last executing test programs: 1m2.641351015s ago: executing program 0 (id=916): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0x2000000, 0x4) r1 = socket$inet6(0xa, 0x80000, 0x80000000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x25bf11b7}, &(0x7f00000000c0)=0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f00000003c0)="89a25031b0f94f0cd90348a0d21ee413fa36ee8608f0844238e86d19f73752712e44cf133f8e6f0d32d614bbc3926a2e37f261021dd991c941e3e6f1f3856cc68dfe41ae7eaf23ba91d8cbfbb99cae9c90c9dcac5cf843794592a5d408bd312d70e145a62181e3aaa9c243d775a318fc99b7", 0xfffffffffffffea6}, {&(0x7f0000000480)="b21b824db48cb6a14779dcb79214c546b4f4728c976c59e106ff28ecffa91b2e68bd67bf9882d6939c7c4e4727f8d8979ce9bb883f9213faf51834517bed4d0bfc521236439a9e127fdb471c239215fcfc4dd80b3e53f4cb004d8328aaa6b41d237e66"}, {&(0x7f0000002c40)="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"}], 0x1, 0xa) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x5b}, 0x8) 1m0.679141787s ago: executing program 0 (id=921): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x6, 0x5, 0x7, 0xc1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000340), 0x0}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev={0xac, 0x14, 0x14, 0x1a}, 0x4e22, 0xffffffff, 'rr\x00', 0x46b24b5b31e308dd, 0x1, 0x20}, 0x2c) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}]}}}]}, 0x48}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4), 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000304000000000000000000001300", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e65766500001000028005000a000100000004000e"], 0x40}}, 0x0) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a31000000000500010007008a92f1f607800e00018008000140ac1414aa0c000280080001407f000001b14530884e51b600ea8262857963c8186584ab5b35c4df14a08a91a2b602d8a34d320ccf6c2e10ec1629d6d9ea1e5a3d1e162b8cda13d363"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000640)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x21, &(0x7f0000000740)=@raw=[@alu={0x7, 0x0, 0x1, 0x0, 0x4, 0x80, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xef5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xab7, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0xe, 0x1, 0x0, r0}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 50.310423568s ago: executing program 0 (id=921): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x6, 0x5, 0x7, 0xc1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000340), 0x0}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev={0xac, 0x14, 0x14, 0x1a}, 0x4e22, 0xffffffff, 'rr\x00', 0x46b24b5b31e308dd, 0x1, 0x20}, 0x2c) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}]}}}]}, 0x48}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4), 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000304000000000000000000001300", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e65766500001000028005000a000100000004000e"], 0x40}}, 0x0) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a31000000000500010007008a92f1f607800e00018008000140ac1414aa0c000280080001407f000001b14530884e51b600ea8262857963c8186584ab5b35c4df14a08a91a2b602d8a34d320ccf6c2e10ec1629d6d9ea1e5a3d1e162b8cda13d363"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000640)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x21, &(0x7f0000000740)=@raw=[@alu={0x7, 0x0, 0x1, 0x0, 0x4, 0x80, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xef5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xab7, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0xe, 0x1, 0x0, r0}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 38.193850661s ago: executing program 0 (id=921): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x6, 0x5, 0x7, 0xc1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000340), 0x0}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev={0xac, 0x14, 0x14, 0x1a}, 0x4e22, 0xffffffff, 'rr\x00', 0x46b24b5b31e308dd, 0x1, 0x20}, 0x2c) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}]}}}]}, 0x48}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4), 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000304000000000000000000001300", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e65766500001000028005000a000100000004000e"], 0x40}}, 0x0) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a31000000000500010007008a92f1f607800e00018008000140ac1414aa0c000280080001407f000001b14530884e51b600ea8262857963c8186584ab5b35c4df14a08a91a2b602d8a34d320ccf6c2e10ec1629d6d9ea1e5a3d1e162b8cda13d363"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000640)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x21, &(0x7f0000000740)=@raw=[@alu={0x7, 0x0, 0x1, 0x0, 0x4, 0x80, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xef5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xab7, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0xe, 0x1, 0x0, r0}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 21.536489223s ago: executing program 0 (id=921): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x6, 0x5, 0x7, 0xc1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000340), 0x0}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev={0xac, 0x14, 0x14, 0x1a}, 0x4e22, 0xffffffff, 'rr\x00', 0x46b24b5b31e308dd, 0x1, 0x20}, 0x2c) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}]}}}]}, 0x48}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4), 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000304000000000000000000001300", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e65766500001000028005000a000100000004000e"], 0x40}}, 0x0) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a31000000000500010007008a92f1f607800e00018008000140ac1414aa0c000280080001407f000001b14530884e51b600ea8262857963c8186584ab5b35c4df14a08a91a2b602d8a34d320ccf6c2e10ec1629d6d9ea1e5a3d1e162b8cda13d363"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000640)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x21, &(0x7f0000000740)=@raw=[@alu={0x7, 0x0, 0x1, 0x0, 0x4, 0x80, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xef5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xab7, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0xe, 0x1, 0x0, r0}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10.065990935s ago: executing program 0 (id=921): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x6, 0x5, 0x7, 0xc1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000340), 0x0}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev={0xac, 0x14, 0x14, 0x1a}, 0x4e22, 0xffffffff, 'rr\x00', 0x46b24b5b31e308dd, 0x1, 0x20}, 0x2c) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}]}}}]}, 0x48}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4), 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000304000000000000000000001300", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e65766500001000028005000a000100000004000e"], 0x40}}, 0x0) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a31000000000500010007008a92f1f607800e00018008000140ac1414aa0c000280080001407f000001b14530884e51b600ea8262857963c8186584ab5b35c4df14a08a91a2b602d8a34d320ccf6c2e10ec1629d6d9ea1e5a3d1e162b8cda13d363"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000640)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x21, &(0x7f0000000740)=@raw=[@alu={0x7, 0x0, 0x1, 0x0, 0x4, 0x80, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xef5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xab7, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0xe, 0x1, 0x0, r0}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.255408412s ago: executing program 2 (id=1388): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001c40)="0349", 0x2}], 0x1}}], 0x1, 0xc010) recvmmsg(r2, &(0x7f00000061c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/151, 0x97}], 0x1}, 0xfe}], 0x1, 0x141, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)='_;', 0x2}], 0x1, 0x0, 0x0, 0x8800}], 0x1, 0x20044000) unshare(0x8000400) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040), 0xc) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r5, &(0x7f0000000680)=[{&(0x7f0000000080)='~', 0x1}], 0x1) ioctl$sock_qrtr_TIOCINQ(r4, 0x541b, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x40000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x12, 0x1, {0x7fffffff, 0x0, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) 1.773929192s ago: executing program 4 (id=1393): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000630108000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711215"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) r0 = socket$kcm(0xa, 0x2, 0x3a) (rerun: 64) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{0x0, 0x43}, {&(0x7f0000000640)='%', 0x1}], 0x2, 0x0, 0x0, 0x900}, 0x0) 1.718647063s ago: executing program 3 (id=1394): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0xf, 0x12, r2, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r2, 0x913e0000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0xfffa, 0x8000, 0x81, 0x543, r5}, 0x10) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d4000/0x2000)=nil, 0x2000, 0x2000016, 0x10, r2, 0xd1cf0000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r7, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x28011, r8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x74, r9, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x4014) accept4$alg(r7, 0x0, 0x0, 0x800) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000440)={{{@in=@loopback, @in6=@remote}}, {{@in=@remote}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000000100)=0xca) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, 0x0, 0x0) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x25a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) socket$alg(0x26, 0x5, 0x0) 1.525437473s ago: executing program 1 (id=1395): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007001100000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) socket(0xa, 0x3, 0x3a) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x49, &(0x7f0000001880)=0x3, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r4 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a00006c"], 0x14}}, 0x0) write$tun(r1, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x10000, 0x4, 0x20}, &(0x7f00000003c0)=0x10) (async) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4915}, {0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x0, {[0x9, 0x8, 0x4, 0x9, 0x3, 0x1000, 0x0, 0x9]}}, 0x5c) 1.369863781s ago: executing program 4 (id=1396): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0x8008743f, 0xf0ff1f00000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01082cbd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="2000503b458004a23ec88a5fbe53c1b4f3d458bd78993c49b85e6b80700d"], 0x3c}, 0x1, 0x0, 0x0, 0x44151}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000bc7a005699a81e287ebef6bea200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095ab7615c2342e605665fc5884ac523c7bbb50f7add9591af5075e9a8679693c8329d51060b8d639a13f4703bf06aa5f4c19ea04f7a78ee303a11669633eefee85c72e5ef5e04ccd922dafd9c6d3b3655d8c7ed0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000000)={'netdevsim0\x00', 0x500}) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) syz_emit_ethernet(0x5e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004f0000501300000000059078ac1e00010a01010044140503770c1bb40000000002e000000100000000830200000000ff0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) 1.333573611s ago: executing program 2 (id=1397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ed4d008c71072759004b22d30e97bfceae00", @ANYRES32=r2, @ANYBLOB="0800db00", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.113911949s ago: executing program 2 (id=1398): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000007000000030000000020000000000000000000009030000000000000001000084000000040000000001000000010100000000000000000004040000000000689b22b67fdb365de8601d4071d438519267bf00b53efad289bc0b71fca54adc8ddb1ef532299d3d17638eb8606c589fe1c230d0c1a45e890e5238f4d79059324cedf5965dbb26d87a15585f07c384a55a6dbf4946899c5992fdd8ca80ac255eb701d3d5"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x40007f, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x10001, 0x2, 0x10005, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @value}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x87}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'team0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0xa, 0x81, 0x0, 0x9, 0x1, 0x5, 0x80, 0x41, 0x4, [0x8, 0x4, 0xe18, 0x972d, 0x3, 0x7, 0x6, 0x803]}}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r1}, 0x4) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff, 0x0, 0xff000000], [], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x29}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5, 0x0, 0x78}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) (async) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) (async) r9 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r9, &(0x7f0000000040), 0x10) (async) listen(r9, 0x0) (async) socket(0x28, 0x5, 0x0) 1.017811837s ago: executing program 1 (id=1399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8854}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2d40b46b66ed80e1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$xdp(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000480)="069f", 0x2}, {&(0x7f0000000500)="1979f48004585800a9dfaecb12f3457467daeffb267dc4d07dd2e9807e1bd753b7c69be9b83d3771801f386a1d91320104fc79a9fbfc57794c1a475a7f0872c4c68a5b394a7a7b16e6d979f4afbaea262984639fe56b65793c64c40aefcf160c90bc768b7d64bad15f6989868c3321a30e4ae2baa9127446cc16e478bffeb7", 0x7f}], 0x2, 0x0, 0x0, 0x4000000}, 0x4084080) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r5, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r6, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r7, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x2, 0x0, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$bt_BT_SECURITY(r10, 0x112, 0x4, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0xa, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_USERDATA={0x9, 0xd, 0x1, 0x0, "a7d248dbcd"}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @numgen={{0xb}, @void}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r6, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x72, &(0x7f0000000ac0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000b00), &(0x7f0000000b40), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000d00)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000f00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4109000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x17c, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20008891}, 0x4001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000010000ffe80000000000000000850000042700000085000000a400000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 995.574498ms ago: executing program 2 (id=1400): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000140), 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f00000000c0)=0x3, 0x4) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x2, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 909.431945ms ago: executing program 4 (id=1401): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x18, 0x3c, 0x107, 0xfffffffc, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x88c4}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@dev, 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'seqiv(ccm(blowfish-asm))\x00'}, 0x0, 0x40}}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x148}}, 0x0) 790.017868ms ago: executing program 1 (id=1402): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000005c0)={0x1d, r1}, 0x8) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0xf423f}, 0x0) 784.939021ms ago: executing program 2 (id=1403): socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf251b00000008000300", @ANYRES32=r3, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000c2b6a2cbaddffb440e745ba6e3e5c86424b0c2ac061dff55887ab692bb5900a986bf5452ff7a7d0062d62b01a6", @ANYRES16=r4, @ANYBLOB="040029bd7000fddbdf25170000000c0006000300000003000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8811) r5 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x3, 0x7f) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) shutdown(r6, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000340)=0x1e, 0x4) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x22000042, 0x1, 0x2}, 0x10) sendmsg$tipc(r7, &(0x7f00000006c0)={&(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) 738.07372ms ago: executing program 3 (id=1404): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000100)=0x987, 0x4) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002780)=""/4071, 0xfffe}], 0x1}, 0x0) unshare(0x20000400) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x40b942b37d0000) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) 737.353443ms ago: executing program 4 (id=1405): r0 = socket$netlink(0x10, 0x3, 0x13) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x8, 0x4, 0x6, 0x5}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$inet6(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x808c1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000280)={{0x2, 0x4e23, @broadcast}, {0x0, @random="862405190c71"}, 0x2, {0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x3d}}, 'lo\x00'}) socket(0x25, 0x800, 0x9) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt(r5, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffdec) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x80, 0x25dfdbfc, {0xa, 0x14, 0x80, 0x0, 0xff, 0x3, 0xc8, 0x4, 0x800}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x4001, 0x3, 0x200, 0xd8, 0xa, 0x148, 0xd8, 0x148, 0x168, 0x240, 0x240, 0x168, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'bridge_slave_0\x00', 'veth1_to_batadv\x00', {}, {}, 0x21, 0x0, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x76, 0xe, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r9}, 0x4) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) 629.101938ms ago: executing program 1 (id=1406): r0 = socket$rxrpc(0x21, 0x2, 0xa) ppoll(&(0x7f0000000000)=[{r0, 0x5009}], 0x1, &(0x7f0000000040), &(0x7f0000000080)={[0x67]}, 0x8) setsockopt$sock_int(r0, 0x1, 0x50, &(0x7f0000000240), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000810}, 0xc0c1) 579.010403ms ago: executing program 3 (id=1407): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000373010b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x180, 0x940c, 0x3002, 0x180, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x84, 0x81, 0x2, 0x1d}, 0x0, 0x120, 0x180, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x7}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e21], [0x1, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0x0, 0xff000000, 0xffffffff, 0xff], 0x4e24, 0x4e21, 0x4e22, 0x4e21, 0xf, 0x21ec, 0x9, 0x1, 0x1}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x14000, [0x5b21, 0xfffffffa], 0xfffffffa, 0x8, 0xb, [@empty, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @mcast1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @empty], 0x7}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_to_team\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 429.942855ms ago: executing program 4 (id=1408): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207, 0x11}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x44}}, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0x2, "4f6f07d1af0f724e6118ecfbac0200843af297baebb0efa284001403011a00", 0x0, 0x4, 0x81, 0x81}, 0xfffffffffffffd89) (async, rerun: 64) r0 = socket$kcm(0x10, 0x2, 0x10) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x4}]}, 0x20}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000008c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)={0x4c, r4, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff8, 0x4f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="3d36ed83d7af6a858c1c3de62a76770e2d260c65be9a14815b76f7ab7ecf264988c99f598abb91c70a5e66c397d8a51fdc375a8d43aafb39b5c50825859a7387bbbe7149906dadbf57d7ed650519e8de07f4d88d29dfb6dac954c97a72b6d1e032b5b53d1119c5af3c005ffdd1525b83514fd2f9b8ceac974114994c08dea116eb718380818eca74b5704b57de0e8cf728ce6ef839327b2d59ddccbc204564ac3d244e64ebdbb5456ba42ae334379295fa0290502dfc967e8262bfd52cd07e434781fcf386c236a88707264151906ab1ddab6fb0a2d0c053468301f673636f5bb03fe63c4334", 0xe6}, {&(0x7f00000003c0)="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", 0xfd}, {&(0x7f0000000600)="6c1ab2727c27c98c39e4bf8ce3bd649015a495768cbd6633a59174e3c5451a27b7ad5322e30722210dd04533194a01dd94bff5a19b5b9d47f55f1f6802e9ff7fd0341dadd5b174712beef9992a530ddea5ef2795d5aa4666baed521cb30162edf538321588b0cb749e7b6bcc23f8f615599f80d40eb86ea84f26520635bf315fa1c335b06ba3476e30d212d17fdf3a3592e53627988bcc18d6558038badda5d27acee1", 0xa3}, {&(0x7f00000006c0)="f4626523d70fccb7d08d3b3f3bc5ebfb98f03af47a8ee13ce4960db13a49181047c46f7106579eabd1d259aed924d26af17e7dbfc073f0a5aa99c98cb5977117142f49097e877c3069a23fd8645651d4f11c3e2c9ca8d4e30db336dd8d6e4c1db408fc8a097e309197c270293af8d72864eeda9ecf9a42282908baf9d9cc0921b768c3f6bf717a44c77ce78dda23a1274ea31e0156086ac1d10803d51086", 0x9e}], 0x4, &(0x7f0000000780)=[{0x98, 0x110, 0xfffffff4, "1d3062b35767312efb7b50e9b0e7eff335c004b5fd8a6964278650bb41c4b50f985c1dfc693e480dfe9916bd3ba24f6d9c2fd1867c96ae701f354c1c7cf6a96939c6bb1f13cbc5bdde66b0e01518da7c93373870d3ab227c454bcb9ac4a07b5239e6bff2ed689b29c24ee171cdfb680df65d5d3b6a91bfb43224a0c1a147a5d062"}], 0x98}, 0x80) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) mmap(&(0x7f000068d000/0x3000)=nil, 0x3000, 0x2000003, 0x12, 0xffffffffffffffff, 0x4000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket(0x2b, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 426.469113ms ago: executing program 1 (id=1409): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) clock_gettime(0x37ad3e8caf423423, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) r5 = socket(0x29, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000001ec0)=[{{&(0x7f00000007c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[], 0xe0}}, {{&(0x7f0000000cc0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x2, 0x4000000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@generic={0x0, 0x1, 0x1, 0xad, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r8}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000140)="94ab64797ae2978ac94a5c751e"}, {&(0x7f0000000440)="03ee4f250cc55602ee0c47e1c4c892a05aee88387c147a048e3b65b727d39696c4512e3e605e3f40b77d0518c47c6d9b382dcb4d2429be5f6f6b9f41a44bbb4d67305df56504dd3471d457c1ff383ce79eb23fa97e0804a2333d9e413971d19a0c97fd55bdef9a715c2b8631cd1e905a04221728694d0800da2e7b2dee375d98d78ad02b20442d0f87f831e3a811e6fd7e9d3d234745419ef06bc0567e603329ddd9665b44dd0877bbf117a1aeef7e3abdd4197e832ff726a07258e27404"}, {&(0x7f0000000500)="e7b11a2d57e8e68729bf7e5079c7834c960ebc08a721cee8f0d123da2ec3073d87ef1c97f6d050b92affcf12db66432f07da7ae6290c04992673e469736b11eb6a8b191c239187a7f0090abaf1611a706b22b46300d9dd7a4dfb9d4db7bbe2e5faa8dca635950da3455751124a986e589077a90a7b4ae430643ff56f00253a3ec9b632c93d4752034c5942e61e5e2b10a5b953f8d0338af485de57f6b6f476283321f3718659e68f6852fd781bfe06e1427a4f4626ed181a4f5eddeca11d3825fa677ac3099d4136d2b809b5ac42b4bef22eecdf2ad515252dbe92"}, {&(0x7f0000000600)="69f8c36d763ec43a2e4806ff12f6ddd7d3da219ac061c223c4c7db9bd2ae063f2f8ccf00bab23f221412d78ec3a2ed191f57383c117c89f3f28615290430bdd72f48a71259dd24b045d2ee5c2bedcb40440a48138f0c768864ac515010643daa91f7f931ff2fda6682e5547c5915014bd9d5f0636a6dd5e49cc9edc090f0581ced2d9212b4f41e6ea038b2bd5466a95cdf0920e07fa2f7c077"}, {&(0x7f0000000900)="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"}, {&(0x7f00000006c0)="22595a3d5566f1488ba481690cadd5145c5470f9aae51ce894f0bd5e46ea7deebecb9647371b386dec7e43666e6be7483883c877e46ad87658affb3380f04d0d69f03f604351a4f86907ba3ffc438e047dfa0086f1a928635c56a9997beab7f8d21617bb55cc85cb"}], 0x171}}], 0x3367e2c3289c0ff, 0x1400) 330.400471ms ago: executing program 3 (id=1410): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x8) connect$x25(r1, &(0x7f0000000a80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x2}}, 0x12) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000240)=0x6, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x19, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="730600000000000000010005020fff0103000000c910ff0100000000000000000000000000010401060401080200000000000000000000000000000000010000"], 0x40) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r5, 0x2000000, 0x5, 