last executing test programs: 14.474020654s ago: executing program 1 (id=2838): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@dellink={0x34, 0x11, 0x1, 0x40000000, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c0002"], 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000c00)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x80000000, 0x40000000007, 0x20000a0de, 0x40000000000084, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0x80000000000000, 0x0, 0x5}, 0x5f2468a5, 0x3, 0x1, 0x0, 0x1}, {{@in6=@loopback, 0x1, 0x6c}, 0xa, @in6=@local, 0x3502, 0x1, 0x8, 0x0, 0x9075, 0x0, 0xfffffffd}}, 0xe8) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="2400000016009fb2344655066e4bfdff09000000040000000c000a"], 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x60048050) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80800) setsockopt$sock_int(r8, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1607e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed886e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c156801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11000000000000000000", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40884) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES16=r9, @ANYRES8=r0], 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0xbfd78f49ef0a66bb) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) 14.172475669s ago: executing program 1 (id=2841): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x28, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa9b, 0x50}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c810) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x18, r1, 0x300, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 14.033031673s ago: executing program 1 (id=2842): unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000001, 0x5}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000763000/0xf000)=nil, 0xf000, 0x2, 0x40010, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x2, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}], &(0x7f00000000c0)='GPL\x00', 0x4, 0xa3, &(0x7f00000003c0)=""/163, 0x0, 0xa}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x9) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x200}}, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6003000000462f00fc000000000000000000000000000000ff0200000200000000000001042081000000892f"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$alg(0x26, 0x5, 0x0) 10.048888105s ago: executing program 1 (id=2858): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000540)=@ethtool_rxnfc={0x2c, 0x0, 0x8, {0xd, @ether_spec={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x2}, {0x0, @broadcast, 0x6, 0xf, [0x2, 0x877]}, @sctp_ip6_spec={@mcast1, @remote, 0x4e24, 0x4e21, 0x4}, {0x0, @multicast, 0x4, 0x2, [0x7fff, 0x7]}, 0x19cf, 0x2}}}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000300)=""/270, 0x10e}], 0x1}, 0x40002102) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="bbfb28bd7000fddbdf25670000000c009900c60000002a0000000800c40002"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0100001a0013"], 0x16c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept4$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c, 0x800) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r6], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', r6, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 9.532853416s ago: executing program 1 (id=2862): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000280)) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@ipv6_getnexthop={0x0, 0x6a, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NHA_GROUPS, @NHA_OIF={0x0, 0x5, r4}, @NHA_FDB, @NHA_GROUPS]}, 0xd0}, 0x1, 0x0, 0x0, 0x11}, 0x24004840) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x120, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xffffffffffffffe9, 0x8, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0xffffffffffffffce}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x120}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) accept4(r0, 0x0, &(0x7f0000000080), 0x40800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21700, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c582", 0x5) r10 = accept4(r9, 0x0, 0x0, 0x80800) sendmmsg$alg(r10, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280", 0x13}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2000847}], 0x1, 0x40800) recvmmsg$unix(r10, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001040)=""/6, 0x6}, {&(0x7f0000001080)=""/27, 0x1b}], 0x2}}], 0x1, 0x40000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r12}, &(0x7f0000000180), &(0x7f0000000100)=r11}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r12, &(0x7f0000000040), 0x0}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) 9.190013147s ago: executing program 1 (id=2867): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x880) 3.160105642s ago: executing program 2 (id=2897): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x5b64, 0x2c, 0xd27, 0x1070bd28, 0xfffff003, {0x0, 0x0, 0x0, r2, {0xf000, 0x7}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5b30, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x5}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_ACT={0x5b04, 0x2, [@m_mpls={0x1038, 0x19, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x118, 0x9, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0xfff, 0x10000000, 0x3, 0x5}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe3a}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xd9d}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}]}, {0x97, 0x6, "273b92ae67eea257b033ecb46a532a8675639696c59ec53541f5488b32159281bc99ec454dcd7b95ddfcde79d20de42a6527514451aac4917e3776dc2e0ae0c99387aea63e9fabf142771cd13b536a578c5f5cf0e85853cd29a2fbcb77309cea5e270c4827a20802163468307097e92b271946edcdd97fda02311897a141a1df7bb0882477cdd2f73f1d4b94c5b26ecd825b94"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x130, 0x12, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x7, 0x10000000, 0x8000}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x100, 0x5, 0xc0, 0x4}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xba9, 0x4, 0x8, 0x4, 0x7406}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x2, 0x6, 0x6, 0x8}, {0x9, 0x2, 0xff, 0x3}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x9, 0xff, 0x9, 0x9}, {0x2, 0x9, 0xa8, 0x6}, {0x4, 0x5, 0x7, 0xfdd}, {0xfff9, 0x86, 0x18, 0x401}]}]}, {0x67, 0x6, "1b9f51f8bd057aed3b5d70b644481217c6d380a2cbee74f20a588cea60af2fd20e2c18cf3dee1285a35b4e50b51e13583db0260076a2793ea141fe88bcdb395d93966d563038ca9f71e19c0f57a5a4e3a66657399c23d2d24fa47836f3039b9577ad5c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_police={0x464, 0x18, 0x0, 0x0, {{0xb}, {0x41c, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x0, 0xffff, 0x1, 0x61, 0x812, 0x200, 0x8, 0xa3a, 0x5, 0x7, 0xa, 0xf, 0x1, 0x3, 0x8, 0x200, 0xfff, 0x4, 0xff, 0x5, 0x265, 0xe, 0x5, 0x40, 0x7, 0x1, 0xfffffff9, 0x3, 0x1ad3, 0xbf, 0x2, 0x6, 0x5, 0x4, 0x5, 0x3, 0x1, 0x9ca, 0x7f, 0x7, 0x2, 0x0, 0xfffffff9, 0x9377, 0x8, 0xdf2, 0xe8a2, 0x5056, 0x8, 0x7fff, 0xf0a, 0x2, 0x6, 0xf, 0xfff, 0x4, 0x6, 0xffff, 0x2, 0x6, 0x80000000, 0x1, 0x5, 0x7fffffff, 0x6, 0x5, 0x8, 0x7, 0x9, 0x8, 0x3, 0x5, 0x4, 0x12000000, 0xd, 0x9, 0x6, 0x7, 0x2, 0x0, 0x2, 0xffff8001, 0xff, 0x80000000, 0x400, 0x61b0a593, 0x200, 0x0, 0x4, 0xfffffffa, 0x6, 0x3, 0xa, 0xffff, 0x80000000, 0x6, 0x9, 0x4, 0x5, 0x3, 0x400, 0x9, 0x8, 0xffffffff, 0x3c1, 0xfffffffe, 0xa807, 0x7, 0x6, 0x100, 0x2455e748, 0x2, 0x2, 0x0, 0x3b, 0x10000, 0x7, 0x1, 0x0, 0x6, 0xff, 0x7f, 0x3, 0x6, 0x4, 0xffff7644, 0x0, 0x4, 0x47b1a93b, 0x3ff, 0x9, 0xffffffff, 0x5, 0x9, 0xb5e1, 0x2, 0x10, 0xfffffffa, 0x3, 0x141d5a51, 0x6, 0xf13, 0x0, 0x7ff, 0x7, 0xec24, 0x905, 0x2, 0x5, 0x8, 0x9b15, 0x79a, 0x7, 0xd278, 0x7, 0x3b, 0xf, 0xffffffff, 0x1, 0x3, 0x6, 0x8, 0x1, 0x4, 0x8, 0x6, 0x14, 0x10, 0x7, 0x800, 0x100, 0xb, 0x1, 0xe7f, 0x8, 0x6, 0xfffffff7, 0x0, 0x4, 0x1, 0xfffffff7, 0x0, 0x3, 0xbc, 0x2, 0x8, 0x2f7d, 0x3, 0x0, 0xf8, 0x5, 0x6, 0x1df, 0x1, 0x0, 0x8001, 0x401, 0xfffffffe, 0x6, 0x4, 0x7fffffff, 0x3, 0x9, 0x8, 0x1000, 0x3ff, 0x5e0dfe7f, 0x1, 0x3, 0x4, 0x7ff, 0x9, 0x2, 0x8, 0x4, 0x4, 0xc, 0x1, 0x2, 0x8b, 0x5, 0x4, 0x1, 0x0, 0x3, 0x1, 0x1, 0x4, 0xa99, 0x12000000, 0x4, 0x6, 0x8, 0x1, 0x64, 0x401, 0x5, 0x7, 0xe6, 0x3ff, 0x7b, 0x4, 0x2, 0x1447, 0x6, 0x2, 0x8, 0x6, 0xe1d, 0x3ff, 0x0, 0x1f, 0x1000, 0x1, 0x8]}], [], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xcfc}], []]}, {0x1f, 0x6, "55c6e53e4dbaf5bd614ceb80ef46e5466e3da835ce28596e5e8d3a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x120, 0xe, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x1, 0x800}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x4, 0x0, 0x8, 0x9}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x29, 0x5, 0x1, 0x5, 0x2ded953b}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffff000, 0x8, 0x8, 0x7, 0x7}, 0x1ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff2, 0x7, 0xffffffffffffffff, 0x10000, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfff, 0x7, 0x7, 0x6, 0x6}, 0x8}}]}, {0x48, 0x6, "9b8e12cb02cd069879174476385eb7c458086fec61cd36aab80dd14a948bb593851d62a33977ea540c527e7155f7baff7307088854d39c8d7b06cd28e8c197a19ec7fce2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x3f9c, 0x8, 0x0, 0x0, {{0xb}, {0x3edc, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7b6, 0x3, 0x6, 0x7c8f, 0x3, 0x1, 0x5, 0x2, 0xa1, 0x7, 0x2, 0x1, 0x8, 0x6, 0x7, 0x800, 0x1, 0xbc, 0x7ff, 0x8, 0x9, 0x2, 0x100, 0x7fff, 0xff, 0x9, 0x2, 0x1, 0x7f, 0x81, 0xd, 0x1, 0x3, 0x6, 0xf, 0x1, 0x8, 0x80000000, 0x7, 0x7fff, 0x80, 0x8, 0xc, 0x9, 0x0, 0x7, 0x5, 0x4, 0x1800, 0x1a, 0x2, 0x9, 0x1ff, 0x9, 0x2, 0x7fff, 0x2, 0x5, 0xfffffc01, 0x7fff, 0x9, 0x932, 0xffff, 0x547486f4, 0x8, 0xa277, 0x0, 0x9, 0x1873, 0x4093, 0x9, 0x0, 0x4c7, 0x7, 0xb, 0xe, 0x6, 0x9, 0x2, 0x1, 0x10001, 0x89b, 0x3, 0xdaf, 0xf4, 0x0, 0xd85e, 0x3ff, 0xffff, 0x2, 0x5, 0x8, 0x0, 0x80000001, 0x8, 0x1000, 0x8, 0x4, 0x7ff, 0x2, 0x3, 0x5, 0x10001, 0x1, 0x1, 0x4, 0x81, 0x4, 0x0, 0x10, 0xd6c, 0x7fffffff, 0x10, 0x7, 0x1000000, 0x1, 0x7f, 0x4, 0x9, 0x0, 0x8000, 0x9a1, 0x0, 0x9, 0x7, 0xf53, 0xde, 0x1, 0xc, 0x2, 0x9, 0x91db, 0x3, 0x6, 0xad5, 0x8, 0x9, 0x6bc, 0x9, 0xd55, 0x1000, 0xc, 0x10001, 0x4, 0xe, 0x9, 0x4, 0x0, 0x7, 0xc, 0x4290cf49, 0x8000, 0x85db, 0x8, 0x0, 0x5, 0x6, 0x2, 0xd7000000, 0x5, 0x2, 0x101, 0x1, 0x9, 0x8001, 0xe4e, 0x9, 0x7, 0x101, 0x3688, 0xec03, 0x4, 0x986c, 0x4, 0xe1, 0x2, 0x6, 0x4, 0x4, 0x60e, 0xf, 0x7ff, 0xca26, 0xfffffffe, 0x2, 0x7ff, 0x80000001, 0x0, 0x2, 0x7, 0x0, 0xb743306, 0x40000000, 0x0, 0xdd4, 0x1, 0xa, 0x7, 0x8, 0xc, 0x0, 0x0, 0xffffffff, 0x8196, 0x1, 0x9, 0x7f, 0xfffffffe, 0x8, 0xfffffffa, 0x6, 0x2, 0x8d2f, 0x10000, 0x7, 0x1, 0x8, 0xf, 0x0, 0xe0, 0x1ff, 0x8, 0x2, 0x6, 0x5, 0x80000000, 0x92, 0x7, 0xe000000, 0x7, 0x9, 0x7, 0x3, 0x9, 0x4, 0x7, 0x8, 0x9, 0x7f, 0x3, 0x1, 0x4, 0x3ff, 0x3f, 0xffff, 0xa84, 0x7, 0x1, 0xffffff4b, 0x10001, 0x9, 0x6, 0x1, 0x4, 0x7, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x10000000, 0x10001, 0x6, 0x4, {0x67, 0x1, 0x6, 0xc, 0xf5f, 0xd}, {0x0, 0x1, 0x5, 0x3, 0xc, 0x8}, 0x2, 0x69, 0x5}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7, 0x7, 0x0, 0x175b4000, 0x81, 0x2, 0x2, 0x81, 0x6, 0xe, 0x4, 0x54ce, 0xfff, 0x0, 0x8000, 0x2, 0x5, 0x1, 0xc, 0x6, 0x1, 0x6, 0x9, 0x0, 0x4, 0x800, 0x2, 0x2, 0x6, 0x89fc, 0x8000, 0x6, 0xb, 0x10000, 0x9, 0xe, 0xf, 0x4, 0x3, 0x8000, 0x3, 0x200, 0x200, 0x2, 0x4, 0x8, 0x8, 0x6, 0xffff8001, 0x101, 0x78adde9d, 0x2, 0x4, 0x8, 0x7432, 0x1, 0x1, 0x3, 0x3, 0x1, 0x4, 0x2, 0x0, 0x7, 0xba, 0x2, 0x6, 0x1, 0x8, 0x401, 0x193, 0x0, 0x9, 0x8, 0x5b79fb22, 0x9, 0x1, 0x1ff, 0x4, 0x5, 0x61, 0x3, 0xb881, 0x9, 0x0, 0x2, 0xc3b2, 0x7, 0x6, 0x8eaf, 0x7, 0xbe, 0x1, 0x3c4b, 0x1c0000, 0x7, 0x7fffffff, 0x8001, 0x5, 0x5a, 0x8, 0xfffffff8, 0x800, 0xdf77, 0xc93, 0x5d7, 0x0, 0x9, 0x7, 0x8, 0x0, 0x2, 0x2, 0x3, 0x8, 0x9, 0x9, 0xffffffff, 0x2, 0x80, 0xfffffffa, 0x2, 0x7, 0x1, 0x5, 0x0, 0x8dc8, 0x2, 0x3, 0xffffffff, 0x6, 0x3, 0xd0, 0x6, 0x15d2, 0x2, 0x8, 0xb, 0x4, 0x0, 0x7fff, 0x80, 0x5, 0x1ff, 0x9d, 0x0, 0x7ccf, 0x2, 0x5, 0x9, 0x7, 0xb2, 0x0, 0x1, 0x1000, 0x300000, 0x8, 0xcf2f, 0x9, 0x4, 0x8, 0x7ff, 0x1010000, 0x7, 0xffffffc0, 0x0, 0x7f, 0x800, 0x0, 0x7ff, 0x40, 0x9, 0x5, 0x9, 0x3617, 0x1, 0x7, 0xffffffff, 0x1, 0xffff, 0x5, 0x8, 0x1, 0xc0000000, 0x1, 0x3, 0x7f, 0x802, 0x0, 0xb, 0x27c, 0x7, 0xffff0000, 0x24, 0x2, 0x45c, 0x2, 0x672, 0x2, 0x1ff, 0x6, 0x9, 0xfffff6d7, 0x7, 0x0, 0x0, 0x3, 0x51b2, 0x3, 0xc, 0x1, 0xf0d, 0x182, 0x7, 0x7, 0x8001, 0x2, 0x1000, 0x2, 0x2, 0xf, 0x1ff, 0x9, 0x0, 0xfffffe70, 0x5fd81667, 0x8, 0x1, 0x100, 0x2, 0x5, 0x10001, 0xd, 0x4, 0x3, 0x0, 0xfffffffc, 0x10001, 0x5, 0x40, 0x7fff, 0x7, 0xfffffffc, 0xafda63e, 0x6, 0x7, 0x40, 0x7, 0xff, 0x804, 0x10, 0x800, 0x80, 0x2, 0x400]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x6, 0x4c67, {0xf8, 0x2, 0x5, 0x80, 0xfb2d, 0xe}, {0xb7, 0x2, 0x8, 0x1, 0x1ff, 0x8000}, 0x59, 0x3, 0xfff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x20000000, 0x1, 0x1, 0x6bc1, {0x17, 0x0, 0x7ff, 0x8, 0xa358, 0x9362}, {0x1f, 0x0, 0x7f, 0x132, 0x0, 0x8}, 0x7fff, 0xb1, 0xe3}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5d5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x4, 0xfffffffd, 0x4, 0x0, 0x1600, 0xb8, 0xfffffff8, 0x3, 0x5, 0x1, 0xdf0, 0x7, 0x2, 0xffffffff, 0x3, 0x3, 0x0, 0x0, 0xc0, 0x9, 0x954e, 0xbe, 0x7, 0x0, 0xfffffffb, 0x0, 0x5, 0x7, 0x5, 0x0, 0xea52, 0xc0000000, 0x2, 0x6, 0x0, 0x8, 0x5, 0x7fff, 0xe, 0x8a8, 0x18, 0x16, 0x80000000, 0x7, 0x0, 0x2, 0x7f, 0xf9, 0x9, 0xd, 0xfffffff8, 0x5, 0x4, 0x871, 0x4a, 0x5, 0x5, 0x6, 0x4, 0x5, 0x8, 0x7, 0x8, 0x6278, 0x6, 0x5, 0x0, 0x4, 0x9, 0x0, 0xfffffeff, 0x6, 0x4, 0x6, 0x2, 0x6, 0x7, 0x7, 0xfffffff8, 0x4, 0x15e0, 0x7, 0x0, 0x3ff, 0x20d, 0x2, 0x18, 0x3, 0xb, 0x1, 0x3, 0x6, 0xe2, 0x7, 0x9, 0x6, 0x3175, 0x800, 0x3ff, 0x0, 0x5, 0x8, 0x6, 0x3ff, 0x28c, 0xb1e5, 0x4, 0xa0, 0x0, 0x7, 0xefe8, 0x4, 0x4, 0x3, 0x7, 0xc, 0x7fffffff, 0xffffffe0, 0x8, 0x0, 0x7, 0xfff, 0x4eb7, 0xf17130c, 0x9, 0x401, 0x2, 0x7, 0x5, 0xfffff800, 0x2, 0x4, 0x1, 0x3, 0x4, 0x6, 0xffff, 0x4, 0x8, 0x8bf, 0x1, 0x0, 0x0, 0xf717, 0x8, 0x3, 0x4, 0x6e, 0x1, 0x7, 0xfff, 0x9, 0xc586306, 0x7, 0x404d, 