2a/0x420
[  197.938302][T11032]  __x64_sys_sendmsg+0x1b1/0x290
[  197.938323][T11032]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  197.938373][T11032]  do_syscall_64+0x166/0x520
[  197.938391][T11032]  ? trace_irq_disable+0x3b/0x140
[  197.938412][T11032]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.938432][T11032]  ? clear_bhb_loop+0x70/0xc0
[  197.938454][T11032]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.938479][T11032] RIP: 0033:0x7f1b5399f559
[  197.938497][T11032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  197.938511][T11032] RSP: 002b:00007f1b54944028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  197.938531][T11032] RAX: ffffffffffffffda RBX: 00007f1b53c25fa0 RCX: 00007f1b5399f559
[  197.938545][T11032] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003
[  197.938556][T11032] RBP: 00007f1b54944090 R08: 0000000000000000 R09: 0000000000000000
[  197.938567][T11032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  197.938577][T11032] R13: 00007f1b53c26038 R14: 00007f1b53c25fa0 R15: 00007fff7f56cd18
[  197.938610][T11032]  </TASK>
[  198.707587][T11058] xt_TCPMSS: Only works on TCP SYN packets
[  198.776466][T11057] geneve2: entered promiscuous mode
[  198.776596][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1211'.
[  198.844082][T11065] FAULT_INJECTION: forcing a failure.
[  198.844082][T11065] name failslab, interval 1, probability 0, space 0, times 0
[  198.844112][T11065] CPU: 0 UID: 0 PID: 11065 Comm: syz.3.1214 Not tainted syzkaller #0 PREEMPT(full) 
[  198.844131][T11065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  198.844145][T11065] Call Trace:
[  198.844152][T11065]  <TASK>
[  198.844160][T11065]  dump_stack_lvl+0xe8/0x150
[  198.844190][T11065]  should_fail_ex+0x410/0x560
[  198.844219][T11065]  should_failslab+0xa8/0x100
[  198.844246][T11065]  ? skb_clone+0x212/0x3a0
[  198.844266][T11065]  kmem_cache_alloc_noprof+0x9c/0x600
[  198.844289][T11065]  ? skb_clone+0x212/0x3a0
[  198.844312][T11065]  skb_clone+0x212/0x3a0
[  198.844334][T11065]  __netlink_deliver_tap+0x355/0x6e0
[  198.844363][T11065]  ? netlink_deliver_tap+0x2e/0x1b0
[  198.844382][T11065]  netlink_deliver_tap+0x19c/0x1b0
[  198.844400][T11065]  netlink_unicast+0x8c1/0xa80
[  198.844430][T11065]  netlink_sendmsg+0x7f0/0xb20
[  198.844452][T11065]  ? __pfx_netlink_sendmsg+0x10/0x10
[  198.844480][T11065]  ? aa_sock_msg_perm+0x144/0x210
[  198.844501][T11065]  ? apparmor_socket_sendmsg+0x98/0x360
[  198.844519][T11065]  ? __pfx_netlink_sendmsg+0x10/0x10
[  198.844536][T11065]  sock_sendmsg_nosec+0x14e/0x190
[  198.844556][T11065]  ____sys_sendmsg+0x54e/0x850
[  198.844582][T11065]  ? __pfx_____sys_sendmsg+0x10/0x10
[  198.844610][T11065]  ? import_iovec+0x73/0xa0
[  198.844633][T11065]  ___sys_sendmsg+0x2a5/0x360
[  198.844652][T11065]  ? __lock_acquire+0x747/0x2de0
[  198.844672][T11065]  ? __pfx____sys_sendmsg+0x10/0x10
[  198.844722][T11065]  ? __fget_files+0x3a2/0x420
[  198.844737][T11065]  ? __fget_files+0x2a/0x420
[  198.844759][T11065]  __x64_sys_sendmsg+0x1b1/0x290
[  198.844776][T11065]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  198.844814][T11065]  do_syscall_64+0x166/0x520
[  198.844827][T11065]  ? trace_irq_disable+0x3b/0x140
[  198.844843][T11065]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.844858][T11065]  ? clear_bhb_loop+0x70/0xc0
[  198.844875][T11065]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.844889][T11065] RIP: 0033:0x7fe8b2b9f559
[  198.844903][T11065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  198.844915][T11065] RSP: 002b:00007fe8b3abf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  198.844931][T11065] RAX: ffffffffffffffda RBX: 00007fe8b2e25fa0 RCX: 00007fe8b2b9f559
[  198.844943][T11065] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003
[  198.844952][T11065] RBP: 00007fe8b3abf090 R08: 0000000000000000 R09: 0000000000000000
[  198.844961][T11065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  198.844969][T11065] R13: 00007fe8b2e26038 R14: 00007fe8b2e25fa0 R15: 00007fffe8352428
[  198.844995][T11065]  </TASK>
[  198.850140][T11065] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1214'.