0x0, &(0x7f0000000180)="07497f7ad5", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x7, 0x4, 0x80000000, 0x3, 0x10, 0x2, 0xc7}, &(0x7f0000000140)=0x9c) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000180)={r6, 0x9, 0x6}, 0x8) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x24000800, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) shutdown(r0, 0x1) 215.148872ms ago: executing program 1 (id=1411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2082, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000020001000600"/28, @ANYRESHEX=r1, @ANYRESHEX=r2, @ANYRESOCT=r3, @ANYRES16=r0], 0x1c}}, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b19, &(0x7f0000000000)={'wlan1\x00'}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="89edee2c78daddb4b473fec988cafbe863cac50580088b77fb3cf321872b", 0x1e}], 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'veth0_macvtap\x00'}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r12, &(0x7f0000000080)={&(0x7f0000000100)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f00000000c0)={0x0, 0xfffffffffffffd66}, 0x7, 0x0, 0x0, 0x6274a5ca51bea5ab}, 0x4000080) sendmsg$L2TP_CMD_TUNNEL_CREATE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="17090100000000000000010000000500070000000000080009000000000008000a0000000000060002000100000014001f00ffe40000000000000000000000000000140020"], 0x5c}}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRES8=r13], 0xcc}, 0x1, 0x0, 0x0, 0x8800}, 0x4004040) 157.946594ms ago: executing program 4 (id=1412): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711217000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2568, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r1, 0x89e2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={0x0, 0x5}, 0x8) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) 154.410857ms ago: executing program 2 (id=1413): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020200020c00000001000000ffdbdf25030006000000000002004e24ac1414aa0000000000000001000000000000000000000005000500000000000a00000002000000fe8000000000000000000000000000bb0020000000000000"], 0x60}, 0x1, 0x7}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @remote}, &(0x7f0000000100)=0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000004000)=@newtfilter={0x61d8, 0x2c, 0x8, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xd, 0xd}, {0xd, 0x4}, {0xffec, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x6, 0xf}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @filter_kind_options=@f_fw={{0x7}, {0x6194, 0x2, [@TCA_FW_POLICE={0x18, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x46}]}, @TCA_FW_ACT={0x360, 0x4, [@m_ife={0xbc, 0x10, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x80000001, 0xfffffffffffffffb, 0x4, 0x4}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x2b}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffff45a}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fffffff}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x4, 0x5, 0xc}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x158, 0x1e, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x1}]}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0xe0, 0x6, "60754c5e7c889334af7727d53a2d2883dc9ac8113effb35184a653fa6d3c6cfbcce8eb9e79b0e8bc2aa8c1ed21d063fb775b55708f984dfef81337b8c06c566a9567ec616524facebe4f59547c09b7c749bd9bce16592b164cae23002d00cbe85f18f7c09d02115a5639ce34185abccbc0a7ab2e71d0044e416ce2ec90cfebae0f0b2dbe1ac5cb27f716e70163f350bafb06f763dab5d94834a3f3814ef06a46d6d9ea122e8a63231e78695900cae348eff48af7723edd0ba3c61654000de436efb616248ae389e5a82d6b820f833f2ae09ee050b3ad3f92fdc841f0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x148, 0xa, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0xfe, 0x0, 0x7, 0x7}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xdfa}]}, {0xe6, 0x6, "56361fbef76ee8655d89b233120710e32462f2d54730b8da78572b78f029e46aed3af9ff701e96dde64c195236bd97812135b66ba4b811f161e1314567b03fbb0cc60a7cbfe838f00ea09e4b9390c99ed32d5a8ad0615b8434d3e5f83c843207a55858bdc8779de162c2b5d70bccd6b47fc7758d00455b8dfa9abcf6decedad500af3d3371ed16ee0c52696b64d666003f8bddeeb5773f94b64a520584343c445a4eb5e6f2aa5cd1bc52e98802c00dde7716e300d1c1c0b5c23086093328313b412b8b8384f13292b69f191e1b15f74c51a06c8628e85025c1840a8104da03a84808"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_FW_ACT={0x7dc, 0x4, [@m_simple={0x108, 0x6, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xa6d7, 0xfc, 0x4, 0x7, 0x1}}, @TCA_DEF_DATA={0xc, 0x3, ',:+@*%*\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xf9a, 0xc1dc, 0x10000000, 0xffffff01, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x80000001, 0x8, 0x3, 0x0, 0x400}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x2, 0x20000000, 0xb, 0x2}}]}, {0x6f, 0x6, "903464330e975f62d3b70fe7bc8da5c1b1dce0fa409e18813d2c3801dfa6f6a47847ab9317b217e46f960e9308315d72547f6ad2c854894a19e15c9f5a95f3cc1ee1a32820ee2530f8099942c60794c35dd9494c807bd1b11e0a18d75852be7c93d6120d8224f630d08c16"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x118, 0xa, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x10000000, 0xe, 0x9}, 0x9e}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x10001, 0x7, 0x3, 0xfffffffd}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x5e8d, 0x3, 0x1, 0x5}, 0x9}}]}, {0x93, 0x6, "6d50c0982a1559508870e966163db8ba907f86849ef0687688e8add1f51de0f7cb2d7d5d6da091616e25796eecb2c622a207fcaaf73dafdcbfe44039c89415270896d3deef4c3e1f2465d764644873e6dffc439e98c3e6ade5dc09595ef2e8941fdcd9980d15ef039c093a3fbe6621bc541108c1a4e89b221b1bb376c994a596030059fefd103835d5c733d0e56e6e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x6c, 0x0, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @local}]}, {0x20, 0x6, "27265206dddab75de01c3d1bc33e00d92efd545b57443e73ac76d727"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0x168, 0x0, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, '},$\x00'}, @TCA_DEF_DATA={0x13, 0x3, '(-}))])@,#--#,\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xdc, 0x9, 0x20000000, 0x1, 0x8}}, @TCA_DEF_DATA={0x6, 0x3, ':\x00'}]}, {0xf7, 0x6, "a25aeff2ca2e1ad8fde821f5156677d81241922ac7e5e374a0a789ab80d5e03b433b215c14377fa8ec541deb8bc350f3771b01905420de8f5cb667ec8e7da6123deb8b1978c2b8357eae8695ac66cb60a419ed27b3a218c24cc1660f6121dcb9c125bc347c11f89ced77bd6ab56e7e7e18d149e5bbcb9e7054e429d6a1741dfe056f4cc4587c16fd6b3398fa32835bc67598cd94771e28e0c3985705b9cbfb77f3d1a2d3a3fb567afbb2216f4f9861da7319be4054d8f38907ce28b938915db38707c186ee6bafd60515b973c68de4e547dd67cabeaa64e36ebe8aac7c81acaa7b4a57c1accffdab3ab112c553d7fc414b7e28"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x160, 0x1a, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffff28, 0x7, 0x5, 0x910, 0xff800000}, @multicast1, @multicast2, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0xcdb9, 0xffffffffffffffff, 0x9, 0x45}, @local, @loopback, 0xffffff00, 0x1}}]}, {0xe7, 0x6, "9cbe209a55f9df3da3b494207c0afc5022cff72ffb4094eda728f99717b5e4399cc5069b0f39ea44dc2c02bc1fc8ebd24dd5519e9d616f9f1e055e77f4770b0735b9762de3a08392eeb1ffc95cc9124d353897bb8229ce6fb8a6fdcfde30e63ff9e632c77aef7c253b0fc6697b25b02b010ef2c8c79c02ffbd10aa13aac1fb5b7ce6a418a36daaf41f25148794f10b2cecf533cbd502aadc266de5aba7e315779469fac482c704a9cf83b559c513007b3557d825470429dd4bd194a91a1922005b2eb3c96c8694688b44a95b7ac349877f65e45a145397e659d112f2c5c0cffaa9bcd1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0xd0, 0x14, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x6, 0x200, 0x667}}}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x0, 0xffffffffffffffff, 0x7, 0xfffffffb}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0x3b, 0x6, "f79008d8c247a44e7d87dc697fcba295333f6d5683aea103c8803d5beeecc0bca8e92e93a0b58a0dc0deefa4b66fa07ad184d9938cad26"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_csum={0x1b4, 0x9, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x7, 0x6, 0x8d78}, 0x27}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x200, 0x9, 0x5, 0xc, 0x40}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x4, 0x1, 0x2, 0x1}, 0x44}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0xffffff94, 0x4, 0x1ff, 0x5}, 0x58}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xa4ef, 0x10000000, 0x8, 0x400}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x3, 0xd, 0xf}, 0x38}}]}, {0xde, 0x6, "a27e75ee6823488f6234fa91915b935d8aeeaf020bc7e0561cc97c4297ac1acbef94a14c5bcfb0f8fed1810c0bfcfa6a143ea38ab0718e6e8de690a1ba8c5bb75e3b5eb1edf27bc9a8a3a2d5164af21dacbb2b416aaa5b5d407235ad62b73ef79111a009a450da423d45b55e5c12b667e8af078f1bd811dee03ecebdf78b4133b7437dea677e9f11f2ef3ea264bc2a1ebd4f593dcda872de975f4031f021d86e4dd3b8189ed3d5a7bbe735111ea2e2323600f0616e01b395dd87f1d6a419cb76c245d60fcad374b68544c88b83ee0e200cbc0dda358d8975d955"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_FW_ACT={0x5628, 0x4, [@m_skbedit={0x40, 0x18, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}]}, {0x9, 0x6, "029d799198"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0xdc, 0x1f, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @loopback}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast1}, @TCA_CT_ZONE={0x6, 0x4, 0xe}]}, {0x58, 0x6, "ae09aeed6593263a328092336f30a0a33bb8cafeafe9694e05b44224720c86400869548277ccdccec0a16960eb549a1393f01df8af7488939e6609715021df9d8c4edc534297dc2827fcd81f08162ff4337e99b9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x4f10, 0x9, 0x0, 0x0, {{0xb}, {0x4e00, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xfffffff9, 0xaf60, 0x1, 0x7, 0x9, 0x0, 0x1, 0x4b2c, 0x5, 0x3, 0x7, 0x100, 0x9, 0x10001, 0x6, 0x8, 0x57, 0x401, 0x81, 0xfffffffd, 0x3, 0x6, 0xfffffffd, 0x3, 0x200, 0x8, 0x0, 0xff, 0x10, 0x5, 0x0, 0x1d, 0x7fff, 0x9, 0xe3f, 0xfffffff7, 0xfffffffe, 0x4, 0x100, 0x4, 0x9, 0x6, 0x1f6844b4, 0xb, 0x7, 0x7, 0xffff, 0x3, 0x7, 0x0, 0xf, 0x9, 0xa, 0x513, 0xc7a, 0x7fffffff, 0x0, 0xff, 0x9, 0xf, 0x5eef, 0x2, 0x6, 0x4, 0x7, 0xfd, 0xda2a, 0xfffffff7, 0x6, 0x8, 0xffffff45, 0x5fd8, 0xd, 0x6, 0xe, 0x7fff, 0x5, 0x2, 0x1, 0x81, 0xffffffff, 0x1, 0x40, 0x9, 0xff, 0xc6e1, 0x4, 0xb0fe, 0xffff0000, 0x6, 0x882, 0x7, 0x5000000, 0x7, 0xe, 0x24800, 0x52d3, 0x6, 0xfffffff7, 0x80, 0x860, 0x1, 0x8001, 0x6, 0x3, 0x1, 0xca3c, 0x2, 0x7, 0x4, 0x7, 0x4, 0x2, 0x7fffffff, 0x4d55, 0x5, 0x2, 0x7, 0x6, 0x6, 0x20000, 0x8, 0x24b4, 0x1, 0x80, 0x3, 0x6, 0xe1, 0xf488, 0x0, 0x101, 0xfffffc01, 0x8, 0x80000, 0x9, 0x7, 0x8, 0x2, 0x2, 0x6, 0x4, 0xd8, 0x200, 0xc, 0x4, 0x2, 0x101, 0x0, 0x5, 0x59a, 0x2, 0x401, 0x0, 0x1, 0x6, 0x6, 0x80000000, 0x2, 0xd3, 0x9, 0x3, 0x3, 0x8, 0x5, 0x7fff, 0xfffffffc, 0x10000, 0x1, 0x1, 0x5, 0x9, 0x9, 0x3, 0x80000000, 0x20, 0xffffffff, 0x4, 0x3ff, 0xfffffffc, 0x4a, 0x9, 0x6, 0x10, 0x3, 0x0, 0xa, 0x3, 0x2, 0x5, 0xa, 0x9, 0x9, 0xa, 0x6, 0x1, 0x7, 0x5, 0x4, 0x1, 0x5, 0x3, 0x0, 0x3, 0x1e, 0x60f7, 0xddd, 0x3, 0x80000001, 0x0, 0x1ff, 0x0, 0x7, 0x9f, 0x9, 0x7, 0x9, 0x0, 0xa, 0x3, 0x3, 0xf78, 0x300000, 0x5, 0x4, 0x3, 0xf17, 0xd8, 0x0, 0x6, 0x2, 0x4, 0x7, 0x5, 0x10001, 0x2, 0x345, 0x5, 0x7b3, 0xffff0000, 0xf606, 0x2, 0x6, 0xcf9f, 0x12, 0x6, 0x1, 0x2, 0xb, 0x7, 0x100, 0x1, 0x4, 0x7f, 0x9, 0xf8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x7, 0x800, 0x45, 0xb, 0x8, 0x7, 0x7ff, 0x0, 0x4, 0x7, 0x10001, 0x9, 0x7ff, 0x9, 0xffffff80, 0xfffffffb, 0x5, 0x3, 0x7, 0x5, 0x7, 0x77b, 0x2545, 0x6, 0x1, 0x4, 0x5, 0x51, 0x1, 0x1, 0xffff49dc, 0xd3a, 0x9, 0x7, 0xb, 0x3a, 0x7, 0x3, 0x800000, 0x80, 0x5, 0x3, 0x0, 0x0, 0x48fd, 0x1ff, 0x35ec, 0x9, 0x80000000, 0x7, 0x81, 0x5, 0x7fffffff, 0x81, 0x0, 0x5, 0x2, 0x1, 0x0, 0x0, 0x1ff, 0x4, 0xd67f, 0x7, 0x1a, 0x7ff, 0x4, 0x0, 0x682, 0x8, 0x7fff, 0x3, 0x13d6, 0x2, 0xfffffff0, 0x2, 0x2, 0xffff, 0x6, 0xea6, 0xb8, 0xc, 0x7, 0x81, 0x1, 0x7f, 0xa, 0x6, 0x3ff, 0x7fff, 0x7fffffff, 0x0, 0x3, 0x4, 0x9, 0x7, 0x2, 0x1, 0x1000, 0x8, 0x100, 0x400, 0x2, 0x5, 0x6432f7ee, 0x8, 0x4, 0x3, 0xc, 0x7, 0x5, 0x3, 0x10001, 0x7, 0x100, 0x100, 0x8, 0x7fffffff, 0x5, 0x7, 0x7fff, 0x2, 0x81, 0x5, 0x400, 0x6, 0x5, 0x3, 0x9, 0xff, 0x7fffffff, 0x7, 0x520a51a3, 0x6c6, 0x2, 0x2b1, 0x8b, 0x7, 0x0, 0x1, 0x2, 0xb4, 0x3, 0x3, 0xf, 0x526, 0x3, 0x1, 0x5, 0x0, 0xfffffffe, 0x3, 0x7fff, 0x5, 0xaa8, 0x2, 0x9, 0x58, 0x7, 0x5, 0x6b, 0x10001, 0x6, 0x10, 0x5, 0x3, 0x9, 0x2, 0x8, 0x200, 0x4, 0x8, 0x8, 0xee1, 0x0, 0x1000, 0x7, 0x1, 0x10, 0x800, 0x5, 0x5, 0x3, 0x7, 0x4, 0x2, 0x0, 0x5a416cb2, 0x9, 0x51f, 0x6, 0x8001, 0x6, 0x80000000, 0xffffffff, 0xfffffffa, 0x49, 0x6, 0x7, 0x6, 0x6, 0xfffffffb, 0x7ff, 0xc, 0x0, 0x4, 0x0, 0x8, 0xcf, 0x7, 0x1ff, 0x9, 0x1ff, 0x101, 0x7, 0x6, 0xedb, 0x3, 0xeb, 0x2, 0xfffffff9, 0x4, 0x1, 0x4, 0x5, 0x5, 0x6a4, 0x6, 0x9, 0xf, 0x50, 0x1000, 0x9, 0xfff, 0x5, 0x4, 0x3, 0x6, 0x4, 0x2, 0x8, 0xfffffff4, 0x9, 0x0, 0x3, 0x3ff, 0x8, 0x9866, 0x6, 0x10001, 0x3, 0x2, 0x0, 0x7, 0x8000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8, 0x0, 0xffff8001, 0x8000, 0x0, 0x92f, 0x8, 0x10, 0xa9, 0x1, 0x3942, 0x3, 0x8, 0x162, 0x5, 0x1, 0x2, 0x3, 0x401, 0xa00000, 0x5, 0x10000, 0x9, 0xfffffeff, 0x100, 0x7, 0x0, 0x0, 0x8, 0x3, 0x1000, 0x1, 0x2, 0x3, 0x1, 0x1, 0x7, 0x5, 0xc, 0xffffffff, 0xb1, 0x5, 0x1000, 0x4, 0x7f, 0x81, 0x5, 0x3, 0x10000, 0x200, 0x400, 0xd, 0x3ff, 0xbf, 0x7f, 0x7, 0xfffffffa, 0x4, 0x4, 0x7, 0x86, 0xffff452c, 0x7f, 0x2, 0x8, 0xc6c2, 0x10, 0x8, 0x2, 0x582e, 0x5f8000, 0xf51e, 0x4, 0x6, 0x8, 0x9, 0xc, 0xd49c, 0xd9b, 0x7, 0x8, 0x49f, 0xd3, 0x5, 0x4, 0x9, 0x9, 0x74, 0x5, 0x7f, 0x3, 0x7, 0xe, 0x8, 0x1, 0x1, 0x6, 0xa49c, 0x3, 0xfffffff8, 0x5, 0x2, 0x184, 0x10001, 0x10, 0x81, 0x4, 0xdc, 0xff, 0x6, 0x10000, 0x4, 0x6f9b8494, 0x6, 0x17, 0x9, 0x8001, 0x1, 0xe156, 0x138, 0x8, 0x0, 0xffffffff, 0x8, 0xa, 0x8, 0x349f6df, 0x9, 0xfffffff8, 0x8, 0xff, 0xe39a, 0x3, 0x5, 0x2, 0xffffffee, 0xe, 0x334, 0x0, 0xff, 0x3, 0x6, 0x2, 0x401, 0xa, 0x6, 0xe, 0x6b0, 0x2, 0x80000001, 0x0, 0x7fff, 0x0, 0x3, 0xd08, 0xfa69, 0x9, 0x3ff, 0x3, 0xc195, 0x8001, 0xaf10, 0x6, 0x8, 0x2, 0xaa, 0x878, 0x218b, 0x8000, 0x4, 0xd700000, 0x564, 0x40, 0x9, 0x5, 0x400, 0x1, 0x1, 0x10001, 0x1, 0x5, 0x9, 0x5a0, 0x80, 0x7, 0x6, 0xf, 0x209, 0xff, 0x1, 0x4, 0x0, 0x8, 0x7, 0x3, 0x0, 0x2, 0x400, 0x10001, 0xfffffffb, 0x3, 0x23, 0x401, 0x127, 0x7, 0x8001, 0xe, 0x6c, 0x8000, 0x9, 0xda, 0x2, 0xfffffff9, 0x0, 0x8, 0x4, 0x3, 0x7f, 0xe, 0x3, 0x6, 0x92e, 0xc7e7, 0x0, 0x10, 0x3, 0x7, 0x3, 0x3, 0xa50, 0xfffffff7, 0x0, 0x8, 0x3, 0x0, 0x6, 0x5, 0x5, 0x7fffffff, 0xfffffffc, 0x1, 0x6, 0x8, 0x7fffffff, 0x1, 0x8, 0x0, 0x772075e6, 0xbb2, 0x10, 0x1000, 0x401, 0x5, 0x8, 0x3]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x1000}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xf, 0x7, 0x6, 0x5, 0xffffffff, 0x6, 0x7, 0xec, 0x8001, 0xa346, 0x5, 0x3, 0x100, 0xfffffff9, 0x3, 0x8, 0x4, 0x8, 0x7, 0x7, 0x800, 0x1, 0xfffffffa, 0x4, 0x5, 0x2, 0xffffffff, 0xfff, 0x4, 0x7, 0x9, 0x0, 0x4c92, 0x6f322057, 0x9, 0xc9a, 0x5, 0x9, 0x0, 0x6, 0x2, 0x0, 0x7f, 0x1, 0x3, 0x5, 0x8, 0x8, 0x8, 0xd8, 0x63a, 0x937, 0x7fff, 0xffff7fff, 0x10001, 0x2, 0x4, 0x2, 0x0, 0x2, 0x101, 0x5, 0x10, 0xfffffffa, 0x2cbdd0ad, 0x4, 0x2, 0x5, 0x9, 0x8, 0xe4aa, 0x6, 0xf0a, 0xffffffff, 0x93, 0x5, 0x5, 0x2, 0xe0c, 0x5, 0x4, 0x1e5, 0x2, 0x5, 0xfffffda5, 0x9, 0x3, 0x6, 0x4, 0x6, 0xaaa, 0xfffff333, 0x9, 0xf43, 0x2, 0x0, 0xcda, 0x8, 0x6f20, 0xd3, 0xa7, 0x4, 0x3, 0x10, 0xfb2, 0x2, 0x8, 0x0, 0x3, 0x800, 0x10000, 0x0, 0x5, 0x6, 0x0, 0x6, 0x4, 0x0, 0x5, 0x8, 0xbc6b, 0x7, 0xffffffff, 0x6, 0x1, 0xba9d, 0x2, 0xdb4, 0x9, 0x1, 0x7, 0xadf, 0x2, 0x7, 0x7, 0x100, 0xffffff01, 0x10001, 0x9, 0xffffff4c, 0x1ad75f7, 0x7, 0xdf, 0x3, 0xf, 0x5, 0x5, 0xf, 0xfffffff9, 0x8, 0xd, 0x6, 0xa0, 0xc252, 0x6, 0x4, 0x7ff, 0x4, 0x3, 0xfff, 0x1, 0x4, 0x1, 0x5, 0x80000001, 0x101, 0x7fffffff, 0xfffffff8, 0xe4c, 0x4, 0xd97, 0x7, 0xce, 0x1, 0x7, 0x0, 0x0, 0x8, 0xffff8000, 0xe4, 0x1, 0x8, 0x835a, 0x7fffffff, 0x9, 0x8655, 0xa, 0x6, 0x2, 0x2, 0xfffffff9, 0x6, 0x6, 0x200, 0x10000, 0x8, 0x4, 0xa, 0x6, 0x10000, 0x1, 0x8, 0x0, 0xfa35, 0x5, 0x0, 0x400, 0x2, 0x8037, 0xffffffff, 0x2, 0x8000, 0xe2, 0x0, 0x5, 0xe, 0x7, 0x3, 0x2, 0x80000000, 0xbfe2, 0xf95f, 0xe, 0x80, 0x8001, 0x1, 0x7, 0x7, 0x4, 0x8d3, 0x9, 0x3, 0xe427270f, 0x800, 0xfffffffa, 0x1, 0x3, 0x4e2, 0x4, 0x3, 0xffffee16, 0x3, 0x9, 0x2, 0x9, 0x6, 0x5, 0xffff, 0xc0cc, 0x0, 0xfffffffd, 0xc83c, 0x8000, 0x8, 0xff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7f}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x7, 0xf2, 0x1, 0x4, 0x5, 0x8, 0xfffffff9, 0x5ac, 0xffffffff, 0xfffff6f7, 0x9, 0x4, 0x80000000, 0x0, 0x2, 0x7ff, 0x52, 0x3, 0x77, 0xfffffff8, 0x4, 0x6, 0x0, 0x10, 0x1, 0x4, 0x2, 0x10000, 0x6, 0x4, 0x1000, 0x5, 0x8, 0xfffff54d, 0x4, 0x6e216be5, 0x5, 0x10a4fb1b, 0xd697, 0x3ac8b71e, 0x7, 0xffff, 0x7, 0x7, 0x5d1, 0x1, 0x6, 0xfff, 0x2, 0xf553, 0x401, 0x0, 0xfffffff8, 0x6, 0xeef9, 0x1, 0x6, 0x80000001, 0xa15, 0x5, 0x2, 0x5, 0x6, 0x9, 0x8, 0x7fff, 0x9, 0xfff, 0x8, 0x3, 0x3, 0xb209, 0x6, 0x755eb7b0, 0x2, 0x5, 0x3, 0x200, 0x9, 0x3, 0xff, 0xbf98, 0x5f, 0x3, 0x7f, 0xffff, 0x1, 0x0, 0x6, 0x5, 0x1, 0x8, 0x0, 0xffff, 0x0, 0x2, 0xfffffff4, 0x1, 0x4d, 0x3, 0x8, 0x6, 0x387, 0x5, 0x3, 0x8, 0x1, 0x1, 0x1, 0x5, 0x4, 0x1, 0x7, 0x1, 0x3, 0x29, 0x3, 0x3ff, 0x5, 0x1, 0x57ed, 0x4, 0x8, 0xe4f7, 0x80, 0x8, 0x7, 0x4, 0x4b17, 0x2, 0x2, 0xbb, 0x1dec197e, 0x7, 0xc, 0x8, 0x400, 0x6, 0x7, 0x1, 0xd, 0x80, 0x1, 0xffffffff, 0x6141403b, 0x9, 0x5e, 0x4, 0x401, 0x6, 0x8000, 0x3, 0xa52b, 0x3, 0x3, 0x5, 0x4a9, 0x1, 0x800, 0x9, 0x9, 0x2, 0x10000, 0x4, 0x6, 0x81, 0x3ca509e1, 0x6, 0xc7, 0x2eb7, 0x3, 0x5f, 0x313, 0x7, 0xe5a, 0x3, 0x6, 0xcf25, 0x800, 0x5, 0x6, 0x101, 0x6, 0x746a, 0x2, 0x6, 0x1, 0x3, 0x3, 0x3ff, 0x7f, 0x5, 0x9e, 0x80, 0x9b9, 0xf4, 0x413, 0x9, 0x1800000, 0x3, 0x5, 0x3, 0x5caa, 0x2, 0x5935753e, 0x3, 0x3, 0xffff, 0x4, 0x7, 0xd, 0x7, 0x5, 0xa, 0x7, 0x0, 0x6, 0x5, 0x4, 0x4, 0x4, 0xa, 0xfff, 0xa5, 0x1ff, 0x9, 0x0, 0x9, 0x5, 0xcea, 0x3c02, 0x2, 0x0, 0xf6b, 0x7fff, 0x5, 0xe5, 0xfffffffd, 0x4, 0x4, 0x4, 0x0, 0x1000, 0x9, 0x6, 0xbfb, 0xffffffe6, 0x6, 0x2, 0xfffff001, 0x2, 0x8, 0x0, 0x39, 0xc6d]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x0, 0x4, 0x9, 0x8, 0x1, 0x101, 0x40, 0x9, 0x4, 0x5, 0x7, 0xffff, 0xebe, 0x5, 0x9, 0x8cbc, 0x8, 0x5, 0x582, 0x5, 0xa69, 0x200, 0x787d, 0xf6, 0xfffffffe, 0x0, 0x8, 0x6, 0x9, 0x6, 0x1, 0x5, 0x3, 0xc, 0x8, 0x1, 0x0, 0x7, 0x7, 0x8, 0x9, 0x14b, 0x9, 0x18, 0x1, 0x7fffffff, 0x790, 0x10000, 0x5, 0x5, 0x6, 0x6, 0x0, 0x80000001, 0x3e, 0x8, 0xffffa68f, 0x8, 0x10001, 0x4, 0x2, 0xfff, 0x9, 0xc3, 0x1000, 0x10, 0x10001, 0x20, 0x3, 0x17a8, 0x4, 0x2, 0x400, 0x10001, 0x0, 0x119, 0xfffffff7, 0x0, 0x6, 0x3, 0x1000000, 0x5, 0x118, 0x0, 0xa, 0x7, 0x101, 0xfffffff9, 0x3, 0x22d, 0x56, 0x8, 0x83, 0x7, 0x3, 0xfffffff0, 0x7, 0x4, 0x642, 0x1, 0x8, 0xffffffff, 0x5, 0x10000, 0x6, 0x3, 0x401, 0x6, 0x8, 0x4, 0x5, 0x1, 0xffffffff, 0x2, 0x1, 0x2, 0x8, 0xf, 0x401, 0x8, 0x2, 0x3cd, 0x1000, 0x80000000, 0xc, 0x3, 0x8, 0x3, 0x1, 0x6, 0x2d, 0x100, 0x0, 0xaaa8, 0x8, 0x3, 0x7fff, 0x2, 0x80000000, 0x3, 0x3, 0x2, 0x2f, 0xe, 0xe, 0x4, 0x7, 0x4, 0x2, 0x8, 0x10000, 0x3, 0x0, 0x0, 0xb2f, 0x9b, 0x2, 0x5, 0x2a9, 0x8, 0x8, 0x17be, 0x1, 0x9, 0x9, 0x1, 0x7fffffff, 0x2c, 0x5, 0xfff, 0x8, 0x9, 0x9, 0x3825e048, 0xffff0001, 0xfffff853, 0x6, 0xf516, 0x8, 0x7, 0x0, 0x40, 0x7, 0x2, 0x2, 0x0, 0xfffffffd, 0x4, 0xba58, 0x4, 0x80008000, 0x8, 0x1, 0xdd, 0xdb3, 0x9, 0x9, 0x0, 0x7fff, 0x0, 0x4, 0x4, 0x8, 0x2d1, 0x1, 0x1ff, 0x9, 0x0, 0x26d3ccd2, 0x8, 0x6, 0x5, 0x9, 0xf5, 0xffff, 0x31d35d94, 0x6000, 0xfffffff5, 0xba, 0x8, 0x5, 0x1, 0x2, 0x7, 0x4, 0x10, 0x0, 0x3, 0x8, 0x1, 0x7ff, 0x5, 0x0, 0x9, 0x7, 0x7970, 0x3, 0x3, 0x3, 0x1, 0x2, 0xfc27, 0x3, 0x8, 0x8000000, 0xffff, 0x3, 0x38, 0x80000001, 0x3, 0x2, 0x10001, 0x2, 0x4, 0xffffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x1, 0x5, 0x3, 0x0, 0x9, 0x4a, 0x0, 0xf433, 0xac87, 0x4, 0x3be9, 0xfff, 0x1, 0x4, 0x51e, 0xc, 0x8, 0x3ff, 0x7c05, 0x4, 0x7, 0x4, 0x2, 0x80, 0x6, 0x5, 0x7f, 0x8, 0xfff, 0xfffffffc, 0x0, 0x1, 0x170, 0x7fffffff, 0x80000000, 0xfffffffe, 0x6, 0x7745, 0x81, 0x8, 0x5d1, 0x0, 0x4, 0x0, 0xfffffffa, 0x6, 0x200, 0x0, 0x80, 0x3, 0xfffffffe, 0xdd01, 0xffff8001, 0x5, 0x4, 0x600, 0x101, 0x200, 0x7d1, 0x4d, 0x6, 0x0, 0x5, 0x4, 0x3, 0x5, 0x6, 0x3, 0x2, 0x0, 0x3, 0x3, 0x2, 0xeb46, 0x0, 0x5, 0x3, 0xffff, 0x2, 0x101, 0x3, 0x1, 0x80000001, 0x4, 0xfffffff7, 0x80, 0xfffffff8, 0x4, 0x4, 0xfffffff8, 0x6a54bd12, 0x101, 0x1, 0x6, 0x73, 0x3, 0x0, 0x1, 0x0, 0x9, 0x8, 0x5, 0x7f, 0x8, 0xb17, 0xb, 0x6, 0x5, 0xfff, 0x8, 0x6, 0x3, 0x80, 0x48658646, 0x7, 0x101, 0x75f, 0xc, 0x80000001, 0xc0, 0x401, 0x1000, 0x5, 0x1, 0x10001, 0x4, 0x6, 0x1000, 0x10001, 0x0, 0x80000001, 0xffff, 0x10, 0x5, 0x3, 0x3, 0x4, 0x7, 0x3, 0x81, 0x8, 0x7, 0x80000001, 0x0, 0x5, 0x1, 0x1000, 0x2, 0x3, 0x9, 0x8, 0x5, 0x5, 0x9, 0x6, 0x3, 0x5a8, 0x88, 0x5, 0x7, 0xffffd535, 0x59bd, 0xe, 0x5, 0x200, 0x8001, 0x7c, 0x4, 0x3, 0x0, 0x3, 0x3, 0xc, 0x1, 0x3, 0x4, 0x81, 0x6, 0x2, 0xffff, 0xdbaf, 0x9, 0xffffa612, 0x2, 0x6, 0xc, 0x8, 0x10001, 0x81, 0x6, 0x8001, 0xb3, 0x0, 0xc, 0x2, 0x4caf, 0x0, 0xe548, 0x537, 0x101, 0xf631, 0x400, 0x7, 0xffff8001, 0xc, 0x1, 0x8, 0x4, 0x81, 0x8, 0x9, 0x4a30, 0x8, 0x3, 0xb, 0x46, 0x7fffffff, 0x7ff, 0x1, 0x40000, 0x0, 0x80000000, 0x1, 0x7, 0x6, 0x9e53, 0x6, 0xb000000, 0x3, 0x1ae, 0x7, 0x1000, 0x49de, 0xffff, 0xfffffffd, 0xb, 0x5, 0x6, 0x2, 0x5, 0x7, 0x6, 0x99, 0x6, 0x7, 0x7, 0x10000, 0x4, 0x80000001, 0x100, 0xe4, 0x4, 0xa62e, 0x7f]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x0, 0x0, 0x3, 0x4, 0x5, 0x10000, 0x2, 0x1ff, 0x0, 0x100, 0x4, 0xffffffff, 0x4, 0x7f, 0x7, 0x40, 0x2, 0x4b9, 0x55, 0x9, 0x2, 0x3, 0xfffffffc, 0xf, 0x5, 0x8, 0x43, 0xfffffff2, 0x1, 0x5, 0x82, 0x9, 0x5, 0x9, 0x49c1bc07, 0xffff78ff, 0x1e40, 0x2, 0x9, 0x4, 0x1, 0x40, 0x5, 0xf, 0x4, 0x5, 0xa, 0x6, 0x5, 0x8, 0x6a, 0xd0, 0x2, 0x7, 0x800, 0xffffff81, 0x1, 0x7, 0x9769, 0x7, 0x2e0, 0x7, 0x1, 0x200, 0x3, 0x9, 0x3, 0xd, 0x8, 0x100, 0x7, 0x4bb, 0x1, 0xb, 0x8, 0x5, 0x7e9, 0xf6f, 0xbce, 0x7, 0x51, 0x1, 0x1, 0x1, 0x6, 0x81, 0x3, 0x1, 0xff, 0x7ff, 0x80000001, 0xa, 0x8, 0x37c, 0x4, 0xf32, 0x5, 0x4, 0x0, 0x5, 0x5, 0x3, 0x6, 0x81, 0x3, 0x7, 0x1, 0x4, 0x0, 0x3, 0x7f, 0x6, 0xe34d, 0x401, 0x80000001, 0x7, 0x0, 0x5, 0x80000000, 0x8, 0x4, 0x2, 0x24a, 0x2, 0x7, 0x16, 0x5fc3, 0x0, 0x2, 0x1, 0x2, 0x7, 0x8, 0x8000, 0xe8ec, 0x1, 0x9, 0x3, 0xffff0001, 0xff, 0xc, 0xfffffff9, 0x38c7, 0x400, 0x52470a03, 0x3, 0x1a0, 0x2, 0x7, 0xc840, 0x3b8, 0x1000, 0xa8000000, 0xffff, 0x0, 0x3, 0x14d, 0xe00, 0x5, 0x2, 0xbfc, 0x7, 0xcee, 0xffff, 0x9, 0x5, 0x7, 0x1, 0xa0000000, 0x8, 0x2, 0x6, 0x7fffffff, 0x8000, 0x4, 0xffffff57, 0x0, 0x4, 0xe09e, 0x40, 0x15, 0x9, 0x3, 0x0, 0xc2f, 0x1, 0x1, 0x8, 0xbe78, 0x7, 0x8, 0xe, 0x0, 0x6, 0x2, 0xfffffff9, 0x0, 0x5b, 0x1, 0x7, 0x9, 0x10001, 0x0, 0x7, 0xffffffc0, 0x1, 0x6, 0x2, 0x401, 0x6, 0x1, 0x8, 0x9, 0xb61, 0xee5, 0x4, 0x6, 0xce96, 0x5, 0x6, 0x4, 0x1f9, 0x401, 0x5, 0x5, 0x0, 0x2, 0x6, 0x6, 0x6, 0x0, 0x7, 0x9, 0x8001, 0x0, 0x0, 0x99a7, 0x631e, 0x5, 0x3, 0x2, 0x5, 0x5, 0x1, 0xfffffff4, 0x0, 0x7, 0x80000001, 0x1ff, 0x43, 0x42af, 0x7, 0x5, 0x0, 0x7fff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xfffffffb, 0xc0000000, 0x10001, 0x8, 0x7ff, 0x8, 0xf3e, 0x6, 0x6, 0x7, 0x4, 0x8, 0x1, 0xfffffde1, 0x1, 0x2, 0xfff, 0x5, 0x4, 0x3ff, 0x0, 0x4, 0x1, 0x400, 0x3, 0xfffff800, 0x800, 0x1, 0x67, 0x9, 0x8, 0x3, 0x5, 0x1a, 0x1ff, 0xc, 0x40, 0x8bf, 0x9, 0xffffffff, 0x200, 0x1, 0x4, 0x2, 0x55f, 0x0, 0x5b, 0x5, 0x2, 0xffffffb0, 0x7, 0x90a9, 0x1000, 0x99d, 0x4, 0x3, 0xcae, 0xb5, 0x9, 0x1ff, 0x101, 0xf88, 0xf, 0x7, 0x0, 0x8, 0x22e3, 0x3ff, 0x5, 0x9, 0x8, 0x9835, 0x4, 0xcd74, 0x0, 0x7, 0xffff, 0x7, 0x119, 0xd, 0x5, 0xe, 0x6, 0xa1d, 0x2, 0x7, 0x3, 0x7f, 0x400, 0x9, 0xffffffff, 0xfffffeff, 0x10001, 0x4, 0x5, 0x7fff, 0x7fffffff, 0x0, 0x167, 0x2, 0x6, 0xc3, 0x8, 0x1, 0xf5d, 0x60697aa, 0x2, 0x51dc3fcd, 0xfffffff9, 0x59, 0xa, 0x8, 0x6, 0x7f, 0x7, 0x1058, 0xfffffff7, 0x23a, 0x5, 0x9, 0xfffffffc, 0x38, 0x4, 0xb4fd, 0x6de1, 0xdf, 0xdc, 0x4, 0x7f, 0x7, 0x1, 0x80000000, 0xfffffffc, 0x1, 0xffffffff, 0x7bb8, 0x6, 0x8, 0x8001, 0x9, 0x9, 0x0, 0x5, 0x3, 0x1, 0x5, 0xf, 0x7, 0x0, 0x3, 0x2, 0x2, 0x1, 0xb, 0xaf2, 0x4, 0xffffca4e, 0x9, 0x5, 0x1, 0x1, 0x9, 0x400, 0xffffffff, 0x5, 0x1, 0x200, 0x9, 0xff, 0x6, 0x0, 0x7f, 0x7, 0xcd65, 0x4, 0x2, 0x3, 0x30000, 0x3ff, 0x7, 0x7, 0x2, 0x4000, 0x3, 0x7ff, 0x3, 0x7, 0x80000001, 0x2000, 0x1, 0x7, 0xf, 0x9, 0x7, 0x3, 0x4, 0xcaee, 0x9, 0x3, 0x1, 0x6, 0x7, 0x1, 0x6, 0x40000000, 0x2, 0x58119742, 0x2, 0xb600, 0x8, 0x8, 0x6, 0x7, 0x5a99, 0xf73, 0x80000001, 0x0, 0x0, 0x45b, 0x6, 0x4f6b, 0x9, 0x4, 0x2, 0x6, 0x1, 0xf1, 0x4, 0x6, 0xfffffff9, 0x6d28, 0xfffffeff, 0x12, 0x3, 0x8, 0x1, 0xfffffffd, 0x8, 0x1, 0x1ff, 0x2, 0x8, 0x10, 0x7ff, 0x7, 0x7f, 0x8, 0x1af59a3d, 0x0, 0x135b, 0xcb, 0xff, 0x9, 0x1, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x9, 0x6fd2, 0x2, 0xfff, 0x6, 0x5, 0xe2d, 0x9, 0x1, 0x1, 0x8, 0x101, 0x8, 0x37, 0x81, 0x1ff, 0x2, 0x200, 0xffffffff, 0x5, 0xffa6, 0x7, 0x6, 0x4, 0xdb0, 0xca8, 0x4, 0x0, 0x7, 0x1, 0x4, 0x7ff, 0x101, 0xb62, 0x4, 0x9, 0x6, 0x2, 0x9, 0xad2b, 0x2, 0x3, 0x9, 0x1719, 0x7, 0x6, 0x5, 0x2, 0x9, 0x4, 0x5, 0x45d0415e, 0xf37, 0x3, 0x1, 0xfff, 0x7f7, 0x1, 0x4, 0x2, 0xfd4f, 0x40, 0x2, 0xc3ee, 0x1, 0x8001, 0x7, 0x0, 0x6, 