0x80000000, 0xe, 0x6f0a, 0xffffff01, 0x0, 0x81, 0x8, 0x40, 0x1000, 0x3ff, 0x8, 0x0, 0x5, 0x210dc66b, 0xff, 0x9, 0xfffffff8, 0x1, 0x88b8, 0x6, 0x7, 0x0, 0x1, 0xd1, 0x7, 0x6, 0x10001, 0x78b5, 0x8e, 0x2, 0x6, 0x0, 0x267c3c3c, 0x1ff, 0x4, 0x7, 0x3, 0xfffffffc, 0x81, 0x7, 0x0, 0x3, 0x4, 0x1, 0x81, 0x401, 0x8e, 0x72a5, 0xbc0, 0x8000, 0x40, 0x496, 0x7fff, 0x7f, 0x3, 0x34b27179, 0x2, 0x343, 0x3, 0x7fffffff, 0x5, 0x7, 0xf, 0x8, 0x80000001, 0x80, 0x2, 0x5, 0x400, 0x2, 0x80, 0x1, 0x6, 0x3, 0x2, 0x40, 0x7, 0x1, 0x28a9, 0x1, 0x1, 0x5, 0x6, 0x8, 0xd452, 0x8, 0xbe4a, 0x7, 0x800, 0xfffffffb, 0x1ff, 0x4b, 0xcd5, 0x6, 0x7, 0x7, 0x6, 0x3, 0xff, 0xfffffff7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x3, 0x1, 0x7fff, 0x2, 0x4, 0x1, 0x7, 0x4, 0x3, 0x7, 0x1, 0x3, 0xfffffffb, 0x25b8, 0x3, 0xe, 0xffffff5b, 0x80000000, 0x7, 0x0, 0x9f79, 0x7ff, 0x1, 0x8, 0x800, 0x8, 0x1ff, 0x9, 0xae, 0x1, 0x0, 0xaac, 0x0, 0x4, 0x1ff, 0x3, 0x54a, 0x9, 0x2, 0x10000, 0x2, 0x3, 0x8907, 0x3, 0x6, 0x8, 0xfffffff7, 0x3, 0x7a, 0xffff, 0x0, 0x0, 0xfffffffa, 0x9, 0x0, 0x5, 0x2, 0x3, 0x9, 0x8, 0x980, 0x6, 0x1ff, 0x6, 0x1, 0xafbc, 0x3, 0x0, 0xfffffffc, 0x8001, 0x0, 0x400, 0xa9, 0x10000, 0x9, 0x44, 0x3, 0x3, 0x68, 0xcb, 0x2, 0x40, 0x8000, 0x6, 0x9, 0x6, 0x80000001, 0xc9b2, 0x5fc2, 0x7, 0x4, 0x4, 0x0, 0x7, 0x75, 0x2, 0x7, 0xffff0001, 0x9, 0x76b, 0x7ff, 0x10, 0x4, 0x8, 0x8, 0x1ff, 0x5, 0x5, 0x3, 0x9, 0x8000, 0x0, 0x0, 0xfffffffa, 0x800, 0xff, 0x4, 0xd0a1, 0x3, 0xffff8000, 0x1, 0x8, 0x2, 0x0, 0xcd1f, 0x7, 0x9, 0x1, 0x5, 0x1, 0xc, 0x5, 0xffff, 0x0, 0x7, 0xffffffc9, 0x3, 0xfff, 0x80000001, 0x53, 0xb538, 0xb, 0x80000000, 0x9, 0x2, 0x100, 0x5, 0x5, 0x5, 0x4, 0x6, 0x0, 0x8, 0x7, 0xe70f, 0x7fffffff, 0x1, 0xb, 0x3, 0x8, 0x9, 0x10001, 0x3, 0xedbd, 0xfd, 0x9, 0x2, 0x4, 0x4, 0x10001, 0x7, 0xcfd, 0x1791f2ab, 0x0, 0xa, 0x3, 0xf, 0x96e5, 0x0, 0x7, 0x7f, 0xbadd, 0x42, 0x280, 0xff, 0xde39, 0x1, 0x4, 0x4, 0x3, 0x8, 0x6, 0x4, 0x8, 0x7fffffff, 0x3, 0x7, 0x9, 0x9, 0x2, 0xab3, 0x8000, 0xc, 0xe5f, 0x5, 0x3, 0x40, 0x6, 0x5, 0x9, 0x1ff, 0x36, 0x81, 0x1, 0x0, 0x84, 0x1, 0xff, 0x100, 0xff, 0x7, 0x3, 0x1, 0x5, 0xc8de, 0x3, 0x3, 0x2, 0x100, 0x9, 0x6, 0xe, 0xa99b, 0x5, 0x7, 0x1, 0xe6, 0x6, 0xa7d7, 0xf464, 0xfff, 0xfffffff9, 0x4, 0x100, 0x8, 0x8000, 0x1, 0x10, 0xcf4, 0x9, 0x5, 0x1, 0x2, 0x24, 0xff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x18}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xd}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0x80000001, 0x3, 0x401, 0x4, 0x9, 0x2, 0x8, 0x101, 0xfdb4, 0x4a5, 0x0, 0xbd, 0x9, 0x5, 0x2, 0x6, 0x6ae, 0x3, 0x5, 0x10000, 0x0, 0x38ad, 0xfffffffb, 0x8, 0x2, 0xe1dc, 0x9, 0x62, 0x6, 0x7350, 0x5, 0x9, 0x2, 0x1, 0x5, 0x7, 0x72b4, 0x7, 0x10000, 0xb, 0x5, 0x4, 0x2, 0x2, 0x3, 0x7, 0x3, 0x0, 0x2, 0x5, 0xc0, 0x1, 0x4, 0x6, 0x1, 0x5, 0xc, 0x5, 0x1, 0x2cde, 0x200, 0xffff0001, 0x3, 0xab, 0x637688fa, 0xf, 0x40, 0x9, 0x4000000, 0x800, 0x0, 0x9, 0x3, 0x4, 0x2, 0x0, 0x2, 0x80, 0x100, 0xfff, 0x4, 0x7, 0x3bf, 0x9, 0x2, 0xfffffff8, 0xc, 0x8, 0xfffffffa, 0x4, 0x5, 0x4, 0x621, 0x80000000, 0x2, 0x9a, 0x4, 0xc, 0x74, 0x4, 0x2, 0x10001, 0x1, 0x4, 0x865c, 0x400, 0x401, 0xfffffffd, 0x2, 0x80000001, 0x80, 0x8, 0x7, 0x5, 0x6, 0x800, 0x7, 0x7, 0x6, 0x10, 0x6, 0x1, 0x1, 0x8, 0x3, 0x2d0000, 0x3, 0x99, 0x32, 0x0, 0xff, 0x3, 0xa6, 0xfffff361, 0xa, 0x9, 0x8, 0x1000, 0x50, 0x46, 0x80, 0x9000000, 0x3, 0x499bdba4, 0x3, 0xfffffffc, 0x3, 0xffffffe7, 0x5, 0x9, 0x0, 0x3, 0x8, 0xb18, 0x9, 0x40, 0xb6, 0x7, 0x8, 0x4, 0x4, 0x6, 0x6, 0x401, 0x6, 0x7, 0x8, 0x8, 0x2, 0x1ff, 0xff, 0x5, 0x3, 0x9, 0x4, 0x1, 0xb69, 0x331, 0x0, 0xbd, 0x5, 0x4, 0x4, 0x2, 0x71cf, 0x100, 0x5, 0x8, 0x8, 0xfffffffd, 0x553e, 0xc, 0x99, 0x1, 0x350ec47b, 0x6, 0x81, 0x8, 0x7e, 0x5, 0x3, 0x8, 0x0, 0x53, 0x8, 0x4a68cc12, 0x8, 0x4, 0x2, 0x3, 0xb, 0x8, 0x9, 0x6, 0xfffffff9, 0x1, 0x4, 0x9, 0xf, 0xfff, 0xfffffffa, 0xf6, 0xfffffffa, 0x73c2d97f, 0x1d, 0xfffffff7, 0x7, 0x2, 0x9, 0x8, 0x7fff, 0x8, 0x34d0, 0x59, 0x9, 0x101, 0x1, 0x8, 0x7, 0x2, 0xda, 0x6, 0x1, 0xfffffff9, 0x813, 0xe79, 0x8, 0x1, 0x1, 0x2, 0x3, 0x4, 0x6, 0x9, 0x5bd]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x817f, 0x1000, 0x7, 0x3, 0x1, 0x7, 0x2, 0x5, 0x200, 0x0, 0x7, 0x2000, 0x10000, 0x401, 0x4bb, 0x1e7, 0x8000, 0x2, 0xa, 0xffff, 0x7, 0x2, 0xfffffff9, 0xdaf, 0x6, 0x10001, 0x8, 0x336f, 0x2, 0x8, 0x8, 0x6, 0xc, 0x0, 0x2, 0x5, 0x1, 0xc, 0x1ff, 0x8, 0x401, 0x1, 0x4, 0xcd2, 0x7, 0x0, 0x8, 0x1, 0x57, 0x6, 0x1, 0x5, 0x5, 0xfffffffd, 0x4, 0x5, 0xc606, 0x4811, 0x100, 0x1000, 0x80, 0x0, 0x5, 0xffff, 0x4a3c77f2, 0x5ef, 0x1, 0x7, 0x0, 0x12000, 0x0, 0x5, 0xe, 0x1, 0x8, 0xff, 0x6, 0xe, 0x1003, 0x401, 0x6, 0x7, 0x401, 0x398, 0x8, 0x2, 0x8, 0x2, 0xb, 0x4, 0x1, 0x2, 0x7, 0x2, 0x4, 0x67, 0x6, 0x5, 0x8d2, 0xc1, 0x144d, 0x7, 0x6, 0xe, 0x9, 0x8001, 0xfcd8, 0x8, 0x101, 0x9, 0x9, 0x8, 0x0, 0x9, 0x3, 0x8000, 0x2, 0x4, 0x8, 0x5, 0x6, 0x76e, 0x8, 0xa9ac, 0x5, 0x3, 0x2, 0x1, 0x4, 0x2, 0xb, 0x3ff, 0x0, 0x3, 0x7b, 0x0, 0x6000000, 0x6ca, 0x7, 0x1000000, 0xe29f, 0x6, 0x6, 0x6d3, 0x100, 0x13df, 0x0, 0x0, 0x3, 0x34f5, 0xe, 0x5c8, 0x1, 0xffff7464, 0x10000, 0x0, 0x8, 0x7, 0x2, 0x2, 0x0, 0xfff, 0x0, 0x2, 0x1, 0x4e1, 0xace8, 0x6, 0x9, 0x5, 0x34, 0x3, 0x3f3, 0x5, 0xffff, 0x7, 0x200, 0x4, 0x8, 0x3, 0x400, 0x2, 0x9, 0x7, 0x80000001, 0x9, 0x3, 0x81, 0xd, 0x5, 0x9, 0x10, 0x6, 0x0, 0xfef9, 0x0, 0x5, 0x1, 0x7, 0xa, 0x401, 0x34e, 0xa1, 0x9, 0x4, 0x1ff, 0x5, 0x8, 0x4, 0x66d75475, 0xb, 0x1, 0x1, 0x9, 0x0, 0x8, 0x2, 0x7, 0x0, 0x2, 0xc05a, 0xd, 0x0, 0x6, 0x7fff, 0x52, 0xcc, 0x0, 0x9ad3, 0x9, 0x40, 0x0, 0x25d, 0x4, 0x7, 0x7, 0x1, 0x6, 0xfffffc00, 0x80000000, 0x6, 0x2, 0x8, 0x5, 0xffffffff, 0x6, 0xfb, 0x5, 0x80000000, 0x101, 0x9, 0x17, 0x3ff, 0x9, 0x61, 0x771ddd22]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfd}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x5, 0x100, 0x6, 0x1, {0x7, 0x0, 0xe6, 0x2, 0xff29, 0x800}, {0x2, 0x1, 0x4, 0x81, 0x9, 0x6}, 0x7, 0x6, 0x1b000000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x8, 0x7fff, 0x3, 0x6, 0x1, 0x48000, 0x9, 0x8, 0x5, 0xffffffff, 0x8, 0x7, 0x535, 0x6, 0x5d67, 0x7fffffff, 0xffffff01, 0x3, 0x7ff, 0xc2, 0x2ffaef5, 0x6, 0xfff, 0x5, 0x8, 0xb90, 0x8, 0x4, 0x8, 0x0, 0xef6, 0x5, 0x3, 0x9, 0x8, 0x6, 0x400, 0x2, 0x7f, 0x5e8, 0x4, 0x101, 0x4, 0x0, 0x200, 0x3, 0x80, 0x0, 0x0, 0x6, 0xffffffff, 0x66, 0xffffffb4, 0x8, 0x4f5c4196, 0xf0, 0x3, 0x10, 0x9, 0x1, 0x6, 0xc1e9, 0x1e, 0x81, 0x3ff, 0x80000000, 0x6, 0x5, 0xfffffffa, 0x8, 0x6, 0x0, 0x8, 0x8, 0x84, 0x4, 0x7fffffff, 0x8, 0x81, 0x9, 0x4, 0xba, 0x0, 0x7, 0xfffff2b9, 0xe5, 0x1ff, 0x200, 0x1, 0x7, 0x1, 0x9, 0x10000, 0x6, 0x98e8, 0x81, 0xffffc5be, 0x8000, 0x200, 0xb, 0x6, 0x2, 0x6, 0x5, 0x3ff, 0x800, 0x10001, 0x2, 0x8, 0x3, 0x80, 0x407, 0x101, 0x6d, 0x2, 0x88, 0xd5, 0x5, 0x5, 0xf0000000, 0x1, 0x693921d5, 0xfffffffb, 0x1, 0x5, 0x9, 0x8000, 0x3, 0x29, 0x8, 0x1, 0x4, 0x1, 0x570f, 0x1000, 0xc17, 0x3, 0x3, 0x2, 0x1, 0xb, 0x0, 0x7f, 0x5, 0x2, 0x421, 0x2, 0xfa3, 0x8, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x9, 0x101, 0xf, 0x100, 0xe5088af, 0x0, 0x1, 0x8, 0x4, 0x0, 0x4, 0x6, 0x7, 0x840b, 0x5, 0x3, 0x400000, 0x2, 0x52, 0x54a2, 0x0, 0x6, 0x2, 0x9, 0x3, 0x7, 0x0, 0x9, 0x6, 0x101, 0x3, 0x1, 0x6, 0x3ff, 0x4, 0x80000000, 0x1, 0x9, 0xfffff801, 0x7ff, 0x0, 0x6, 0x55e1, 0xf70, 0x5, 0x2, 0xfffffffc, 0x5, 0x101, 0x2, 0x2, 0x4, 0x400, 0x64, 0xa, 0xa, 0x9, 0x8, 0x101, 0x0, 0x1, 0xbb, 0x2, 0x4, 0x9, 0x3, 0x1, 0x5, 0x5, 0x7, 0x8, 0x10001, 0xb, 0x5, 0xa, 0x69f3, 0x3, 0x9, 0xfffffffb, 0x1, 0x81, 0x10001, 0x2, 0x7fffffff, 0x10001, 0x8, 0xffffffc5, 0x7, 0x8, 0xfffff084, 0xffff, 0x8, 0x5, 0x1, 0x68, 0x6, 0x4, 0x5, 0xfba, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x5, 0x2c5, 0xbc00000, 0x689b, 0x200000, 0x80, 0x4, 0x2, 0xe, 0x3, 0x9, 0x3, 0x6, 0xc, 0x5, 0x3, 0x4, 0x5, 0x7ff, 0x10, 0x5, 0x10001, 0x0, 0x80000001, 0x6, 0x6, 0x5, 0x10000, 0xa, 0x3b8, 0x1, 0x5, 0x6d83, 0x9, 0x8, 0x3, 0x7fff, 0x2a, 0x9, 0x0, 0xf, 0x9, 0x8, 0x9, 0x2, 0x3, 0x10001, 0x9, 0x0, 0xe32, 0x2, 0x5, 0x10001, 0x200, 0x20f1, 0xe, 0x416, 0x8, 0x6, 0x2, 0x5b61b374, 0x8, 0x7, 0x8, 0x7674, 0x8, 0x1000, 0x7f, 0x2, 0x5, 0x88, 0xa, 0xff, 0xfffffffe, 0x4, 0xffff, 0x4, 0x0, 0x200, 0x8508, 0x8, 0x6, 0x9, 0x1000000, 0x8, 0xfffffffd, 0xe, 0x2, 0x200b8421, 0x0, 0xfffffffd, 0x3, 0x9, 0xe66, 0x38000, 0x401, 0x6, 0x1, 0xf, 0xc2f9, 0x0, 0x1, 0x1ff, 0x9, 0x6af, 0x81, 0xf, 0xfff, 0xd0f, 0xfffffffb, 0x8d5b, 0x9, 0x101, 0x10001, 0x21, 0x7, 0x7fffffff, 0x3, 0x1, 0xd1ff, 0xb504, 0x191, 0x1000, 0x2, 0x1ff, 0x4, 0x2, 0xf, 0x6, 0x5, 0x5, 0x3, 0x800, 0x6, 0x7, 0x0, 0x7fff, 0xa, 0x0, 0xaa, 0x7fffffff, 0x0, 0x7ff, 0x9, 0x8, 0x7, 0x7ff, 0x3d519b61, 0x9, 0x1, 0x101, 0x5, 0xfffffffc, 0x80000000, 0x2, 0x1, 0x2, 0xee7, 0x29, 0x200, 0x4, 0x7fffffff, 0x3, 0xd, 0x7fff, 0xff, 0x7, 0x5, 0x18000, 0x742, 0x7, 0x8000, 0xe36, 0xfff, 0x59, 0x6000, 0x3, 0x4, 0x2, 0x7, 0x8cf3, 0x8, 0xfffff60c, 0x1, 0x101, 0x6, 0x4, 0x0, 0x2bc, 0x1, 0x80000000, 0xfff, 0x0, 0xff, 0x1, 0x1, 0x9, 0x7, 0xff, 0x2b, 0x1ff, 0x7, 0x4, 0x90b6, 0x90, 0xf7, 0x7, 0x5000, 0x4, 0x1, 0x8, 0x7f, 0x366, 0x7, 0x79, 0x2, 0x3, 0x40, 0x1ff, 0xfffffffc, 0x0, 0x0, 0x3, 0x5, 0x4, 0xc4, 0x9, 0x6, 0x5, 0x80, 0x6, 0x100, 0x6, 0x0, 0x6, 0x3, 0x6, 0x8, 0xb, 0x6, 0xbfe, 0x5, 0x8, 0x8, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffff801, 0x2, 0x4, 0x80000001, 0x1, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000004, 0x4, 0x2, 0x80000000, {0xb3, 0x0, 0x0, 0xbfc5, 0x5, 0x9acc}, {0x2, 0x1, 0x7fff, 0x4, 0x5, 0x2}, 0x6, 0x6, 0x401}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x7, 0xfffffffa, 0x56f, 0x3, 0x7, 0xa, 0xc, 0x9, 0xf9, 0x10001, 0x0, 0x2, 0xfc, 0x6, 0xf94, 0xba05, 0xa5bf, 0xb9, 0x7fff, 0x5, 0x10000, 0xfffffffb, 0x3, 0x6, 0x10000, 0x4, 0x7, 0x7, 0x1, 0x2593, 0xb, 0x6f42, 0x5, 0x4, 0x5, 0x5, 0x3, 0x6, 0xd, 0xfffffffa, 0x7, 0x1ff, 0xfff, 0x0, 0x7f, 0x2e, 0x9, 0x5, 0x7, 0x1, 0x4, 0xffffffff, 0x7, 0x0, 0x6, 0x46b, 0x9, 0x81, 0x8e, 0x3, 0x7fff, 0x1000, 0xd55, 0x2, 0x1, 0x51d3, 0x468, 0x0, 0x0, 0x4, 0x6, 0x0, 0x7, 0x9, 0xfffffffc, 0x0, 0x5, 0xffffff2e, 0x51, 0x12, 0xfffff64d, 0x7f, 0x7fffffff, 0x1, 0xaa49, 0x8000, 0x3, 0x0, 0xff, 0x2, 0x8000, 0x3b8f, 0x3, 0x5d7, 0xa, 0x2, 0x7, 0xe7, 0x7fffffff, 0xb, 0xd, 0xffffff1c, 0x9, 0x8, 0x7, 0x401, 0x6, 0xbfe4, 0xfffffffb, 0x7, 0x9, 0x6, 0xf, 0x7ff, 0xd, 0x0, 0x1, 0x80000001, 0x4, 0x0, 0x4, 0x7, 0x9, 0xfb, 0x0, 0x0, 0x1, 0x8, 0x3, 0x8000, 0x0, 0xdd39, 0xb45, 0x4, 0x5, 0x1, 0x1, 0x14, 0x1, 0x9, 0x1c, 0x6, 0x21ccc4fa, 0x2, 0x5, 0x4, 0x80, 0x400, 0x80000001, 0x8003, 0x101, 0x3, 0x6, 0x2, 0x8, 0x9, 0x7, 0x2ab9, 0x0, 0x5, 0x6, 0x6, 0x0, 0x9, 0x5, 0x2, 0x101, 0xfc7e, 0x4, 0x7, 0x7ff, 0x5, 0x2, 0x8, 0x34b, 0x8b, 0x2, 0x8, 0xffff1c01, 0x7e, 0x6, 0x1, 0x1, 0x0, 0x7f, 0x7, 0x9, 0x9c4b, 0x6, 0x44e, 0x6, 0x451b, 0x1000, 0x1, 0xa5, 0x2ce, 0x6, 0x9, 0xd, 0x7, 0x80, 0x7ff, 0x5, 0x3, 0xd7d0, 0x8, 0x100, 0x5a, 0x8, 0x5, 0x8, 0x40, 0x3, 0x7, 0xfd, 0x9, 0xd14, 0x2, 0x0, 0x7, 0x81, 0xff, 0x9, 0x9, 0xb33, 0x4, 0x0, 0x2, 0xb5f2, 0x8, 0x1, 0x2, 0x101, 0x6, 0x9, 0x6, 0x1, 0x100, 0x6, 0xf8, 0x81, 0x1a5, 0x4, 0x200, 0x8, 0x4, 0x6, 0x8, 0x8, 0x7f, 0x7, 0x6, 0x3, 0x1e40, 0x79f]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x2, 0x9, 0xfffffeff, 0x3, 0x0, 0x6, 0x9, 0xb11, 0x6, 0xfffffffc, 0xffffffff, 0x9, 0xfffff745, 0x1, 0x6, 0x4, 0x2, 0x7, 0xfcd, 0x5, 0x3, 0x6, 0x6, 0x1, 0x2, 0x1, 0xd, 0x6, 0x800, 0x6, 0xff7b, 0xc, 0x800, 0x40, 0x9, 0x0, 0x9, 0x0, 0x5, 0xfffffffa, 0x5, 0x40, 0xffffffff, 0x609, 0x8, 0x9, 0x3, 0x0, 0xa, 0x1, 0xfffffff8, 0x139dbb9d, 0x8f, 0x9, 0x800, 0x5, 0x401, 0x4, 0x3, 0x7, 0x7, 0x7, 0x7, 0x2, 0x3, 0xffff, 0x1, 0x9, 0x10001, 0x2, 0x86, 0x0, 0x6, 0x7, 0x5, 0x9, 0x3, 0x7fffffff, 0xfff, 0x5, 0x101, 0x2, 0x7, 0x53494f1c, 0x1, 0xcc1, 0x2, 0x7, 0xff, 0x5, 0xfffffff9, 0xa, 0x9, 0x2, 0x45, 0xa63, 0x7, 0x2, 0x9, 0x6b7b, 0x80, 0xfd7, 0x6, 0xc, 0x3, 0x2, 0x6, 0x8, 0x7, 0xe, 0x9aa, 0x4, 0x3, 0x8000, 0x774d, 0x6, 0x8d08, 0x7ff, 0x4, 0x2, 0xfa33, 0xf, 0x758, 0xffffffff, 0x6, 0x4, 0x8, 0x1dd, 0x3, 0x7fff, 0x0, 0x6, 0x6, 0x8, 0x3, 0x2, 0x4, 0x2, 0x1000000, 0x3b, 0x2, 0x9, 0x1, 0x4, 0x8, 0x1, 0x95, 0x80000000, 0x0, 0x3, 0x9, 0x2, 0x5, 0x4, 0xc, 0x445, 0x7, 0x800, 0xffff, 0x6, 0x10000, 0x7, 0x401, 0x400, 0x9, 0x3965, 0x7, 0x4, 0x9, 0x7, 0xffffffff, 0x2, 0xea, 0x0, 0xffff7314, 0x3516, 0x9, 0x800, 0x3, 0x4fa0, 0xffffffff, 0x3, 0x3ff, 0x2, 0x3ff, 0x1, 0xfffffd60, 0x4, 0xfff, 0x1, 0x1, 0x100, 0x80000001, 0x8, 0x8, 0x5, 0x4, 0x10, 0x4, 0xff, 0xd0, 0x800, 0x9, 0x2, 0x8, 0x800, 0x5, 0xcd4e, 0x8d, 0x7, 0x5, 0x2, 0xa0, 0x0, 0x5, 0xe, 0x6, 0x0, 0xd85, 0x8, 0x8, 0x8, 0x2, 0xfffffff9, 0x8, 0x7ff, 0x9, 0xe17, 0x6, 0x3, 0xb7f, 0x7fff, 0x3, 0x10, 0xb, 0x68000000, 0xfffffffb, 0x9, 0x8, 0x3, 0x38, 0x10, 0x5, 0xff, 0x3, 0x0, 0x8, 0x5ca875b6, 0x0, 0x3, 0xc8, 0x2, 0x8, 0x80]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}], [@TCA_POLICE_RATE={0x404, 0x2, [0xffffc0a5, 0xffffff80, 0x8001, 0x7, 0x5, 0xb, 0xfffffffa, 0xffffffff, 0x1, 0x5, 0x9, 0x3, 0xffff, 0x2, 0xfffffff3, 0x6, 0xe, 0x7, 0xd, 0x1, 0x7fff, 0xd, 0x7fffffff, 0x5, 0x400, 0x0, 0x7, 0x8, 0x6, 0x0, 0xffffffff, 0x92e6, 0xfff, 0x0, 0x101, 0x3, 0x7, 0x8, 0x10000, 0x7fffffff, 0x400, 0x9, 0x8, 0x0, 0x401, 0xb, 0x7ff, 0x6, 0x6, 0x8, 0x16000, 0xfff, 0x1ff, 0x80000001, 0x100, 0x8, 0x8, 0x9, 0xf13, 0x7f, 0xfffffffd, 0x4, 0x2, 0x7, 0x3, 0x2, 0x1, 0x7, 0x400000, 0x7, 0x8, 0x6904, 0xffffffff, 0x4a34, 0x51, 0x5, 0xe, 0x3, 0x9, 0x9, 0x3c, 0x7, 0x80, 0x3, 0x4d, 0x10001, 0x8d6, 0x4, 0x6, 0x7, 0x2, 0x55, 0x9, 0x0, 0xffffff73, 0x8, 0x6, 0x7, 0x20400, 0x81, 0x7fffffff, 0xffffffff, 0x4, 0xfff, 0x5, 0x7c6, 0x3, 0x7fffffff, 0x9, 0x1, 0x3, 0x3, 0xfffffffc, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x3, 0x5, 0x1, 0x7, 0xffffffff, 0x4, 0x5d, 0xffff, 0x401, 0x7, 0x33, 0x8000, 0x8, 0x68, 0x6, 0x6, 0x1, 0xdb, 0x3, 0x0, 0x1, 0xd, 0xb, 0xfffff000, 0xd, 0xfc, 0xb69b, 0x1, 0x8000, 0x3, 0x6, 0xbe, 0xaa6, 0x2f38, 0x9, 0x200, 0x1, 0xfffffff9, 0x5, 0x401, 0x200, 0x2, 0x5, 0x1ff, 0x3ff, 0x2, 0x800, 0x4, 0x5, 0x7, 0x0, 0x101, 0x4, 0x1ff, 0x6, 0x40, 0x2, 0x8000, 0x6, 0x6, 0x3, 0x6, 0x8, 0x7d, 0x7e, 0xfffffffa, 0x4, 0x2, 0x4, 0x44a, 0xf, 0x80, 0x8, 0x9, 0xfffffff7, 0x10001, 0x9, 0x3, 0xffff, 0x1853, 0x5, 0x3, 0x1, 0x8, 0x7, 0xd, 0xfffffffc, 0x1000, 0x7f, 0x5, 0x400, 0x2, 0x0, 0x8, 0x5, 0x2, 0x400, 0x7, 0xfd, 0xe377, 0x7, 0x7fff, 0xdd44, 0x0, 0x2, 0x200, 0x2, 0x7, 0xe, 0x4, 0x1, 0x58e, 0x5, 0x6, 0x3, 0xfb80, 0x4, 0xffffff3f, 0xd6b, 0x3, 0xffffffc1, 0x8, 0x7f, 0x80000001, 0x1000, 0xd081, 0x0, 