[  198.850207][T11065] netlink: get zone limit has 4 unknown bytes
[  198.868174][ T5780] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.868215][ T5780] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.868246][ T5780] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.868276][ T5780] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.307549][T11080] batman_adv: batadv0: Adding interface: veth0
[  199.307567][T11080] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  199.307596][T11080] batman_adv: batadv0: Interface activated: veth0
[  199.465350][T11092] validate_nla: 60 callbacks suppressed
[  199.465370][T11092] netlink: 'syz.4.1216': attribute type 16 has an invalid length.
[  199.465384][T11092] netlink: 'syz.4.1216': attribute type 17 has an invalid length.
[  199.747206][T11092] 8021q: adding VLAN 0 to HW filter on device team0
[  199.747760][T11092] tipc: Resetting bearer <eth:team0>
[  199.748437][T11092] tipc: Resetting bearer <eth:team0>
[  199.756624][T11092] dummy0: entered promiscuous mode
[  199.764471][T11092] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.128855][T11092] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  200.128882][T11092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  200.172354][T11092] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  200.385099][ T5757] wg2 speed is unknown, defaulting to 1000
[  200.386281][ T5757] syz2: Port: 1 Link ACTIVE
[  200.556183][T11134] xt_cluster: you have exceeded the maximum number of cluster nodes (167 > 32)
[  200.557327][T11134] netlink: 'syz.4.1230': attribute type 1 has an invalid length.
[  200.557345][T11134] netlink: 'syz.4.1230': attribute type 4 has an invalid length.
[  200.881845][T11152] __nla_validate_parse: 2 callbacks suppressed
[  200.881872][T11152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1235'.
[  200.885299][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1236'.
[  201.017841][T11160] openvswitch: netlink: Missing key (keys=40, expected=100)
[  201.133033][T11172] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1239'.
[  201.133236][T11171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1239'.
[  201.187755][T11160] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1237'.
[  202.273039][T11203] bridge0: port 1(macsec1) entered blocking state
[  202.275720][T11203] bridge0: port 1(macsec1) entered disabled state
[  202.275868][T11203] macsec1: entered allmulticast mode
[  202.275883][T11203] bridge0: entered allmulticast mode
[  202.275919][T11203] bridge0: entered promiscuous mode
[  202.295317][T11203] macsec1: left allmulticast mode
[  202.295337][T11203] bridge0: left allmulticast mode
[  202.312808][T11212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1245'.
[  202.425682][ T5738] bridge0: left promiscuous mode
[  202.466865][T11218] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1250'.
[  202.479820][T11220] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1249'.
[  202.486606][T11220] vlan2: entered promiscuous mode
[  202.687274][T11230] netlink: 296 bytes leftover after parsing attributes in process `syz.3.1254'.
[  203.105978][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1259'.
[  203.237645][T11261] tipc: Can't bind to reserved service type 2
[  203.444154][T11272] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20004
[  204.278057][T11302] netlink: 'syz.4.1275': attribute type 10 has an invalid length.
[  204.307669][T11302] geneve3: entered promiscuous mode
[  204.307691][T11302] geneve3: entered allmulticast mode
[  204.623053][T11312] IPVS: Unknown mcast interface: syzkaller0
[  204.850627][T11319] bond0: option xmit_hash_policy: invalid value (10)
[  204.870106][T11319] bond0 (unregistering): Released all slaves
[  205.300812][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  205.300830][   T30] audit: type=1800 audit(1792918008.578:30): pid=11343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1287" name="memory.events" dev="tmpfs" ino=1261 res=0 errno=-22
[  205.344678][T11347] netlink: 'syz.3.1288': attribute type 4 has an invalid length.