0x4, 0x8, 0x7fffffff, 0x0, 0x7, 0x800, 0x1, 0x4, 0x0, 0x101, 0x7f, 0x38000000, 0x9, 0xfffff001, 0x5fdfae8f, 0xd563, 0xfffffff9, 0x5, 0x5, 0x9, 0x8a82, 0x5, 0x8, 0x9, 0x101, 0x6, 0x6c2, 0x1, 0x4, 0x7fff, 0x10, 0x7, 0x8, 0x1, 0x4, 0x6, 0x6, 0x5, 0x25, 0x4, 0x6, 0x0, 0x8, 0x4, 0x3, 0x7, 0x7, 0xff, 0x70, 0x4, 0x2, 0x1, 0x2, 0x40, 0x9e, 0x3, 0x8, 0x0, 0x4800000, 0x1, 0x7fffffff, 0xfffff000, 0xb2d, 0xfc13, 0x7, 0x97, 0x2, 0x8001, 0x7, 0x40, 0x8, 0x5, 0x1, 0xa43, 0x0, 0x7, 0x6, 0x2, 0x7, 0xa000, 0xe6, 0x2, 0xce, 0x2, 0x9, 0x2, 0x0, 0x400, 0x5, 0x10000, 0x3, 0xda, 0x3, 0x7ff, 0x5, 0xfffffff5, 0x7, 0xbc2, 0x4, 0xa, 0x269a6449, 0xd, 0x3, 0x23, 0x0, 0x64e, 0x8, 0x0, 0x80000000, 0x3, 0x4, 0xfffffdf9, 0x724, 0x8, 0x5, 0x7fffffff, 0x6, 0x6, 0x3, 0x3, 0x5, 0x10001, 0x80000001, 0x4e2, 0x10001, 0x4, 0x1, 0xc, 0x8, 0x7, 0x4, 0x6, 0x0, 0x4, 0x1, 0x4ca6, 0x8857, 0x0, 0x277b, 0xfcd, 0x2, 0x2, 0x0, 0x788, 0x6, 0x5, 0xffffffff, 0x100, 0x7fff, 0x8, 0x3, 0xa62a, 0x4, 0x5, 0x1ff, 0x81, 0x1, 0x5, 0x401, 0xc, 0xfffffffc, 0x7, 0x4, 0x8, 0x80000001, 0x8, 0x4, 0x0, 0x81, 0x80, 0xc, 0x1ff, 0x5, 0x9, 0x8, 0xf051, 0x5, 0x9, 0x7, 0x0, 0x1, 0x6, 0x5, 0x0, 0x16, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xa, 0xa0a1, 0x7, 0x3, 0x800, 0x9, 0x0, 0x0, 0x4, 0x9, 0xdbab, 0x20b85384, 0x800, 0x7, 0x1, 0x5, 0x7c, 0x0, 0x8, 0x8, 0x4, 0x1d1, 0x3, 0x3, 0x2, 0xb, 0x8, 0xfffffeff, 0x65a1, 0x10, 0x3, 0x46, 0x0, 0x7, 0x0, 0x4, 0xb25, 0xff, 0x4, 0x3, 0x2, 0x0, 0x1, 0x3, 0x9922, 0x1, 0x7, 0x200, 0xfffffff9, 0x3, 0x8, 0x6, 0x3, 0x40, 0x1, 0x0, 0x9, 0xa84, 0x0, 0x2, 0xfffffffe, 0xbda, 0x2, 0x9, 0x4, 0x1, 0x8e, 0x101, 0x0, 0x180, 0x7, 0x7, 0x3, 0x8, 0x40000000, 0x3, 0x7, 0x7, 0x9, 0x2, 0x7f, 0x1, 0x3, 0x1, 0x1, 0x100, 0x6, 0x4, 0x6, 0x9, 0x8, 0x8, 0xff, 0xfff, 0x20, 0x1, 0x3ff, 0x9, 0x5, 0x9, 0xc, 0x7, 0x81, 0x7, 0x4, 0x8, 0xfffffff9, 0x7, 0x9, 0x6, 0xdf0, 0x7, 0xff, 0x4, 0x5, 0x3, 0xfffffffa, 0x5, 0x0, 0x3bc800, 0x10, 0x4, 0x6, 0xe, 0x2, 0x1, 0x1, 0xb8a, 0x9, 0x0, 0x8, 0x9, 0x3ff, 0x3, 0x180, 0x8, 0x7e, 0xa, 0x6539, 0x5, 0xfffffffa, 0x1852a351, 0x7, 0x40, 0x5, 0x8, 0xff, 0x7, 0x101, 0xfffffff8, 0x6, 0x3, 0x3, 0xffa, 0x6, 0x5, 0x7, 0x5, 0x200, 0xfffffff7, 0x5, 0x5, 0x2, 0x5, 0x800, 0x4, 0x9, 0x7, 0x8000, 0xffff, 0x7, 0x3, 0xfffffffd, 0x8, 0xfffffffb, 0x3, 0xd, 0x6, 0xd6, 0x8, 0x4, 0x800, 0x5, 0x7, 0x7, 0x7, 0x6, 0x401, 0x5, 0x1e, 0xc, 0xcb2, 0x6, 0x180567b3, 0x8, 0x7ff, 0xf, 0x2, 0x1, 0x40, 0x5, 0x2, 0x9, 0x9, 0x400, 0x7, 0x2, 0x2ef, 0x4, 0x0, 0x9, 0x8d, 0x7, 0x28, 0x8fb4, 0x1, 0x9, 0x1, 0x1, 0x2fc, 0x1, 0x0, 0x39c0, 0x501, 0x1d, 0x8, 0x7, 0x3, 0xfff, 0x9, 0x8001, 0x6, 0x9, 0x5, 0x4, 0x5695, 0x2, 0xe, 0xc5, 0x3, 0x4, 0x7, 0x1, 0x2, 0x5e, 0x6, 0x2, 0x4, 0x3ff, 0x2, 0xd, 0x4, 0x3, 0x10c, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x16, 0x10, 0xb, 0x8, 0x0, 0x3, 0x6, 0x800, 0x8, 0x5, 0x2, 0x7, 0x1, 0x1, 0xffffffdc, 0x6, 0xd85d, 0x6, 0xe, 0x2, 0x8, 0xf969, 0x7, 0x7, 0x5, 0x3, 0x8af, 0x8, 0x4, 0x7, 0x85c, 0x7ff, 0xffffffff, 0x8, 0x4, 0x0, 0x444f, 0x2, 0x9, 0x7, 0x9, 0xc, 0x400, 0x0, 0xfffff801, 0x1, 0x0, 0x5, 0x1000, 0x2, 0xfffffffb, 0x6, 0x8, 0x1ff, 0x586, 0x5, 0x8000, 0xd, 0x80000000, 0xd, 0x7f, 0xffffffff, 0x5, 0xffff, 0x5, 0x9d7, 0xd, 0x8, 0x8, 0x92f, 0xa, 0x0, 0x8, 0x8000, 0x101, 0x0, 0x3, 0xc, 0x2, 0x4, 0xac, 0x8, 0x3927, 0x9, 0xc93, 0xb85, 0x3, 0x9, 0x10001, 0x9, 0x1fbdab4f, 0xd, 0xf, 0x5, 0x2, 0x9, 0x200, 0x905, 0xffffc445, 0x1, 0x8, 0x1, 0x5, 0x7, 0x5, 0xf0f, 0x0, 0x10, 0xbd4, 0x3, 0x1, 0x7, 0x2, 0xd, 0x0, 0x7, 0x4, 0xff, 0x87bf, 0xffffffff, 0x6, 0xfffffff8, 0x4, 0x10, 0x905, 0x3, 0x6, 0xb, 0x0, 0x8, 0x5, 0x6, 0x5, 0x2, 0x1ff, 0x180000, 0x4, 0x4, 0xffff, 0x2, 0xe2, 0x7, 0xd, 0x5, 0x8, 0x67d, 0x9, 0x1, 0xe, 0xfffffbff, 0x8, 0x2, 0x4, 0x2, 0xfffffff8, 0x7, 0x10, 0x909, 0x0, 0x4, 0x7, 0x78e, 0x0, 0x91, 0x7, 0x0, 0x10000, 0xd, 0x5, 0x4, 0x0, 0xb6f, 0x0, 0x6, 0x3, 0x6, 0x3, 0x9, 0x0, 0x10001, 0x4, 0x3ff, 0xffffffe5, 0x400, 0x27de, 0x6, 0xffff52f6, 0x7, 0xf4b5, 0x4, 0xfffffff9, 0x2, 0xd, 0x7, 0x7fff, 0x6, 0x7, 0x2586f443, 0x200, 0x0, 0x0, 0x7, 0x61b, 0xd0d9, 0xfffffff8, 0xe3, 0x1000, 0x6, 0x32, 0x6, 0x21, 0xaf, 0x8000, 0x0, 0xffffff52, 0x0, 0xba, 0x5, 0x820, 0xffffffff, 0x7, 0xc80, 0xa, 0x11, 0x7, 0x0, 0x10, 0x8b6, 0x2739adc9, 0x2, 0x7, 0x3, 0x0, 0x3ff, 0x81e, 0xffffff01, 0x9, 0x9, 0xffff, 0x9, 0x5, 0xff, 0x3, 0x8001, 0xfff, 0x2, 0x8, 0x1, 0x5, 0xffff, 0x6, 0x60000, 0x9, 0x2, 0x3ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x90d6de52, 0x36, 0x4, 0x0, 0x6b5d346c, 0x9, 0x4f3f, 0x3ff, 0x0, 0xf6, 0x7, 0xc2b6, 0x1, 0x7, 0x2, 0xc2, 0x80000001, 0xff, 0x49, 0x8001, 0xff, 0x181a65cb, 0x1, 0xe62, 0x9, 0x3, 0x4, 0x3, 0x2, 0xd286, 0x2, 0x1, 0x0, 0x2, 0x10001, 0x6, 0xfffffff8, 0xfffffff7, 0x7ff, 0x8, 0x3ff, 0x9, 0x7, 0x9, 0x9, 0x200, 0x1, 0x5, 0x17fa, 0x7, 0x40, 0x1, 0x6d, 0x3, 0x3, 0x1, 0x3, 0x800, 0x80, 0x4000000, 0x8, 0x4, 0x3000000, 0x849, 0xffffffff, 0x5, 0x8000, 0x4, 0xf, 0x5, 0x0, 0xff, 0x9, 0xfffffffb, 0x4f40000, 0x0, 0xe40a, 0xad6e, 0x2, 0x9, 0x40, 0x5, 0xfffffff9, 0x3, 0x78d9, 0x400, 0x3, 0x2, 0x8, 0x9, 0x9, 0x7, 0x1, 0x5, 0x1, 0x9, 0x7655, 0x9cf, 0x3073, 0x3, 0x28, 0x1ff, 0x5, 0x9111, 0x9, 0x0, 0xe, 0x7, 0x0, 0x8, 0x0, 0x0, 0x82, 0x2, 0x5c583cb1, 0x0, 0x4, 0x7fffffff, 0x5, 0x80, 0xfff, 0xd9, 0x4, 0x7, 0x100, 0x7, 0x6, 0x80000001, 0xc, 0x0, 0xfffffffa, 0x8, 0x1ff, 0x6b, 0x7d97, 0x2, 0x3, 0x5, 0xc00000, 0x2, 0x800000, 0x1000, 0x7, 0x2, 0x3ffc, 0x7ff, 0x1, 0x4, 0x6, 0x89, 0x6, 0x9a3, 0x4df7, 0x7, 0x1, 0x9, 0x2, 0x2, 0x3, 0x6, 0x3ff, 0x80000000, 0x2, 0x4, 0x1ff, 0x2, 0x9, 0x1, 0x3b6f, 0x0, 0x1, 0x1000, 0xc000000, 0x8000, 0xb, 0x1, 0xff, 0x7, 0x0, 0xc01, 0x4, 0x8, 0x83, 0x101, 0x40, 0x3, 0xfffffffe, 0x6, 0x9, 0x1, 0x2, 0x6, 0x3, 0x4, 0xa, 0x7, 0x80000001, 0x7f, 0x5, 0x2, 0x737, 0x1bf, 0x10001, 0x1000, 0x101, 0x5, 0x80, 0x7, 0xea32, 0x800, 0xfffffffb, 0x7, 0x80000000, 0x7ece, 0xffffffff, 0x2, 0x8, 0xffffffff, 0x9, 0x5, 0x3, 0x6, 0x7, 0xc5, 0x388, 0xffffffff, 0x5, 0x2, 0x6, 0x1, 0x6, 0x2, 0x7fffffff, 0x0, 0x1, 0x6, 0x0, 0x2, 0xb0e, 0x0, 0x10001, 0x40, 0x7, 0x28bc, 0x1, 0x10, 0x5aee418b, 0x31, 0x0, 0xc, 0x42, 0x4, 0x94, 0x200, 0x1, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x9, 0x4, 0x0, 0x22000000, 0xfffffff7, 0x400, 0x9, 0xf, 0xdb, 0x8, 0x5, 0x80, 0xd0e7, 0x8, 0x0, 0x8000, 0x1, 0x80, 0x8, 0x3, 0x2, 0x7145, 0x7, 0x7, 0x2, 0x5, 0x7, 0x2, 0xdb, 0x0, 0x2, 0x401, 0xa1a, 0x80000000, 0x401, 0x1, 0x906, 0x8, 0x6314, 0x4, 0x5, 0x1ff, 0x4, 0x7, 0x7bf67aca, 0x80000000, 0x1, 0x0, 0x5, 0x3, 0x6, 0x2e6, 0x8, 0xffffffd0, 0x3, 0x3ff, 0x8, 0x10001, 0xfffffff7, 0x2, 0x6, 0x1, 0x80, 0x3b4, 0x1, 0x4, 0x9, 0xffff, 0x8, 0x2, 0xb, 0x7, 0x0, 0xf3bc, 0x0, 0x1, 0x7, 0x5, 0x5, 0x6, 0x9, 0x8, 0x7fffffff, 0x3, 0x2, 0x8, 0x5, 0x1, 0x4, 0x0, 0x8, 0x6, 0xddd0ed2, 0x572b, 0x3, 0x5, 0x5, 0x4, 0x6b5, 0x10000, 0x80, 0x7, 0x1, 0x3, 0x81, 0x80000001, 0x3, 0x5, 0x9, 0x0, 0x8, 0x0, 0x8001, 0x2ab6c5b5, 0x609b, 0x9, 0x4, 0x3, 0x8, 0xfffff800, 0x9, 0x9, 0x3, 0x7aac, 0x81, 0x4, 0x6, 0x688, 0x0, 0x6, 0x1, 0x10000, 0x8, 0x0, 0x4, 0x0, 0xa4e, 0x6, 0x4, 0x3ff, 0x1c2e, 0x3, 0x4, 0xfffffff7, 0x0, 0xdf10, 0x4, 0x401, 0x8, 0x80000000, 0x9, 0x1000, 0x0, 0x3, 0x0, 0x9, 0x1, 0x1000, 0xc9, 0x23, 0xe, 0x10000, 0x9, 0x6, 0x5, 0xe2a, 0x80000001, 0x9, 0x7fffffff, 0xfffffff6, 0x3, 0x7f, 0x7, 0x7, 0xfffffffa, 0xf, 0x6, 0x80000000, 0x5, 0x1, 0x7, 0xfffffffa, 0x0, 0x4, 0x9, 0x5, 0xcea4, 0xb, 0x0, 0x0, 0x3, 0xaba, 0xc3a, 0x5, 0xe, 0x3, 0x7fffffff, 0x8, 0x2, 0xfffffff5, 0x4, 0x1, 0x100, 0x2, 0xe, 0xb, 0x0, 0x9, 0x9, 0xffffe92e, 0x7f, 0x800, 0x7, 0x8, 0x3, 0xa2b4, 0x6, 0x5b, 0x80000000, 0x9, 0x1, 0x5, 0x7, 0x4e7, 0x7, 0x3, 0xd, 0xfffffffa, 0x4, 0x2, 0x440, 0x80, 0x3, 0x40, 0x5, 0x20, 0x4, 0x2, 0x7, 0x2, 0x1, 0x10, 0x2000000, 0x8, 0x0, 0x5, 0x8001, 0x8, 0x9, 0x7f, 0x5e7, 0x7f, 0x3, 0x5a61, 0x5a6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0x5e, 0x8, 0x52, {0x2, 0x1, 0xb, 0x7, 0xbb35, 0x5c05}, {0x9, 0x1, 0xfffc, 0xdc, 0x8001, 0x4}, 0x2, 0x80, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x1, 0x200, 0x8, 0x9, 0x4, 0xf7, 0xe294, 0x3, 0xc, 0x38e, 0x7fffffff, 0x0, 0x9, 0x8, 0x5, 0x2, 0x2, 0x6, 0xb, 0x40, 0x10, 0x1, 0x0, 0x6, 0x1, 0x400, 0x8, 0x7995, 0x3, 0x6, 0x10f, 0x5, 0x9, 0x400, 0x4ef, 0x100, 0x400, 0x6, 0x5, 0x4, 0xf28, 0x2, 0x8001, 0x5, 0x9, 0xc, 0x3, 0x5, 0x7fff, 0x1, 0x7, 0x30fe1385, 0x10, 0x200, 0xfffffeff, 0x7ff, 0xfffffffc, 0x8001, 0xc, 0x9, 0x9, 0x9, 0x6, 0x9, 0x8, 0x4, 0x7, 0x2da00, 0x6, 0x80, 0x10000, 0x280000, 0x7f, 0xffff4acf, 0x10, 0x1, 0xb, 0xc51, 0x5, 0xfffffbff, 0x9, 0x3, 0x3b11, 0x800, 0x8001, 0x2, 0xffff, 0x3, 0x400, 0x0, 0xfffffffa, 0x1, 0x3ff, 0x5, 0x8001, 0x9, 0x2, 0x400, 0x8, 0x8, 0x6, 0x1000, 0x2, 0xe22, 0x7, 0x81, 0x4, 0x80, 0x4, 0x1ff, 0x2, 0x9, 0x2e7, 0x8, 0x10001, 0x6, 0x5, 0x1, 0x400, 0xfffffffa, 0x3, 0x5, 0x6, 0x2, 0x80000000, 0x8001, 0x6, 0x0, 0x8001, 0x480, 0x4, 0x9, 0x0, 0x9, 0x2, 0xb0, 0x4, 0x0, 0x2, 0x80000001, 0x4, 0x8, 0x6141f2c6, 0x8, 0x9, 0x37d, 0x0, 0x9, 0x1, 0x2a804bca, 0x7, 0x5, 0x83a, 0x1, 0x4, 0x4, 0x7ff, 0x4, 0x200, 0x590a, 0x4, 0x0, 0x4, 0x5, 0x0, 0x5, 0x8, 0xffffffc0, 0x8, 0x62fef991, 0x7, 0xdac, 0x9, 0x9, 0xd0, 0x8c71, 0x2, 0x3, 0x2, 0x1, 0x458dcc0d, 0x3, 0x2, 0x2, 0x1, 0x0, 0x780, 0x3, 0x3, 0x8, 0x5, 0x401, 0x8, 0xb76a, 0x8001, 0x0, 0x5, 0xe5e4, 0x1, 0x6d89ab07, 0x93d, 0xffffc959, 0x6b0, 0x10, 0x80000000, 0x3, 0x0, 0x7fff, 0x101, 0x18, 0x4, 0x810a, 0x9, 0x8, 0x9, 0xadb, 0x200, 0xb50, 0x0, 0x2, 0x2, 0x1000000, 0x8, 0x57, 0x8, 0x9, 0x1, 0x5, 0x2, 0x652955d9, 0x7, 0x8f30, 0xfffffff9, 0x8, 0xdf, 0x3ff, 0x86a5, 0x3, 0x1c, 0x2, 0x9, 0x6, 0x1, 0x7fff, 0xffffffff, 0x3ff, 0x4, 0x9, 0x2742, 0x0, 0x3b9, 0x8989, 0x55ab, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb2, 0x9, 0x81, 0x0, 0xff, 0x80000001, 0xfff, 0x88b8, 0x81, 0x7fffffff, 0x5, 0x10001, 0x2, 0x9, 0x401, 0xa37, 0x9, 0x0, 0xa, 0x101, 0x1, 0x100, 0x400, 0xa7a, 0xfffffffa, 0x8, 0x5, 0x5, 0x2, 0x5, 0x15, 0x10, 0xe, 0x1, 0x7, 0x10000, 0xe7, 0xfff, 0xbea4, 0x80000001, 0x10, 0x7f, 0xfffffff7, 0x336b02dc, 0xfffffffd, 0x5, 0x5, 0x7fff, 0x3ff, 0xfffffffb, 0x4, 0x4, 0x2, 0x2, 0x7, 0x80, 0xffffffff, 0x32, 0x8, 0x99e2, 0x2, 0x10, 0x4ee0, 0x7, 0x800, 0x8, 0x3, 0x5, 0xb, 0x24000, 0x5, 0x64, 0x1, 0xd, 0xaa0b, 0x8, 0x7, 0xc, 0x3, 0x80000001, 0x101, 0x7, 0x2, 0x9, 0x6, 0x800, 0x0, 0x400, 0x3519, 0x6, 0x7fffffff, 0x0, 0xd5, 0x6, 0x2, 0x6, 0x8, 0x5, 0x7, 0xf, 0x80, 0x5, 0xfffffffe, 0x6, 0x805, 0x2, 0x5, 0xb59, 0x80000000, 0xd, 0x2, 0x3, 0x6, 0xff6, 0xfffffff7, 0xa, 0x2d, 0x8e44, 0x2, 0x1, 0x0, 0xfffffff9, 0x8, 0x6, 0xfffffffb, 0x4, 0x7, 0x2, 0x3, 0x0, 0x8, 0xf5, 0x30000, 0x0, 0x5, 0x8000000, 0x1000, 0x401, 0x0, 0x6, 0x101, 0x8a, 0x10, 0x50, 0xff, 0x6, 0x9, 0x7fff, 0x4, 0x5, 0x0, 0x9, 0xfffffffc, 0xffff, 0xffffffb3, 0x5, 0x2, 0x4, 0x8000, 0x3, 0x9, 0x300, 0x7fffffff, 0xfff, 0x5, 0xffffffff, 0x81, 0x8, 0xf, 0x7, 0xfffffffe, 0x8, 0x5d3b0c3a, 0x1, 0xffffffff, 0x6, 0x7fffffff, 0xfffffffc, 0x0, 0x2f, 0x1, 0x68a1279e, 0x9, 0x8000000, 0xcd, 0x2, 0x0, 0xa, 0x1, 0x3150, 0x7ead5530, 0x9, 0x0, 0x9, 0x8, 0x2, 0x9, 0x80000001, 0x8, 0x203, 0xfd7, 0x5374, 0x5, 0x4, 0xb698, 0x1, 0x4, 0x4, 0x3, 0xfffffffb, 0x2, 0x6, 0x401, 0x2, 0x40, 0x100, 0x10001, 0x81, 0x2, 0x9, 0x5, 0xffff, 0x2, 0x1, 0x5, 0x66e, 0x8, 0x7, 0x1, 0x200, 0xff, 0x9, 0x3, 0x9, 0x7f, 0x3, 0x4, 0x1, 0x3b6c, 0x1, 0x1, 0x3, 0x524, 0xbab1, 0xfff, 0x7, 0x8, 0x8, 0x3ff, 0x9, 0x1, 0x0, 0xfff, 0x11, 0x97, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1ff}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0x8, 0x8000, 0x101, 0x5be6, {0xe4, 0x0, 0xffff, 0xfb65, 0x5, 0xfffffff8}, {0x8, 0x1, 0x0, 0xffff, 0x7, 0x2}, 0x0, 0x5, 0x6}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x642, 0x7, 0x6, 0x3, 0xf46, {0x3, 0x0, 0x5, 0x1, 0x7, 0x7fffffff}, {0xd, 0x1, 0x9, 0x1ff, 0x9, 0x6}, 0xf30, 0xfffffffe, 0x9e}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x9, 0x64f5, 0x37, 0xcd, 0x9, 0x8, 0x7, 0x4, 0x601, 0x25b, 0x5, 0xe853, 0x4, 0x2, 0x2, 0x2, 0x2dc77d9b, 0x1, 0x1, 0xe, 0x3, 0x0, 0x101, 0xfffffffc, 0xb, 0x6, 0x4, 0x61c, 0x0, 0x7fffffff, 0x400, 0x6, 0x1, 0x1, 0x0, 0x3ff, 0x0, 0x401, 0x0, 0x8, 0x3ff, 0x3, 0x80, 0x101, 0x8, 0x4, 0x81, 0x3, 0x1, 0x7, 0x0, 0xfcf8, 0x8bb, 0x1, 0x9, 0x2, 0x400, 0x80000001, 0x7, 0x7ff, 0x8, 0x0, 0x8, 0x1, 0xa, 0xa, 0x8, 0xffffffff, 0xddc2, 0x8, 0xfffffffa, 0x5, 0x5, 0x5, 0x7, 0x3, 0xc, 0xb, 0x2, 0xb9, 0x3, 0x1, 0xa397, 0xb, 0x7, 0x3, 0x5, 0x5, 0x4, 0x8, 0x3ff, 0x5, 0x7ff, 0x4, 0x46, 0x2, 0xfffffffb, 0x80000000, 0xb715, 0x800, 0x195e, 0x95c, 0x7, 0x2, 0x4, 0x0, 0x709, 0x2, 0xa3cb99, 0x2, 0x1, 0x3, 0x0, 0x6, 0x2, 0xe5, 0x0, 0x4, 0x6, 0x5, 0xff, 0x7, 0xa834, 0xf, 0x4, 0x401, 0x4, 0x2, 0x0, 0x5, 0x3958, 0x8, 0x10, 0x0, 0x40, 0xd, 0x800, 0x1ff, 0x2, 0x2, 0x0, 0x4, 0x7ff, 0x200, 0x7d7, 0x4039, 0x1ff, 0xa, 0x1, 0xf31e, 0x7, 0x0, 0x0, 0xdf, 0x0, 0x0, 0x80000000, 0x4, 0x9, 0xff, 0x2, 0x4, 0x5, 0x97e, 0x7, 0x9, 0x3, 0x2, 0x4324, 0x8001, 0xfffffffa, 0x8, 0x2, 0x0, 0x8, 0x2, 0x4f, 0x9, 0x101, 0x9, 0x0, 0x1465, 0x4, 0x0, 0xb53, 0x7, 0x2495, 0x8, 0x0, 0x2, 0x7fffffff, 0x7, 0x0, 0xba, 0x1, 0x80000001, 0xe15, 0xb0d3, 0x80, 0x7f, 0xfffffff9, 0x8, 0x7, 0x3c35, 0x6, 0x8, 0x3, 0x5, 0xdc, 0xff, 0x2, 0x5, 0x2, 0x2, 0x2804, 0xfd, 0xfe, 0x101, 0x8001, 0x80000001, 0xfffffffa, 0xa38e, 0x40000000, 0x7, 0x40, 0xfcf, 0x4116, 0x1, 0xffffffff, 0x5, 0xf, 0x10001, 0x4, 0x5, 0xfffffffc, 0x9, 0x6, 0x3ff, 0x8ed, 0x0, 0x7, 0x2, 0xfffffffd, 0x49, 0x9, 0x82ed, 0x4, 0x10000b6c, 0x7, 0x80000000, 0x80, 0x6, 0xff, 0x8, 0x7fffffff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x97}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x5, 0xf75, 0x9, 0x4, 0x4, 0xbc, 0xb95, 0x0, 0x2, 0x2fb3, 0xa74f, 0x4, 0x2, 0xfc9, 0x9, 0xcdba, 0xfffffff7, 0x4, 0x5, 0x10, 0xdb2c, 0x8163, 0x7fffffff, 0x0, 0x2, 0x7, 0x44, 0x365, 0x2, 0x6921, 0x5, 0x8, 0xfee, 0xee3, 0x0, 0x618, 0x7c, 0x2a4, 0x4, 0x9, 0x2, 0x5, 0x5, 0x400, 0x6, 0x10000, 0x4, 0x628, 0xe62, 0x6, 0x6, 0x1, 0x1d9, 0x5, 0x40, 0x91, 0x5, 0x4, 0x4, 0xb574, 0x6e24, 0x7ff, 0x7, 0x1, 0x9, 0xdac, 0x0, 0x2, 0x4, 0x2, 0x5, 0x4, 0xfffff952, 0x88, 0xfffffff7, 0x5, 0x8, 0x2, 0x1ff, 0x8000, 0x2, 0xb04, 0x3, 0x0, 0x27e9, 0x80000001, 0x43, 0x3, 0xa3f, 0x95, 0x0, 0xff, 0x9, 0xc0, 0x9, 0x7, 0x8, 0x39, 0x9, 0x6, 0xf, 0x3, 0x3, 0xfffffffe, 0x0, 0xd1, 0x9, 0x800, 0x7, 0xa, 0x2, 0x1, 0x1, 0x5, 0x7, 0x8000, 0x2, 0xffffc9c9, 0xfff, 0x6, 0xffff, 0x1, 0x2, 0x1ff, 0xf12, 0x4, 0xff, 0x7e39, 0x7, 0x401, 0x6, 0x8, 0x0, 0x2, 0x3, 0x8001, 0x0, 0x100, 0x3ff, 0x100, 0x9, 0x9d25747, 0x0, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x24, 0xcfd5, 0x0, 0x1, 0x0, 0x2304, 0x3, 0xfffffff9, 0x3, 0x0, 0x8, 0x38c9, 0x0, 0xe500, 0xe48, 0x6, 0x44c9a059, 0x81, 0x3, 0x7, 0x40, 0x6, 0x3, 0x5, 0x200, 0x2, 0xfff, 0x7d68, 0x400, 0x6, 0x9, 0x5, 0x8, 0xb3f3343, 0xfffffd20, 0x1, 0xfffffffa, 0x8, 0x1, 0x8, 0x4, 0x1000, 0x7, 0x76c9, 0x7, 0x5b918000, 0x1, 0x4131, 0x8, 0xe9, 0x1, 0x0, 0x1ff, 0x80, 0x4, 0x959, 0x0, 0x40, 0x4, 0xff, 0x1, 0x40, 0x2, 0x900000, 0x4, 0xffffffff, 0x5, 0x1, 0xd7, 0x4, 0xe, 0x1000, 0x77b, 0x800, 0x6, 0xfff, 0x9c1, 0x8, 0x100, 0x1, 0x18, 0x7, 0x4, 0x80000, 0x0, 0x6, 0x5, 0xe, 0xc0000000, 0xd, 0x8, 0x80, 0x33f, 0x401, 0xfffffff8, 0x0, 0x7f, 0x1, 0x9, 0xffffffff, 0x7ff, 0x9, 0x10000, 0x7, 0x9, 0x9, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x4, 0xfff, 0x4, 0x9, {0x2, 0x0, 0xfa0c, 0xa, 0xeed, 0x100}, {0x1, 0x2, 0x2, 0x9, 0x0, 0x7}, 0xea, 0x7, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x9, 0x9, 0x0, 0x84, 0x3, 0x8, 0x1c000, 0x54, 0x7c, 0xffff, 0x9, 0x5f6141e7, 0x1, 0x0, 0xe, 0x8, 0x80000000, 0x42a9, 0x4, 0x6, 0x0, 0x401, 0x8, 0x10001, 0x0, 0x7, 0x2, 0x6, 0x6, 0x3, 0x101, 0x3, 0x2, 0x2, 0x219, 0x29c5, 0x9, 0x4, 0x9, 0x1, 0x0, 0x3, 0x5, 0x9f, 0x7ff, 0x32, 0x400, 0x0, 0x800, 0x5, 0x526, 0x1, 0xffff, 0x10, 0x9, 0x2e9, 0xfffffe01, 0x3, 0x2, 0x3, 0x7, 0x7fffffff, 0x6737, 0x0, 0x4f4, 0x0, 0x6, 0x9, 0xb755, 0x8, 0xfe000000, 0x3, 0x0, 0x100, 0x6, 0x7, 0x1b, 0x9, 0x2, 0x400, 0x4, 0xa49e, 0x7fffffff, 0x9, 0x1, 0xa, 0x10000, 0x6, 0x889, 0x8, 0x2, 0x2, 0x7, 0x5aa, 0xe, 0x3, 0x5, 0x3, 0x5, 0x738f, 0x0, 0x9, 0xaef, 0x100, 0x7, 0x16cb, 0x9, 0x9d1f51a3, 0x1, 0xfffffff7, 0x80000000, 0x4, 0x0, 0x1, 0x12, 0x8001, 0x6, 0x7ff, 0x10, 0xff, 0x4fd, 0xffffff01, 0x3, 0x7fff, 0x1, 0x1b, 0xce, 0xfffffff0, 0x6, 0xffffff7f, 0x4, 0x3, 0x8001, 0x6, 0x67, 0x9, 0x101, 0x4, 0x9, 0x5, 0x4, 0xc47, 0x6041, 0xff, 0x80, 0x5, 0x2dd, 0x8, 0x3, 0x4, 0x4b1, 0x1, 0x81, 0x0, 0x604, 0x2, 0xaf90, 0x3, 0x9, 0xa08, 0xffff8001, 0x6, 0x5, 0x78b3, 0x5, 0x1, 0x4, 0x9, 0x698, 0x7, 0x2, 0x5, 0x4, 0x5, 0x101, 0xe, 0x5, 0x6, 0x7ff, 0x1, 0x80000001, 0xe5, 0x3ff, 0x8, 0x7ff, 0x8, 0xfffffffd, 0x1ff, 0x9, 0xcdf1, 0x81, 0x6, 0x9, 0xf4b5, 0x80000001, 0x4d7, 0x9, 0x1, 0xffff0b20, 0xb0, 0x0, 0xd1, 0x2, 0x0, 0x1, 0x1, 0x40, 0xfffffff7, 0x2, 0x8, 0x4, 0x5, 0x5, 0x3, 0x7f, 0x3, 0x6831, 0x7, 0x3, 0x40, 0xffff, 0x1ff, 0x0, 0x1, 0x1, 0x5, 0x6, 0x1, 0x4, 0x2, 0xc, 0x1f8c938c, 0x1000, 0x814, 0xffff, 0x5, 0x1, 0x5, 0xb61, 0x101, 0x7, 0xffd, 0x6, 0x0, 0x8, 0x5, 0x2, 0x10, 0xa1c, 0x7fffffff, 0xa, 0x7f8, 0x0, 0xb47, 0x40]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0x0, 0x5, 0x1000, {0xf9, 0x0, 0x1, 0xfffd, 0x8, 0xff}, {0x70, 0x2, 0x0, 0x9, 0x1, 0x1}, 0xfffffffe, 0x4, 0xfffff99b}}]]}, {0xe5, 0x6, "4c948b4230703c693d3e3bfe90e32ef7b322b44af059e4c7e1c169ed74d9e23db4e1da24afa05d6c41f8892f275018573682ca1d1b5e0a057d9ea85b546190d68c3d35a4b7e176d75ecbfbe55a8eefcc66daf2031e61322f9ef6f66db30997b09a37a13cc157d69c9335d8ac1446790558928ae1f78ba4e6393592a73a59d95da8636987c5a5d08b737aeda32fcabe40c479e7214a317686b65d1d990554482214512630105722201e775aeeca14f731fef52d0589c9e73ed532de89715db1f7073c54cecb1af98eee72a652066c07e2b1add8df26448bb0d4d997c7e5ec885e62"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x5c, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x11}]}, {0x27, 0x6, "7cbd88faf1d44eadaca03a2a99c9ad2984f6ddde6a7179314c957ab14cc6288283cfe1"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x100, 0x6, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x81, 0x10000000, 0x4, 0xc84c}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffc, 0x7, 0x4, 0x1000, 0x7}, 0xcd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd34, 0x7, 0x65dfa36143f02541, 0x8, 0x8}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xaa9, 0x7, 0x5, 0x1, 0x1000}}}]}, {0x5d, 0x6, "04bf111562b8d6eaac97354301a9e2891df4939ca521b1488c7d9f7cdbb98bceaa2d3333fd26929b36d5b8d6627670747d1883b7ad4592cf5f3fda1717b4a6ea1b5c27a0a0ee7b82990cf78d8205fe7bc639ba0f4fa0efc05c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x84, 0x3, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x3, 0x5, 0xe, 0x5}, 0x3}}]}, {0x34, 0x6, "c862025b3296a996a667a70d127476ba2b26b1943309f453ed4e5ee6bef87b30ab5d210291de2658600b688eaf4e7023"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0xa0, 0x6, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2557}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x2e8, 0x0, 0x0, 0x8}}]}, {0x4e, 0x6, "843093c36d7fa59f597fe19de2e96a8777f9068f287d9d33c79f9d7ca457cf32e0d4b78b47439176799fe4b7f14c541a3ebe13d0b6e479f5fa553544ce0b53118eebbdb865c180dade5a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x164, 0xc, 0x0, 0x0, {{0x7}, {0x70, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "f970c33c820e0c9bde6c2418c64839ef"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "1abdb53ca915e47e117ee9ac1826065b"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_ZONE={0x6}, @TCA_CT_PARMS={0x18, 0x1, {0x7, 0x5, 0x8, 0xc, 0x7}}]}, {0xcd, 0x6, "43d7bf1b16b0654c1243a43da10907018f4387862490fbaf8cf299f78aa6402d3ef6fbb0e847c8ef24c0b63aa1a2fb80e930cff03bbfb2e0357181269a98ea6cd70186ff18c5e30e51332ab2611e7f88186451af068c9d4f5870c5a9c2e78f0bbfd47d8c17a49b98f19300009a8ef4b71db871fa2b0228716c72358b8f7f3733762eca65ecfa79b5a60bff06514ca91d09384adb241a0e85e35c9801f5a2f116b2cfd7e4859a9a4a7c0efd247c1d9c3b1430dcbb45ea10ac8b302b46838faea9cdca87f5b3f65599a9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0x214, 0x11, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x81, 0xb800000, 0x0, 0x4, 0x9}, @multicast1, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffc0, 0x31d, 0x5, 0x7, 0x8}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x18, 0x8, 0xa, 0x5f}, @multicast1, @broadcast, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x8, 0xfffffffe, 0x54}, @remote, @remote, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x7fffffff, 0x4, 0xa, 0x8}, @private=0xa010101, @rand_addr=0x64010102, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf97, 0x3, 0x10000000, 0x18, 0x800}, @multicast1, @broadcast, 0xff000000}}]}, {0xfa, 0x6, "c361215148121e4ab5c71e617e7714da7f8ef1af2b9a99dfc9f3acf77ac9ff4236d664e4c17143fc1a9fa5f08fa3039e0f91d14a38e2b58d09829bfda44d9643829f5df8b090700a37037f32d4ad68b5ce0dd285e585fe9c811483592aa96c6192308972cdcb891a8e2dd2d78b8dc326803d240fd22e7e4d2dcc0f8d5cee6878a0c1634f9d5474547ffc9fe1429e660ca59326bde64bb71fa286edd4149a40ee172889f1fbda2c6a4fd7477e07cdd8b9a4ab668ccca57a1eb83dab98602a2522e0a1f23070f3550d3416d0750668b66849e780e2431682470bc6bc75fa821391291379bed452955170aa1e2e659f86139097b5782154"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'pim6reg1\x00'}]}}]}, 0x61d8}, 0x1, 0x0, 0x0, 0x4000080}, 0x85) r9 = socket$rxrpc(0x21, 0x2, 0x2) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r9, 0x110, 0x3) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x91, 0x91, 0x9, [@datasec={0x2, 0x6, 0x0, 0xf, 0x1, [{0x3, 0x0, 0x8}, {0x2, 0x1, 0xfff}, {0x5, 0x10000, 0x7ff}, {0x2, 0xfffffff9, 0xacef}, {0x3, 0x0, 0x1}, {0x5, 0xf495, 0xffffffff}], '\a'}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @enum={0x6, 0x3, 0x0, 0x6, 0x4, [{0x3, 0x9}, {0xb, 0x5}, {0xe, 0xa2a8}]}, @typedef={0x2, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x61, 0x5f, 0x2e, 0x2e, 0x71, 0x5f, 0x61]}}, &(0x7f0000000300)=""/59, 0xb5, 0x3b, 0x0, 0x0, 0x10000, @value=r6}, 0x28) ioctl$FS_IOC_GETFSLABEL(r11, 0x81009431, &(0x7f0000000500)) connect$rxrpc(r9, &(0x7f00000002c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0xdd1, @remote, 0x7}}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x72}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r16, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)={0x34, r14, 0xe096044a3fc9e6f1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000d0}, 0x40) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r12, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x6}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040050) 141.131464ms ago: executing program 3 (id=1414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x50}}, 0x4000044) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x3, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01060000000000000000090000003c0004801300010062726f6164636173742d6c696e6b000024000780080005000000000008000300ff00"], 0x50}}, 0x0) 0s ago: executing program 3 (id=1415): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x2, 0x1, 0x1, 0x1}, {0x2, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x3, 0x1}, {0x4, 0x1, 0x1}}], 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x2, @link='syz1\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x24008001) kernel console output (not intermixed with test programs): ce wlan1 via netlink (err -105) [ 251.269061][ T7273] team0: Port device wlan1 removed [ 251.306373][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.342'. [ 251.334126][ T7293] netlink: 16 bytes leftover after parsing attributes in process `syz.3.342'. [ 251.412536][ T7296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.525251][ T7300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.345'. [ 251.534774][ T7300] netlink: 108 bytes leftover after parsing attributes in process `syz.3.345'. [ 251.544280][ T7300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.345'. [ 251.621501][ T7304] netlink: 'syz.2.347': attribute type 5 has an invalid length. [ 251.863520][ T7313] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 252.018413][ T7319] tipc: Failed to remove unknown binding: 66,1,1/0:2330420437/2330420439 [ 252.077789][ T7319] tipc: Failed to remove unknown binding: 66,1,1/0:2330420437/2330420439 [ 252.130458][ T7319] tipc: Failed to remove unknown binding: 66,1,1/0:2330420437/2330420439 [ 252.650138][ T7344] lo speed is unknown, defaulting to 1000 [ 253.089119][ T7368] xt_CT: No such helper "netbios-ns" [ 253.231469][ T7379] netlink: 'syz.4.368': attribute type 20 has an invalid length. [ 253.287260][ T7377] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 253.293695][ T7380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.296334][ T6371] IPVS: starting estimator thread 0... [ 253.374108][ T7387] sock: sock_timestamping_bind_phc: sock not bind to device [ 253.385246][ T7387] xt_addrtype: ipv6 does not support BROADCAST matching [ 253.432728][ T7383] IPVS: using max 26 ests per chain, 62400 per kthread [ 253.579145][ T7397] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 253.802902][ T7408] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.898841][ T30] audit: type=1107 audit(1750041559.479:6): pid=7413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¹&ÒôæOߥxN