0x1dc8, 0xfffffffb, 0x2, 0x7, 0x2, 0x8, 0x23, 0x1, 0x5, 0x80000000, 0x8d]}, @TCA_POLICE_RATE={0x404, 0x2, [0xd15c, 0xfffff6c6, 0x7fffffff, 0x8, 0x15, 0x7, 0x10001, 0x80000001, 0x0, 0x6, 0x7, 0x7ff, 0x47d6, 0x0, 0x6f, 0x7f, 0x7ff, 0x9, 0x0, 0x2, 0x8, 0xffff, 0x8, 0x6, 0x6, 0xae4, 0xffffff00, 0x3, 0x9dc, 0x7, 0x6, 0x401, 0x2, 0x280, 0x827b, 0x7fffffff, 0x7, 0x7, 0x400, 0x5, 0xf6, 0x40, 0x80, 0x4, 0x5a6, 0x5, 0x7f, 0x3f8e4b6c, 0x3, 0x0, 0x1, 0xd93, 0x6, 0x8, 0x2, 0x10, 0xbf, 0x9f, 0x5, 0x81, 0xcd5, 0x7, 0x5, 0x7, 0xfff, 0x9, 0x8000, 0xfffffff8, 0x7, 0x4, 0x7, 0x0, 0x2f, 0x3, 0x7, 0x0, 0xffffffff, 0x4, 0x1, 0x6725, 0x5, 0x37, 0x1, 0x6, 0x1, 0x1, 0x99d, 0x7ff, 0xffffffff, 0x8, 0x10000, 0x6321, 0x5, 0x5, 0x7, 0x2, 0xf8000000, 0x0, 0x2, 0x178, 0x4, 0x40000, 0x2, 0xe, 0xffffff3a, 0xe, 0x9, 0xe, 0x1, 0x7, 0x0, 0x0, 0xc2, 0x10000, 0x0, 0x800, 0xc, 0x2, 0x0, 0x5, 0x7, 0x9, 0x5, 0x8, 0x0, 0x2, 0x1, 0x0, 0x10000, 0x298, 0x9, 0x3, 0xf, 0x6, 0x9, 0x0, 0xf, 0x4, 0x1, 0x1, 0x3, 0x2a5f, 0x0, 0x65, 0x15b, 0x9, 0x7, 0xc, 0x80000000, 0x2, 0x6, 0x6, 0x9, 0x9bb, 0x5, 0x7, 0x80000000, 0x4, 0x2, 0x8, 0x0, 0x3, 0x8000, 0x9, 0x75c, 0x9, 0x9, 0x28003e5e, 0x0, 0x6, 0x10, 0x5, 0x4, 0x29, 0x9, 0x8, 0x7, 0x9, 0x8, 0x9f, 0x4, 0x80000001, 0x87, 0x1, 0x2, 0x4, 0x0, 0x3, 0x9, 0x6, 0x5, 0xb, 0x5, 0x6, 0x2e0, 0x4, 0x8, 0x3ff, 0x0, 0x3, 0x1, 0x2, 0x1cd, 0x9, 0x1, 0xe3b, 0xd0000000, 0x100, 0x9, 0x5, 0xfe4b, 0x8, 0x9ab8, 0xf, 0x3, 0x8, 0x2, 0x8, 0xbd, 0x3, 0x1ff, 0x40, 0x5, 0x9, 0x7, 0x4, 0x4, 0x873, 0x0, 0x1ff, 0xffff, 0x5, 0x5, 0x80000001, 0x5, 0x3fb30258, 0x4, 0xf, 0xc741, 0x8, 0xf2, 0x4, 0x4, 0x8001, 0x3, 0x0, 0x8, 0x0, 0x2, 0x675, 0xffffffff, 0x6, 0x1ff, 0xb126000, 0xf5, 0x2b2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000000000000001}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfb, 0x9, 0x61d, 0x10001, 0x7ff, 0x4, 0x0, 0x3, 0x8d, 0x6261, 0xb6, 0x7fff, 0x6, 0xc, 0x8, 0x0, 0x0, 0xa6, 0x2, 0x5, 0x10000, 0xd, 0x3, 0x9, 0x9, 0xfffff800, 0x5, 0xe4, 0x72c, 0x802, 0x40, 0x9, 0x81, 0xfff, 0x100, 0x0, 0x31, 0x7, 0xe, 0xf, 0x5, 0x0, 0x10001, 0x0, 0x4, 0xb, 0xffffffff, 0x2, 0x6, 0x68, 0x9, 0xffff8000, 0x8, 0x22bc0000, 0x1000, 0x4, 0x8, 0x0, 0x3, 0xee, 0x2, 0x1, 0x1000, 0x2, 0x9, 0x7f, 0x7, 0xea, 0xa, 0x2, 0x10, 0xa, 0x8, 0x8, 0x0, 0x1, 0x8, 0x2, 0x3, 0x3, 0x4800000, 0x315548dd, 0x3, 0x1, 0x4, 0x4, 0x2, 0x0, 0x1ff, 0x3, 0x2, 0x3, 0x6086, 0x3, 0x1000, 0x6, 0x8, 0x1ff, 0xf, 0x4, 0x9, 0x2, 0xebca, 0x3, 0x6, 0x0, 0xcd51271, 0x1, 0x80, 0x5, 0x7, 0x5, 0xc6, 0x9, 0x9, 0x17, 0x2, 0x4fc9, 0x8, 0x8, 0xd, 0x3, 0xf27, 0x100000, 0x9, 0x3, 0xffffffff, 0x8, 0xffff, 0x100, 0x59, 0x3, 0x3, 0x9, 0x10000, 0x4, 0x80f, 0x10000, 0x0, 0x6, 0xffff, 0x7ff, 0xfffffffa, 0x8001, 0x40, 0x80, 0x400, 0xe0, 0x6, 0x3, 0x0, 0x6, 0x0, 0x6, 0xd, 0x1, 0x2, 0x2, 0x6, 0x5, 0x20b, 0x8, 0x19d2, 0x6, 0x6ce, 0x800, 0x8, 0x101, 0x6, 0x2, 0x30, 0xfffffffa, 0x1, 0xac, 0x7, 0x5927, 0x5, 0x8, 0x0, 0xc, 0x5, 0x6, 0x3, 0x3, 0x1, 0x953, 0x9, 0x5, 0x4, 0xe2dd, 0x8, 0x1, 0x10001, 0x3, 0x8001, 0xb9f4, 0x8, 0x7, 0x3, 0x6, 0x0, 0x9, 0xe, 0x7ff, 0x4, 0x6, 0x1, 0x81, 0x6d2, 0xab, 0x8, 0x0, 0x1, 0xc9d4, 0x5, 0x2, 0x2, 0x0, 0x400, 0x0, 0x3, 0x489, 0xf, 0x6, 0x0, 0xc0000000, 0x3, 0x1, 0xfffffffa, 0x3, 0x5, 0x0, 0xff, 0xfff, 0x4, 0x2, 0x81, 0x1, 0x80000001, 0x100, 0x3, 0x6, 0x0, 0x7, 0xffffffff, 0x0, 0x8, 0x6, 0x6, 0x4, 0x6, 0x4, 0x1, 0x800, 0x1, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x6, 0x2, 0x1, 0x2, {0x26, 0x0, 0x10, 0x9, 0x4bc6, 0xe}, {0x3, 0x2, 0x7cd, 0x2, 0x80, 0x5}, 0x8, 0x6, 0xfffffffb}}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x98, 0x4, 0x9, 0x0, 0x6, 0x4, 0x5, 0x3, 0x6, 0x32a, 0x2, 0x7f, 0x8, 0xe, 0x7fffffff, 0x2, 0x7f, 0x2, 0x1, 0x9, 0x3, 0x261c, 0xffff1f66, 0x7, 0x5, 0x6, 0x8, 0x1000, 0xc, 0x8, 0xb, 0x7, 0x4, 0x3, 0x200, 0xffff, 0x5, 0x1ff, 0x1420, 0x7, 0xb, 0x0, 0x8, 0x0, 0x7, 0x5a5ff067, 0x8, 0x549, 0x10, 0x115, 0x9849, 0xfffffbff, 0xffffffff, 0x3196e59c, 0x9, 0x9, 0x7, 0x1000, 0x9, 0x2, 0x6, 0xb8, 0x1, 0x200, 0x5, 0x3, 0xd331, 0x1db, 0x2, 0x3, 0x7fff, 0x8, 0x7fffffff, 0x7, 0x5, 0x200, 0x8, 0x0, 0x9, 0x4, 0xffffffff, 0x7, 0x0, 0x3, 0x7, 0x80000000, 0x5, 0x36e, 0x3, 0x8, 0xe, 0x3, 0x18f, 0x0, 0x1, 0x5, 0x2, 0x401, 0x7, 0x0, 0x9, 0x1, 0x9, 0x2fd, 0x9, 0xfffffffc, 0x80000001, 0x3, 0x2, 0x435, 0x54, 0x4, 0x2, 0x6, 0x7ff, 0x8, 0xffffffff, 0x0, 0x3, 0x1, 0xa0, 0x4, 0x7, 0xfffffffb, 0x1, 0x81, 0xfffffffe, 0x8, 0xfea, 0xec, 0x6, 0x18, 0x80, 0x100, 0x3, 0xc5d1, 0xd5, 0x7fff, 0x7f, 0xf, 0x3, 0x8fa, 0x1ff, 0x100, 0x7fff, 0x9ff4, 0x8e, 0x3, 0x5, 0x4, 0x6, 0x7, 0x3, 0x1, 0x2, 0x8, 0x5, 0x3800000, 0x2, 0x1, 0x7, 0x5d63, 0xfffffffe, 0x7, 0xffffffff, 0x20000000, 0x9, 0x1, 0x9, 0x1, 0x3e67, 0x9, 0x0, 0x1, 0x4, 0x100, 0x0, 0x8, 0x7, 0x4, 0x0, 0x7, 0x8f, 0xfffffffe, 0x5, 0x7, 0x1ff, 0x7c59, 0x80000000, 0x7, 0x1ab, 0x1, 0xf04, 0x7fff, 0xd0c, 0x8, 0x6, 0x9, 0x37a, 0x5, 0x2, 0x9, 0x80, 0x7f, 0xf, 0x8, 0x10001, 0x7, 0x5, 0x8, 0x2, 0xaa, 0x2, 0x2, 0x6169, 0xa8, 0x9, 0x1000, 0xffffffff, 0xc0, 0xff, 0x4, 0x1, 0x3, 0x8001, 0x5, 0xe, 0x7f, 0x2, 0x3, 0x6, 0x8, 0x2, 0x2, 0x81, 0x9, 0x1000, 0x769d, 0xfff, 0x3, 0x4, 0x3, 0x4, 0x2, 0x400, 0x4a09, 0xfb, 0x4, 0x8, 0xfffffff7, 0x1, 0xfffffffa, 0x2, 0x1000, 0x100, 0x17000000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x40}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0xe166, 0x3, 0x101, 0x6, 0x5, 0x100, 0xffffffff, 0x7, 0x10000, 0xfffffffb, 0xffff, 0x8, 0x8, 0x0, 0xff, 0x7fffffff, 0x4, 0xffff0001, 0x1ff, 0xffffffff, 0x3ff, 0x3, 0x1585, 0x80000000, 0x2, 0xa, 0x3, 0x9, 0x3, 0x0, 0x7, 0x4, 0x7, 0x5, 0x7, 0x2, 0xc, 0x6, 0x78f, 0x2079, 0x1, 0x5, 0x0, 0x9, 0x0, 0xfff, 0x80, 0x2638abcb, 0xfffffffe, 0x1, 0xffffffff, 0x8, 0x4, 0x81, 0x72ce, 0x5, 0x7, 0xa, 0x6, 0xfffffffd, 0x3, 0x2, 0x1, 0xff, 0xb7, 0x6, 0xcf3, 0x3d31, 0x7, 0xffffffff, 0x5, 0x6, 0x3, 0x2, 0x7, 0x5, 0x5, 0x8, 0xffff8001, 0x9566, 0x6, 0x1000, 0x3, 0x8, 0x6, 0x2, 0x2, 0x2, 0xc536, 0x2, 0x6, 0x1ff, 0x8, 0x9, 0x4, 0x80000001, 0x6, 0x2c2, 0x9a1d, 0x0, 0x6, 0x7, 0x4, 0xa8, 0x7, 0x200, 0x0, 0x9, 0x3ff, 0x81, 0x9, 0x4, 0x0, 0x2, 0x400, 0xed8, 0x7, 0x5, 0x5, 0x4000000, 0x3, 0x79a, 0x7, 0x5, 0x48, 0x2, 0x7ff, 0x2, 0x6, 0x5, 0x2, 0x3, 0x5, 0x7, 0x437, 0x6, 0x81, 0x6, 0x0, 0x1, 0x8, 0x4, 0x1, 0x2da80, 0xfff, 0x40, 0xffffffff, 0x40, 0xfffffe01, 0x9, 0x200, 0xf7, 0x8, 0x8000, 0x35, 0x1ff, 0x4, 0x7ff, 0x7, 0x5, 0x0, 0x1, 0x4, 0x100, 0x8, 0xd, 0x7, 0x6, 0x7ff, 0x6, 0x6, 0x4, 0x8, 0xfffffffd, 0x841, 0x1, 0x4, 0x7c74, 0x0, 0x2, 0xedf, 0xffff90e3, 0x8, 0xb77b, 0xff, 0x10000, 0xffffff02, 0x7, 0x5, 0xde, 0x1000, 0x9a1, 0x9, 0x3, 0x80, 0x8, 0x1, 0x2, 0x9, 0x1, 0xffffff81, 0x0, 0x9, 0x966a, 0x3, 0x40, 0x3, 0x9, 0x0, 0x70d, 0x3, 0x91, 0x0, 0x7, 0x1, 0x7e8, 0x4, 0x5, 0x2, 0x72a, 0x4, 0x8, 0x5, 0x5, 0xceb, 0xfffffffa, 0x3, 0x7fffffff, 0x7fff, 0x100, 0x100, 0x9, 0x8e, 0x7fff, 0xfff, 0x9, 0xe89, 0x8, 0x7, 0xf, 0x8, 0xc734, 0x400, 0x1, 0x4, 0xb9c, 0x3, 0x81, 0x1, 0xa, 0x839, 0xffffffff, 0x1, 0x200, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff8}]]}, {0x98, 0x6, "82f8896b5d0d1f89036402cfdf2ce97fd1cee89cfc30df5515be5a0a34f82ae4078ff678a727664696844b004eff833dc3926fcbc193570d95c41c8b644068ae8613384cf5757752966c099f709ec39f421e3844a973f71dee6f082ce7582278515c71cf54a2862212534f09c63c6663837c4b3d52ebc7b86384b9e4df035e0188874a55bb966038d27035ee35258895b8b11ac0"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x118, 0x10, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfcb, 0x62a, 0x5, 0x5, 0x7}}]}, {0xd1, 0x6, "2b1c54ede6a89d393fb0402d2fb452af2b84ad81f8c4082ae1863788d2005c29bcd6cd8b580d7de7c2f7e2af7b20e3520258a7ab28a5e5049e49b7fa9e9c0b4595472bae19d73700f058f80960fb466ceec67c5b7a3bc8015dacbcd0bea26029d372af169c3bd3c702baf84f3cdb22c6f57e7757573db95aa902c2d1c6f362b967b8697d8453cd6537b2937d1fd17281162fe931af73bc984e3370a986314dbdeb7f089a77316c557afc2fb835dd4f3d80e3b7422365b500b031e1031bfe937b9825ff8d1dcb1d4212a9997072"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x14c, 0x1c, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xa94ff}, @TCA_MPLS_LABEL={0x8, 0x5, 0x78eaf}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_PROTO={0x6, 0x4, 0x201}]}, {0xf5, 0x6, "ecd14cfd784884597daaad73d11e1c64ee1677c340e840a3e6556b1ac9088ba67b452ae16a90b931bdcb506d18066fc6df86c8c55ea340d60f874345fff2b01c09211471ec61a7685b5c5caf59bae46567f7cc177ee8b4ed364e0719f5040093c611d977e4480326b87f8dc7f1a42f8773bc4620535506c3a7d439f4da55fa38ec0383c50d58af951c79b3e1fd3cf6957583b8547ed83c803fca9edb524274c8e5509f396f4d5d3680e502626c4b000146984821215b550fbe36d114a020e0125bc7de65bb6cfcea2348cb094f26497612750bbe8d35d3d9df4e04feb2476d89429bb1c4f6ede471d87f97bea3205284f8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0xfc, 0x17, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x1, 0x3, 0x9f8, 0x4}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x5, 0x0, 0x9, 0x4}, @dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x1, 0x10000002, 0x7ff, 0xd9}, @remote, @broadcast, 0xffffffff}}]}, {0x5b, 0x6, "8df4eddef2d8371a2c35f16579c28979e05d2ea795aaf1202d7d4f5bacc1c93970972bfbc32be5412ae6304c5d6c947a972b802aca3000562fec371185fde6642e25005af675d2f289f583237603a88ebcdb3ae18585a4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0xffff}}]}}]}, 0x5b64}, 0x1, 0x0, 0x0, 0x80}, 0x200c8000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4f24, @broadcast}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="180000008f0000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901008004000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000060000007500f4fff0ffffffbf91000000000000b70200000300000085000000ae000000b70000000000000095000000000000003604c9c0d734a6721cf547a7b1fd13fba7eb6545f66be890d72fed25a134361411863a8ff74f08a482ef0da055e930161e3437d6f4f8fe"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) getsockopt$sock_buf(r6, 0x1, 0x1a, 0x0, &(0x7f0000000340)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x80}, 0x8) setsockopt(r8, 0x84, 0x80, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r8, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) socket$inet_sctp(0x2, 0x1, 0x84) 2.195171306s ago: executing program 0 (id=2901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000301010300000000000000000a0000020c00198008000100090400003c0001800c000280140001003a0000002c000180140003"], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10014000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xb0, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x58, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x10}}, {0x48, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x42, 0x1, "2c9e4613cc38bd56d745123749c5d5655fd5427d71968063af666ce20dcd56226f9be4233467555f9a156681010596fd8a9d66c404b1ca1a4cd5e7ff1fa4"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xa}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) 2.156934929s ago: executing program 4 (id=2902): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r1, 0x29, 0xd2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x16017, 0x2021}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xffffff6e, 0x4, @local}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 1.976987688s ago: executing program 0 (id=2903): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1058b204cd4e661b715479c92805e4805e1a6a5d8a1eef6226761d487dae961904dfa2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000002c0), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r2, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r0, @ANYRES64=0x0, @ANYRES64=r1], 0x80}}, 0x0) r3 = socket(0x10, 0x6, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070009080000730000000000000000040500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r7 = socket$unix(0x1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r8, &(0x7f0000000340), &(0x7f00000002c0)=@udp=r3}, 0x20) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffc}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 1.904732589s ago: executing program 2 (id=2904): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x2c, 0x64, 0xf31, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff3, 0xffff}, {0x0, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x44044) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.86560491s ago: executing program 4 (id=2905): r0 = socket(0x2b, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000000300)={0x80}) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e4d700", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @empty, @loopback={0xfec0ffff00000000, 0xffffac1414aa}, [], "ef9edaaa64947bfe"}}}}}}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pwrite64(r4, 0x0, 0xffffffffffffff4d, 0x7fffffffffffffff) 1.860914222s ago: executing program 3 (id=2906): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_delroute={0x24, 0x19, 0x2, 0x70bd2c, 0x25dfdbfc, {0xa, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x200}, [@RTA_OIF={0x8, 0x4, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x7f1a53368f4ab1a) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r3, 0x913e0000) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r6, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x2e36, 0x10000}) 1.733191517s ago: executing program 3 (id=2907): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r1], 0x44}}, 0x40) 1.587066545s ago: executing program 3 (id=2908): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x10000000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x3, 0xb2, [0xe, 0x8, 0x6, 0xe, 0x100000001, 0x3fc3a685], 0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000240)=""/178}, &(0x7f00000000c0)=0x78) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="05000000010000", 0x7) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14, 0x80000) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r9, 0x40004}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(r13, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) close(r1) 1.561422432s ago: executing program 4 (id=2909): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) unshare(0x6a040000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x25, 0x5, 0x0) (async) r1 = socket(0x25, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000ac0)="a2ee"}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000ac0)="a2ee"}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100000d00000001000000000000001800000000000000100100000d"], 