[  205.410811][   T30] audit: type=1804 audit(1792918008.688:31): pid=11348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1287" name="/newroot/241/memory.events" dev="tmpfs" ino=1261 res=1 errno=0
[  205.529402][T11348] netlink: 'syz.1.1287': attribute type 2 has an invalid length.
[  205.529427][T11348] netlink: 'syz.1.1287': attribute type 1 has an invalid length.
[  205.584123][T11350] netlink: 'syz.4.1289': attribute type 21 has an invalid length.
[  205.584149][T11350] IPv6: NLM_F_CREATE should be specified when creating new route
[  205.584251][T11350] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  205.584262][T11350] IPv6: NLM_F_CREATE should be set when creating new route
[  205.584303][T11350] IPv6: NLM_F_CREATE should be set when creating new route
[  205.584356][T11350] IPv6: NLM_F_CREATE should be set when creating new route
[  206.142357][T11367] ip_tables: iptables: counters copy to user failed while replacing table
[  206.941582][T11406] __nla_validate_parse: 7 callbacks suppressed
[  206.941602][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1303'.
[  206.941782][T11406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1303'.
[  207.132794][T11418] tipc: New replicast peer: 255.255.255.255
[  207.133742][T11418] tipc: Enabled bearer <udp:syz2>, priority 10
[  207.134380][T11418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1305'.
[  207.135469][T11418] netlink: 'syz.0.1305': attribute type 1 has an invalid length.
[  207.201993][T11418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1305'.
[  207.285738][T11425] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1308'.
[  207.316718][T11425] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1308'.
[  207.316780][T11425] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1308'.
[  207.359725][T11425] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1308'.
[  207.359756][T11425] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1308'.
[  207.400399][T11425] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1308'.
[  207.500710][T11425] tipc: Resetting bearer <eth:team0>
[  207.612157][T11425] dummy0: left allmulticast mode
[  207.668612][T10915] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  207.669068][ T5757] wg2 speed is unknown, defaulting to 1000
[  207.669112][ T5757] syz2: Port: 1 Link DOWN
[  207.693857][ T5780] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  207.693903][ T5780] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  207.718180][   T63] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.100719][T11454] xt_l2tp: missing protocol rule (udp|l2tpip)
[  209.443344][T11500] netlink: 'syz.2.1327': attribute type 1 has an invalid length.
[  209.510955][T11500] 8021q: adding VLAN 0 to HW filter on device bond2
[  209.545266][T11505] bond2: (slave veth5): Enslaving as a backup interface with a down link
[  209.584609][T11504] 8021q: adding VLAN 0 to HW filter on device bond4
[  209.629952][T11500] bond2: (slave dummy0): Enslaving as a backup interface with an up link
[  209.730735][T10915] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  209.869599][   T63] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  210.198811][T11533] netlink: 'syz.2.1337': attribute type 15 has an invalid length.
[  210.330293][T11533] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.335415][T11533] 8021q: adding VLAN 0 to HW filter on device team0
[  210.335967][T11533] tipc: Resetting bearer <eth:team0>
[  210.388134][T10915] bond2: (slave dummy0): link status up again after 0 ms
[  210.408431][T10915] bond2: (slave dummy0): link status up again after 0 ms
[  210.428185][T10915] bond2: (slave dummy0): link status up again after 0 ms
[  210.451214][T10915] bond2: (slave dummy0): link status up again after 0 ms
[  210.468782][T10916] bond2: (slave dummy0): link status up again after 0 ms
[  210.488499][T10916] bond2: (slave dummy0): link status up again after 0 ms
[  210.497307][T11533] batadv_slave_1: entered promiscuous mode
[  210.518089][T10914] bond2: (slave dummy0): link status up again after 0 ms
[  210.525154][T11533] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  210.525180][T11533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  210.567852][ T5788] bridge0: port 3(vlan2) entered blocking state
[  210.568057][ T5788] bridge0: port 3(vlan2) entered listening state
[  210.822822][T11574] netlink: 'syz.2.1346': attribute type 83 has an invalid length.