RßöMë~™Ž[åÆL!X[D *çëD>“8î¸VÞ”ÐÉ:åÀfÅk;Þð1›äÒ™h· ù ÉÃÿp4:Lü_èGûølìš–L]ZùÍìæzXwø=}ïaÆX¹„,ŠjkJªè¾d:ßëÂm8!R71ƒí ËÚ®¤Z»‹9Ë"ÿîÉ—ìüž¹fL%‡ü1­Å/~­ÈNvG—FßUZ¢¥kj[\ïóZð¡ [ 253.898841][ T30] 5ªZ' [ 254.004656][ T7420] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.012300][ T7420] IPv6: NLM_F_CREATE should be set when creating new route [ 254.019594][ T7420] IPv6: NLM_F_CREATE should be set when creating new route [ 254.154200][ T7426] netlink: 'syz.4.386': attribute type 1 has an invalid length. [ 254.244616][ T7426] veth3: entered promiscuous mode [ 254.383291][ T7395] delete_channel: no stack [ 254.522602][ T7442] ipvlan2: entered allmulticast mode [ 254.538746][ T7442] macsec0: entered allmulticast mode [ 254.548915][ T7442] veth1_macvtap: entered allmulticast mode [ 254.796902][ T7447] __nla_validate_parse: 10 callbacks suppressed [ 254.796922][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 254.832974][ T7447] macsec1: entered promiscuous mode [ 254.845002][ T7447] gretap0: entered promiscuous mode [ 254.858325][ T7447] macsec1: entered allmulticast mode [ 254.871629][ T7447] gretap0: entered allmulticast mode [ 254.895152][ T7451] 8021q: VLANs not supported on vxcan1 [ 254.901279][ T7444] lo speed is unknown, defaulting to 1000 [ 254.918568][ T7454] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 254.951652][ T7454] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 254.981004][ T7454] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 255.010250][ T7454] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 255.039678][ T7454] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 255.061379][ T7454] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 255.070792][ T7454] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 255.090135][ T7454] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 255.117057][ T7454] geneve2: entered allmulticast mode [ 255.275821][ T24] IPVS: starting estimator thread 0... [ 255.278628][ T7459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.395'. [ 255.391282][ T7461] IPVS: using max 28 ests per chain, 67200 per kthread [ 255.822245][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.071944][ T7499] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 256.086836][ T7487] IPVS: stopping backup sync thread 7499 ... [ 256.214756][ T7503] lo speed is unknown, defaulting to 1000 [ 256.279129][ T7498] netlink: 224 bytes leftover after parsing attributes in process `syz.0.404'. [ 256.682520][ T7526] netlink: 24 bytes leftover after parsing attributes in process `syz.4.407'. [ 257.541688][ T7566] netlink: 36 bytes leftover after parsing attributes in process `syz.4.410'. [ 257.562036][ T7566] vlan0: entered promiscuous mode [ 258.143979][ T7597] lo speed is unknown, defaulting to 1000 [ 258.522382][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 258.562729][ T7620] openvswitch: netlink: IP tunnel dst address not specified [ 258.596658][ T7627] netlink: 'syz.2.428': attribute type 3 has an invalid length. [ 258.618320][ T7627] netlink: 224 bytes leftover after parsing attributes in process `syz.2.428'. [ 258.844142][ T7639] netlink: 24 bytes leftover after parsing attributes in process `syz.2.433'. [ 258.925355][ T7639] bond2: entered promiscuous mode [ 258.948669][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'. [ 258.972885][ T7639] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.089540][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.435'. [ 259.334298][ T7639] bond2 (unregistering): Released all slaves [ 259.522648][ T7647] team0 (unregistering): Port device team_slave_0 removed [ 259.534035][ T7647] team0 (unregistering): Port device team_slave_1 removed [ 259.686209][ T7670] netlink: 'syz.0.440': attribute type 46 has an invalid length. [ 259.716133][ T7673] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 259.726444][ T7673] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 259.969344][ T7685] __nla_validate_parse: 1 callbacks suppressed [ 259.969368][ T7685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.444'. [ 260.063214][ T7683] netlink: 36 bytes leftover after parsing attributes in process `syz.3.444'. [ 260.188282][ T7690] netlink: 'syz.0.446': attribute type 1 has an invalid length. [ 260.244646][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.446'. [ 260.503634][ T7703] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 260.540334][ T7677] syz.1.441 (7677) used greatest stack depth: 16824 bytes left [ 260.818709][ T7720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.458'. [ 260.857555][ T7718] netlink: 36 bytes leftover after parsing attributes in process `syz.2.455'. [ 261.038812][ T7724] netlink: 'syz.3.460': attribute type 11 has an invalid length. [ 261.050851][ T7724] netlink: 228 bytes leftover after parsing attributes in process `syz.3.460'. [ 261.066507][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.460'. [ 261.328933][ T7729] lo speed is unknown, defaulting to 1000 [ 261.394235][ T24] IPVS: starting estimator thread 0... [ 261.481479][ T7731] IPVS: using max 24 ests per chain, 57600 per kthread [ 261.806046][ T7740] sctp: [Deprecated]: syz.2.463 (pid 7740) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.806046][ T7740] Use struct sctp_sack_info instead [ 261.836296][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'. [ 262.107281][ T7744] lo speed is unknown, defaulting to 1000 [ 262.148731][ T7756] netlink: 20 bytes leftover after parsing attributes in process `syz.4.469'. [ 262.657650][ T7784] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 262.711339][ T7785] xt_CT: No such helper "pptp" [ 263.101403][ T7784] lo speed is unknown, defaulting to 1000 [ 263.139182][ T7782] lo speed is unknown, defaulting to 1000 [ 263.232715][ T7803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.243600][ T7798] lo speed is unknown, defaulting to 1000 [ 264.226581][ T7837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.490'. [ 264.495889][ T7848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.716938][ T7861] netlink: 'syz.1.496': attribute type 11 has an invalid length. [ 264.805909][ T7864] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.814741][ T7864] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.823695][ T7864] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.832151][ T7864] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.873536][ T7864] vxlan0: entered promiscuous mode [ 264.879538][ T7864] vxlan0: entered allmulticast mode [ 265.178374][ T7876] lo speed is unknown, defaulting to 1000 [ 265.280069][ T7885] __nla_validate_parse: 2 callbacks suppressed [ 265.280088][ T7885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.502'. [ 265.368023][ T7891] sctp: [Deprecated]: syz.2.503 (pid 7891) Use of int in max_burst socket option. [ 265.368023][ T7891] Use struct sctp_assoc_value instead [ 265.559759][ T7892] lo speed is unknown, defaulting to 1000 [ 265.593968][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.505'. [ 265.621407][ T7895] openvswitch: netlink: Flow actions attr not present in new flow. [ 265.927664][ T7915] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.511'. [ 266.011774][ T7918] netlink: 'syz.4.510': attribute type 1 has an invalid length. [ 266.165371][ T7918] bond0: entered promiscuous mode [ 266.171479][ T7918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.180755][ T7921] netlink: 48 bytes leftover after parsing attributes in process `syz.4.510'. [ 266.657123][ T7947] netlink: 48 bytes leftover after parsing attributes in process `syz.4.518'. [ 266.670516][ T7950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.740827][ T7943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.814869][ T7943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.826672][ T7952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.519'. [ 266.836909][ T7952] vlan0: entered promiscuous mode [ 267.120291][ T7965] netlink: 32 bytes leftover after parsing attributes in process `syz.4.524'. [ 267.204344][ T7968] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 267.216337][ T7968] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 267.280677][ T7976] gtp0: entered promiscuous mode [ 267.288296][ T7976] gtp0: entered allmulticast mode [ 267.305555][ T7968] lo speed is unknown, defaulting to 1000 [ 267.310581][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.528'. [ 267.682353][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.530'. [ 267.838074][ T7997] netlink: 44 bytes leftover after parsing attributes in process `syz.4.530'. [ 268.443250][ T8043] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 268.664948][ T8052] gretap0: left allmulticast mode [ 268.681811][ T8052] gretap0: left promiscuous mode [ 268.687185][ T8052] bridge0: port 1(gretap0) entered disabled state [ 268.822062][ T24] lo speed is unknown, defaulting to 1000 [ 269.069256][ T7534] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.109964][ T8071] ip6gretap0: entered promiscuous mode [ 269.116552][ T8071] macsec1: entered promiscuous mode [ 269.126785][ T8071] ip6gretap0: left promiscuous mode [ 269.176601][ T8073] netlink: 'syz.1.556': attribute type 4 has an invalid length. [ 269.476487][ T8083] netlink: 'syz.4.560': attribute type 1 has an invalid length. [ 269.691449][ T8099] netlink: 'syz.2.566': attribute type 21 has an invalid length. [ 269.702077][ T8099] netlink: 'syz.2.566': attribute type 5 has an invalid length. [ 269.709878][ T8099] netlink: 'syz.2.566': attribute type 6 has an invalid length. [ 269.837364][ T8093] lo speed is unknown, defaulting to 1000 [ 270.087031][ T8120] tipc: Enabling of bearer rejected, failed to enable media [ 270.321630][ T24] lo speed is unknown, defaulting to 1000 [ 270.327453][ T24] syz1: Port: 1 Link DOWN [ 270.332821][ T5956] lo speed is unknown, defaulting to 1000 [ 270.567883][ T8133] bridge0: entered promiscuous mode [ 270.576235][ T8133] macvlan2: entered promiscuous mode [ 270.582996][ T8133] bridge0: port 1(macvlan2) entered blocking state [ 270.590933][ T8122] lo speed is unknown, defaulting to 1000 [ 270.597243][ T8133] bridge0: port 1(macvlan2) entered disabled state [ 270.605928][ T8133] macvlan2: entered allmulticast mode [ 270.611751][ T8133] bridge0: entered allmulticast mode [ 270.625640][ T8133] macvlan2: left allmulticast mode [ 270.630820][ T8133] bridge0: left allmulticast mode [ 270.641195][ T8133] bridge0: left promiscuous mode [ 270.690223][ T8134] bridge0: entered promiscuous mode [ 270.696299][ T8134] macvlan2: entered promiscuous mode [ 270.703833][ T8134] bridge0: port 1(macvlan2) entered blocking state [ 270.712836][ T8134] bridge0: port 1(macvlan2) entered disabled state [ 270.719877][ T8134] macvlan2: entered allmulticast mode [ 270.726395][ T8134] bridge0: entered allmulticast mode [ 270.740013][ T8134] macvlan2: left allmulticast mode [ 270.745541][ T8134] bridge0: left allmulticast mode [ 270.754703][ T8134] bridge0: left promiscuous mode [ 270.812055][ T8141] ipvlan2: entered promiscuous mode [ 270.818112][ T8141] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 270.924722][ T8144] __nla_validate_parse: 9 callbacks suppressed [ 270.924744][ T8144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.579'. [ 271.495634][ T8165] netlink: 1 bytes leftover after parsing attributes in process `syz.2.585'. [ 271.537661][ T8165] netlink: 1 bytes leftover after parsing attributes in process `syz.2.585'. [ 271.567056][ T8165] netlink: 56 bytes leftover after parsing attributes in process `syz.2.585'. [ 271.634152][ T8165] netlink: 1 bytes leftover after parsing attributes in process `syz.2.585'. [ 271.646716][ T8165] netlink: 1 bytes leftover after parsing attributes in process `syz.2.585'. [ 271.711279][ T8165] netlink: 56 bytes leftover after parsing attributes in process `syz.2.585'. [ 271.791538][ T8165] netlink: 1 bytes leftover after parsing attributes in process `syz.2.585'. [ 271.841347][ T8165] netlink: 1 bytes leftover after parsing attributes in process `syz.2.585'. [ 271.856751][ T8177] ªªªªª@: left allmulticast mode [ 271.871189][ T8177] ªªªªª@: left promiscuous mode [ 271.892389][ T8165] netlink: 56 bytes leftover after parsing attributes in process `syz.2.585'. [ 271.897463][ T8180] netlink: 'syz.4.587': attribute type 10 has an invalid length. [ 271.942165][ T8177] bridge0: port 1(ªªªªª@) entered disabled state [ 271.996230][ T8177] bridge_slave_1: left allmulticast mode [ 272.017095][ T8177] bridge_slave_1: left promiscuous mode [ 272.026537][ T8177] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.118297][ T8177] team0: Port device team_slave_0 removed [ 272.158704][ T8177] team0: Port device team_slave_1 removed [ 272.174223][ T8177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.188356][ T8177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.214553][ T8177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.225504][ T8177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.451030][ T8196] netlink: 'syz.3.592': attribute type 32 has an invalid length. [ 272.459644][ T8196] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 272.858836][ T8220] netlink: 'syz.2.598': attribute type 21 has an invalid length. [ 272.896557][ T8223] block nbd0: not configured, cannot reconfigure [ 273.288118][ T8251] netlink: 'syz.2.606': attribute type 4 has an invalid length. [ 273.686304][ T8271] tap0: tun_chr_ioctl cmd 1074025677 [ 273.693699][ T8271] tap0: linktype set to 0 [ 274.416159][ T8311] netlink: del zone limit has 4 unknown bytes [ 274.545949][ T8324] pim6reg: entered allmulticast mode [ 274.990978][ T8343] sctp: [Deprecated]: syz.4.634 (pid 8343) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.990978][ T8343] Use struct sctp_sack_info instead [ 275.023073][ T8344] netlink: 'syz.4.634': attribute type 1 has an invalid length. [ 275.105379][ T8344] 8021q: adding VLAN 0 to HW filter on device bond2 [ 275.262069][ T8356] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 275.273288][ T8354] netlink: 'syz.0.637': attribute type 1 has an invalid length. [ 275.422462][ T8354] 8021q: adding VLAN 0 to HW filter on device bond2 [ 275.575052][ T8372] IPv6: Can't replace route, no match found [ 275.650742][ T8362] 8021q: adding VLAN 0 to HW filter on device bond2 [ 275.694479][ T8362] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 275.757277][ T8362] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 275.852128][ T8363] 8021q: VLANs not supported on gre0 [ 275.880052][ T8379] netlink: 'syz.2.643': attribute type 4 has an invalid length. [ 275.922326][ T8364] veth1: entered promiscuous mode [ 275.928539][ T8354] erspan0: entered allmulticast mode [ 275.955391][ T8354] bond2: (slave erspan0): making interface the new active one [ 275.986292][ T8354] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 275.996121][ T8380] netlink: 'syz.1.644': attribute type 10 has an invalid length. [ 276.216844][ T8389] lo speed is unknown, defaulting to 1000 [ 276.909352][ T8431] smc: net device bond0 applied user defined pnetid SYZ2 [ 276.933058][ T8431] smc: net device bond0 erased user defined pnetid SYZ2 [ 277.022866][ T8440] netlink: 'syz.2.657': attribute type 21 has an invalid length. [ 277.036518][ T8443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 277.051770][ T8440] __nla_validate_parse: 201 callbacks suppressed [ 277.051793][ T8440] netlink: 152 bytes leftover after parsing attributes in process `syz.2.657'. [ 277.871665][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.662'. [ 277.899775][ T8481] netlink: 'syz.4.662': attribute type 2 has an invalid length. [ 277.914583][ T8481] netlink: 'syz.4.662': attribute type 1 has an invalid length. [ 278.009346][ T8492] : entered promiscuous mode [ 278.039113][ T8488] lo speed is unknown, defaulting to 1000 [ 278.292313][ T8508] netlink: 'syz.2.668': attribute type 1 has an invalid length. [ 278.395130][ T8501] lo speed is unknown, defaulting to 1000 [ 279.009865][ T8530] netlink: 40 bytes leftover after parsing attributes in process `syz.3.675'. [ 279.218286][ T8540] tipc: Started in network mode [ 279.240680][ T8540] tipc: Node identity 7ecb478c52d8, cluster identity 4711 [ 279.267369][ T8540] tipc: Enabled bearer , priority 0 [ 279.336144][ T8539] netlink: 24 bytes leftover after parsing attributes in process `syz.4.677'. [ 279.527821][ T8530] syzkaller0: entered promiscuous mode [ 279.534101][ T8530] syzkaller0: entered allmulticast mode [ 279.540678][ T8530] tipc: Resetting bearer [ 279.560218][ T6362] IPVS: starting estimator thread 0... [ 279.638184][ T8528] tipc: Resetting bearer [ 279.661591][ T8553] IPVS: using max 24 ests per chain, 57600 per kthread [ 279.802428][ T8558] Cannot find add_set index 0 as target [ 280.238953][ T8577] netlink: 20 bytes leftover after parsing attributes in process `syz.2.687'. [ 280.368687][ T6362] tipc: Node number set to 739461004 [ 281.362428][ T8528] tipc: Disabling bearer [ 281.420595][ T8582] batadv1: entered promiscuous mode [ 281.445089][ T8582] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 281.463634][ T8577] ip_vti0: entered promiscuous mode [ 281.784218][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589da400: rx timeout, send abort [ 282.219521][ T8622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 282.285138][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589dac00: rx timeout, send abort [ 282.293937][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589da400: abort rx timeout. Force session deactivation [ 282.793473][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589dac00: abort rx timeout. Force session deactivation [ 283.219698][ T8649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.706'. [ 283.658936][ T8661] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 283.712647][ T8667] netlink: 28 bytes leftover after parsing attributes in process `syz.1.711'. [ 283.724655][ T8661] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 283.759688][ T8667] netlink: 28 bytes leftover after parsing attributes in process `syz.1.711'. [ 283.817375][ T8669] netlink: 84 bytes leftover after parsing attributes in process `syz.0.708'. [ 283.857834][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.709'. [ 284.214410][ T8663] lo speed is unknown, defaulting to 1000 [ 284.330270][ T7536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.370440][ T7536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.563001][ T8703] syzkaller1: entered promiscuous mode [ 284.568759][ T8703] syzkaller1: entered allmulticast mode [ 284.577522][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.718'. [ 284.805467][ T8710] netlink: 9 bytes leftover after parsing attributes in process `syz.2.721'. [ 285.039586][ T8710] gretap0: entered promiscuous mode [ 285.327367][ T8728] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 285.376404][ T8728] vlan3: entered promiscuous mode [ 285.437490][ T8743] netlink: 80 bytes leftover after parsing attributes in process `syz.1.727'. [ 285.588462][ T8745] RDS: rds_bind could not find a transport for ::ffff:172.20.20.91, load rds_tcp or rds_rdma? [ 285.608236][ T8743] RDS: rds_bind could not find a transport for ::ffff:172.20.20.91, load rds_tcp or rds_rdma? [ 285.655193][ T8732] IPVS: stopping backup sync thread 8749 ... [ 285.661937][ T8749] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 285.823383][ T8754] netlink: 68 bytes leftover after parsing attributes in process `syz.4.729'. [ 286.017771][ T8766] trusted_key: syz.1.732 sent an empty control message without MSG_MORE. [ 286.427880][ T8786] netlink: 'syz.0.740': attribute type 21 has an invalid length. [ 286.505546][ T8786] netlink: 'syz.0.740': attribute type 5 has an invalid length. [ 286.520307][ T8791] xt_recent: Unsupported userspace flags (00000048) [ 286.553521][ T8786] netlink: 'syz.0.740': attribute type 6 has an invalid length. [ 286.720286][ T8804] netlink: 'syz.1.747': attribute type 8 has an invalid length. [ 287.388636][ T8849] __nla_validate_parse: 12 callbacks suppressed [ 287.388654][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.760'. [ 288.025278][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.766'. [ 288.103960][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.767'. [ 288.132163][ T8872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.769'. [ 288.255921][ T8875] netlink: 132 bytes leftover after parsing attributes in process `syz.2.768'. [ 288.342977][ T8881] netlink: 'syz.0.770': attribute type 1 has an invalid length. [ 288.541603][ T8886] vlan3: entered allmulticast mode [ 288.546841][ T8886] bond3: entered allmulticast mode [ 289.438607][ T8919] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 290.527624][ T8955] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 290.926422][ T8983] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 290.998214][ T8983] netlink: 20 bytes leftover after parsing attributes in process `syz.0.797'. [ 291.108616][ T8986] lo speed is unknown, defaulting to 1000 [ 291.300747][ T8998] netlink: zone id is out of range [ 291.316119][ T8998] netlink: zone id is out of range [ 291.353513][ T8998] netlink: set zone limit has 4 unknown bytes [ 291.513702][ T9005] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.525175][ T9005] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.560213][ T9005] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 42416 - 0 [ 291.619057][ T9008] IPv6: syztnl0: Disabled Multicast RS [ 291.638194][ T9005] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.649270][ T9005] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.672128][ T9005] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 42416 - 0 [ 291.805866][ T9005] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.851226][ T9005] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.861892][ T9020] netlink: 40 bytes leftover after parsing attributes in process `syz.1.806'. [ 291.889700][ T9005] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 42416 - 0 [ 291.990779][ T9016] netlink: 40 bytes leftover after parsing attributes in process `syz.1.806'. [ 291.992524][ T9005] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.028696][ T9005] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.043326][ T9005] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 42416 - 0 [ 292.205717][ T9005] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.227427][ T9005] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 42416 - 0 [ 292.239031][ T9005] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 292.248705][ T9027] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 292.296539][ T9005] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.331315][ T9005] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 42416 - 0 [ 292.353603][ T9005] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 292.419570][ T9005] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.449693][ T9005] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 42416 - 0 [ 292.479568][ T9005] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 292.600622][ T9005] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.651724][ T9005] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 42416 - 0 [ 292.660073][ T9005] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 292.741022][ T9043] !: renamed from dummy0 [ 292.762660][ T9045] FAULT_INJECTION: forcing a failure. [ 292.762660][ T9045] name failslab, interval 1, probability 0, space 0, times 1 [ 292.776642][ T9045] CPU: 1 UID: 0 PID: 9045 Comm: syz.4.813 Not tainted 6.16.0-rc1-syzkaller-00227-g8909f5f4ecd5 #0 PREEMPT(full) [ 292.776671][ T9045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.776691][ T9045] Call Trace: [ 292.776699][ T9045] [ 292.776707][ T9045] dump_stack_lvl+0x189/0x250 [ 292.776757][ T9045] ? __pfx____ratelimit+0x10/0x10 [ 292.776789][ T9045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.776821][ T9045] ? __pfx__printk+0x10/0x10 [ 292.776850][ T9045] ? __pfx___might_resched+0x10/0x10 [ 292.776888][ T9045] should_fail_ex+0x414/0x560 [ 292.776921][ T9045] should_failslab+0xa8/0x100 [ 292.776945][ T9045] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 292.776966][ T9045] ? __alloc_skb+0x112/0x2d0 [ 292.776995][ T9045] __alloc_skb+0x112/0x2d0 [ 292.777032][ T9045] netlink_sendmsg+0x5c6/0xb30 [ 292.777067][ T9045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.777096][ T9045] ? aa_sock_msg_perm+0x94/0x160 [ 292.777125][ T9045] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 292.777152][ T9045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.777178][ T9045] __sock_sendmsg+0x219/0x270 [ 292.777214][ T9045] ____sys_sendmsg+0x505/0x830 [ 292.777245][ T9045] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.777281][ T9045] ? import_iovec+0x74/0xa0 [ 292.777306][ T9045] ___sys_sendmsg+0x21f/0x2a0 [ 292.777336][ T9045] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.777404][ T9045] ? __fget_files+0x2a/0x420 [ 292.777426][ T9045] ? __fget_files+0x3a0/0x420 [ 292.777461][ T9045] __x64_sys_sendmsg+0x19b/0x260 [ 292.777491][ T9045] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.777529][ T9045] ? __pfx_ksys_write+0x10/0x10 [ 292.777545][ T9045] ? rcu_is_watching+0x15/0xb0 [ 292.777593][ T9045] ? do_syscall_64+0xbe/0x3b0 [ 292.777615][ T9045] do_syscall_64+0xfa/0x3b0 [ 292.777632][ T9045] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.777663][ T9045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.777683][ T9045] ? clear_bhb_loop+0x60/0xb0 [ 292.777709][ T9045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.777729][ T9045] RIP: 0033:0x7f8dfcf8e929 [ 292.777753][ T9045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.777771][ T9045] RSP: 002b:00007f8dfdd24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.777801][ T9045] RAX: ffffffffffffffda RBX: 00007f8dfd1b5fa0 RCX: 00007f8dfcf8e929 [ 292.777816][ T9045] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 292.777829][ T9045] RBP: 00007f8dfdd24090 R08: 0000000000000000 R09: 0000000000000000 [ 292.777841][ T9045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.777853][ T9045] R13: 0000000000000000 R14: 00007f8dfd1b5fa0 R15: 00007ffc8efdc238 [ 292.777913][ T9045] [ 293.167895][ T9053] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 293.213256][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.818'. [ 293.327865][ T9056] lo speed is unknown, defaulting to 1000 [ 293.699757][ T9075] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 293.721812][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.821'. [ 293.784061][ T9075] batadv_slave_1: entered allmulticast mode [ 293.912236][ T9085] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 293.944445][ T9087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.824'. [ 293.974842][ T9085] netlink: 48 bytes leftover after parsing attributes in process `syz.4.825'. [ 294.144245][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.826'. [ 294.304869][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.828'. [ 294.661533][ T9113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.830'. [ 295.063111][ T9121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.833'. [ 295.126182][ T9126] lo speed is unknown, defaulting to 1000 [ 296.133501][ T9161] syzkaller1: entered promiscuous mode [ 296.139053][ T9161] syzkaller1: entered allmulticast mode [ 296.337194][ T9164] FAULT_INJECTION: forcing a failure. [ 296.337194][ T9164] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 296.387441][ T9164] CPU: 0 UID: 0 PID: 9164 Comm: syz.3.841 Not tainted 6.16.0-rc1-syzkaller-00227-g8909f5f4ecd5 #0 PREEMPT(full) [ 296.387476][ T9164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 296.387495][ T9164] Call Trace: [ 296.387503][ T9164] [ 296.387517][ T9164] dump_stack_lvl+0x189/0x250 [ 296.387558][ T9164] ? __pfx____ratelimit+0x10/0x10 [ 296.387592][ T9164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.387629][ T9164] ? __pfx__printk+0x10/0x10 [ 296.387653][ T9164] ? __might_fault+0xb0/0x130 [ 296.387689][ T9164] should_fail_ex+0x414/0x560 [ 296.387724][ T9164] _copy_from_iter+0x1db/0x16f0 [ 296.387764][ T9164] ? rcu_is_watching+0x15/0xb0 [ 296.387801][ T9164] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 296.387833][ T9164] ? __pfx__copy_from_iter+0x10/0x10 [ 296.387866][ T9164] ? __build_skb_around+0x257/0x3e0 [ 296.387896][ T9164] ? netlink_sendmsg+0x642/0xb30 [ 296.387920][ T9164] ? skb_put+0x11b/0x210 [ 296.387949][ T9164] netlink_sendmsg+0x6b2/0xb30 [ 296.387988][ T9164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.388020][ T9164] ? aa_sock_msg_perm+0x94/0x160 [ 296.388051][ T9164] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 296.388080][ T9164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.388108][ T9164] __sock_sendmsg+0x219/0x270 [ 296.388147][ T9164] ____sys_sendmsg+0x505/0x830 [ 296.388183][ T9164] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.388221][ T9164] ? import_iovec+0x74/0xa0 [ 296.388247][ T9164] ___sys_sendmsg+0x21f/0x2a0 [ 296.388279][ T9164] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.388352][ T9164] ? __fget_files+0x2a/0x420 [ 296.388376][ T9164] ? __fget_files+0x3a0/0x420 [ 296.388414][ T9164] __x64_sys_sendmsg+0x19b/0x260 [ 296.388447][ T9164] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 296.388489][ T9164] ? __pfx_ksys_write+0x10/0x10 [ 296.388507][ T9164] ? rcu_is_watching+0x15/0xb0 [ 296.388561][ T9164] ? do_syscall_64+0xbe/0x3b0 [ 296.388586][ T9164] do_syscall_64+0xfa/0x3b0 [ 296.388605][ T9164] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.388637][ T9164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.388658][ T9164] ? clear_bhb_loop+0x60/0xb0 [ 296.388683][ T9164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.388703][ T9164] RIP: 0033:0x7f4a8058e929 [ 296.388721][ T9164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.388737][ T9164] RSP: 002b:00007f4a81325038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.388759][ T9164] RAX: ffffffffffffffda RBX: 00007f4a807b5fa0 RCX: 00007f4a8058e929 [ 296.388792][ T9164] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 296.388805][ T9164] RBP: 00007f4a81325090 R08: 0000000000000000 R09: 0000000000000000 [ 296.388825][ T9164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.388838][ T9164] R13: 0000000000000000 R14: 00007f4a807b5fa0 R15: 00007ffc91aedfb8 [ 296.388872][ T9164] [ 297.005850][ T9169] IPVS: set_ctl: invalid protocol: 89 172.20.20.187:20003 [ 297.328549][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'. [ 297.339836][ T9182] Cannot find del_set index 65533 as target [ 297.884365][ T9203] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.854'. [ 297.934351][ T9201] lo speed is unknown, defaulting to 1000 [ 298.241022][ T9212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.858'. [ 298.337149][ T9214] netlink: del zone limit has 4 unknown bytes [ 299.324674][ T9253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.870'. [ 299.541231][ T9248] lo speed is unknown, defaulting to 1000 [ 299.709369][ T9243] lo speed is unknown, defaulting to 1000 [ 299.717808][ T9265] netlink: 'syz.0.872': attribute type 21 has an invalid length. [ 299.768746][ T9265] netlink: 'syz.0.872': attribute type 6 has an invalid length. [ 299.781135][ T9265] netlink: 156 bytes leftover after parsing attributes in process `syz.0.872'. [ 299.818520][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.873'. [ 299.834678][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.873'. [ 299.897693][ T9271] netlink: 'syz.4.875': attribute type 1 has an invalid length. [ 299.911602][ T9271] netlink: 224 bytes leftover after parsing attributes in process `syz.4.875'. [ 300.018614][ T9274] lo speed is unknown, defaulting to 1000 [ 300.145654][ T9280] tipc: Enabling of bearer rejected, failed to enable media [ 300.186370][ T9279] tipc: Enabling of bearer rejected, failed to enable media [ 300.426232][ T9289] netlink: 36 bytes leftover after parsing attributes in process `syz.2.879'. [ 300.946186][ T9304] lo speed is unknown, defaulting to 1000 [ 301.058090][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.886'. [ 301.189949][ T9314] tipc: Started in network mode [ 301.196612][ T9314] tipc: Node identity 16fb33a1a734, cluster identity 4711 [ 301.223662][ T9314] tipc: Enabled bearer , priority 0 [ 301.434240][ T9317] syzkaller0: entered promiscuous mode [ 301.440679][ T9321] netlink: 'syz.2.890': attribute type 1 has an invalid length. [ 301.461507][ T9317] syzkaller0: entered allmulticast mode [ 301.470533][ T9317] tipc: Resetting bearer [ 301.551397][ T9313] tipc: Resetting bearer [ 301.627744][ T9334] netlink: 56 bytes leftover after parsing attributes in process `syz.1.892'. [ 302.254135][ T6365] tipc: Node number set to 2983146401 [ 303.149555][ T9313] tipc: Disabling bearer [ 303.165971][ T9328] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 303.177076][ T9328] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 303.194105][ T9330] tipc: Enabling of bearer rejected, media not registered [ 303.467611][ T9345] netlink: 20 bytes leftover after parsing attributes in process `syz.2.895'. [ 303.476394][ T9351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.477019][ T9345] netlink: 40 bytes leftover after parsing attributes in process `syz.2.895'. [ 303.499590][ T9351] netlink: 'syz.1.896': attribute type 1 has an invalid length. [ 303.510031][ T9351] netlink: 'syz.1.896': attribute type 1 has an invalid length. [ 303.519785][ T9351] netlink: 192 bytes leftover after parsing attributes in process `syz.1.896'. [ 303.624373][ T9358] netlink: 132 bytes leftover after parsing attributes in process `syz.1.896'. [ 304.084156][ T9376] netlink: 60 bytes leftover after parsing attributes in process `syz.0.902'. [ 304.209855][ T9376] tipc: Enabled bearer , priority 10 [ 304.407904][ T9375] tipc: Disabling bearer [ 304.604411][ T9407] netlink: 'syz.0.910': attribute type 2 has an invalid length. [ 304.605743][ T9408] af_packet: tpacket_rcv: packet too big, clamped from 65491 to 3696. macoff=96 [ 304.616172][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.906'. [ 304.656224][ T9398] syzkaller0: entered promiscuous mode [ 304.676605][ T9398] syzkaller0: entered allmulticast mode [ 305.038570][ T9427] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 306.958207][ T9434] lo speed is unknown, defaulting to 1000 [ 307.002863][ T9436] lo speed is unknown, defaulting to 1000 [ 307.094742][ T9447] netlink: 232 bytes leftover after parsing attributes in process `syz.3.923'. [ 307.166639][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.922'. [ 307.344639][ T9445] netlink: 'syz.2.922': attribute type 8 has an invalid length. [ 307.698430][ T4335] bridge_slave_1: left allmulticast mode [ 307.712393][ T4335] bridge_slave_1: left promiscuous mode [ 307.729605][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.764776][ T4335] bridge_slave_0: left allmulticast mode [ 307.791206][ T4335] bridge_slave_0: left promiscuous mode [ 307.802064][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.090281][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 308.104089][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 308.112514][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.120752][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 308.128909][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 308.218012][ T4335] bond2 (unregistering): (slave erspan0): Releasing active interface [ 308.267543][ T4335] bond1 (unregistering): (slave gretap1): Releasing active interface [ 308.530418][ T9494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.933'. [ 308.547429][ T9494] netlink: 20 bytes leftover after parsing attributes in process `syz.3.933'. [ 308.727850][ T4335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.738612][ T4335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.748743][ T4335] bond0 (unregistering): Released all slaves [ 308.858025][ T4335] bond1 (unregistering): Released all slaves [ 308.968236][ T4335] bond2 (unregistering): Released all slaves [ 308.983483][ T4335] bond3 (unregistering): Released all slaves [ 309.049284][ T9484] gretap1: entered promiscuous mode [ 309.090388][ T9484] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 309.142659][ T9484] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 309.196500][ T9494] geneve3: entered allmulticast mode [ 309.229285][ T4335] tipc: Left network mode [ 309.273983][ T9493] lo speed is unknown, defaulting to 1000 [ 309.308893][ T9473] lo speed is unknown, defaulting to 1000 [ 309.482323][ T9517] netlink: 256 bytes leftover after parsing attributes in process `syz.2.939'. [ 309.692519][ T9525] netlink: 72 bytes leftover after parsing attributes in process `syz.2.941'. [ 309.871355][ T4335] hsr_slave_0: left promiscuous mode [ 309.882117][ T4335] hsr_slave_1: left promiscuous mode [ 309.888547][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.914096][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.216960][ T5843] Bluetooth: hci1: command tx timeout [ 310.347386][ T4335] team0 (unregistering): Port device team_slave_1 removed [ 310.399989][ T4335] team0 (unregistering): Port device team_slave_0 removed [ 310.945189][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'. [ 311.201588][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.949'. [ 311.227165][ T9561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.949'. [ 311.307196][ T9564] netem: unknown loss type 0 [ 311.325310][ T9564] netem: change failed [ 311.352391][ T9564] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 311.381561][ T9473] chnl_net:caif_netlink_parms(): no params data found [ 311.645220][ T4335] IPVS: stop unused estimator thread 0... [ 311.807823][ T9473] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.831716][ T9473] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.839045][ T9473] bridge_slave_0: entered allmulticast mode [ 311.853958][ T9590] No such timeout policy "syz1" [ 311.853958][ T9473] bridge_slave_0: entered promiscuous mode [ 311.866713][ T9473] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.874901][ T9570] netlink: 28 bytes leftover after parsing attributes in process `syz.3.952'. [ 311.885052][ T9473] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.892600][ T9473] bridge_slave_1: entered allmulticast mode [ 311.899689][ T9594] netlink: 56 bytes leftover after parsing attributes in process `syz.1.957'. [ 311.937924][ T9473] bridge_slave_1: entered promiscuous mode [ 312.000772][ T9597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.958'. [ 312.030737][ T9473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.048639][ T9473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.164329][ T9473] team0: Port device team_slave_0 added [ 312.183340][ T9599] vlan0: entered allmulticast mode [ 312.195735][ T9473] team0: Port device team_slave_1 added [ 312.278838][ T9473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.287031][ T9473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.314282][ T5843] Bluetooth: hci1: command tx timeout [ 312.321669][ T9473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.331380][ T9605] netlink: 'syz.4.959': attribute type 1 has an invalid length. [ 312.337483][ T9473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.347659][ T9473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.375744][ T9473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.437656][ T9605] bond3: entered promiscuous mode [ 312.444010][ T9605] 8021q: adding VLAN 0 to HW filter on device bond3 [ 312.572473][ T9611] netlink: 'syz.3.962': attribute type 4 has an invalid length. [ 312.588293][ T9473] hsr_slave_0: entered promiscuous mode [ 312.620932][ T9473] hsr_slave_1: entered promiscuous mode [ 312.627910][ T9473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.643443][ T9473] Cannot create hsr debugfs directory [ 312.874257][ T9621] netlink: 'syz.4.964': attribute type 1 has an invalid length. [ 312.904430][ T9621] NCSI netlink: No device for ifindex 0 [ 313.770379][ T9473] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 313.782677][ T9664] __nla_validate_parse: 5 callbacks suppressed [ 313.782698][ T9664] netlink: 16 bytes leftover after parsing attributes in process `syz.2.981'. [ 313.811950][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.981'. [ 313.812352][ T9473] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 313.916225][ T9473] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 313.941913][ T9667] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 313.958854][ T9473] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 313.968464][ T9666] Bluetooth: MGMT ver 1.23 [ 314.027544][ T9669] netlink: 80 bytes leftover after parsing attributes in process `syz.3.982'. [ 314.171050][ T9473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.234543][ T9473] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.265051][ T7538] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.272315][ T7538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.310590][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.317885][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.371610][ T5843] Bluetooth: hci1: command tx timeout [ 314.477624][ T9693] netlink: 'syz.3.984': attribute type 1 has an invalid length. [ 314.617707][ T9699] netlink: 'syz.1.987': attribute type 11 has an invalid length. [ 314.628147][ T9695] bond4: (slave gretap1): making interface the new active one [ 314.653912][ T9695] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 314.919946][ T9713] netlink: 44 bytes leftover after parsing attributes in process `syz.1.992'. [ 314.947508][ T9713] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (64) [ 314.977211][ T9473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.078353][ T9718] netlink: 'syz.4.993': attribute type 2 has an invalid length. [ 315.085607][ T9719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.994'. [ 315.126714][ T9473] veth0_vlan: entered promiscuous mode [ 315.134090][ T9718] netlink: 'syz.4.993': attribute type 8 has an invalid length. [ 315.151807][ T9718] netlink: 132 bytes leftover after parsing attributes in process `syz.4.993'. [ 315.188845][ T9473] veth1_vlan: entered promiscuous mode [ 315.261039][ T9723] netlink: 68 bytes leftover after parsing attributes in process `syz.3.995'. [ 315.284558][ T9473] veth0_macvtap: entered promiscuous mode [ 315.339147][ T9473] veth1_macvtap: entered promiscuous mode [ 315.399192][ T9473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.415194][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.997'. [ 315.436619][ T9473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.466288][ T9473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.491885][ T9473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.519714][ T9473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.538222][ T9473] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.605516][ T9729] macvtap1: entered promiscuous mode [ 315.640677][ T9729] team0: entered promiscuous mode [ 315.652416][ T9729] macvtap1: entered allmulticast mode [ 315.670249][ T9729] team0: entered allmulticast mode [ 315.676761][ T9729] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 315.761737][ T9732] team0: left allmulticast mode [ 315.766744][ T9732] team0: left promiscuous mode [ 316.264374][ T7536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.281912][ T7536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.413912][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.436447][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.452219][ T5843] Bluetooth: hci1: command tx timeout [ 316.577384][ T9764] lo speed is unknown, defaulting to 1000 [ 316.882047][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 317.248235][ T9786] netlink: 'syz.2.1013': attribute type 1 has an invalid length. [ 317.273257][ T9786] netlink: 'syz.2.1013': attribute type 1 has an invalid length. [ 317.289176][ T9786] netlink: 'syz.2.1013': attribute type 1 has an invalid length. [ 317.488995][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.077034][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.089661][ T9803] sctp: [Deprecated]: syz.3.1020 (pid 9803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.089661][ T9803] Use struct sctp_sack_info instead [ 318.159543][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'. [ 318.349565][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.423006][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.432430][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.448534][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.456940][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.491019][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.540190][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.636034][ T9810] lo speed is unknown, defaulting to 1000 [ 318.727074][ T9816] netlink: 'syz.1.1023': attribute type 12 has an invalid length. [ 318.844544][ T9821] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1025'. [ 319.013944][ T9823] netlink: 'syz.1.1026': attribute type 4 has an invalid length. [ 319.079343][ T9823] netlink: 'syz.1.1026': attribute type 4 has an invalid length. [ 319.123101][ T36] bridge_slave_1: left allmulticast mode [ 319.128814][ T36] bridge_slave_1: left promiscuous mode [ 319.135322][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.180320][ T36] bridge_slave_0: left allmulticast mode [ 319.187546][ T36] bridge_slave_0: left promiscuous mode [ 319.201659][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.618512][ T5856] Bluetooth: hci1: command tx timeout [ 320.753388][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.769000][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.780586][ T36] bond0 (unregistering): Released all slaves [ 320.809418][ T9827] lo speed is unknown, defaulting to 1000 [ 320.917493][ T9810] chnl_net:caif_netlink_parms(): no params data found [ 321.375065][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'. [ 321.421561][ T36] hsr_slave_0: left promiscuous mode [ 321.429257][ T9725] Set syz1 is full, maxelem 65536 reached [ 321.438051][ T9852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'. [ 321.448473][ T36] hsr_slave_1: left promiscuous mode [ 321.455052][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.463104][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.471918][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.480275][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.520863][ T36] veth1_macvtap: left promiscuous mode [ 321.530495][ T36] veth0_macvtap: left promiscuous mode [ 321.582166][ T36] veth1_vlan: left promiscuous mode [ 321.587713][ T36] veth0_vlan: left promiscuous mode [ 321.608431][ T9875] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1033'. [ 321.704808][ T9876] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.712275][ T9876] IPv6: NLM_F_CREATE should be set when creating new route [ 321.719545][ T9876] IPv6: NLM_F_CREATE should be set when creating new route [ 322.340803][ T36] team0 (unregistering): Port device team_slave_1 removed [ 322.394885][ T36] team0 (unregistering): Port device team_slave_0 removed [ 322.697507][ T5856] Bluetooth: hci1: command tx timeout [ 322.860522][ T9858] !: renamed from dummy0 (while UP) [ 323.012672][ T9810] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.021023][ T9810] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.029105][ T9810] bridge_slave_0: entered allmulticast mode [ 323.053662][ T9810] bridge_slave_0: entered promiscuous mode [ 323.100737][ T9810] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.122178][ T9810] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.129638][ T9810] bridge_slave_1: entered allmulticast mode [ 323.137956][ T9810] bridge_slave_1: entered promiscuous mode [ 323.178851][ T9888] tun0: tun_chr_ioctl cmd 1074025681 [ 323.286879][ T9810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.317241][ T9810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.523841][ T9810] team0: Port device team_slave_0 added [ 323.545574][ T9810] team0: Port device team_slave_1 added [ 323.695026][ T9810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.735053][ T9810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.825427][ T9810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.922534][ T9810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.929550][ T9810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.005807][ T9810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.209693][ T9810] hsr_slave_0: entered promiscuous mode [ 324.233238][ T9810] hsr_slave_1: entered promiscuous mode [ 324.239858][ T9810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.265008][ T9810] Cannot create hsr debugfs directory [ 324.339241][ T9936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1050'. [ 324.572007][ T9944] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 324.615789][ T9941] !: renamed from dummy0 (while UP) [ 324.771779][ T5856] Bluetooth: hci1: command tx timeout [ 324.788036][ T9944] lo speed is unknown, defaulting to 1000 [ 325.245812][ T9970] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1058'. [ 325.334833][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1059'. [ 325.524844][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1062'. [ 325.616225][ T9987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1063'. [ 325.633579][ T9987] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1063'. [ 325.892402][ T9986] lo speed is unknown, defaulting to 1000 [ 325.930219][ T9997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1067'. [ 325.968422][ T9810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 325.985046][ T9810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 326.043207][ T9810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 326.128380][ T9810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 326.218486][T10004] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20002 [ 326.281369][T10013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.671978][ T9810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.676193][T10030] FAULT_INJECTION: forcing a failure. [ 326.676193][T10030] name failslab, interval 1, probability 0, space 0, times 0 [ 326.692157][T10030] CPU: 0 UID: 0 PID: 10030 Comm: syz.2.1075 Not tainted 6.16.0-rc1-syzkaller-00227-g8909f5f4ecd5 #0 PREEMPT(full) [ 326.692188][T10030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 326.692211][T10030] Call Trace: [ 326.692220][T10030] [ 326.692229][T10030] dump_stack_lvl+0x189/0x250 [ 326.692268][T10030] ? __pfx____ratelimit+0x10/0x10 [ 326.692301][T10030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.692339][T10030] ? __pfx__printk+0x10/0x10 [ 326.692369][T10030] ? __pfx___might_resched+0x10/0x10 [ 326.692401][T10030] ? fs_reclaim_acquire+0x7d/0x100 [ 326.692438][T10030] should_fail_ex+0x414/0x560 [ 326.692477][T10030] should_failslab+0xa8/0x100 [ 326.692503][T10030] __kmalloc_noprof+0xcb/0x4f0 [ 326.692523][T10030] ? nf_tables_newrule+0x1506/0x2890 [ 326.692550][T10030] ? nla_strcmp+0x106/0x140 [ 326.692584][T10030] nf_tables_newrule+0x1506/0x2890 [ 326.692632][T10030] ? __pfx_nf_tables_newrule+0x10/0x10 [ 326.692662][T10030] ? nfnl_pernet+0x23/0x240 [ 326.692704][T10030] ? __nla_parse+0x40/0x60 [ 326.692740][T10030] nfnetlink_rcv+0x1132/0x2520 [ 326.692810][T10030] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 326.692862][T10030] ? ref_tracker_free+0x63a/0x7d0 [ 326.692927][T10030] ? __netlink_deliver_tap+0x807/0x850 [ 326.692971][T10030] ? netlink_deliver_tap+0x2e/0x1b0 [ 326.692994][T10030] ? netlink_deliver_tap+0x2e/0x1b0 [ 326.693024][T10030] netlink_unicast+0x758/0x8d0 [ 326.693058][T10030] netlink_sendmsg+0x805/0xb30 [ 326.693095][T10030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.693123][T10030] ? aa_sock_msg_perm+0x94/0x160 [ 326.693153][T10030] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 326.693180][T10030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.693206][T10030] __sock_sendmsg+0x219/0x270 [ 326.693244][T10030] ____sys_sendmsg+0x505/0x830 [ 326.693276][T10030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.693314][T10030] ? import_iovec+0x74/0xa0 [ 326.693340][T10030] ___sys_sendmsg+0x21f/0x2a0 [ 326.693371][T10030] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.693439][T10030] ? __fget_files+0x2a/0x420 [ 326.693461][T10030] ? __fget_files+0x3a0/0x420 [ 326.693497][T10030] __x64_sys_sendmsg+0x19b/0x260 [ 326.693529][T10030] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 326.693568][T10030] ? __pfx_ksys_write+0x10/0x10 [ 326.693586][T10030] ? rcu_is_watching+0x15/0xb0 [ 326.693625][T10030] ? do_syscall_64+0xbe/0x3b0 [ 326.693651][T10030] do_syscall_64+0xfa/0x3b0 [ 326.693669][T10030] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.693699][T10030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.693721][T10030] ? clear_bhb_loop+0x60/0xb0 [ 326.693747][T10030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.693767][T10030] RIP: 0033:0x7ff0f4d8e929 [ 326.693787][T10030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.693804][T10030] RSP: 002b:00007ff0f5c0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.693826][T10030] RAX: ffffffffffffffda RBX: 00007ff0f4fb5fa0 RCX: 00007ff0f4d8e929 [ 326.693842][T10030] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 326.693855][T10030] RBP: 00007ff0f5c0e090 R08: 0000000000000000 R09: 0000000000000000 [ 326.693868][T10030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.693880][T10030] R13: 0000000000000000 R14: 00007ff0f4fb5fa0 R15: 00007ffcd0212798 [ 326.693916][T10030] [ 327.035482][ T5856] Bluetooth: hci1: command tx timeout [ 327.054332][ T9810] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.102557][ T9810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 327.113451][ T9810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.146783][ T7536] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.154102][ T7536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.274213][ T7536] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.281492][ T7536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.480194][ T9810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.666742][ T9810] veth0_vlan: entered promiscuous mode [ 327.703949][ T9810] veth1_vlan: entered promiscuous mode [ 327.795109][ T9810] veth0_macvtap: entered promiscuous mode [ 327.836085][ T9810] veth1_macvtap: entered promiscuous mode [ 327.920957][T10061] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.944785][T10069] netlink: 'syz.3.1084': attribute type 4 has an invalid length. [ 327.958963][T10069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1084'. [ 327.985614][T10070] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1085'. [ 328.016375][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'. [ 328.029474][ T9810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.144841][T10061] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.234750][ T9810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.287519][T10061] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.346036][ T9810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.368462][ T9810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.388063][ T9810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.412399][ T9810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.455096][T10091] xt_TCPMSS: Only works on TCP SYN packets [ 328.476018][T10091] netlink: 'syz.1.1089': attribute type 4 has an invalid length. [ 328.518123][T10061] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.541604][T10092] netlink: 'syz.2.1088': attribute type 142 has an invalid length. [ 328.689048][ T7547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.716442][ T7547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.779544][T10061] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.861688][T10061] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.885752][T10107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.897165][T10061] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.909386][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.919674][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.947781][T10061] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.032708][T10107] netlink: 'syz.3.1094': attribute type 32 has an invalid length. [ 329.045494][T10114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.221646][T10123] netlink: 'syz.1.1099': attribute type 21 has an invalid length. [ 329.443131][T10135] mac80211_hwsim hwsim2 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 329.832580][T10141] netlink: 'syz.4.1103': attribute type 4 has an invalid length. [ 329.950313][ T7547] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.264014][T10165] lo: entered promiscuous mode [ 330.268849][T10165] lo: entered allmulticast mode [ 330.297699][T10165] tunl0: entered promiscuous mode [ 330.308366][T10165] tunl0: entered allmulticast mode [ 330.316492][T10165] gre0: entered promiscuous mode [ 330.324145][T10165] gre0: entered allmulticast mode [ 330.330629][T10165] gretap0: entered promiscuous mode [ 330.368541][T10165] gretap0: entered allmulticast mode [ 330.381043][T10165] erspan0: entered promiscuous mode [ 330.396482][T10165] erspan0: entered allmulticast mode [ 330.417037][T10165] ip_vti0: entered promiscuous mode [ 330.439927][T10165] ip_vti0: entered allmulticast mode [ 330.458279][T10165] ip6_vti0: entered promiscuous mode [ 330.483239][T10165] ip6_vti0: entered allmulticast mode [ 330.537056][T10165] sit0: entered promiscuous mode [ 330.563039][T10165] sit0: entered allmulticast mode [ 330.631392][T10165] ip6tnl0: entered promiscuous mode [ 330.636675][T10165] ip6tnl0: entered allmulticast mode [ 330.688425][T10165] ip6gre0: entered promiscuous mode [ 330.722519][T10165] ip6gre0: entered allmulticast mode [ 330.773574][T10165] ip6gretap0: entered promiscuous mode [ 330.789587][T10165] ip6gretap0: entered allmulticast mode [ 330.802948][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 330.815339][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 330.815636][T10165] bridge0: entered promiscuous mode [ 330.829271][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 330.839403][T10165] bridge0: entered allmulticast mode [ 330.842995][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 330.856380][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 330.881844][T10165] vcan0: entered promiscuous mode [ 330.897269][T10165] vcan0: entered allmulticast mode [ 330.909578][T10165] bond0: entered promiscuous mode [ 330.924096][T10165] bond0: entered allmulticast mode [ 330.966628][T10165] team0: entered promiscuous mode [ 330.982636][T10165] team0: entered allmulticast mode [ 330.990634][T10165] !: entered promiscuous mode [ 331.024318][T10165] !: entered allmulticast mode [ 331.040672][T10165] nlmon0: entered promiscuous mode [ 331.049506][T10165] nlmon0: entered allmulticast mode [ 331.083103][T10165] caif0: entered promiscuous mode [ 331.088217][T10165] caif0: entered allmulticast mode [ 331.114774][T10165] batadv0: entered promiscuous mode [ 331.120739][T10165] batadv0: entered allmulticast mode [ 331.134816][T10165] veth0: entered promiscuous mode [ 331.139923][T10165] veth0: entered allmulticast mode [ 331.164800][T10165] veth1: entered promiscuous mode [ 331.169974][T10165] veth1: entered allmulticast mode [ 331.195523][T10165] wg0: entered promiscuous mode [ 331.200433][T10165] wg0: entered allmulticast mode [ 331.224042][T10165] wg1: entered promiscuous mode [ 331.228980][T10165] wg1: entered allmulticast mode [ 331.255086][T10165] wg2: entered promiscuous mode [ 331.259989][T10165] wg2: entered allmulticast mode [ 331.274116][T10165] veth0_to_bridge: entered promiscuous mode [ 331.280312][T10165] veth0_to_bridge: entered allmulticast mode [ 331.310204][T10165] bridge_slave_0: entered promiscuous mode [ 331.322399][T10165] bridge_slave_0: entered allmulticast mode [ 331.332205][T10165] veth1_to_bridge: entered promiscuous mode [ 331.338186][T10165] veth1_to_bridge: entered allmulticast mode [ 331.363756][T10165] bridge_slave_1: entered promiscuous mode [ 331.369633][T10165] bridge_slave_1: entered allmulticast mode [ 331.391698][T10165] veth0_to_bond: entered promiscuous mode [ 331.400600][T10165] veth0_to_bond: entered allmulticast mode [ 331.423503][T10165] bond_slave_0: entered promiscuous mode [ 331.429264][T10165] bond_slave_0: entered allmulticast mode [ 331.445827][T10165] veth1_to_bond: entered promiscuous mode [ 331.452191][T10165] veth1_to_bond: entered allmulticast mode [ 331.464400][T10165] bond_slave_1: entered promiscuous mode [ 331.470122][T10165] bond_slave_1: entered allmulticast mode [ 331.492538][T10165] veth1_to_team: entered promiscuous mode [ 331.498315][T10165] veth1_to_team: entered allmulticast mode [ 331.521900][T10165] team_slave_1: entered promiscuous mode [ 331.527886][T10165] team_slave_1: entered allmulticast mode [ 331.538819][T10165] veth0_to_batadv: entered promiscuous mode [ 331.558330][T10165] veth0_to_batadv: entered allmulticast mode [ 331.583463][T10165] batadv_slave_0: entered promiscuous mode [ 331.611041][T10165] batadv_slave_0: entered allmulticast mode [ 331.627451][T10165] veth1_to_batadv: entered promiscuous mode [ 331.633724][T10165] veth1_to_batadv: entered allmulticast mode [ 331.652861][T10165] batadv_slave_1: entered promiscuous mode [ 331.665987][T10165] batadv_slave_1: entered allmulticast mode [ 331.682601][T10165] xfrm0: entered promiscuous mode [ 331.687995][T10165] xfrm0: entered allmulticast mode [ 331.701975][T10165] veth0_to_hsr: entered promiscuous mode [ 331.707704][T10165] veth0_to_hsr: entered allmulticast mode [ 331.722930][T10165] hsr_slave_0: entered allmulticast mode [ 331.746337][T10165] veth1_to_hsr: entered promiscuous mode [ 331.753428][T10165] veth1_to_hsr: entered allmulticast mode [ 331.772366][T10165] hsr_slave_1: entered allmulticast mode [ 331.782726][T10165] hsr0: left promiscuous mode [ 331.789701][T10165] hsr0: entered promiscuous mode [ 331.799148][T10165] hsr0: entered allmulticast mode [ 331.814091][T10165] veth1_virt_wifi: entered promiscuous mode [ 331.821571][T10165] veth1_virt_wifi: entered allmulticast mode [ 331.839979][T10165] veth0_virt_wifi: entered promiscuous mode [ 331.847672][T10165] veth0_virt_wifi: entered allmulticast mode [ 331.857757][T10165] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 331.866741][T10165] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 331.878963][T10165] veth1_vlan: entered allmulticast mode [ 331.894643][T10165] veth0_vlan: entered allmulticast mode [ 331.929983][T10165] vlan0: entered promiscuous mode [ 331.936030][T10165] vlan0: entered allmulticast mode [ 331.945414][T10165] vlan1: entered promiscuous mode [ 331.950884][T10165] vlan1: entered allmulticast mode [ 331.957519][T10165] macvlan0: entered promiscuous mode [ 331.967839][T10165] macvlan0: entered allmulticast mode [ 331.984397][T10165] macvlan1: entered promiscuous mode [ 331.989778][T10165] macvlan1: entered allmulticast mode [ 332.011510][T10165] ipvlan0: entered promiscuous mode [ 332.016853][T10165] ipvlan0: entered allmulticast mode [ 332.025810][T10165] ipvlan1: entered promiscuous mode [ 332.031544][T10165] ipvlan1: entered allmulticast mode [ 332.044719][T10165] veth0_macvtap: entered allmulticast mode [ 332.063753][T10165] macvtap0: entered promiscuous mode [ 332.069102][T10165] macvtap0: entered allmulticast mode [ 332.087669][T10165] macsec0: entered promiscuous mode [ 332.105531][T10165] geneve0: entered promiscuous mode [ 332.110968][T10165] geneve0: entered allmulticast mode [ 332.123668][T10165] geneve1: entered promiscuous mode [ 332.128950][T10165] geneve1: entered allmulticast mode [ 332.148933][T10165] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 332.156200][T10165] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 332.177136][T10165] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 332.186651][T10165] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 332.204993][T10165] veth2: entered promiscuous mode [ 332.210108][T10165] veth2: entered allmulticast mode [ 332.217653][T10165] veth3: entered promiscuous mode [ 332.225589][T10165] veth3: entered allmulticast mode [ 332.233862][T10165] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 42416 - 0 [ 332.245319][T10165] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 42416 - 0 [ 332.255819][T10165] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 42416 - 0 [ 332.266087][T10165] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 42416 - 0 [ 332.284099][T10165] ipvlan2: entered promiscuous mode [ 332.296991][T10165] bond1: entered promiscuous mode [ 332.305147][T10165] bond1: entered allmulticast mode [ 332.311769][T10165] bridge1: entered promiscuous mode [ 332.317036][T10165] bridge1: entered allmulticast mode [ 332.327070][T10165] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.336681][T10165] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.345128][T10165] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.355473][T10165] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.367879][T10165] bond2: entered promiscuous mode [ 332.382751][T10165] bond2: entered allmulticast mode [ 332.390276][T10165] : entered allmulticast mode [ 332.396638][T10165] bond3: entered promiscuous mode [ 332.403593][T10165] bond3: entered allmulticast mode [ 332.409080][T10165] netdevsim netdevsim3 eth0: entered promiscuous mode [ 332.416857][T10165] netdevsim netdevsim3 eth0: entered allmulticast mode [ 332.427226][T10165] netdevsim netdevsim3 eth1: entered promiscuous mode [ 332.434932][T10165] netdevsim netdevsim3 eth1: entered allmulticast mode [ 332.444547][T10165] netdevsim netdevsim3 eth2: entered promiscuous mode [ 332.453536][T10165] netdevsim netdevsim3 eth2: entered allmulticast mode [ 332.461482][T10165] netdevsim netdevsim3 eth3: entered promiscuous mode [ 332.468467][T10165] netdevsim netdevsim3 eth3: entered allmulticast mode [ 332.476641][T10165] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 332.485884][T10165] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 332.494492][T10165] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 332.504425][T10165] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 332.513873][T10165] geneve3: entered promiscuous mode [ 332.523040][T10165] bond4: entered promiscuous mode [ 332.528175][T10165] gretap1: entered promiscuous mode [ 332.538726][T10165] bond4: entered allmulticast mode [ 332.547570][T10165] gretap1: entered allmulticast mode [ 332.560789][T10165] syztnl2: entered promiscuous mode [ 332.566203][T10165] syztnl2: entered allmulticast mode [ 332.571724][T10165] mac80211_hwsim hwsim17 wlan2: entered promiscuous mode [ 332.578790][T10165] mac80211_hwsim hwsim17 wlan2: entered allmulticast mode [ 332.587125][T10165] bridge2: entered promiscuous mode [ 332.592549][T10165] bridge2: entered allmulticast mode [ 332.638302][T10178] tipc: Enabling of bearer rejected, failed to enable media [ 332.757792][ T7547] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.848677][T10194] lo speed is unknown, defaulting to 1000 [ 332.932941][ T5843] Bluetooth: hci1: command tx timeout [ 332.956292][ T7547] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.025528][T10199] lo speed is unknown, defaulting to 1000 [ 333.066386][T10215] __nla_validate_parse: 4 callbacks suppressed [ 333.066406][T10215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1119'. [ 333.089790][T10214] netlink: 'syz.3.1120': attribute type 8 has an invalid length. [ 333.188809][ T7547] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.323522][T10224] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.332247][T10224] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.340459][T10224] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.349174][T10224] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.638367][T10240] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 333.646756][T10242] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 333.834500][T10250] FAULT_INJECTION: forcing a failure. [ 333.834500][T10250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.848097][T10250] CPU: 0 UID: 0 PID: 10250 Comm: syz.4.1130 Not tainted 6.16.0-rc1-syzkaller-00227-g8909f5f4ecd5 #0 PREEMPT(full) [ 333.848127][T10250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.848140][T10250] Call Trace: [ 333.848148][T10250] [ 333.848157][T10250] dump_stack_lvl+0x189/0x250 [ 333.848196][T10250] ? __pfx____ratelimit+0x10/0x10 [ 333.848228][T10250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.848271][T10250] ? __pfx__printk+0x10/0x10 [ 333.848295][T10250] ? __might_fault+0xb0/0x130 [ 333.848329][T10250] should_fail_ex+0x414/0x560 [ 333.848361][T10250] _copy_from_user+0x2d/0xb0 [ 333.848383][T10250] ___sys_sendmsg+0x158/0x2a0 [ 333.848414][T10250] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.848483][T10250] ? __fget_files+0x2a/0x420 [ 333.848507][T10250] ? __fget_files+0x3a0/0x420 [ 333.848542][T10250] __x64_sys_sendmsg+0x19b/0x260 [ 333.848574][T10250] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 333.848610][T10250] ? __pfx_ksys_write+0x10/0x10 [ 333.848627][T10250] ? rcu_is_watching+0x15/0xb0 [ 333.848665][T10250] ? do_syscall_64+0xbe/0x3b0 [ 333.848689][T10250] do_syscall_64+0xfa/0x3b0 [ 333.848707][T10250] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.848738][T10250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.848759][T10250] ? clear_bhb_loop+0x60/0xb0 [ 333.848784][T10250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.848804][T10250] RIP: 0033:0x7f8dfcf8e929 [ 333.848823][T10250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.848841][T10250] RSP: 002b:00007f8dfdd24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.848864][T10250] RAX: ffffffffffffffda RBX: 00007f8dfd1b5fa0 RCX: 00007f8dfcf8e929 [ 333.848878][T10250] RDX: 0000000000008000 RSI: 0000200000000440 RDI: 0000000000000003 [ 333.848889][T10250] RBP: 00007f8dfdd24090 R08: 0000000000000000 R09: 0000000000000000 [ 333.848899][T10250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.848908][T10250] R13: 0000000000000000 R14: 00007f8dfd1b5fa0 R15: 00007ffc8efdc238 [ 333.848935][T10250] [ 334.131580][ T7547] bridge_slave_1: left allmulticast mode [ 334.139039][ T7547] bridge_slave_1: left promiscuous mode [ 334.151488][ T7547] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.175936][ T7547] bridge_slave_0: left allmulticast mode [ 334.182068][ T7547] bridge_slave_0: left promiscuous mode [ 334.190956][ T7547] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.780398][ T7547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.804827][ T7547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.806023][T10278] netlink: 'syz.3.1138': attribute type 1 has an invalid length. [ 334.824535][ T7547] bond0 (unregistering): Released all slaves [ 334.826298][T10278] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1138'. [ 334.875004][T10278] netlink: 'syz.3.1138': attribute type 1 has an invalid length. [ 335.014177][ T5843] Bluetooth: hci1: command tx timeout [ 335.066765][T10286] FAULT_INJECTION: forcing a failure. [ 335.066765][T10286] name failslab, interval 1, probability 0, space 0, times 0 [ 335.082844][T10283] wireguard0: entered promiscuous mode [ 335.091425][T10283] wireguard0: entered allmulticast mode [ 335.099257][T10286] CPU: 1 UID: 0 PID: 10286 Comm: syz.2.1142 Not tainted 6.16.0-rc1-syzkaller-00227-g8909f5f4ecd5 #0 PREEMPT(full) [ 335.099290][T10286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 335.099304][T10286] Call Trace: [ 335.099312][T10286] [ 335.099321][T10286] dump_stack_lvl+0x189/0x250 [ 335.099361][T10286] ? __pfx____ratelimit+0x10/0x10 [ 335.099395][T10286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.099429][T10286] ? __pfx__printk+0x10/0x10 [ 335.099458][T10286] ? __pfx___might_resched+0x10/0x10 [ 335.099494][T10286] should_fail_ex+0x414/0x560 [ 335.099525][T10286] should_failslab+0xa8/0x100 [ 335.099551][T10286] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 335.099573][T10286] ? __alloc_skb+0x112/0x2d0 [ 335.099602][T10286] __alloc_skb+0x112/0x2d0 [ 335.099630][T10286] netlink_sendmsg+0x5c6/0xb30 [ 335.099667][T10286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.099697][T10286] ? aa_sock_msg_perm+0x94/0x160 [ 335.099727][T10286] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 335.099754][T10286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.099780][T10286] __sock_sendmsg+0x219/0x270 [ 335.099816][T10286] ____sys_sendmsg+0x505/0x830 [ 335.099851][T10286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.099889][T10286] ? import_iovec+0x74/0xa0 [ 335.099926][T10286] ___sys_sendmsg+0x21f/0x2a0 [ 335.099956][T10286] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.100026][T10286] ? __fget_files+0x2a/0x420 [ 335.100049][T10286] ? __fget_files+0x3a0/0x420 [ 335.100084][T10286] __x64_sys_sendmsg+0x19b/0x260 [ 335.100115][T10286] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 335.100154][T10286] ? __pfx_ksys_write+0x10/0x10 [ 335.100170][T10286] ? rcu_is_watching+0x15/0xb0 [ 335.100208][T10286] ? do_syscall_64+0xbe/0x3b0 [ 335.100232][T10286] do_syscall_64+0xfa/0x3b0 [ 335.100249][T10286] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.100279][T10286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.100300][T10286] ? clear_bhb_loop+0x60/0xb0 [ 335.100325][T10286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.100345][T10286] RIP: 0033:0x7ff0f4d8e929 [ 335.100364][T10286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.100381][T10286] RSP: 002b:00007ff0f5c0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.100402][T10286] RAX: ffffffffffffffda RBX: 00007ff0f4fb5fa0 RCX: 00007ff0f4d8e929 [ 335.100419][T10286] RDX: 0000000000008000 RSI: 0000200000000440 RDI: 0000000000000003 [ 335.100433][T10286] RBP: 00007ff0f5c0e090 R08: 0000000000000000 R09: 0000000000000000 [ 