0x30}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100000d00000001000000000000001800000000000000100100000d"], 0x30}, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r6}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7, 0xffffffffffffffff}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r8}, &(0x7f0000000040), &(0x7f0000000500)=r6}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r8}, &(0x7f0000000040), &(0x7f0000000500)=r6}, 0x20) pwritev(r4, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000000)="7218cc", 0x3}], 0x2, 0x6, 0x0) socket(0x11, 0x3, 0x0) (async) r9 = socket(0x11, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', 0x0}) bind$packet(r9, &(0x7f0000000180)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) 716.972938ms ago: executing program 2 (id=2910): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x66, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$inet(0x2, 0x3, 0x4) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100400000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000004900), 0x4) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x24, 0x0, &(0x7f0000000340)=0xc) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) (async) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200010000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r8, 0x7f62c4469923ede5}, 0x14}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r8, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8004) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201e5ff9e584eb1aa3d10e3dff9f8e583de3a48e95f3b1ef28da212fb3a0d2e2bba5a83d454726fe5a16e3c020146d24c8d98140213c50401c64c9d2e58c8e5858ea833cf9d9ca322", 0x75}], 0x1}, 0x48000) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4004) 662.877323ms ago: executing program 0 (id=2911): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0xc0e00, 0x7c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'hsr0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xaa1c}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x41100, 0xc}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xaa1c}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x41100, 0xc}, 0x94) 657.955628ms ago: executing program 2 (id=2912): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000002c0)='%+9llu \x00'}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x6, 0x0}, 0x8) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r6, @ANYBLOB="0300fcbb3700"/20, @ANYRES32=0x0, @ANYBLOB="04000000050000000300"/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="789daf9e", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x0, 0x4, 0x5}, 0x10, r7, 0x0, 0x0, &(0x7f0000000880)=[r6, r6, r6, r8], 0x0, 0x10, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x15, &(0x7f0000000480)=ANY=[@ANYBLOB="9500000000000000b37f1000010000002d06f4ff0000000018200000", @ANYRES32=r1, @ANYBLOB="0000000002000000041b010005000000184900000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000008500000004000000185700000c000000000000000000000018160000", @ANYRES32=r2, @ANYBLOB="00aa24cd00000008"], &(0x7f0000000540)='GPL\x00', 0x2, 0xd4, &(0x7f00000005c0)=""/212, 0x41100, 0x1c, '\x00', r3, @fallback=0xd, r4, 0x8, &(0x7f0000000700)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x5, 0x1, 0x8}, 0x10, r7, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000780)=[{0x3, 0x2, 0x8, 0x7}, {0x2, 0x4}, {0x1, 0x2, 0x1, 0x6}, {0x5, 0x1, 0xd, 0x6}, {0x3, 0x4, 0x10}], 0x10, 0x9}, 0x94) socket$kcm(0x2d, 0x2, 0x0) (async) r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000340)={r9}) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000040)={0x1, 0x2, 0x2, 0x1000, 0x1, 0x0, [{0x5, 0x2, 0x4, '\x00', 0x1105}]}) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r10, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000a00)=ANY=[@ANYBLOB="ffffffffffff1780c206050086dd6018232500270000000001000000000000fdff40b2f1b18602ced49ea07b3c4300000000bbfe8000000000000000000000000000aa2b000241000000005f8b2fb65ecc34655439cdcea04ebfc381dbf0e2273e02745feeede6f2ae739a53150db53b674c53439cb84cf5b75825c4b3fdfb2f6804d55cf6a4a63d8a95d067dc76e2fa16171297a9798cf7129900081f2fcd837cc8c2350e72cc85ad52b66d06000000"], 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000a00)=ANY=[@ANYBLOB="ffffffffffff1780c206050086dd6018232500270000000001000000000000fdff40b2f1b18602ced49ea07b3c4300000000bbfe8000000000000000000000000000aa2b000241000000005f8b2fb65ecc34655439cdcea04ebfc381dbf0e2273e02745feeede6f2ae739a53150db53b674c53439cb84cf5b75825c4b3fdfb2f6804d55cf6a4a63d8a95d067dc76e2fa16171297a9798cf7129900081f2fcd837cc8c2350e72cc85ad52b66d06000000"], 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r14 = socket$inet_tcp(0x2, 0x1, 0x0) bind$xdp(r4, &(0x7f0000000980)={0x2c, 0x0, r11, 0x18, r12}, 0x10) (async) bind$xdp(r4, &(0x7f0000000980)={0x2c, 0x0, r11, 0x18, r12}, 0x10) ioctl$sock_inet_SIOCSARP(r14, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x8, {0x2, 0x0, @multicast2}}) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e3, &(0x7f0000000180)={r9, r13}) 520.993403ms ago: executing program 2 (id=2913): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x13, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x2, 0x80010, r2, 0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) (async, rerun: 64) socket$packet(0x11, 0xf9261a63b4b4a0a4, 0x300) (rerun: 64) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r4, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r6, 0xb4807000) 516.623575ms ago: executing program 3 (id=2914): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x20, &(0x7f0000000080)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x20, &(0x7f0000000080)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10) socketpair(0x9, 0x4, 0x5, &(0x7f0000000280)) (async) socketpair(0x9, 0x4, 0x5, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) epoll_create1(0x0) (async) r2 = epoll_create1(0x0) ppoll(&(0x7f0000000500)=[{r2}], 0x1, &(0x7f0000000400)={0x0, 0x3938700}, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0)=r4, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 447.356902ms ago: executing program 2 (id=2915): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a310000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xc0}}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x94}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) getsockopt(r2, 0x9b3, 0x7fffffff, &(0x7f0000000240)=""/165, &(0x7f0000000300)=0xa5) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@bloom_filter={0x1e, 0x80, 0x9017, 0x5560, 0x4c800, r3, 0xb5f, '\x00', 0x0, r4, 0x3, 0x0, 0x5, 0x6, @value=r4}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r5, &(0x7f0000000180)}, 0x20) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) r6 = socket(0xa, 0x1, 0x20000) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001240)={0xc0, 0x3d, 0x9, 0xffffffff, 0x25dfdbfc, {0xfe}, [@typed={0x4, 0x11f}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@multicast1}]}, @typed={0x9c, 0x13f, 0x0, 0x0, @binary="a7d1fd43dc69dcbef5dce320ff0b928ddde99c5620f766648a5c37fb00f400008085aadd8be1a0e6e1cf2c35a08037f3e64babc9bfa3bb5ae21b7dbd29009f69c9af1b4897f2a40eea9efb61c2e2c24b3fb9826dfe87f6d0ef92d955aad6fc19af1bb436f84d825062036046d2b526210c67d0505d4edb782919b0c7cea88d27d19ea6102dfe8b5775cdb711704b2b3a1f6fdff016ff141c"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r7, 0x0, 0xe5, 0x5d, &(0x7f0000000f80)="d69cbaf4f0fcb58dbeb1b9af59882a7961b1a17a8a0034e1947407538363ad863ab5dcfeafc46ca61d2513587a1b998be2d44fefbb4959ccc62ceba479bd5d5f16da500c554cbd5b1a0c4bd59203d0dcda5b1f5d1099b089c395254d0825dd5fc5018d7d7f072db2b1440a002a0c08b4574ce22d4191f3e36ff17a8aa91a05fac6346884f476a1f8422acb554c37dac0350f6ec7e3939a0fa05a98da29fa7eba513220fe8c17fd6d5216101419d6ae54d09617dd1b18b7e463ba76a6f7d50d744ec41f8242c5341b502638ba0cb4e324c202461b70a1ec04f812c8ca85de3732ee9d474376", &(0x7f0000001080)=""/93, 0x6, 0x0, 0x32, 0x68, &(0x7f0000001100)="fabc8bb9b580ef3398460eae7a6e3f0fb53980c444f151f3a4eb14ee82e7e3475b936a1233299a5da2407c5d74b62b3fd6a0", &(0x7f0000001140)="4163899bf662b62e02878aef4a973e4e7c9a23a823e111e771917cb5e6f7cfa63a79522bbf3de8c33a2c9aae70462f732a62584d5b6d7a1c0c0ab434bee7fa088ae8ae94215a6c60f3c4092476d063e11eac3bf4b02047f31498e43c746b9752b3062b8668a1c301", 0x2, 0x0, 0x80}, 0x50) 389.000519ms ago: executing program 0 (id=2916): syz_emit_ethernet(0x46, &(0x7f0000001580)=ANY=[@ANYBLOB="ffffffffffff1780c206050086dd6018232500102c00fe8000000000000000000000000000bbfe8000001100005c282a92de0551acbf6a0302410000f9ff2800000000000000"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) syz_emit_ethernet(0x26, &(0x7f0000000840)=ANY=[@ANYBLOB="bbbbbbbbbbbbaa49aaaaaaaaaa88a82f0081001200000c0300009700010000630e677449af219f57759a8379e9e87f420f5b605fba6bd26119572d8d9245fed643b417e832f7bd46578c42a7"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x62, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaa200000002c0600ff0100000000000000000000000000010000000000200000000000000000000080004000"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b040010090780000fe09f989689a93df30fe0af989f16d73c0e7980303060000"], 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000f000000186a000001000000000000009e0400000833f4ffffffffff18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c00000000000000"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket(0xb, 0x800, 0x6dda) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3c, &(0x7f0000000000)='\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000000c0), 0x2, 0x0) write(r3, &(0x7f0000000340)="3f000000010003", 0x7) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, &(0x7f0000000480)={0x2c, 0x7a25c7ab66e5d1e1, 0x0, 0x2b}, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0x10}, 0x10}, 0x94) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r9, 0x65, 0x4, &(0x7f00000003c0), &(0x7f0000000400)=0x4) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000001740)={0x0, 0x4, 0xfe, 0x3, @vifc_lcl_addr=@private=0xa010100, @loopback}, 0x10) 385.072202ms ago: executing program 4 (id=2917): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 322.724599ms ago: executing program 3 (id=2918): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="4404000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000004c0)}, 0x6e) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x22, 0x2, 0x3) (async) r3 = socket(0x22, 0x2, 0x3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000380)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000380)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r4, 0x9, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r5, &(0x7f0000000240), 0x0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r5, &(0x7f0000000240), 0x0}, 0x20) getsockopt$packet_buf(r3, 0x107, 0xd, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x100, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x2000, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}]}, 0x3c}}, 0x80) socket$inet_udplite(0x2, 0x2, 0x88) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) 172.326842ms ago: executing program 4 (id=2919): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 113.152637ms ago: executing program 3 (id=2920): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) socket$inet6(0xa, 0x5, 0x0) (async) r0 = socket$inet6(0xa, 0x5, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6fb", 0x2}], 0x1}}], 0x5, 0x4040000) (async) sendmmsg$inet(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6fb", 0x2}], 0x1}}], 0x5, 0x4040000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000073b7601d4da60000000000000001000000000000000000000000e6f3c9c683ffa06dd564b0e1922a4ee31811d1ae866990ee"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000073b7601d4da60000000000000001000000000000000000000000e6f3c9c683ffa06dd564b0e1922a4ee31811d1ae866990ee"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r3}, 0x10) bind$inet6(r0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x110, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@empty, @local, [0x0, 0xff, 0xff000000, 0xffffff00], [0x46b6aa5b327aca38, 0xff, 0xff], 'ipvlan1\x00', 'pimreg\x00', {}, {0xff}, 0xa0, 0x2, 0x2, 0x11}, 0x0, 0xa8, 0x110, 0x60030000, {0x0, 0xff000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x10, 0xfff, 0x8, 'snmp\x00', 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x5, "3f323b29147966fc31060000008bc7fbfda42ece1659b512a4eabff02563"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x3c}, 0x2, @in=@loopback, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r5, 0x10c, 0x4, &(0x7f0000000000)=0x7, 0x4) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) 112.596809ms ago: executing program 0 (id=2921): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffbd}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @empty, 0x4}, 0x1c) (async) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) listen(r1, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000340)=@nl=@unspec, 0x80, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x6c, r2}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a88a855", 0x0, 0x1c00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.200332ms ago: executing program 4 (id=2922): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r3, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x44) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) epoll_create(0xff) r5 = socket$inet6(0xa, 0x3, 0xff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fcdbdf2504000000100001800c0001006574683a9f116f2b"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r8 = getuid() bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x4e24, 0x0, 0x4e22, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, r8}, {0x7e, 0x40101, 0x0, 0x20000000000, 0xfffffffbfffffffd, 0x0, 0x0, 0x8}, {0xcb29, 0x40001000000000, 0x8000, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x2, 0x3}, {{@in=@loopback, 0x0, 0x6c}, 0x2, @in6=@loopback, 0x1502, 0x1, 0x2, 0x0, 0x5, 0xfffffffd, 0x1}}, 0xe8) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 