[  210.920304][T11555] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.942725][T11555] 8021q: adding VLAN 0 to HW filter on device team0
[  210.975521][T11555] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.039279][T11555] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.042019][T11555] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.044664][T11555] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  211.075959][T10916] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.076069][T10916] bridge0: port 1(bridge_slave_0) entered listening state
[  211.094657][T10916] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.094767][T10916] bridge0: port 2(bridge_slave_1) entered listening state
[  211.160186][   T63] net_ratelimit: 13 callbacks suppressed
[  211.160218][   T63] bond2: (slave dummy0): failed to get link speed/duplex
[  211.269552][T10916] bond2: (slave dummy0): failed to get link speed/duplex
[  211.385581][  T191] bond2: (slave dummy0): failed to get link speed/duplex
[  211.488352][   T63] bond2: (slave dummy0): failed to get link speed/duplex
[  211.598040][T10916] bond2: (slave dummy0): failed to get link speed/duplex
[  211.660233][T11470] udevd[11470]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  211.790061][   T51] bond2: (slave dummy0): failed to get link speed/duplex
[  211.898444][ T6871] bond2: (slave dummy0): failed to get link speed/duplex
[  211.977683][T11606] syzkaller1: entered promiscuous mode
[  211.977703][T11606] syzkaller1: entered allmulticast mode
[  212.008421][ T7820] bond2: (slave dummy0): failed to get link speed/duplex
[  212.127362][ T6871] bond2: (slave dummy0): failed to get link speed/duplex
[  212.146532][T11635] netlink: 'syz.0.1354': attribute type 1 has an invalid length.
[  212.204535][T11635] 8021q: adding VLAN 0 to HW filter on device bond4
[  212.317464][T11635] bond4: (slave geneve2): making interface the new active one
[  212.328301][T11635] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  212.332643][T10272] bond2: (slave dummy0): failed to get link speed/duplex
[  212.386392][T11628] __nla_validate_parse: 187 callbacks suppressed
[  212.386412][T11628] netlink: 79 bytes leftover after parsing attributes in process `syz.0.1354'.
[  212.409147][T11649] netlink: 'syz.4.1358': attribute type 3 has an invalid length.
[  212.409382][T11649] netlink: 'syz.4.1358': attribute type 3 has an invalid length.
[  212.480339][T11652] wg2: Caught tx_queue_len zero misconfig
[  212.585712][T11656] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1360'.
[  212.611060][T11656] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1360'.
[  212.702589][T11661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1362'.
[  212.702614][T11661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1362'.
[  212.702628][T11661] netlink: 'syz.1.1362': attribute type 6 has an invalid length.
[  212.740591][T11665] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1363'.
[  212.781436][T11661] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1362'.
[  212.816255][T11671] Bluetooth: hci0: unsupported parameter 5135
[  212.816275][T11671] Bluetooth: hci0: unsupported parameter 8192
[  212.816304][T11671] Bluetooth: hci0: unsupported parameter 5135
[  212.816315][T11671] Bluetooth: hci0: unsupported parameter 8192
[  212.817826][T11673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1364'.
[  213.345572][T11702] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1373'.
[  213.534355][T11707] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1373'.
[  213.906001][T11712] nbd3: detected capacity change from 0 to 63
[  213.982070][T11721] bridge0: entered allmulticast mode
[  214.017776][T11721] 
[  214.020162][T11721] ======================================================
[  214.027194][T11721] WARNING: possible circular locking dependency detected
[  214.034242][T11721] syzkaller #0 Not tainted
[  214.038675][T11721] ------------------------------------------------------
[  214.045699][T11721] syz.4.1377/11721 is trying to acquire lock:
[  214.051778][T11721] ffff88801d2dc980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove+0x44/0x80
[  214.061075][T11721] 
[  214.061075][T11721] but task is already holding lock:
[  214.068452][T11721] ffff88801d2dcaa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80
[  214.078319][T11721] 
[  214.078319][T11721] which lock already depends on the new lock.