335.100446][T10286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.100458][T10286] R13: 0000000000000000 R14: 00007ff0f4fb5fa0 R15: 00007ffcd0212798 [ 335.100492][T10286] [ 335.423157][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1140'. [ 335.478478][T10294] netlink: 26 bytes leftover after parsing attributes in process `syz.2.1143'. [ 335.568210][T10194] chnl_net:caif_netlink_parms(): no params data found [ 335.631849][T10300] tipc: Started in network mode [ 335.661464][T10300] tipc: Node identity ac14140f, cluster identity 4711 [ 335.697089][T10300] tipc: New replicast peer: 255.255.255.255 [ 335.715452][T10300] tipc: Enabled bearer , priority 6 [ 335.889025][T10300] vxcan3: entered allmulticast mode [ 336.125333][T10315] 8021q: adding VLAN 0 to HW filter on device bond3 [ 336.278158][ T7547] hsr_slave_0: left promiscuous mode [ 336.308865][ T7547] hsr_slave_1: left promiscuous mode [ 336.325729][ T7547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.348509][ T7547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.369685][ T7547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.385843][ T7547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.465250][ T7547] veth1_macvtap: left promiscuous mode [ 336.472011][ T7547] veth0_macvtap: left promiscuous mode [ 336.479727][ T7547] veth1_vlan: left promiscuous mode [ 336.486185][ T7547] veth0_vlan: left promiscuous mode [ 336.516529][T10341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.630977][T10347] netlink: 'syz.1.1159': attribute type 5 has an invalid length. [ 336.831936][ T6346] tipc: Node number set to 2886997007 [ 337.101515][ T5843] Bluetooth: hci1: command tx timeout [ 337.166518][ T7547] team0 (unregistering): Port device team_slave_1 removed [ 337.213860][ T7547] team0 (unregistering): Port device team_slave_0 removed [ 337.839104][T10194] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.848056][T10194] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.860160][T10194] bridge_slave_0: entered allmulticast mode [ 337.869393][T10194] bridge_slave_0: entered promiscuous mode [ 337.960504][T10194] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.973498][T10194] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.991394][T10194] bridge_slave_1: entered allmulticast mode [ 337.999334][T10194] bridge_slave_1: entered promiscuous mode [ 338.175239][T10377] FAULT_INJECTION: forcing a failure. [ 338.175239][T10377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.203219][T10377] CPU: 0 UID: 0 PID: 10377 Comm: syz.3.1166 Not tainted 6.16.0-rc1-syzkaller-00227-g8909f5f4ecd5 #0 PREEMPT(full) [ 338.203252][T10377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 338.203266][T10377] Call Trace: [ 338.203274][T10377] [ 338.203283][T10377] dump_stack_lvl+0x189/0x250 [ 338.203322][T10377] ? __pfx____ratelimit+0x10/0x10 [ 338.203355][T10377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.203388][T10377] ? __pfx__printk+0x10/0x10 [ 338.203411][T10377] ? __might_fault+0xb0/0x130 [ 338.203445][T10377] should_fail_ex+0x414/0x560 [ 338.203478][T10377] _copy_from_iter+0x1db/0x16f0 [ 338.203514][T10377] ? rcu_is_watching+0x15/0xb0 [ 338.203549][T10377] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 338.203572][T10377] ? __pfx__copy_from_iter+0x10/0x10 [ 338.203614][T10377] ? __build_skb_around+0x257/0x3e0 [ 338.203643][T10377] ? netlink_sendmsg+0x642/0xb30 [ 338.203666][T10377] ? skb_put+0x11b/0x210 [ 338.203694][T10377] netlink_sendmsg+0x6b2/0xb30 [ 338.203731][T10377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.203760][T10377] ? aa_sock_msg_perm+0x94/0x160 [ 338.203790][T10377] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 338.203817][T10377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.203844][T10377] __sock_sendmsg+0x219/0x270 [ 338.203881][T10377] ____sys_sendmsg+0x505/0x830 [ 338.203915][T10377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.203953][T10377] ? import_iovec+0x74/0xa0 [ 338.203978][T10377] ___sys_sendmsg+0x21f/0x2a0 [ 338.204008][T10377] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.204077][T10377] ? __fget_files+0x2a/0x420 [ 338.204099][T10377] ? __fget_files+0x3a0/0x420 [ 338.204135][T10377] __x64_sys_sendmsg+0x19b/0x260 [ 338.204166][T10377] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 338.204209][T10377] ? __pfx_ksys_write+0x10/0x10 [ 338.204226][T10377] ? rcu_is_watching+0x15/0xb0 [ 338.204264][T10377] ? do_syscall_64+0xbe/0x3b0 [ 338.204288][T10377] do_syscall_64+0xfa/0x3b0 [ 338.204306][T10377] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.204336][T10377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.204357][T10377] ? clear_bhb_loop+0x60/0xb0 [ 338.204384][T10377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.204404][T10377] RIP: 0033:0x7f4a8058e929 [ 338.204424][T10377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.204442][T10377] RSP: 002b:00007f4a81325038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.204465][T10377] RAX: ffffffffffffffda RBX: 00007f4a807b5fa0 RCX: 00007f4a8058e929 [ 338.204480][T10377] RDX: 0000000000008000 RSI: 0000200000000440 RDI: 0000000000000003 [ 338.204494][T10377] RBP: 00007f4a81325090 R08: 0000000000000000 R09: 0000000000000000 [ 338.204506][T10377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.204519][T10377] R13: 0000000000000000 R14: 00007f4a807b5fa0 R15: 00007ffc91aedfb8 [ 338.204553][T10377] [ 338.533279][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'. [ 338.606115][T10194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.620375][T10380] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 338.647272][T10194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.713978][T10392] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1170'. [ 338.768664][T10389] syzkaller0: create flow: hash 133672646 index 1 [ 338.856254][T10392] netlink: 'syz.3.1170': attribute type 5 has an invalid length. [ 339.017879][T10406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1174'. [ 339.050690][ T1107] syzkaller0: tun_net_xmit 76 [ 339.064889][ T1107] syzkaller0: tun_net_xmit 48 [ 339.083466][ T6346] syzkaller0: tun_net_xmit 76 [ 339.103178][ T6346] syzkaller0: tun_net_xmit 76 [ 339.121856][ T6346] syzkaller0: tun_net_xmit 76 [ 339.140306][T10384] syzkaller0: delete flow: hash 133672646 index 1 [ 339.171972][ T5843] Bluetooth: hci1: command tx timeout [ 339.648143][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1178'. [ 339.842680][ T30] audit: type=1800 audit(1750041645.429:7): pid=10421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1178" name="cgroup.controllers" dev="tmpfs" ino=1310 res=0 errno=0 [ 340.898647][T10405] pimreg: entered allmulticast mode [ 340.904635][T10408] pimreg: left allmulticast mode [ 340.938523][T10194] team0: Port device team_slave_0 added [ 340.960665][T10194] team0: Port device team_slave_1 added [ 340.967566][T10414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1177'. [ 341.143923][T10194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.164292][T10194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.200391][T10194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.214018][T10194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.221020][T10194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.254007][T10194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.379583][T10194] hsr_slave_0: entered promiscuous mode [ 341.382504][T10440] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1185'. [ 341.387212][T10194] hsr_slave_1: entered promiscuous mode [ 341.398448][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1185'. [ 341.406561][T10194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.419966][T10194] Cannot create hsr debugfs directory [ 341.926730][T10451] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1189'. [ 342.123502][T10455] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1190'. [ 342.148084][T10455] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1190'. [ 342.163560][T10194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 342.198808][T10461] xt_TCPMSS: Only works on TCP SYN packets [ 342.317491][T10194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 342.379882][T10194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 342.434114][T10461] lo speed is unknown, defaulting to 1000 [ 342.434784][T10194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 342.652955][T10479] 8021q: adding VLAN 0 to HW filter on device bond4 [ 342.660847][T10479] bridge0: port 1(bond4) entered blocking state [ 342.667845][T10479] bridge0: port 1(bond4) entered disabled state [ 342.674514][T10479] bond4: entered allmulticast mode [ 342.682737][T10479] bond4: entered promiscuous mode [ 342.693802][T10479] bridge0: port 1(bond4) entered blocking state [ 342.700466][T10479] bridge0: port 1(bond4) entered forwarding state [ 342.787320][ T1107] bridge0: port 1(bond4) entered disabled state [ 343.104060][T10194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.156904][T10194] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.177903][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.185152][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.206311][ T7553] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.213547][ T7553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.872273][T10520] __nla_validate_parse: 1 callbacks suppressed [ 343.872294][T10520] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1206'. [ 343.945713][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1205'. [ 344.294396][T10544] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1208'. [ 344.364228][T10546] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.373441][T10194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.449987][T10550] IPv6: sit1: Disabled Multicast RS [ 344.545908][T10194] veth0_vlan: entered promiscuous mode [ 344.570041][T10194] veth1_vlan: entered promiscuous mode [ 344.690930][T10194] veth0_macvtap: entered promiscuous mode [ 344.719455][T10194] veth1_macvtap: entered promiscuous mode [ 344.772424][T10194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.812270][T10194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.873324][T10194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.911547][T10194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.920313][T10194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.934076][T10194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.079220][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.094628][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.136283][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.146705][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.319122][T10576] lo speed is unknown, defaulting to 1000 [ 345.391864][ T6357] IPVS: starting estimator thread 0... [ 345.502825][T10580] IPVS: using max 34 ests per chain, 81600 per kthread [ 345.592957][T10588] netlink: 'syz.2.1224': attribute type 11 has an invalid length. [ 345.600813][T10588] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1224'. [ 345.770868][T10588] bridge0: entered promiscuous mode [ 345.782731][T10588] macvlan3: entered promiscuous mode [ 345.803237][T10588] bridge0: port 1(macvlan3) entered blocking state [ 345.810267][T10588] bridge0: port 1(macvlan3) entered disabled state [ 345.819428][T10588] macvlan3: entered allmulticast mode [ 345.825252][T10588] bridge0: entered allmulticast mode [ 345.842220][T10588] macvlan3: left allmulticast mode [ 345.847596][T10588] bridge0: left allmulticast mode [ 345.856536][T10588] bridge0: left promiscuous mode [ 345.957358][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1228'. [ 346.215784][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.238973][T10612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1229'. [ 346.345193][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'. [ 346.445555][T10623] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1231'. [ 346.469820][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1231'. [ 346.575188][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.733803][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.803340][T10616] lo speed is unknown, defaulting to 1000 [ 347.092899][T10634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1235'. [ 347.368139][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.517943][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 347.536268][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 347.545415][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 347.558647][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 347.580275][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 347.760521][T10647] lo speed is unknown, defaulting to 1000 [ 347.780320][ T36] bridge_slave_1: left allmulticast mode [ 347.797778][ T36] bridge_slave_1: left promiscuous mode [ 347.810041][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.832910][ T36] bridge_slave_0: left allmulticast mode [ 347.851497][ T36] bridge_slave_0: left promiscuous mode [ 347.857345][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.596520][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.610003][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.624834][ T36] bond0 (unregistering): Released all slaves [ 348.650991][T10664] tc_dump_action: action bad kind [ 348.667307][T10673] ip6gre1: entered allmulticast mode [ 348.683495][T10676] netlink: 'syz.3.1245': attribute type 12 has an invalid length. [ 348.801168][ T7547] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 348.910304][T10701] __nla_validate_parse: 5 callbacks suppressed [ 348.910324][T10701] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1252'. [ 348.930620][T10701] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1252'. [ 348.940766][T10701] netlink: 'syz.4.1252': attribute type 5 has an invalid length. [ 348.971659][T10701] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1252'. [ 349.006792][T10706] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20002 [ 349.328769][T10717] sctp: [Deprecated]: syz.1.1255 (pid 10717) Use of int in maxseg socket option. [ 349.328769][T10717] Use struct sctp_assoc_value instead [ 349.354207][T10717] sctp: [Deprecated]: syz.1.1255 (pid 10717) Use of int in max_burst socket option. [ 349.354207][T10717] Use struct sctp_assoc_value instead [ 349.501757][ T36] hsr_slave_0: left promiscuous mode [ 349.523055][ T36] hsr_slave_1: left promiscuous mode [ 349.545518][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.564654][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.580690][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.591976][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.613983][T10734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1259'. [ 349.644684][ T36] veth1_macvtap: left promiscuous mode [ 349.652524][ T5843] Bluetooth: hci1: command tx timeout [ 349.660530][ T36] veth0_macvtap: left promiscuous mode [ 349.670741][T10736] netlink: 'syz.4.1258': attribute type 1 has an invalid length. [ 349.695014][ T36] veth1_vlan: left promiscuous mode [ 349.700396][ T36] veth0_vlan: left promiscuous mode [ 349.823550][T10743] FAULT_INJECTION: forcing a failure. [ 349.823550][T10743] name failslab, interval 1, probability 0, space 0, times 0 [ 349.841161][T10743] CPU: 0 UID: 0 PID: 10743 Comm: syz.2.1262 Not tainted 6.16.0-rc1-syzkaller-00227-g8909f5f4ecd5 #0 PREEMPT(full) [ 349.841198][T10743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 349.841213][T10743] Call Trace: [ 349.841222][T10743] [ 349.841234][T10743] dump_stack_lvl+0x189/0x250 [ 349.841277][T10743] ? __pfx____ratelimit+0x10/0x10 [ 349.841314][T10743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.841352][T10743] ? __pfx__printk+0x10/0x10 [ 349.841399][T10743] should_fail_ex+0x414/0x560 [ 349.841437][T10743] should_failslab+0xa8/0x100 [ 349.841466][T10743] kmem_cache_alloc_noprof+0x73/0x3c0 [ 349.841503][T10743] ? skb_clone+0x212/0x3a0 [ 349.841541][T10743] skb_clone+0x212/0x3a0 [ 349.841580][T10743] __netlink_deliver_tap+0x404/0x850 [ 349.841627][T10743] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.841658][T10743] netlink_deliver_tap+0x19c/0x1b0 [ 349.841689][T10743] netlink_sendskb+0x68/0x140 [ 349.841717][T10743] netlink_rcv_skb+0x28c/0x470 [ 349.841760][T10743] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 349.841801][T10743] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.841855][T10743] ? bpf_lsm_capable+0x9/0x20 [ 349.841877][T10743] ? security_capable+0x7e/0x2e0 [ 349.841920][T10743] nfnetlink_rcv+0x26a/0x2520 [ 349.841963][T10743] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 349.842005][T10743] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 349.842047][T10743] ? __dev_queue_xmit+0x27e/0x3a70 [ 349.842082][T10743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.842120][T10743] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 349.842164][T10743] ? __pfx___dev_queue_xmit+0x10/0x10 [ 349.842216][T10743] ? ref_tracker_free+0x63a/0x7d0 [ 349.842246][T10743] ? __copy_skb_header+0xa7/0x550 [ 349.842281][T10743] ? __pfx_ref_tracker_free+0x10/0x10 [ 349.842312][T10743] ? __skb_clone+0x63/0x7a0 [ 349.842349][T10743] ? __skb_clone+0x483/0x7a0 [ 349.842389][T10743] ? skb_clone+0x246/0x3a0 [ 349.842424][T10743] ? __netlink_deliver_tap+0x807/0x850 [ 349.842449][T10743] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.842484][T10743] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.842508][T10743] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.842538][T10743] netlink_unicast+0x758/0x8d0 [ 349.842574][T10743] netlink_sendmsg+0x805/0xb30 [ 349.842615][T10743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.842650][T10743] ? aa_sock_msg_perm+0x94/0x160 [ 349.842684][T10743] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 349.842715][T10743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.842784][T10743] __sock_sendmsg+0x219/0x270 [ 349.842829][T10743] ____sys_sendmsg+0x505/0x830 [ 349.842867][T10743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.842910][T10743] ? import_iovec+0x74/0xa0 [ 349.842939][T10743] ___sys_sendmsg+0x21f/0x2a0 [ 349.842974][T10743] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.843054][T10743] ? __fget_files+0x2a/0x420 [ 349.843079][T10743] ? __fget_files+0x3a0/0x420 [ 349.843120][T10743] __x64_sys_sendmsg+0x19b/0x260 [ 349.843156][T10743] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.843201][T10743] ? __pfx_ksys_write+0x10/0x10 [ 349.843219][T10743] ? rcu_is_watching+0x15/0xb0 [ 349.843262][T10743] ? do_syscall_64+0xbe/0x3b0 [ 349.843291][T10743] do_syscall_64+0xfa/0x3b0 [ 349.843311][T10743] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.843347][T10743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.843370][T10743] ? clear_bhb_loop+0x60/0xb0 [ 349.843400][T10743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.843424][T10743] RIP: 0033:0x7ff0f4d8e929 [ 349.843447][T10743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.843468][T10743] RSP: 002b:00007ff0f5c0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.843493][T10743] RAX: ffffffffffffffda RBX: 00007ff0f4fb5fa0 RCX: 00007ff0f4d8e929 [ 349.843511][T10743] RDX: 0000000000008000 RSI: 0000200000000440 RDI: 0000000000000003 [ 349.843526][T10743] RBP: 00007ff0f5c0e090 R08: 0000000000000000 R09: 0000000000000000 [ 349.843542][T10743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.843555][T10743] R13: 0000000000000000 R14: 00007ff0f4fb5fa0 R15: 00007ffcd0212798 [ 349.843595][T10743] [ 350.276496][T10746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1261'. [ 350.366356][T10749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1263'. [ 350.732920][ T36] team0 (unregistering): Port device team_slave_1 removed [ 350.778296][ T36] team0 (unregistering): Port device team_slave_0 removed [ 351.226040][T10735] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1258'. [ 351.247437][T10734] ip6gre1: entered allmulticast mode [ 351.440726][T10647] chnl_net:caif_netlink_parms(): no params data found [ 351.495368][T10757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1265'. [ 351.577517][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1265'. [ 351.592448][T10757] netlink: 'syz.1.1265': attribute type 13 has an invalid length. [ 351.668575][T10647] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.685206][T10647] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.703881][T10647] bridge_slave_0: entered allmulticast mode [ 351.728710][T10647] bridge_slave_0: entered promiscuous mode [ 351.735731][ T5843] Bluetooth: hci1: command tx timeout [ 351.752764][T10647] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.764983][T10647] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.804507][T10647] bridge_slave_1: entered allmulticast mode [ 351.818457][T10647] bridge_slave_1: entered promiscuous mode [ 351.828082][T10769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1268'. [ 352.154791][T10795] FAULT_INJECTION: forcing a failure. [ 352.154791][T10795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.175162][T10778] macvtap1: entered promiscuous mode [ 352.180526][T10778] syz_tun: entered promiscuous mode [ 352.190956][T10795] CPU: 0 UID: 0 PID: 10795 Comm: syz.4.1273 Not tainted 6.16.0-rc1-syzkaller-00227-g8909f5f4ecd5 #0 PREEMPT(full) [ 352.190989][T10795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 352.191003][T10795] Call Trace: [ 352.191011][T10795] [ 352.191021][T10795] dump_stack_lvl+0x189/0x250 [ 352.191066][T10795] ? __pfx____ratelimit+0x10/0x10 [ 352.191099][T10795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.191132][T10795] ? __pfx__printk+0x10/0x10 [ 352.191172][T10795] should_fail_ex+0x414/0x560 [ 352.191206][T10795] _copy_to_user+0x31/0xb0 [ 352.191231][T10795] simple_read_from_buffer+0xe1/0x170 [ 352.191260][T10795] proc_fail_nth_read+0x1df/0x250 [ 352.191290][T10795] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 352.191321][T10795] ? rw_verify_area+0x258/0x650 [ 352.191353][T10795] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 352.191381][T10795] vfs_read+0x200/0x980 [ 352.191421][T10795] ? __pfx___mutex_lock+0x10/0x10 [ 352.191443][T10795] ? __pfx_vfs_read+0x10/0x10 [ 352.191477][T10795] ? __fget_files+0x2a/0x420 [ 352.191506][T10795] ? __fget_files+0x3a0/0x420 [ 352.191528][T10795] ? __fget_files+0x2a/0x420 [ 352.191564][T10795] ksys_read+0x145/0x250 [ 352.191608][T10795] ? __pfx_ksys_read+0x10/0x10 [ 352.191639][T10795] ? rcu_is_watching+0x15/0xb0 [ 352.191679][T10795] ? do_syscall_64+0xbe/0x3b0 [ 352.191705][T10795] do_syscall_64+0xfa/0x3b0 [ 352.191724][T10795] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.191756][T10795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.191777][T10795] ? clear_bhb_loop+0x60/0xb0 [ 352.191804][T10795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.191826][T10795] RIP: 0033:0x7f8dfcf8d33c [ 352.191845][T10795] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 352.191864][T10795] RSP: 002b:00007f8dfdd24030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 352.191888][T10795] RAX: ffffffffffffffda RBX: 00007f8dfd1b5fa0 RCX: 00007f8dfcf8d33c [ 352.191904][T10795] RDX: 000000000000000f RSI: 00007f8dfdd240a0 RDI: 0000000000000004 [ 352.191917][T10795] RBP: 00007f8dfdd24090 R08: 0000000000000000 R09: 0000000000000000 [ 352.191930][T10795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 352.191943][T10795] R13: 0000000000000000 R14: 00007f8dfd1b5fa0 R15: 00007ffc8efdc238 [ 352.191978][T10795] [ 352.221606][T10778] macvtap1: entered allmulticast mode [ 352.452086][T10778] syz_tun: entered allmulticast mode [ 352.462765][T10798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.475145][T10647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.513728][T10647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.625860][T10647] team0: Port device team_slave_0 added [ 352.644507][T10647] team0: Port device team_slave_1 added [ 352.691255][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 352.719457][T10647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.727549][T10647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.760114][T10647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.869374][T10647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.880752][T10647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.908869][T10647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.985532][T10825] sch_fq: defrate 4294967295 ignored. [ 353.165959][T10647] hsr_slave_0: entered promiscuous mode [ 353.179761][T10647] hsr_slave_1: entered promiscuous mode [ 353.196000][ T30] audit: type=1800 