0s ago: executing program 0 (id=2923): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8a80, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8a80, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0x8029, 0x1}) (async) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0x8029, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_USERDATA={0x8, 0xd, 0x1, 0x0, "e771295c"}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_TOS={0x5, 0x9, 0xfb}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x5c}}, 0x804) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="05002bbd7000fcdbdf2573da792f08000300", @ANYRES32=r11], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r7, 0x0, '\x00', 0x0, 0x0, 0x1}, 0x50) r13 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r13, 0x6, 0xd, &(0x7f0000000140)='htcp', 0x53) sendto$inet(r13, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000008f000006000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901008004000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000350d00008500000006000000d500f4fffcffffffbf91000000000000b70200000300000085000000ae000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000008f000006000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901008004000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000350d00008500000006000000d500f4fffcffffffbf91000000000000b70200000300000085000000ae000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x2c, 0x4, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) kernel console output (not intermixed with test programs): im hwsim7 wlan1: entered allmulticast mode [ 380.455569][T11398] bond0: (slave syz_tun): Releasing backup interface [ 380.491082][T11398] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 380.562602][T11398] netlink: 'syz.2.1340': attribute type 10 has an invalid length. [ 380.589858][T11415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.624093][T11398] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 380.638479][T11398] bond0: (slave wlan1): refused to change device type [ 380.684569][T11414] vxcan1 speed is unknown, defaulting to 1000 [ 380.817768][T11423] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 380.828273][T11423] dvmrp1: linktype set to 1 [ 380.857145][T11423] netlink: 'syz.1.1348': attribute type 3 has an invalid length. [ 380.881351][T11423] netlink: 'syz.1.1348': attribute type 10 has an invalid length. [ 381.003698][T11436] bond0: entered promiscuous mode [ 381.009609][T11436] bond_slave_0: entered promiscuous mode [ 381.015567][T11436] bond_slave_1: entered promiscuous mode [ 381.023476][T11436] bond0: left promiscuous mode [ 381.032420][T11436] bond_slave_0: left promiscuous mode [ 381.043112][T11436] bond_slave_1: left promiscuous mode [ 381.138425][T11419] vxcan1 speed is unknown, defaulting to 1000 [ 381.138731][T11414] lo speed is unknown, defaulting to 1000 [ 381.645591][T11433] vxcan1 speed is unknown, defaulting to 1000 [ 381.661911][T11419] lo speed is unknown, defaulting to 1000 [ 381.740564][T11465] netlink: 'syz.1.1357': attribute type 10 has an invalid length. [ 381.793882][T11467] __nla_validate_parse: 7 callbacks suppressed [ 381.793902][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1358'. [ 382.180319][T11477] vxcan1 speed is unknown, defaulting to 1000 [ 382.187576][T11433] lo speed is unknown, defaulting to 1000 [ 382.290486][T11489] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1361'. [ 382.867150][T11477] lo speed is unknown, defaulting to 1000 [ 382.959942][T11502] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1364'. [ 383.157488][ T36] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 383.184849][T11516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1367'. [ 383.223566][T11510] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 384.097892][ T864] lo speed is unknown, defaulting to 1000 [ 384.105951][ T864] syz0: Port: 1 Link DOWN [ 384.190975][ T864] lo speed is unknown, defaulting to 1000 [ 384.342957][T11535] netlink: 'syz.4.1372': attribute type 1 has an invalid length. [ 384.366251][T11537] netlink: 'syz.0.1371': attribute type 83 has an invalid length. [ 384.660990][T11538] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 384.699544][T11538] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 384.760930][T11538] bond3: (slave vcan1): making interface the new active one [ 384.799967][T11538] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 384.986555][T11537] bond4: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 385.612276][T11564] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1379'. [ 385.623583][T11569] tipc: Enabled bearer , priority 0 [ 385.662075][T11569] syzkaller0: entered promiscuous mode [ 385.667575][T11569] syzkaller0: entered allmulticast mode [ 385.681232][T11564] tap0: tun_chr_ioctl cmd 1074025678 [ 385.686700][T11564] tap0: group set to 0 [ 385.691634][T11561] vxcan1 speed is unknown, defaulting to 1000 [ 385.723333][T11576] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 385.802826][T11569] tipc: Resetting bearer [ 385.811601][T11568] tipc: Resetting bearer [ 385.830127][T11568] tipc: Disabling bearer [ 385.982700][T11584] netlink: 'syz.3.1383': attribute type 3 has an invalid length. [ 385.996936][T11585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1382'. [ 386.019404][T11584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1383'. [ 386.095028][T11588] netlink: 'syz.1.1385': attribute type 13 has an invalid length. [ 386.105207][T11588] netlink: 'syz.1.1385': attribute type 17 has an invalid length. [ 386.194961][T11588] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 386.236575][T11583] vxcan1 speed is unknown, defaulting to 1000 [ 386.248314][T11561] lo speed is unknown, defaulting to 1000 [ 386.532305][T11600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1389'. [ 386.709632][T11612] netlink: 'syz.1.1391': attribute type 10 has an invalid length. [ 386.717485][T11612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1391'. [ 386.747024][T11612] dummy0: entered promiscuous mode [ 386.797872][T11612] bridge0: port 3(dummy0) entered blocking state [ 386.816086][T11612] bridge0: port 3(dummy0) entered disabled state [ 386.835970][T11612] dummy0: entered allmulticast mode [ 386.868514][T11612] bridge0: port 3(dummy0) entered blocking state [ 386.875106][T11612] bridge0: port 3(dummy0) entered forwarding state [ 387.197777][T11618] vxcan1 speed is unknown, defaulting to 1000 [ 387.201316][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1397'. [ 387.239421][T11583] lo speed is unknown, defaulting to 1000 [ 387.336310][T11634] tunl0: Caught tx_queue_len zero misconfig [ 387.379361][T11636] sctp: [Deprecated]: syz.1.1399 (pid 11636) Use of int in maxseg socket option. [ 387.379361][T11636] Use struct sctp_assoc_value instead [ 387.660248][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1400'. [ 387.720369][T11618] lo speed is unknown, defaulting to 1000 [ 387.732715][T11648] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 387.767197][T11648] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1400'. [ 388.001161][T11650] vxcan1 speed is unknown, defaulting to 1000 [ 388.471092][T11665] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1403'. [ 388.669351][T11650] lo speed is unknown, defaulting to 1000 [ 388.912347][T11677] vxcan1 speed is unknown, defaulting to 1000 [ 388.942559][T11679] gretap2: entered promiscuous mode [ 388.947982][T11679] gretap2: entered allmulticast mode [ 388.994520][T11681] netlink: 'syz.0.1406': attribute type 21 has an invalid length. [ 389.022222][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'. [ 389.168338][T11685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1408'. [ 390.086603][T11677] lo speed is unknown, defaulting to 1000 [ 390.584784][T11703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1413'. [ 390.620122][T11703] netlink: 'syz.4.1413': attribute type 10 has an invalid length. [ 390.679692][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1411'. [ 391.238742][ T5826] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 391.323946][T11710] vxcan1 speed is unknown, defaulting to 1000 [ 391.879917][T11709] vxcan1 speed is unknown, defaulting to 1000 [ 391.879917][T11710] lo speed is unknown, defaulting to 1000 [ 392.125489][T11734] netlink: 'syz.4.1419': attribute type 22 has an invalid length. [ 392.134220][T11734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1419'. [ 392.294492][T11741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1422'. [ 392.341114][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1421'. [ 392.442095][T11727] vxcan1 speed is unknown, defaulting to 1000 [ 392.542827][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1425'. [ 392.704446][T11757] sock: sock_set_timeout: `syz.1.1426' (pid 11757) tries to set negative timeout [ 392.720180][T11760] sock: sock_set_timeout: `syz.1.1426' (pid 11760) tries to set negative timeout [ 392.761174][T11759] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1427'. [ 392.797323][T11762] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1427'. [ 392.824442][T11759] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1427'. [ 392.904349][T11727] lo speed is unknown, defaulting to 1000 [ 392.954834][T11766] netlink: 'syz.4.1429': attribute type 9 has an invalid length. [ 392.978230][T11766] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1429'. [ 393.133454][T11709] lo speed is unknown, defaulting to 1000 [ 393.910193][T11780] vxcan1 speed is unknown, defaulting to 1000 [ 394.236230][T11799] xt_CT: You must specify a L4 protocol and not use inversions on it [ 394.753222][T11780] lo speed is unknown, defaulting to 1000 [ 395.119362][T11821] lo: Caught tx_queue_len zero misconfig [ 395.167319][T11821] netlink: 'syz.3.1440': attribute type 14 has an invalid length. [ 395.221644][T11825] netlink: 'syz.0.1442': attribute type 1 has an invalid length. [ 395.401658][T11828] bond5: (slave gretap4): making interface the new active one [ 395.419001][T11832] netlink: 'syz.1.1444': attribute type 1 has an invalid length. [ 395.441172][T11828] bond5: (slave gretap4): Enslaving as an active interface with an up link [ 395.649510][T11832] 8021q: adding VLAN 0 to HW filter on device bond5 [ 395.693013][T11833] ipvlan0: entered allmulticast mode [ 395.710073][T11833] bond5: entered allmulticast mode [ 395.784161][T11839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1445'. [ 395.793883][T11839] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1445'. [ 395.803272][T11839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1445'. [ 395.901133][T11835] bond5: (slave gretap3): making interface the new active one [ 395.918155][T11835] gretap3: entered allmulticast mode [ 395.924975][T11835] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 396.556643][T11849] vxcan1 speed is unknown, defaulting to 1000 [ 397.033688][T11849] lo speed is unknown, defaulting to 1000 [ 397.033706][T11852] vxcan1 speed is unknown, defaulting to 1000 [ 397.298837][T11874] xt_TCPMSS: Only works on TCP SYN packets [ 397.645427][T11885] FAULT_INJECTION: forcing a failure. [ 397.645427][T11885] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 397.659201][T11885] CPU: 1 UID: 0 PID: 11885 Comm: syz.0.1459 Not tainted syzkaller #0 PREEMPT(full) [ 397.659225][T11885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 397.659243][T11885] Call Trace: [ 397.659251][T11885] [ 397.659259][T11885] dump_stack_lvl+0x189/0x250 [ 397.659284][T11885] ? __pfx____ratelimit+0x10/0x10 [ 397.659308][T11885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.659326][T11885] ? __pfx__printk+0x10/0x10 [ 397.659357][T11885] should_fail_ex+0x414/0x560 [ 397.659380][T11885] _copy_to_user+0x31/0xb0 [ 397.659404][T11885] simple_read_from_buffer+0xe1/0x170 [ 397.659428][T11885] proc_fail_nth_read+0x1b3/0x220 [ 397.659456][T11885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 397.659482][T11885] ? rw_verify_area+0x2a6/0x4d0 [ 397.659498][T11885] ? __lock_acquire+0xab9/0xd20 [ 397.659518][T11885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 397.659543][T11885] vfs_read+0x1fd/0xa30 [ 397.659560][T11885] ? fdget_pos+0x247/0x320 [ 397.659585][T11885] ? __pfx___mutex_lock+0x10/0x10 [ 397.659603][T11885] ? __pfx_vfs_read+0x10/0x10 [ 397.659621][T11885] ? __fget_files+0x2a/0x420 [ 397.659646][T11885] ? __fget_files+0x3a0/0x420 [ 397.659664][T11885] ? __fget_files+0x2a/0x420 [ 397.659692][T11885] ksys_read+0x145/0x250 [ 397.659712][T11885] ? __pfx_ksys_read+0x10/0x10 [ 397.659734][T11885] ? do_syscall_64+0xbe/0xfa0 [ 397.659762][T11885] do_syscall_64+0xfa/0xfa0 [ 397.659783][T11885] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.659806][T11885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.659823][T11885] ? clear_bhb_loop+0x60/0xb0 [ 397.659844][T11885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.659865][T11885] RIP: 0033:0x7f3e81d8d8dc [ 397.659882][T11885] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 397.659898][T11885] RSP: 002b:00007f3e7ffd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 397.659917][T11885] RAX: ffffffffffffffda RBX: 00007f3e81fe6090 RCX: 00007f3e81d8d8dc [ 397.659930][T11885] RDX: 000000000000000f RSI: 00007f3e7ffd50a0 RDI: 0000000000000004 [ 397.659942][T11885] RBP: 00007f3e7ffd5090 R08: 0000000000000000 R09: 0000000000000000 [ 397.659953][T11885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.659963][T11885] R13: 00007f3e81fe6128 R14: 00007f3e81fe6090 R15: 00007ffeddc86ca8 [ 397.659997][T11885] [ 398.054425][T11894] vlan0: left allmulticast mode [ 398.079250][T11894] geneve1: left allmulticast mode [ 398.342279][T11872] vxcan1 speed is unknown, defaulting to 1000 [ 398.348839][T11852] lo speed is unknown, defaulting to 1000 [ 398.581855][T11909] FAULT_INJECTION: forcing a failure. [ 398.581855][T11909] name failslab, interval 1, probability 0, space 0, times 1 [ 398.594981][T11909] CPU: 0 UID: 0 PID: 11909 Comm: syz.4.1465 Not tainted syzkaller #0 PREEMPT(full) [ 398.595007][T11909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 398.595016][T11909] Call Trace: [ 