[  214.078319][T11721] 
[  214.088725][T11721] 
[  214.088725][T11721] the existing dependency chain (in reverse order) is:
[  214.097737][T11721] 
[  214.097737][T11721] -> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}:
[  214.106424][T11721]        down_read+0x45/0x320
[  214.111104][T11721]        kernfs_remove_by_name_ns+0x3f/0x140
[  214.117086][T11721]        internal_create_group+0x58e/0x1180
[  214.122977][T11721]        sysfs_update_groups+0x60/0x130
[  214.128531][T11721]        pmu_dev_alloc+0x29b/0x300
[  214.133658][T11721]        perf_event_sysfs_init+0x76/0x100
[  214.139369][T11721]        do_one_initcall+0x250/0x870
[  214.144657][T11721]        do_initcall_level+0x10a/0x1a0
[  214.150108][T11721]        do_initcalls+0x59/0xa0
[  214.154955][T11721]        kernel_init_freeable+0x29d/0x3e0
[  214.160669][T11721]        kernel_init+0x22/0x1d0
[  214.165515][T11721]        ret_from_fork+0x514/0xb70
[  214.170651][T11721]        ret_from_fork_asm+0x1a/0x30
[  214.175945][T11721] 
[  214.175945][T11721] -> #9 (pmus_lock){+.+.}-{4:4}:
[  214.183113][T11721]        __mutex_lock+0x197/0x15a0
[  214.188220][T11721]        perf_event_init_cpu+0x1d1/0x7a0
[  214.193844][T11721]        cpuhp_invoke_callback+0x434/0x810
[  214.199655][T11721]        cpuhp_thread_fun+0x362/0x780
[  214.205041][T11721]        smpboot_thread_fn+0x5f8/0xb30
[  214.210502][T11721]        kthread+0x38b/0x480
[  214.215086][T11721]        ret_from_fork+0x514/0xb70
[  214.220187][T11721]        ret_from_fork_asm+0x1a/0x30
[  214.225460][T11721] 
[  214.225460][T11721] -> #8 (cpuhp_state-up){+.+.}-{0:0}:
[  214.233010][T11721]        cpuhp_thread_fun+0x127/0x780
[  214.238378][T11721]        smpboot_thread_fn+0x5f8/0xb30
[  214.243830][T11721]        kthread+0x38b/0x480
[  214.248411][T11721]        ret_from_fork+0x514/0xb70
[  214.253514][T11721]        ret_from_fork_asm+0x1a/0x30
[  214.258788][T11721] 
[  214.258788][T11721] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  214.266533][T11721]        cpus_read_lock+0x3d/0x160
[  214.271639][T11721]        static_key_slow_inc+0x12/0x30
[  214.277092][T11721]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  214.283323][T11721]        nbd_genl_foreach_sock+0x265/0x450
[  214.289122][T11721]        nbd_genl_reconfigure+0xbbb/0x1040
[  214.294960][T11721]        genl_family_rcv_msg_doit+0x233/0x340
[  214.301046][T11721]        genl_rcv_msg+0x614/0x7a0
[  214.306069][T11721]        netlink_rcv_skb+0x226/0x4a0
[  214.311347][T11721]        genl_rcv+0x28/0x40
[  214.315843][T11721]        netlink_unicast+0x8ef/0xa80
[  214.321162][T11721]        netlink_sendmsg+0x7f0/0xb20
[  214.326438][T11721]        sock_sendmsg_nosec+0x14e/0x190
[  214.331974][T11721]        ____sys_sendmsg+0x54e/0x850
[  214.337262][T11721]        ___sys_sendmsg+0x2a5/0x360
[  214.342461][T11721]        __x64_sys_sendmsg+0x1b1/0x290
[  214.347914][T11721]        do_syscall_64+0x166/0x520
[  214.353023][T11721]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.359433][T11721] 
[  214.359433][T11721] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  214.367070][T11721]        __mutex_lock+0x197/0x15a0
[  214.372169][T11721]        nbd_queue_rq+0x373/0xff0
[  214.377190][T11721]        blk_mq_dispatch_rq_list+0x499/0x1990
[  214.383247][T11721]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  214.390094][T11721]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  214.396586][T11721]        blk_mq_run_work_fn+0x167/0x2f0
[  214.402124][T11721]        process_scheduled_works+0xc3d/0x1630
[  214.408187][T11721]        worker_thread+0xa47/0xfb0
[  214.413291][T11721]        kthread+0x38b/0x480
[  214.417869][T11721]        ret_from_fork+0x514/0xb70