audit(1750041658.779:8): pid=10834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1284" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1464 res=0 errno=0 [ 353.221986][T10647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.229598][T10647] Cannot create hsr debugfs directory [ 353.271185][ T30] audit: type=1800 audit(1750041658.779:9): pid=10834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1284" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1464 res=0 errno=0 [ 353.811343][ T5843] Bluetooth: hci1: command tx timeout [ 354.064092][T10859] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.078047][T10859] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.094598][T10860] __nla_validate_parse: 4 callbacks suppressed [ 354.094618][T10860] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1291'. [ 354.170081][T10859] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.180445][T10859] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.205616][T10864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1292'. [ 354.236233][T10864] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1292'. [ 354.256789][T10647] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 354.259624][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1292'. [ 354.286298][T10859] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.299800][T10859] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.330873][T10864] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 354.361461][T10647] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 354.392555][T10647] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 354.421539][T10859] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.431547][T10859] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.449411][T10647] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 354.467820][T10868] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1294'. [ 354.568183][T10877] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 354.659783][T10859] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.693184][T10859] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.759290][T10859] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.801954][T10859] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.886142][T10859] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.910362][T10859] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.966563][T10859] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.976056][T10859] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.017861][T10647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.085935][T10894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1300'. [ 355.090231][T10896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1301'. [ 355.097038][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1300'. [ 355.140398][T10647] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.148562][T10898] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1300'. [ 355.152982][T10896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1301'. [ 355.175489][ T7547] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.182709][ T7547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.205071][T10897] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 355.255018][ T7549] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.262382][ T7549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.810608][T10647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.891388][ T5843] Bluetooth: hci1: command tx timeout [ 356.004659][T10647] veth0_vlan: entered promiscuous mode [ 356.034611][T10647] veth1_vlan: entered promiscuous mode [ 356.108751][T10647] veth0_macvtap: entered promiscuous mode [ 356.117218][T10934] bridge: RTM_NEWNEIGH with invalid ether address [ 356.128416][T10647] veth1_macvtap: entered promiscuous mode [ 356.189810][T10647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.226959][T10647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.373768][T10647] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.385414][T10647] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.394761][T10647] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.407010][T10647] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.677077][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.704290][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.757379][ T7547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.769995][ T7547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.810506][T10965] tipc: Started in network mode [ 356.831921][T10965] tipc: Node identity ac14140f, cluster identity 4711 [ 356.861888][T10965] tipc: New replicast peer: 255.255.255.255 [ 356.893358][T10965] tipc: Enabled bearer , priority 6 [ 356.918933][T10966] tipc: Disabling bearer [ 357.159189][T10980] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 357.369208][T10992] netlink: 'syz.3.1325': attribute type 39 has an invalid length. [ 357.569367][T11002] lo speed is unknown, defaulting to 1000 [ 357.775460][ T7547] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.973814][ T36] wlan1: Trigger new scan to find an IBSS to join [ 358.248883][ T7547] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.621831][T11021] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 358.637592][ T7547] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.787498][ T7547] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.884406][T11024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.909968][T11024] team0: Port device batadv0 added [ 359.096791][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 359.106711][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 359.120621][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 359.131930][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 359.143924][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 359.478925][T11036] lo speed is unknown, defaulting to 1000 [ 359.802007][T11054] __nla_validate_parse: 8 callbacks suppressed [ 359.802029][T11054] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1340'. [ 359.848670][T11054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1340'. [ 359.974209][ T7547] bridge_slave_1: left allmulticast mode [ 359.979928][ T7547] bridge_slave_1: left promiscuous mode [ 359.986800][ T7547] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.010863][ T7547] bridge_slave_0: left allmulticast mode [ 360.027120][ T7547] bridge_slave_0: left promiscuous mode [ 360.035588][ T7547] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.224965][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1342'. [ 360.235798][T11059] nbd: must specify at least one socket [ 360.577021][ T7547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.589598][ T7547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.602675][ T7547] bond0 (unregistering): Released all slaves [ 360.639053][T11066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1345'. [ 360.771472][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 360.922645][T11074] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1346'. [ 360.939022][ T36] wlan1: Trigger new scan to find an IBSS to join [ 361.098819][T11036] chnl_net:caif_netlink_parms(): no params data found [ 361.171264][ T5843] Bluetooth: hci1: command tx timeout [ 361.338820][T11084] syz.4.1349 uses old SIOCAX25GETINFO [ 361.385477][ T7547] hsr_slave_0: left promiscuous mode [ 361.404627][ T7547] hsr_slave_1: left promiscuous mode [ 361.426247][ T7547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.448525][ T7547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.532244][ T7547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.541031][ T7547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.595450][ T7547] veth1_macvtap: left promiscuous mode [ 361.622071][ T7547] veth0_macvtap: left promiscuous mode [ 361.634939][ T7547] veth1_vlan: left promiscuous mode [ 361.648805][ T7547] veth0_vlan: left promiscuous mode [ 361.825367][T11102] netlink: 'syz.3.1352': attribute type 1 has an invalid length. [ 361.849078][T11102] netlink: 16138 bytes leftover after parsing attributes in process `syz.3.1352'. [ 362.136919][T11114] netlink: 'syz.2.1355': attribute type 10 has an invalid length. [ 362.402234][ T7547] team0 (unregistering): Port device team_slave_1 removed [ 362.457650][ T7547] team0 (unregistering): Port device team_slave_0 removed [ 363.065193][T11114] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 363.261766][ T5843] Bluetooth: hci1: command tx timeout [ 363.303171][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1363'. [ 363.330078][T11036] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.342376][T11036] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.350755][T11036] bridge_slave_0: entered allmulticast mode [ 363.359071][T11036] bridge_slave_0: entered promiscuous mode [ 363.400777][T11036] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.409072][T11036] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.416538][T11036] bridge_slave_1: entered allmulticast mode [ 363.444173][T11036] bridge_slave_1: entered promiscuous mode [ 363.458983][T11141] vlan2: entered promiscuous mode [ 363.473643][T11141] vlan2: entered allmulticast mode [ 363.622464][T11150] netlink: 'syz.2.1365': attribute type 1 has an invalid length. [ 363.627618][T11036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.717405][T11150] 8021q: adding VLAN 0 to HW filter on device bond4 [ 363.734505][T11036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.836550][T11146] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1365'. [ 363.907587][T11036] team0: Port device team_slave_0 added [ 363.938881][T11036] team0: Port device team_slave_1 added [ 364.015634][T11161] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 364.047473][T11146] gretap1: entered promiscuous mode [ 364.091529][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 364.094852][T11036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.108401][T11036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.138496][T11036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.155628][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 364.232267][T11036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.266168][T11036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.324688][T11176] netlink: 'syz.1.1373': attribute type 21 has an invalid length. [ 364.334028][T11036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.467578][T11176] netlink: 'syz.1.1373': attribute type 6 has an invalid length. [ 364.739867][T11036] hsr_slave_0: entered promiscuous mode [ 364.762838][T11036] hsr_slave_1: entered promiscuous mode [ 364.769716][T11036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.789699][T11036] Cannot create hsr debugfs directory [ 364.802478][T11195] team0: Mode changed to "broadcast" [ 364.912455][T11196] lo speed is unknown, defaulting to 1000 [ 364.962165][T11206] __nla_validate_parse: 4 callbacks suppressed [ 364.962186][T11206] netlink: 186264 bytes leftover after parsing attributes in process `syz.3.1381'. [ 365.252428][T11212] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1384'. [ 365.305227][T11216] netlink: 'syz.3.1384': attribute type 16 has an invalid length. [ 365.323604][T11216] netlink: 'syz.3.1384': attribute type 1 has an invalid length. [ 365.331477][ T5843] Bluetooth: hci1: command tx timeout [ 365.337883][T11216] netlink: 'syz.3.1384': attribute type 2 has an invalid length. [ 365.346136][T11216] netlink: 51254 bytes leftover after parsing attributes in process `syz.3.1384'. [ 365.677586][T11228] netem: incorrect gi model size [ 365.698476][T11237] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1389'. [ 365.723390][T11239] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 365.730145][T11239] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1391'. [ 365.742501][T11237] netlink: 'syz.3.1389': attribute type 83 has an invalid length. [ 365.798689][T11234] lo speed is unknown, defaulting to 1000 [ 366.072323][T11251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1394'. [ 366.203244][T11254] openvswitch: netlink: Actions may not be safe on all matching packets [ 366.419238][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1396'. [ 366.617263][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1396'. [ 366.738334][T11271] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 366.739399][T11036] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 366.775819][T11036] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 366.813152][T11036] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 366.855954][T11036] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 367.164790][T11288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 367.204954][T11036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.277194][T11036] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.302981][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.310180][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.350570][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.357993][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.413049][ T5843] Bluetooth: hci1: command tx timeout [ 367.613819][T11313] tipc: Enabled bearer , priority 0 [ 367.635246][T11317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1414'. [ 367.686196][T11321] [ 367.688587][T11321] ====================================================== [ 367.695626][T11321] WARNING: possible circular locking dependency detected [ 367.702687][T11321] 6.16.0-rc1-syzkaller-00227-g8909f5f4ecd5 #0 Not tainted [ 367.709825][T11321] ------------------------------------------------------ [ 367.716979][T11321] syz.4.1412/11321 is trying to acquire lock: [ 367.723100][T11321] ffffffff8f668718 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 367.732290][T11321] [ 367.732290][T11321] but task is already holding lock: [ 367.739669][T11321] ffff88814bf77770 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 367.748915][T11321] [ 367.748915][T11321] which lock already depends on the new lock. [ 367.748915][T11321] [ 367.759328][T11321] [ 367.759328][T11321] the existing dependency chain (in reverse order) is: [ 367.768350][T11321] [ 367.768350][T11321] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 367.776361][T11321] lock_acquire+0x120/0x360 [ 367.781416][T11321] _raw_spin_lock_bh+0x36/0x50 [ 367.786736][T11321] nr_rt_device_down+0x12a/0x720 [ 367.792222][T11321] nr_device_event+0x137/0x150 [ 367.797541][T11321] notifier_call_chain+0x1b3/0x3e0 [ 367.803203][T11321] dev_close_many+0x29c/0x410 [ 367.808417][T11321] netif_close+0x158/0x210 [ 367.813359][T11321] dev_close+0x10a/0x220 [ 367.818134][T11321] bpq_device_event+0x2f4/0x600 [ 367.823518][T11321] notifier_call_chain+0x1b3/0x3e0 [ 367.829166][T11321] __dev_notify_flags+0x18d/0x2e0 [ 367.834726][T11321] netif_change_flags+0xe8/0x1a0 [ 367.840197][T11321] dev_change_flags+0x130/0x260 [ 367.845580][T11321] dev_ioctl+0x7b4/0x1150 [ 367.850439][T11321] sock_do_ioctl+0x22c/0x300 [ 367.855565][T11321] sock_ioctl+0x576/0x790 [ 367.860429][T11321] __se_sys_ioctl+0xf9/0x170 [ 367.865557][T11321] do_syscall_64+0xfa/0x3b0 [ 367.870591][T11321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.877013][T11321] [ 367.877013][T11321] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 367.884857][T11321] lock_acquire+0x120/0x360 [ 367.889903][T11321] _raw_spin_lock_bh+0x36/0x50 [ 367.895210][T11321] nr_rt_device_down+0xa9/0x720 [ 367.900589][T11321] nr_device_event+0x137/0x150 [ 367.905888][T11321] notifier_call_chain+0x1b3/0x3e0 [ 367.911538][T11321] dev_close_many+0x29c/0x410 [ 367.916743][T11321] netif_close+0x158/0x210 [ 367.921688][T11321] dev_close+0x10a/0x220 [ 367.926460][T11321] bpq_device_event+0x2f4/0x600 [ 367.931840][T11321] notifier_call_chain+0x1b3/0x3e0 [ 367.937486][T11321] __dev_notify_flags+0x18d/0x2e0 [ 367.943051][T11321] netif_change_flags+0xe8/0x1a0 [ 367.948532][T11321] dev_change_flags+0x130/0x260 [ 367.953998][T11321] dev_ioctl+0x7b4/0x1150 [ 367.958860][T11321] sock_do_ioctl+0x22c/0x300 [ 367.963988][T11321] sock_ioctl+0x576/0x790 [ 367.968861][T11321] __se_sys_ioctl+0xf9/0x170 [ 367.973985][T11321] do_syscall_64+0xfa/0x3b0 [ 367.979029][T11321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.985461][T11321] [ 367.985461][T11321] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 367.993405][T11321] validate_chain+0xb9b/0x2140 [ 367.998698][T11321] __lock_acquire+0xab9/0xd20 [ 368.003914][T11321] lock_acquire+0x120/0x360 [ 368.008954][T11321] _raw_spin_lock_bh+0x36/0x50 [ 368.014346][T11321] nr_rt_ioctl+0x390/0xd50 [ 368.019309][T11321] sock_do_ioctl+0xd9/0x300 [ 368.024354][T11321] sock_ioctl+0x576/0x790 [ 368.029217][T11321] __se_sys_ioctl+0xf9/0x170 [ 368.034347][T11321] do_syscall_64+0xfa/0x3b0 [ 368.039381][T11321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.046070][T11321] [ 368.046070][T11321] other info that might help us debug this: [ 368.046070][T11321] [ 368.056310][T11321] Chain exists of: [ 368.056310][T11321] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 368.056310][T11321] [ 368.070151][T11321] Possible unsafe locking scenario: [ 368.070151][T11321] [ 368.077612][T11321] CPU0 CPU1 [ 368.082980][T11321] ---- ---- [ 368.088353][T11321] lock(&nr_node->node_lock); [ 368.093131][T11321] lock(nr_node_list_lock); [ 368.100257][T11321] lock(&nr_node->node_lock); [ 368.107552][T11321] lock(nr_neigh_list_lock); [ 368.112240][T11321] [ 368.112240][T11321] *** DEADLOCK *** [ 368.112240][T11321] [ 368.120387][T11321] 2 locks held by syz.4.1412/11321: [ 368.125586][T11321] #0: ffffffff8f668778 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 368.135095][T11321] #1: ffff88814bf77770 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 368.144772][T11321] [ 368.144772][T11321] stack backtrace: [ 368.150670][T11321] CPU: 0 UID: 0 PID: 11321 Comm: syz.4.1412 Not tainted 6.16.0-rc1-syzkaller-00227-g8909f5f4ecd5 #0 PREEMPT(full) [ 368.150697][T11321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 368.150708][T11321] Call Trace: [ 368.150716][T11321] [ 368.150724][T11321] dump_stack_lvl+0x189/0x250 [ 368.150785][T11321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.150812][T11321] ? __pfx__printk+0x10/0x10 [ 368.150829][T11321] ? stack_trace_save+0x9c/0xe0 [ 368.150854][T11321] print_circular_bug+0x2ee/0x310 [ 368.150874][T11321] check_noncircular+0x134/0x160 [ 368.150894][T11321] validate_chain+0xb9b/0x2140 [ 368.150922][T11321] __lock_acquire+0xab9/0xd20 [ 368.150949][T11321] ? nr_rt_ioctl+0x390/0xd50 [ 368.150967][T11321] lock_acquire+0x120/0x360 [ 368.150991][T11321] ? nr_rt_ioctl+0x390/0xd50 [ 368.151010][T11321] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 368.151039][T11321] ? nr_rt_ioctl+0x390/0xd50 [ 368.151057][T11321] _raw_spin_lock_bh+0x36/0x50 [ 368.151084][T11321] ? nr_rt_ioctl+0x390/0xd50 [ 368.151100][T11321] nr_rt_ioctl+0x390/0xd50 [ 368.151116][T11321] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 368.151149][T11321] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 368.151170][T11321] ? apparmor_capable+0x137/0x1b0 [ 368.151203][T11321] ? capable+0x89/0xe0 [ 368.151230][T11321] ? nr_ioctl+0x1b1/0x3b0 [ 368.151255][T11321] sock_do_ioctl+0xd9/0x300 [ 368.151283][T11321] ? __pfx_sock_do_ioctl+0x10/0x10 [ 368.151308][T11321] ? __lock_acquire+0xab9/0xd20 [ 368.151339][T11321] sock_ioctl+0x576/0x790 [ 368.151365][T11321] ? __pfx_sock_ioctl+0x10/0x10 [ 368.151391][T11321] ? __fget_files+0x2a/0x420 [ 368.151410][T11321] ? __fget_files+0x3a0/0x420 [ 368.151428][T11321] ? __fget_files+0x2a/0x420 [ 368.151448][T11321] ? bpf_lsm_file_ioctl+0x9/0x20 [ 368.151474][T11321] ? __pfx_sock_ioctl+0x10/0x10 [ 368.151498][T11321] __se_sys_ioctl+0xf9/0x170 [ 368.151525][T11321] do_syscall_64+0xfa/0x3b0 [ 368.151540][T11321] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.151566][T11321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.151584][T11321] ? clear_bhb_loop+0x60/0xb0 [ 368.151603][T11321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.151620][T11321] RIP: 0033:0x7f8dfcf8e929 [ 368.151638][T11321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.151654][T11321] RSP: 002b:00007f8dfadf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.151673][T11321] RAX: ffffffffffffffda RBX: 00007f8dfd1b6080 RCX: 00007f8dfcf8e929 [ 368.151687][T11321] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000011 [ 368.151698][T11321] RBP: 00007f8dfd010b39 R08: 0000000000000000 R09: 0000000000000000 [ 368.151709][T11321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.151719][T11321] R13: 0000000000000000 R14: 00007f8dfd1b6080 R15: 00007ffc8efdc238 [ 368.151739][T11321] [ 368.156141][ T5843] Bluetooth: hci0: command tx timeout [ 368.210559][T11316] 8021q: adding VLAN 0 to HW filter on device bond5 [ 368.291693][T11321] sctp: [Deprecated]: syz.4.1412 (pid 11321) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.291693][T11321] Use struct sctp_sack_info instead [ 368.309959][T11316] bridge0: port 1(bond5) entered blocking state [ 368.314848][T11321] netlink: 'syz.4.1412': attribute type 1 has an invalid length. [ 368.324527][T11316] bridge0: port 1(bond5) entered disabled state [ 368.494846][T11316] bond5: entered allmulticast mode [ 368.501345][T11316] bond5: entered promiscuous mode [ 368.507050][T11316] bridge0: port 1(bond5) entered blocking state [ 368.513414][T11316] bridge0: port 1(bond5) entered forwarding state [ 368.552593][T11313] syzkaller0: entered promiscuous mode [ 368.558157][T11313] syzkaller0: entered allmulticast mode [ 368.564947][T11313] tipc: Resetting bearer [ 368.592345][ T1107] tipc: Resetting bearer [ 368.598691][ T1107] bridge0: port 1(bond5) entered disabled state [ 368.607060][T11321] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 368.613587][T11310] tipc: Resetting bearer [ 368.707081][T11310] tipc: Disabling bearer [ 368.729191][T11036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.762478][T11036] veth0_vlan: entered promiscuous mode [ 368.775520][T11036] veth1_vlan: entered promiscuous mode [ 368.808745][T11036] veth0_macvtap: entered promiscuous mode [ 368.818097][T11036] veth1_macvtap: entered promiscuous mode [ 368.834249][T11036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.847972][T11036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.859265][T11036] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.868341][T11036] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.878048][T11036] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.887143][T11036] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.915461][T11036] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht' [ 368.937556][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.939243][T11036] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 368.946327][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.977395][ T7547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.985531][ T7547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.558245][ T7547] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.477751][ T7547] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.718480][ T7547] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.788322][ T7547] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.875635][ T7547] bridge_slave_1: left allmulticast mode [ 371.881545][ T7547] bridge_slave_1: left promiscuous mode [ 371.887317][ T7547] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.902017][ T7547] bridge_slave_0: left allmulticast mode [ 371.907721][ T7547] bridge_slave_0: left promiscuous mode [ 371.915283][ T7547] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.050616][ T7547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.061408][ T7547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.071357][ T7547] bond0 (unregistering): Released all slaves [ 372.270927][ T7547] hsr_slave_0: left promiscuous mode [ 372.277273][ T7547] hsr_slave_1: left promiscuous mode [ 372.283688][ T7547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.291386][ T7547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.299238][ T7547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.308240][ T7547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.325150][ T7547] veth1_macvtap: left promiscuous mode [ 372.330735][ T7547] veth0_macvtap: left promiscuous mode [ 372.336943][ T7547] veth1_vlan: left promiscuous mode [ 372.346658][ T7547] veth0_vlan: left promiscuous mode [ 372.569239][ T7547] team0 (unregistering): Port device team_slave_1 removed [ 372.606561][ T7547] team0 (unregistering): Port device team_slave_0 removed [ 376.131184][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!