398.595023][T11909] [ 398.595031][T11909] dump_stack_lvl+0x189/0x250 [ 398.595055][T11909] ? __pfx____ratelimit+0x10/0x10 [ 398.595080][T11909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.595098][T11909] ? __pfx__printk+0x10/0x10 [ 398.595118][T11909] ? __lock_acquire+0xab9/0xd20 [ 398.595152][T11909] should_fail_ex+0x414/0x560 [ 398.595176][T11909] should_failslab+0xa8/0x100 [ 398.595198][T11909] kmem_cache_alloc_noprof+0x73/0x3c0 [ 398.595217][T11909] ? sctp_get_port_local+0x6d3/0x1680 [ 398.595242][T11909] sctp_get_port_local+0x6d3/0x1680 [ 398.595282][T11909] ? __pfx_sctp_get_port_local+0x10/0x10 [ 398.595307][T11909] ? sctp_bind_addr_match+0x28b/0x2b0 [ 398.595337][T11909] sctp_do_bind+0x4ea/0x940 [ 398.595402][T11909] sctp_connect_new_asoc+0x25c/0x690 [ 398.595427][T11909] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 398.595448][T11909] ? __local_bh_enable_ip+0x12d/0x1c0 [ 398.595493][T11909] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 398.595516][T11909] ? security_sctp_bind_connect+0x7e/0x2e0 [ 398.595538][T11909] sctp_sendmsg+0x155c/0x2810 [ 398.595574][T11909] ? __pfx_sctp_sendmsg+0x10/0x10 [ 398.595597][T11909] ? aa_sk_perm+0x81e/0x950 [ 398.595628][T11909] ? __pfx_aa_sk_perm+0x10/0x10 [ 398.595651][T11909] ? sock_rps_record_flow+0x19/0x410 [ 398.595676][T11909] ? inet_sendmsg+0x2f4/0x370 [ 398.595700][T11909] __sock_sendmsg+0x19c/0x270 [ 398.595725][T11909] ____sys_sendmsg+0x52d/0x830 [ 398.595754][T11909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.595788][T11909] ? import_iovec+0x74/0xa0 [ 398.595815][T11909] ___sys_sendmsg+0x21f/0x2a0 [ 398.595841][T11909] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.595904][T11909] ? __fget_files+0x2a/0x420 [ 398.595923][T11909] ? __fget_files+0x3a0/0x420 [ 398.595955][T11909] __sys_sendmmsg+0x227/0x430 [ 398.595986][T11909] ? __pfx___sys_sendmmsg+0x10/0x10 [ 398.596019][T11909] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 398.596055][T11909] ? ksys_write+0x22a/0x250 [ 398.596077][T11909] ? __pfx_ksys_write+0x10/0x10 [ 398.596101][T11909] __x64_sys_sendmmsg+0xa0/0xc0 [ 398.596127][T11909] do_syscall_64+0xfa/0xfa0 [ 398.596149][T11909] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.596172][T11909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.596189][T11909] ? clear_bhb_loop+0x60/0xb0 [ 398.596210][T11909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.596226][T11909] RIP: 0033:0x7f7c0e78eec9 [ 398.596244][T11909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.596265][T11909] RSP: 002b:00007f7c0f639038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 398.596285][T11909] RAX: ffffffffffffffda RBX: 00007f7c0e9e5fa0 RCX: 00007f7c0e78eec9 [ 398.596298][T11909] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000003 [ 398.596310][T11909] RBP: 00007f7c0f639090 R08: 0000000000000000 R09: 0000000000000000 [ 398.596320][T11909] R10: 00000000000c88c4 R11: 0000000000000246 R12: 0000000000000001 [ 398.596331][T11909] R13: 00007f7c0e9e6038 R14: 00007f7c0e9e5fa0 R15: 00007ffd7675f9a8 [ 398.596365][T11909] [ 399.322642][T11920] __nla_validate_parse: 3 callbacks suppressed [ 399.322660][T11920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1469'. [ 399.361210][T11920] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1469'. [ 399.496833][T11905] vxcan1 speed is unknown, defaulting to 1000 [ 399.744518][T11872] lo speed is unknown, defaulting to 1000 [ 400.030711][T11930] gretap4: entered promiscuous mode [ 400.035968][T11930] gretap4: entered allmulticast mode [ 400.405760][T11905] lo speed is unknown, defaulting to 1000 [ 400.583546][T11950] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1476'. [ 401.171626][T11967] vxcan1 speed is unknown, defaulting to 1000 [ 401.408661][T11978] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1482'. [ 401.585110][T11967] lo speed is unknown, defaulting to 1000 [ 402.536219][T11993] syzkaller1: entered promiscuous mode [ 402.555551][T11993] syzkaller1: entered allmulticast mode [ 402.715009][T11997] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1487'. [ 402.820723][T11990] vxcan1 speed is unknown, defaulting to 1000 [ 403.040704][T11994] vxcan1 speed is unknown, defaulting to 1000 [ 403.294749][T11994] lo speed is unknown, defaulting to 1000 [ 403.446077][T11995] vxcan1 speed is unknown, defaulting to 1000 [ 403.552592][T11990] lo speed is unknown, defaulting to 1000 [ 403.832514][T12015] gretap1: entered promiscuous mode [ 403.838152][T12015] gretap1: entered allmulticast mode [ 403.927863][T12017] tipc: Enabling of bearer rejected, already enabled [ 404.089247][T11995] lo speed is unknown, defaulting to 1000 [ 404.224504][T12023] macsec1: entered promiscuous mode [ 404.248174][T12023] batadv0: entered promiscuous mode [ 404.292548][T12023] batadv0: left promiscuous mode [ 404.472404][T12034] bond4 (unregistering): Released all slaves [ 405.234213][T12062] netlink: 'syz.4.1500': attribute type 1 has an invalid length. [ 405.249841][T12063] netlink: 'syz.0.1497': attribute type 10 has an invalid length. [ 405.375956][T12037] gretap5: entered promiscuous mode [ 405.550265][T12072] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1504'. [ 405.618877][T12062] 8021q: adding VLAN 0 to HW filter on device bond4 [ 405.666458][T12064] bond4: (slave wlan0): Opening slave failed [ 405.806207][T12076] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 405.984008][T12092] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1510'. [ 406.331379][T12091] vxcan1 speed is unknown, defaulting to 1000 [ 406.543086][T12110] gretap1: entered promiscuous mode [ 406.565987][T12110] gretap1: entered allmulticast mode [ 406.789397][T12113] 8021q: adding VLAN 0 to HW filter on device bond5 [ 406.809001][T12113] bridge0: port 3(bond5) entered blocking state [ 406.815500][T12113] bridge0: port 3(bond5) entered disabled state [ 406.855560][T12113] bond5: entered allmulticast mode [ 406.863638][T12113] bond5: entered promiscuous mode [ 406.870122][T12113] bridge0: port 3(bond5) entered blocking state [ 406.876815][T12113] bridge0: port 3(bond5) entered forwarding state [ 406.891355][T12091] lo speed is unknown, defaulting to 1000 [ 406.965480][T12127] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1520'. [ 407.115771][ T9640] bridge0: port 3(bond5) entered disabled state [ 407.125800][T12140] syz_tun: entered allmulticast mode [ 407.170392][T12139] syz_tun: left allmulticast mode [ 407.312038][T12102] vxcan1 speed is unknown, defaulting to 1000 [ 407.402721][T12154] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1526'. [ 407.599272][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1528'. [ 407.616206][T12163] sctp: [Deprecated]: syz.0.1529 (pid 12163) Use of int in maxseg socket option. [ 407.616206][T12163] Use struct sctp_assoc_value instead [ 407.654030][T12163] ip6gretap1: entered promiscuous mode [ 407.674864][T12122] vxcan1 speed is unknown, defaulting to 1000 [ 407.677402][T12102] lo speed is unknown, defaulting to 1000 [ 407.690083][T12163] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1529'. [ 407.720016][T12163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1529'. [ 407.743792][T12163] bond0: entered promiscuous mode [ 407.751125][T12163] veth1_to_bridge: entered promiscuous mode [ 407.768743][T12163] hsr1: entered promiscuous mode [ 408.146071][T12176] netlink: 'syz.0.1533': attribute type 1 has an invalid length. [ 408.152522][T12167] vxcan1 speed is unknown, defaulting to 1000 [ 408.375825][T12122] lo speed is unknown, defaulting to 1000 [ 408.532301][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059349400: rx timeout, send abort [ 408.542855][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059349400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 408.875704][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1541'. [ 408.916023][ T36] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x35 [ 408.932622][T12195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 408.988314][T12211] IPVS: length: 4096 != 24 [ 409.027699][T12168] vxcan1 speed is unknown, defaulting to 1000 [ 409.037247][T12211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1543'. [ 409.083788][T12167] lo speed is unknown, defaulting to 1000 [ 409.139526][T12218] sctp: [Deprecated]: syz.0.1545 (pid 12218) Use of int in max_burst socket option. [ 409.139526][T12218] Use struct sctp_assoc_value instead [ 409.639589][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1550'. [ 409.659529][T12237] tipc: Enabling of bearer rejected, already enabled [ 410.042392][T12252] tipc: Enabling of bearer rejected, already enabled [ 410.059459][T12168] lo speed is unknown, defaulting to 1000 [ 410.383067][T12257] netlink: 'syz.0.1554': attribute type 7 has an invalid length. [ 410.426327][T12257] netlink: 'syz.0.1554': attribute type 8 has an invalid length. [ 410.621468][T12261] __nla_validate_parse: 3 callbacks suppressed [ 410.621487][T12261] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1556'. [ 410.666486][T12263] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1557'. [ 410.727902][T12263] netlink: 'syz.3.1557': attribute type 10 has an invalid length. [ 410.772142][T12268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1556'. [ 411.216766][T12280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1560'. [ 411.381281][T12285] syzkaller0: entered promiscuous mode [ 411.387010][T12285] syzkaller0: entered allmulticast mode [ 411.934478][T12297] netlink: 'syz.0.1565': attribute type 1 has an invalid length. [ 412.079213][T12299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1565'. [ 412.088274][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1565'. [ 413.628685][T12293] vxcan1 speed is unknown, defaulting to 1000 [ 414.153319][T12324] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 414.287612][T12305] vxcan1 speed is unknown, defaulting to 1000 [ 414.294766][T12293] lo speed is unknown, defaulting to 1000 [ 414.355814][T12326] Bluetooth: MGMT ver 1.23 [ 414.539697][T12334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 414.773706][T12305] lo speed is unknown, defaulting to 1000 [ 415.102843][T12353] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1582'. [ 415.126952][T12353] netlink: 'syz.4.1582': attribute type 3 has an invalid length. [ 415.157445][T12353] syz_tun: entered allmulticast mode [ 415.223700][T12353] siw: device registration error -23 [ 415.263893][T12353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 415.315155][T12352] syz_tun: left allmulticast mode [ 418.559823][T12377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1590'. [ 418.588897][T12377] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1590'. [ 418.661842][T12383] netlink: 'syz.1.1591': attribute type 1 has an invalid length. [ 418.669896][T12383] netlink: 'syz.1.1591': attribute type 2 has an invalid length. [ 418.703146][T12385] netlink: 'syz.4.1589': attribute type 83 has an invalid length. [ 418.714591][T12383] netlink: 'syz.1.1591': attribute type 1 has an invalid length. [ 418.731008][T12383] netlink: 'syz.1.1591': attribute type 2 has an invalid length. [ 418.849231][T12391] netlink: 'syz.2.1592': attribute type 4 has an invalid length. [ 418.907863][T12391] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1592'. [ 418.955536][T12394] netlink: 'syz.3.1593': attribute type 2 has an invalid length. [ 418.973254][T12394] netlink: 'syz.3.1593': attribute type 1 has an invalid length. [ 419.049661][T12391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.393893][T12418] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1601'. [ 419.589940][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1603'. [ 419.609065][T12429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1603'. [ 419.643034][T12429] netlink: 'syz.1.1603': attribute type 5 has an invalid length. [ 419.714906][T12429] netlink: 'syz.1.1603': attribute type 6 has an invalid length. [ 419.849865][T12437] FAULT_INJECTION: forcing a failure. [ 419.849865][T12437] name failslab, interval 1, probability 0, space 0, times 0 [ 419.875114][T12437] CPU: 1 UID: 0 PID: 12437 Comm: syz.1.1607 Not tainted syzkaller #0 PREEMPT(full) [ 419.875138][T12437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 419.875149][T12437] Call Trace: [ 419.875156][T12437] [ 419.875164][T12437] dump_stack_lvl+0x189/0x250 [ 419.875187][T12437] ? __pfx____ratelimit+0x10/0x10 [ 419.875211][T12437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.875229][T12437] ? __pfx__printk+0x10/0x10 [ 419.875261][T12437] should_fail_ex+0x414/0x560 [ 419.875285][T12437] should_failslab+0xa8/0x100 [ 419.875307][T12437] __kmalloc_cache_noprof+0x70/0x3d0 [ 419.875326][T12437] ? sctp_add_bind_addr+0x8c/0x370 [ 419.875354][T12437] sctp_add_bind_addr+0x8c/0x370 [ 419.875383][T12437] sctp_copy_local_addr_list+0x30b/0x4e0 [ 419.875411][T12437] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 419.875435][T12437] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 419.875460][T12437] ? sctp_v6_is_any+0x64/0x80 [ 419.875478][T12437] ? sctp_copy_one_addr+0x93/0x360 [ 419.875505][T12437] sctp_bind_addr_copy+0xb3/0x3c0 [ 419.875531][T12437] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 419.875557][T12437] sctp_connect_new_asoc+0x2e0/0x690 [ 419.875581][T12437] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 419.875597][T12437] ? __local_bh_enable_ip+0x12d/0x1c0 [ 419.875630][T12437] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 419.875653][T12437] ? security_sctp_bind_connect+0x7e/0x2e0 [ 419.875671][T12437] sctp_sendmsg+0x155c/0x2810 [ 419.875702][T12437] ? __pfx_sctp_sendmsg+0x10/0x10 [ 419.875725][T12437] ? aa_sk_perm+0x81e/0x950 [ 419.875752][T12437] ? __pfx_aa_sk_perm+0x10/0x10 [ 419.875775][T12437] ? sock_rps_record_flow+0x19/0x410 [ 419.875799][T12437] ? inet_sendmsg+0x2f4/0x370 [ 419.875824][T12437] __sock_sendmsg+0x19c/0x270 [ 419.875855][T12437] ____sys_sendmsg+0x52d/0x830 [ 419.875886][T12437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.875919][T12437] ? import_iovec+0x74/0xa0 [ 419.875947][T12437] ___sys_sendmsg+0x21f/0x2a0 [ 