[  214.422975][T11721]        ret_from_fork_asm+0x1a/0x30
[  214.428248][T11721] 
[  214.428248][T11721] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  214.435450][T11721]        __mutex_lock+0x197/0x15a0
[  214.440560][T11721]        nbd_queue_rq+0xc1/0xff0
[  214.445489][T11721]        blk_mq_dispatch_rq_list+0x499/0x1990
[  214.451543][T11721]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  214.458391][T11721]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  214.464883][T11721]        blk_mq_run_work_fn+0x167/0x2f0
[  214.470423][T11721]        process_scheduled_works+0xc3d/0x1630
[  214.476488][T11721]        worker_thread+0xa47/0xfb0
[  214.481596][T11721]        kthread+0x38b/0x480
[  214.486172][T11721]        ret_from_fork+0x514/0xb70
[  214.491271][T11721]        ret_from_fork_asm+0x1a/0x30
[  214.496544][T11721] 
[  214.496544][T11721] -> #4 (set->srcu){.+.+}-{0:0}:
[  214.503659][T11721]        __synchronize_srcu+0xca/0x2f0
[  214.509113][T11721]        elevator_switch+0x1e8/0x7b0
[  214.514389][T11721]        elevator_change+0x2fa/0x480
[  214.519663][T11721]        elevator_set_default+0x375/0x440
[  214.525369][T11721]        blk_register_queue+0x404/0x4f0
[  214.530904][T11721]        __add_disk+0x6b8/0xdb0
[  214.535754][T11721]        add_disk_fwnode+0x100/0x3a0
[  214.541028][T11721]        nbd_dev_add+0x733/0xb60
[  214.545963][T11721]        nbd_init+0x168/0x1f0
[  214.550625][T11721]        do_one_initcall+0x250/0x870
[  214.555901][T11721]        do_initcall_level+0x10a/0x1a0
[  214.561353][T11721]        do_initcalls+0x59/0xa0
[  214.566203][T11721]        kernel_init_freeable+0x29d/0x3e0
[  214.572002][T11721]        kernel_init+0x22/0x1d0
[  214.576843][T11721]        ret_from_fork+0x514/0xb70
[  214.581974][T11721]        ret_from_fork_asm+0x1a/0x30
[  214.587245][T11721] 
[  214.587245][T11721] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  214.595058][T11721]        __mutex_lock+0x197/0x15a0
[  214.600161][T11721]        elevator_change+0x1af/0x480
[  214.605436][T11721]        elevator_set_none+0xb5/0x140
[  214.610796][T11721]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  214.617117][T11721]        nbd_start_device+0x189/0xb30
[  214.622485][T11721]        nbd_genl_connect+0x167d/0x1cd0
[  214.628021][T11721]        genl_family_rcv_msg_doit+0x233/0x340
[  214.634086][T11721]        genl_rcv_msg+0x614/0x7a0
[  214.639102][T11721]        netlink_rcv_skb+0x226/0x4a0
[  214.644379][T11721]        genl_rcv+0x28/0x40
[  214.648874][T11721]        netlink_unicast+0x8ef/0xa80
[  214.654147][T11721]        netlink_sendmsg+0x7f0/0xb20
[  214.659428][T11721]        sock_sendmsg_nosec+0x14e/0x190
[  214.664986][T11721]        ____sys_sendmsg+0x54e/0x850
[  214.670279][T11721]        ___sys_sendmsg+0x2a5/0x360
[  214.675473][T11721]        __x64_sys_sendmsg+0x1b1/0x290
[  214.680916][T11721]        do_syscall_64+0x166/0x520
[  214.686019][T11721]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.692427][T11721] 
[  214.692427][T11721] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  214.701029][T11721]        blk_alloc_queue+0x544/0x690
[  214.706307][T11721]        __blk_mq_alloc_disk+0x194/0x390
[  214.711940][T11721]        nbd_dev_add+0x494/0xb60
[  214.716872][T11721]        nbd_init+0x168/0x1f0
[  214.721534][T11721]        do_one_initcall+0x250/0x870
[  214.726814][T11721]        do_initcall_level+0x10a/0x1a0
[  214.732257][T11721]        do_initcalls+0x59/0xa0
[  214.737093][T11721]        kernel_init_freeable+0x29d/0x3e0
[  214.742802][T11721]        kernel_init+0x22/0x1d0
[  214.747652][T11721]        ret_from_fork+0x514/0xb70
[  214.752755][T11721]        ret_from_fork_asm+0x1a/0x30
[  214.758032][T11721] 