419.875974][T12437] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.876039][T12437] ? __fget_files+0x2a/0x420 [ 419.876058][T12437] ? __fget_files+0x3a0/0x420 [ 419.876089][T12437] __sys_sendmmsg+0x227/0x430 [ 419.876120][T12437] ? __pfx___sys_sendmmsg+0x10/0x10 [ 419.876154][T12437] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 419.876191][T12437] ? ksys_write+0x22a/0x250 [ 419.876213][T12437] ? __pfx_ksys_write+0x10/0x10 [ 419.876238][T12437] __x64_sys_sendmmsg+0xa0/0xc0 [ 419.876264][T12437] do_syscall_64+0xfa/0xfa0 [ 419.876288][T12437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.876304][T12437] ? asm_sysvec_call_function_single+0x1a/0x20 [ 419.876320][T12437] ? clear_bhb_loop+0x60/0xb0 [ 419.876341][T12437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.876356][T12437] RIP: 0033:0x7f2ea298eec9 [ 419.876371][T12437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.876385][T12437] RSP: 002b:00007f2ea387e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 419.876404][T12437] RAX: ffffffffffffffda RBX: 00007f2ea2be5fa0 RCX: 00007f2ea298eec9 [ 419.876417][T12437] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000003 [ 419.876428][T12437] RBP: 00007f2ea387e090 R08: 0000000000000000 R09: 0000000000000000 [ 419.876438][T12437] R10: 00000000000c88c4 R11: 0000000000000246 R12: 0000000000000002 [ 419.876448][T12437] R13: 00007f2ea2be6038 R14: 00007f2ea2be5fa0 R15: 00007ffc7b656428 [ 419.876480][T12437] [ 420.261691][T12447] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 420.610205][T12462] Cannot find del_set index 3 as target [ 420.775642][T12477] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1618'. [ 420.793414][T12479] FAULT_INJECTION: forcing a failure. [ 420.793414][T12479] name failslab, interval 1, probability 0, space 0, times 0 [ 420.806946][T12479] CPU: 1 UID: 0 PID: 12479 Comm: syz.4.1619 Not tainted syzkaller #0 PREEMPT(full) [ 420.806971][T12479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 420.806991][T12479] Call Trace: [ 420.806998][T12479] [ 420.807005][T12479] dump_stack_lvl+0x189/0x250 [ 420.807029][T12479] ? __pfx____ratelimit+0x10/0x10 [ 420.807053][T12479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.807070][T12479] ? __pfx__printk+0x10/0x10 [ 420.807100][T12479] should_fail_ex+0x414/0x560 [ 420.807122][T12479] should_failslab+0xa8/0x100 [ 420.807144][T12479] __kmalloc_cache_noprof+0x70/0x3d0 [ 420.807162][T12479] ? sctp_add_bind_addr+0x8c/0x370 [ 420.807190][T12479] sctp_add_bind_addr+0x8c/0x370 [ 420.807217][T12479] sctp_copy_local_addr_list+0x30b/0x4e0 [ 420.807243][T12479] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 420.807265][T12479] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 420.807291][T12479] ? sctp_v6_is_any+0x64/0x80 [ 420.807308][T12479] ? sctp_copy_one_addr+0x93/0x360 [ 420.807334][T12479] sctp_bind_addr_copy+0xb3/0x3c0 [ 420.807358][T12479] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 420.807383][T12479] sctp_connect_new_asoc+0x2e0/0x690 [ 420.807405][T12479] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 420.807421][T12479] ? __local_bh_enable_ip+0x12d/0x1c0 [ 420.807451][T12479] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 420.807474][T12479] ? security_sctp_bind_connect+0x7e/0x2e0 [ 420.807493][T12479] sctp_sendmsg+0x155c/0x2810 [ 420.807523][T12479] ? __pfx_sctp_sendmsg+0x10/0x10 [ 420.807546][T12479] ? aa_sk_perm+0x81e/0x950 [ 420.807570][T12479] ? __pfx_aa_sk_perm+0x10/0x10 [ 420.807592][T12479] ? sock_rps_record_flow+0x19/0x410 [ 420.807613][T12479] ? inet_sendmsg+0x2f4/0x370 [ 420.807637][T12479] __sock_sendmsg+0x19c/0x270 [ 420.807659][T12479] ____sys_sendmsg+0x52d/0x830 [ 420.807688][T12479] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.807721][T12479] ? import_iovec+0x74/0xa0 [ 420.807748][T12479] ___sys_sendmsg+0x21f/0x2a0 [ 420.807774][T12479] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.807837][T12479] ? __fget_files+0x2a/0x420 [ 420.807856][T12479] ? __fget_files+0x3a0/0x420 [ 420.807887][T12479] __sys_sendmmsg+0x227/0x430 [ 420.807917][T12479] ? __pfx___sys_sendmmsg+0x10/0x10 [ 420.807950][T12479] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 420.807995][T12479] ? ksys_write+0x22a/0x250 [ 420.808014][T12479] ? __pfx_ksys_write+0x10/0x10 [ 420.808036][T12479] __x64_sys_sendmmsg+0xa0/0xc0 [ 420.808062][T12479] do_syscall_64+0xfa/0xfa0 [ 420.808084][T12479] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.808107][T12479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.808123][T12479] ? clear_bhb_loop+0x60/0xb0 [ 420.808144][T12479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.808160][T12479] RIP: 0033:0x7f7c0e78eec9 [ 420.808178][T12479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.808193][T12479] RSP: 002b:00007f7c0f639038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 420.808213][T12479] RAX: ffffffffffffffda RBX: 00007f7c0e9e5fa0 RCX: 00007f7c0e78eec9 [ 420.808226][T12479] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000003 [ 420.808237][T12479] RBP: 00007f7c0f639090 R08: 0000000000000000 R09: 0000000000000000 [ 420.808248][T12479] R10: 00000000000c88c4 R11: 0000000000000246 R12: 0000000000000002 [ 420.808258][T12479] R13: 00007f7c0e9e6038 R14: 00007f7c0e9e5fa0 R15: 00007ffd7675f9a8 [ 420.808293][T12479] [ 421.433586][T12481] bond5 (unregistering): Released all slaves [ 421.547857][T12477] vxcan1 speed is unknown, defaulting to 1000 [ 421.881792][T12513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1629'. [ 421.902044][T12477] lo speed is unknown, defaulting to 1000 [ 422.429855][T12526] xt_TPROXY: Can be used only with -p tcp or -p udp [ 422.817049][T12544] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1640'. [ 423.066708][T12556] netlink: 280 bytes leftover after parsing attributes in process `syz.4.1642'. [ 423.795880][T12584] __nla_validate_parse: 1 callbacks suppressed [ 423.795899][T12584] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1649'. [ 423.929605][T12584] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 424.240228][T12617] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1658'. [ 424.260897][T12617] batadv1: entered promiscuous mode [ 424.266266][T12617] batadv1: entered allmulticast mode [ 424.319914][T12621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1660'. [ 424.340920][T12623] FAULT_INJECTION: forcing a failure. [ 424.340920][T12623] name failslab, interval 1, probability 0, space 0, times 0 [ 424.365659][T12623] CPU: 0 UID: 0 PID: 12623 Comm: syz.0.1662 Not tainted syzkaller #0 PREEMPT(full) [ 424.365684][T12623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 424.365695][T12623] Call Trace: [ 424.365702][T12623] [ 424.365710][T12623] dump_stack_lvl+0x189/0x250 [ 424.365734][T12623] ? __pfx____ratelimit+0x10/0x10 [ 424.365757][T12623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.365775][T12623] ? __pfx__printk+0x10/0x10 [ 424.365808][T12623] should_fail_ex+0x414/0x560 [ 424.365833][T12623] should_failslab+0xa8/0x100 [ 424.365856][T12623] __kmalloc_cache_noprof+0x70/0x3d0 [ 424.365875][T12623] ? sctp_add_bind_addr+0x8c/0x370 [ 424.365904][T12623] sctp_add_bind_addr+0x8c/0x370 [ 424.365933][T12623] sctp_copy_local_addr_list+0x30b/0x4e0 [ 424.365961][T12623] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 424.365984][T12623] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 424.366011][T12623] ? sctp_v6_is_any+0x64/0x80 [ 424.366029][T12623] ? sctp_copy_one_addr+0x93/0x360 [ 424.366056][T12623] sctp_bind_addr_copy+0xb3/0x3c0 [ 424.366080][T12623] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 424.366103][T12623] sctp_connect_new_asoc+0x2e0/0x690 [ 424.366126][T12623] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 424.366143][T12623] ? __local_bh_enable_ip+0x12d/0x1c0 [ 424.366174][T12623] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 424.366197][T12623] ? security_sctp_bind_connect+0x7e/0x2e0 [ 424.366218][T12623] sctp_sendmsg+0x155c/0x2810 [ 424.366250][T12623] ? __pfx_sctp_sendmsg+0x10/0x10 [ 424.366273][T12623] ? aa_sk_perm+0x81e/0x950 [ 424.366299][T12623] ? __pfx_aa_sk_perm+0x10/0x10 [ 424.366323][T12623] ? sock_rps_record_flow+0x19/0x410 [ 424.366348][T12623] ? inet_sendmsg+0x2f4/0x370 [ 424.366372][T12623] __sock_sendmsg+0x19c/0x270 [ 424.366396][T12623] ____sys_sendmsg+0x52d/0x830 [ 424.366471][T12623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.366505][T12623] ? import_iovec+0x74/0xa0 [ 424.366532][T12623] ___sys_sendmsg+0x21f/0x2a0 [ 424.366558][T12623] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.366619][T12623] ? __fget_files+0x2a/0x420 [ 424.366638][T12623] ? __fget_files+0x3a0/0x420 [ 424.366668][T12623] __sys_sendmmsg+0x227/0x430 [ 424.366695][T12623] ? __pfx___sys_sendmmsg+0x10/0x10 [ 424.366728][T12623] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 424.366762][T12623] ? ksys_write+0x22a/0x250 [ 424.366782][T12623] ? __pfx_ksys_write+0x10/0x10 [ 424.366805][T12623] __x64_sys_sendmmsg+0xa0/0xc0 [ 424.366831][T12623] do_syscall_64+0xfa/0xfa0 [ 424.366852][T12623] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.366875][T12623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.366892][T12623] ? clear_bhb_loop+0x60/0xb0 [ 424.366913][T12623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.366929][T12623] RIP: 0033:0x7f3e81d8eec9 [ 424.366945][T12623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.366960][T12623] RSP: 002b:00007f3e7fff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 424.366978][T12623] RAX: ffffffffffffffda RBX: 00007f3e81fe5fa0 RCX: 00007f3e81d8eec9 [ 424.366991][T12623] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000003 [ 424.367002][T12623] RBP: 00007f3e7fff6090 R08: 0000000000000000 R09: 0000000000000000 [ 424.367013][T12623] R10: 00000000000c88c4 R11: 0000000000000246 R12: 0000000000000002 [ 424.367024][T12623] R13: 00007f3e81fe6038 R14: 00007f3e81fe5fa0 R15: 00007ffeddc86ca8 [ 424.367057][T12623] [ 424.818222][T12628] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma? [ 424.900404][T12625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 424.907697][T12625] IPv6: NLM_F_CREATE should be set when creating new route [ 424.915025][T12625] IPv6: NLM_F_CREATE should be set when creating new route [ 424.929273][T12633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1664'. [ 424.942115][T12625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 425.265389][T12647] vxcan1 speed is unknown, defaulting to 1000 [ 425.630041][T12654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1672'. [ 426.111321][T12647] lo speed is unknown, defaulting to 1000 [ 426.239509][T12677] vxcan1 speed is unknown, defaulting to 1000 [ 426.596367][T12685] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1678'. [ 426.603340][T12691] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 426.653241][T12691] syzkaller1: linktype set to 6 [ 426.980779][T12706] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1684'. [ 427.170336][T12677] lo speed is unknown, defaulting to 1000 [ 427.186478][T12679] vxcan1 speed is unknown, defaulting to 1000 [ 427.641659][T12703] vxcan1 speed is unknown, defaulting to 1000 [ 427.652688][T12727] Bluetooth: MGMT ver 1.23 [ 427.900670][T12716] vxcan1 speed is unknown, defaulting to 1000 [ 428.088384][T12716] lo speed is unknown, defaulting to 1000 [ 428.217163][T12703] lo speed is unknown, defaulting to 1000 [ 428.607511][T12679] lo speed is unknown, defaulting to 1000 [ 428.765532][T12747] tipc: Enabling of bearer rejected, already enabled [ 430.327248][T12796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1703'. [ 430.690247][T12799] validate_nla: 3 callbacks suppressed [ 430.690265][T12799] netlink: 'syz.2.1704': attribute type 1 has an invalid length. [ 430.721645][T12799] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1704'. [ 430.795324][T12805] netlink: 'syz.2.1704': attribute type 1 has an invalid length. [ 430.828507][T12805] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1704'. [ 431.348226][T12843] tipc: Enabling of bearer rejected, already enabled [ 431.363364][T12844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'. [ 431.404656][T12843] tipc: Resetting bearer [ 431.425944][T12842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.531084][T12849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1713'. [ 431.712658][T12854] netlink: 'syz.2.1715': attribute type 5 has an invalid length. [ 432.704244][T12876] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 432.751473][T12884] vxcan1 speed is unknown, defaulting to 1000 [ 432.767213][T12887] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 432.782223][T12887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1724'. [ 432.793042][T12876] nbd: must specify a size in bytes for the device [ 432.873792][T12890] x_tables: duplicate underflow at hook 1 [ 433.016106][T12892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1726'. [ 433.342981][T12884] lo speed is unknown, defaulting to 1000 [ 434.647825][T12955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1740'. [ 434.657279][T12955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1740'. [ 435.330392][T12969] tc_dump_action: action bad kind [ 435.577223][T12979] netlink: 'syz.0.1748': attribute type 1 has an invalid length. [ 435.902238][T12979] 8021q: adding VLAN 0 to HW filter on device bond6 [ 435.943545][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1750'. [ 436.026755][T12984] veth7: entered promiscuous mode [ 436.036317][T12984] bond6: (slave veth7): Enslaving as an active interface with a down link [ 436.373028][T13013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1756'. [ 436.391543][T13011] vxcan1 speed is unknown, defaulting to 1000 [ 436.592656][T13023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1757'. [ 436.831842][T13036] syzkaller0: entered promiscuous mode [ 436.837355][T13036] syzkaller0: entered allmulticast mode [ 436.882172][T13041] netlink: 'syz.4.1764': attribute type 1 has an invalid length. [ 436.891006][T13041] netlink: 'syz.4.1764': attribute type 2 has an invalid length. [ 437.091057][T13051] netlink: 'syz.4.1767': attribute type 6 has an invalid length. [ 437.103056][T13002] tipc: Enabling