[  214.758032][T11721] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  214.765234][T11721]        fs_reclaim_acquire+0x71/0x100
[  214.770693][T11721]        kmem_cache_alloc_lru_noprof+0x65/0x5f0
[  214.776940][T11721]        alloc_inode+0xb8/0x1b0
[  214.781783][T11721]        iget_locked+0x12c/0x690
[  214.786722][T11721]        kernfs_get_inode+0x4f/0x770
[  214.792031][T11721]        kernfs_get_tree+0x5cd/0x980
[  214.797324][T11721]        vfs_get_tree+0x92/0x2a0
[  214.802268][T11721]        do_new_mount+0x325/0xb00
[  214.807292][T11721]        __se_sys_mount+0x31d/0x420
[  214.812484][T11721]        do_syscall_64+0x166/0x520
[  214.817629][T11721]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.824038][T11721] 
[  214.824038][T11721] -> #0 (&root->kernfs_rwsem){++++}-{4:4}:
[  214.832025][T11721]        __lock_acquire+0x164c/0x2de0
[  214.837401][T11721]        lock_acquire+0x115/0x350
[  214.842421][T11721]        down_write+0x91/0x200
[  214.847179][T11721]        kernfs_remove+0x44/0x80
[  214.852123][T11721]        __kobject_del+0xe0/0x310
[  214.857141][T11721]        kobject_put+0x23a/0x550
[  214.862157][T11721]        br_sysfs_delbr+0x44/0x70
[  214.867167][T11721]        br_dev_delete+0x106/0x130
[  214.872270][T11721]        br_del_bridge+0xb1/0xf0
[  214.877198][T11721]        br_ioctl_stub+0x746/0xd60
[  214.882300][T11721]        sock_ioctl+0x4e1/0x7e0
[  214.887136][T11721]        __se_sys_ioctl+0xfc/0x170
[  214.892337][T11721]        do_syscall_64+0x166/0x520
[  214.897438][T11721]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.903840][T11721] 
[  214.903840][T11721] other info that might help us debug this:
[  214.903840][T11721] 
[  214.914053][T11721] Chain exists of:
[  214.914053][T11721]   &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem
[  214.914053][T11721] 
[  214.927857][T11721]  Possible unsafe locking scenario:
[  214.927857][T11721] 
[  214.935293][T11721]        CPU0                    CPU1
[  214.940642][T11721]        ----                    ----
[  214.945990][T11721]   rlock(&root->kernfs_supers_rwsem);
[  214.951441][T11721]                                lock(pmus_lock);
[  214.957849][T11721]                                lock(&root->kernfs_supers_rwsem);
[  214.965743][T11721]   lock(&root->kernfs_rwsem);
[  214.970494][T11721] 
[  214.970494][T11721]  *** DEADLOCK ***
[  214.970494][T11721] 
[  214.978620][T11721] locks held by syz.4.1377/11721: 3, last CPU#0:
[  214.984932][T11721]  #0: ffffffff91257ac0 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4b8/0x7e0
[  214.994064][T11721]  #1: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x1a8/0xd60
[  215.003113][T11721]  #2: ffff88801d2dcaa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80
[  215.013380][T11721] 
[  215.013380][T11721] stack backtrace:
[  215.019259][T11721] CPU: 0 UID: 0 PID: 11721 Comm: syz.4.1377 Not tainted syzkaller #0 PREEMPT(full) 
[  215.028636][T11721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  215.038683][T11721] Call Trace:
[  215.041953][T11721]  <TASK>
[  215.044872][T11721]  dump_stack_lvl+0xe8/0x150
[  215.049466][T11721]  print_circular_bug+0x2e2/0x300
[  215.054486][T11721]  check_noncircular+0x12f/0x150
[  215.059418][T11721]  __lock_acquire+0x164c/0x2de0
[  215.064258][T11721]  ? lockdep_unlock+0x5c/0xd0
[  215.068933][T11721]  lock_acquire+0x115/0x350
[  215.073426][T11721]  ? kernfs_remove+0x44/0x80
[  215.078021][T11721]  down_write+0x91/0x200
[  215.082256][T11721]  ? kernfs_remove+0x44/0x80
[  215.086838][T11721]  ? __pfx_down_write+0x10/0x10
[  215.091679][T11721]  ? down_read+0x2b9/0x320
[  215.096086][T11721]  kernfs_remove+0x44/0x80
[  215.100497][T11721]  __kobject_del+0xe0/0x310
[  215.104997][T11721]  kobject_put+0x23a/0x550
[  215.109408][T11721]  br_sysfs_delbr+0x44/0x70
[  215.113904][T11721]  br_dev_delete+0x106/0x130
[  215.118496][T11721]  br_del_bridge+0xb1/0xf0
[  215.122909][T11721]  br_ioctl_stub+0x746/0xd60
[  215.127493][T11721]  ? trace_contention_end+0x3d/0x140
[  215.132772][T11721]  ? __mutex_lock+0x305/0x15a0
[  215.137557][T11721]  ? __pfx_br_ioctl_stub+0x10/0x10
[  215.142667][T11721]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  215.147688][T11721]  ? sock_ioctl+0x4b8/0x7e0
[  215.152199][T11721]  ? do_futex+0x458/0x4e0
[  215.156549][T11721]  ? __pfx_br_ioctl_stub+0x10/0x10
[  215.161659][T11721]  sock_ioctl+0x4e1/0x7e0
[  215.165986][T11721]  ? __fget_files+0x2a/0x420
[  215.170568][T11721]  ? __pfx_sock_ioctl+0x10/0x10
[  215.175411][T11721]  ? __fget_files+0x2a/0x420
[  215.179989][T11721]  ? __fget_files+0x2a/0x420
[  215.184571][T11721]  ? bpf_lsm_file_ioctl+0x9/0x20
[  215.189498][T11721]  ? __pfx_sock_ioctl+0x10/0x10
[  215.194338][T11721]  __se_sys_ioctl+0xfc/0x170
[  215.198926][T11721]  do_syscall_64+0x166/0x520
[  215.203511][T11721]  ? trace_irq_disable+0x3b/0x140
[  215.208530][T11721]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.214582][T11721]  ? clear_bhb_loop+0x70/0xc0
[  215.219248][T11721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.225129][T11721] RIP: 0033:0x7f1b5399f559
[  215.229536][T11721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  215.249135][T11721] RSP: 002b:00007f1b54944028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  215.257543][T11721] RAX: ffffffffffffffda RBX: 00007f1b53c25fa0 RCX: 00007f1b5399f559
[  215.265509][T11721] RDX: 0000200000000480 RSI: 00000000000089a1 RDI: 0000000000000009
[  215.273470][T11721] RBP: 00007f1b53a36b20 R08: 0000000000000000 R09: 0000000000000000
[  215.281429][T11721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  215.289390][T11721] R13: 00007f1b53c26038 R14: 00007f1b53c25fa0 R15: 00007fff7f56cd18
[  215.297366][T11721]  </TASK>
[  215.579642][ T5648] block nbd3: Receive control failed (result -104)
[  216.198801][T10272] net_ratelimit: 20 callbacks suppressed
[  216.198828][T10272] bond2: (slave dummy0): failed to get link speed/duplex
[  216.308608][T10272] bond2: (slave dummy0): failed to get link speed/duplex
[  216.419696][ T6871] bond2: (slave dummy0): failed to get link speed/duplex
[  216.529038][T10917] bond2: (slave dummy0): failed to get link speed/duplex
[  216.638163][ T7820] bond2: (slave dummy0): failed to get link speed/duplex
[  216.749285][T10917] bond2: (slave dummy0): failed to get link speed/duplex
[  216.858231][ T6871] bond2: (slave dummy0): failed to get link speed/duplex
[  216.969165][ T7820] bond2: (slave dummy0): failed to get link speed/duplex
[  217.079998][T10917] bond2: (slave dummy0): failed to get link speed/duplex
[  217.193813][T10917] bond2: (slave dummy0): failed to get link speed/duplex
[  221.268288][ T6871] net_ratelimit: 36 callbacks suppressed
[  221.268310][ T6871] bond2: (slave dummy0): failed to get link speed/duplex
[  221.378309][ T5780] bond2: (slave dummy0): failed to get link speed/duplex
[  221.488021][ T6871] bond2: (slave dummy0): failed to get link speed/duplex
[  221.598282][ T7820] bond2: (slave dummy0): failed to get link speed/duplex
[  221.709361][ T5780] bond2: (slave dummy0): failed to get link speed/duplex
[  221.818043][ T6871] bond2: (slave dummy0): failed to get link speed/duplex
[  221.928007][ T7820] bond2: (slave dummy0): failed to get link speed/duplex
[  222.039463][ T6871] bond2: (slave dummy0): failed to get link speed/duplex
[  222.148264][T10272] bond2: (slave dummy0): failed to get link speed/duplex
[  222.258059][ T7820] bond2: (slave dummy0): failed to get link speed/duplex