of bearer rejected, failed to enable media [ 437.112781][T13002] netlink: 'syz.1.1754': attribute type 9 has an invalid length. [ 437.161815][T13011] lo speed is unknown, defaulting to 1000 [ 437.221447][T13059] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1769'. [ 437.309761][T13066] pim6reg: entered allmulticast mode [ 437.326737][T13066] pim6reg: left allmulticast mode [ 437.463319][T13073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1775'. [ 437.498530][T13073] 8021q: VLANs not supported on sit0 [ 437.529495][T13078] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 437.742283][T13084] veth1_to_bond: entered allmulticast mode [ 437.795564][T13084] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1780'. [ 437.849514][T13084] veth1_to_bond (unregistering): left allmulticast mode [ 437.914117][T13088] vxcan1 speed is unknown, defaulting to 1000 [ 437.928421][T13090] tipc: Enabled bearer , priority 0 [ 437.946780][T13090] syzkaller0: entered promiscuous mode [ 437.971273][T13090] syzkaller0: entered allmulticast mode [ 438.007672][T13090] tipc: Resetting bearer [ 438.037182][T13092] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1783'. [ 438.050337][T13092] veth0: Caught tx_queue_len zero misconfig [ 438.337251][T13097] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1784'. [ 438.346943][T13096] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1784'. [ 438.500626][T13088] lo speed is unknown, defaulting to 1000 [ 438.651920][T13087] tipc: Resetting bearer [ 438.770128][T13087] tipc: Disabling bearer [ 439.999058][T13165] netlink: 'syz.4.1800': attribute type 9 has an invalid length. [ 440.026843][T13156] vxcan1 speed is unknown, defaulting to 1000 [ 440.039475][T13165] netlink: 'syz.4.1800': attribute type 1 has an invalid length. [ 440.117665][T13170] sctp: [Deprecated]: syz.0.1801 (pid 13170) Use of int in max_burst socket option. [ 440.117665][T13170] Use struct sctp_assoc_value instead [ 440.172157][T13165] bond6: entered promiscuous mode [ 440.190438][T13165] 8021q: adding VLAN 0 to HW filter on device bond6 [ 440.380516][T13178] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 440.722176][T13156] lo speed is unknown, defaulting to 1000 [ 440.775979][T13187] netlink: 'syz.1.1805': attribute type 7 has an invalid length. [ 440.784320][T13187] netlink: 'syz.1.1805': attribute type 8 has an invalid length. [ 441.528914][T13219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1809'. [ 441.547632][T13224] netlink: 'syz.1.1814': attribute type 10 has an invalid length. [ 441.576213][T13224] bridge0: port 3(dummy0) entered disabled state [ 441.578859][T13219] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1809'. [ 441.616836][T13224] dummy0: left allmulticast mode [ 441.648170][T13224] dummy0: left promiscuous mode [ 441.654560][T13224] bridge0: port 3(dummy0) entered disabled state [ 441.677874][T13222] netlink: 'syz.1.1814': attribute type 10 has an invalid length. [ 441.792785][T13234] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 441.805689][T13222] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 442.029938][T13247] netlink: 'syz.2.1818': attribute type 2 has an invalid length. [ 442.049163][T13247] netlink: 4856 bytes leftover after parsing attributes in process `syz.2.1818'. [ 442.074848][T13252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1820'. [ 442.111534][T13254] vxcan1 speed is unknown, defaulting to 1000 [ 442.396859][T13260] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1821'. [ 442.560385][T13262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1821'. [ 442.571156][T13254] lo speed is unknown, defaulting to 1000 [ 442.832982][T13269] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1824'. [ 442.991528][T13275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.105197][T13277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1826'. [ 443.249390][T13283] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1829'. [ 443.314591][T13286] netlink: 'syz.4.1830': attribute type 1 has an invalid length. [ 443.371861][T13284] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1829'. [ 443.539601][T13286] bond7: entered promiscuous mode [ 443.553527][T13286] 8021q: adding VLAN 0 to HW filter on device bond7 [ 443.760220][T13291] bond7: (slave bridge4): making interface the new active one [ 443.789722][T13291] bridge4: entered promiscuous mode [ 443.819770][T13291] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 444.015023][T13304] netlink: 'syz.3.1834': attribute type 10 has an invalid length. [ 444.101637][T13304] vxcan1 speed is unknown, defaulting to 1000 [ 444.132539][T13311] batadv0: entered promiscuous mode [ 444.156082][T13311] team0: entered promiscuous mode [ 444.189761][T13311] team0: left promiscuous mode [ 444.247331][T13318] netlink: 'syz.1.1837': attribute type 10 has an invalid length. [ 444.256670][T13311] batadv0: left promiscuous mode [ 444.423014][T13304] lo speed is unknown, defaulting to 1000 [ 444.745946][T13336] netlink: 'syz.4.1843': attribute type 13 has an invalid length. [ 445.132115][T13336] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.139718][T13336] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.366803][T13336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.395977][T13336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.850671][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 445.856794][ T9] syz2: Port: 1 Link DOWN [ 445.861364][ T9634] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.883120][ T9634] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.919868][ T9634] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.939384][ T9634] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.952874][ T9634] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.965775][ T9634] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.994931][T13358] vxcan1 speed is unknown, defaulting to 1000 [ 445.995243][ T9634] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.019741][T13367] xt_l2tp: missing protocol rule (udp|l2tpip) [ 446.037056][ T9634] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.479277][T13393] netlink: 'syz.2.1856': attribute type 13 has an invalid length. [ 446.735412][T13409] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 446.752450][T13406] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 446.769443][T13412] __nla_validate_parse: 8 callbacks suppressed [ 446.769459][T13412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1861'. [ 446.794509][T13406] netlink: 'syz.4.1860': attribute type 4 has an invalid length. [ 446.957491][T13420] netlink: 'syz.4.1864': attribute type 11 has an invalid length. [ 446.979393][T13424] netlink: 'syz.4.1864': attribute type 11 has an invalid length. [ 447.189712][T13440] netlink: 'syz.3.1869': attribute type 1 has an invalid length. [ 447.225858][T13440] netlink: 16118 bytes leftover after parsing attributes in process `syz.3.1869'. [ 447.271770][T13448] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1871'. [ 447.319553][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1872'. [ 447.385708][T13458] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1873'. [ 447.395391][T13458] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1873'. [ 447.405667][T13458] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1873'. [ 447.415518][T13458] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1873'. [ 447.508733][T13470] 8021q: VLANs not supported on bond0 [ 448.126870][T13503] veth0_to_bridge: entered promiscuous mode [ 448.153111][T13499] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1882'. [ 448.190488][T13498] veth0_to_bridge: left promiscuous mode [ 448.226257][T13502] can: request_module (can-proto-5) failed. [ 448.436341][T13516] vxcan1 speed is unknown, defaulting to 1000 [ 448.851241][T13548] netlink: 'syz.3.1895': attribute type 1 has an invalid length. [ 448.886324][T13548] netlink: 'syz.3.1895': attribute type 3 has an invalid length. [ 448.917140][T13548] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1895'. [ 448.955426][T13516] lo speed is unknown, defaulting to 1000 [ 450.286474][T13584] vxcan1 speed is unknown, defaulting to 1000 [ 450.921615][T13602] netlink: 'syz.2.1908': attribute type 9 has an invalid length. [ 451.123601][T13611] tipc: Enabled bearer , priority 0 [ 451.153270][T13611] syzkaller0: entered promiscuous mode [ 451.179422][T13611] syzkaller0: entered allmulticast mode [ 451.259356][T13584] lo speed is unknown, defaulting to 1000 [ 451.285741][T13611] tipc: Resetting bearer [ 451.343362][T13613] tipc: Resetting bearer [ 451.376810][T13619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.393527][T13621] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 451.454817][T13613] tipc: Disabling bearer [ 451.785119][T13632] netlink: 'syz.2.1917': attribute type 24 has an invalid length. [ 451.813749][T13632] __nla_validate_parse: 6 callbacks suppressed [ 451.813767][T13632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1917'. [ 451.901701][T13632] bond5: option ad_actor_sys_prio: invalid value (0) [ 451.909945][T13632] bond5: option ad_actor_sys_prio: allowed values 1 - 65535 [ 451.941682][T13632] bond5 (unregistering): Released all slaves [ 452.466821][T13645] vxcan1 speed is unknown, defaulting to 1000 [ 452.605436][T13652] netlink: 'syz.3.1924': attribute type 10 has an invalid length. [ 452.613411][T13652] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1924'. [ 452.622609][T13652] dummy0: entered promiscuous mode [ 452.628683][T13652] batman_adv: batadv0: Interface deactivated: dummy0 [ 452.635465][T13652] batman_adv: batadv0: Removing interface: dummy0 [ 452.658477][T13652] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 452.967815][T13665] netlink: 'syz.3.1928': attribute type 8 has an invalid length. [ 453.144129][T13670] syzkaller1: entered promiscuous mode [ 453.166055][T13670] syzkaller1: entered allmulticast mode [ 453.188700][T13658] vxcan1 speed is unknown, defaulting to 1000 [ 453.319220][T13678] vxcan1 speed is unknown, defaulting to 1000 [ 453.471801][T13684] 8021q: VLANs not supported on bond0 [ 453.579753][T13658] lo speed is unknown, defaulting to 1000 [ 453.669211][T13659] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 454.082095][T13645] lo speed is unknown, defaulting to 1000 [ 454.098901][T13661] vxcan1 speed is unknown, defaulting to 1000 [ 454.740423][T13726] netlink: 'syz.1.1946': attribute type 4 has an invalid length. [ 455.119026][T13688] vxcan1 speed is unknown, defaulting to 1000 [ 455.450048][T13661] lo speed is unknown, defaulting to 1000 [ 456.042095][T13688] lo speed is unknown, defaulting to 1000 [ 456.658213][T13765] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 457.376520][T13786] pimreg: entered allmulticast mode [ 457.525625][T13794] pimreg: left allmulticast mode [ 457.537849][T13796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1960'. [ 458.274868][T13820] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 458.864695][T13844] syzkaller1: entered promiscuous mode [ 458.871163][T13844] syzkaller1: entered allmulticast mode [ 459.121934][T13853] nbd: couldn't find a device at index 1 [ 459.341109][T13873] netlink: 'syz.1.1974': attribute type 4 has an invalid length. [ 459.362008][T13873] netlink: 'syz.1.1974': attribute type 4 has an invalid length. [ 459.400632][T13878] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 459.776621][T13889] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1980'. [ 459.787146][T13889] netlink: 'syz.0.1980': attribute type 1 has an invalid length. [ 459.795191][T13890] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1980'. [ 459.806136][T13890] netlink: 'syz.0.1980': attribute type 1 has an invalid length. [ 460.142721][T13895] vxcan1 speed is unknown, defaulting to 1000 [ 460.434965][T13904] SET target dimension over the limit! [ 460.467721][T13904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1984'. [ 460.601385][T13910] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1986'. [ 460.627024][T13910] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1986'. [ 460.662614][T13895] lo speed is unknown, defaulting to 1000 [ 460.669375][T13898] vxcan1 speed is unknown, defaulting to 1000 [ 461.077865][T13917] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.119933][T13920] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 461.240861][T13917] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.341375][T13917] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.380208][T13926] tipc: Enabled bearer , priority 10 [ 461.463749][T13917] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.516473][T13930] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 461.545018][T13898] lo speed is unknown, defaulting to 1000 [ 461.613258][T13931] syzkaller1: entered promiscuous mode [ 461.626404][T13931] syzkaller1: entered allmulticast mode [ 461.701977][T13936] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1991'. [ 461.822618][ T9632] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.849310][ T9632] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.000660][ T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.042757][ T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.249803][T13952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1996'. [ 462.357472][T13947] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 462.387183][T11365] tipc: Node number set to 1735816098 [ 462.822847][T13978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2001'. [ 463.102197][T13990] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 463.521385][T14002] ip6gre1: entered allmulticast mode [ 463.755926][T14009] vxcan1 speed is unknown, defaulting to 1000 [ 463.969527][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2012'. [ 463.987041][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2011'. [ 464.219201][T14032] team0: entered promiscuous mode [ 464.539791][T14009] lo speed is unknown, defaulting to 1000 [ 464.721659][T14053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2021'. [ 464.740753][T14053] gretap0: entered promiscuous mode [ 464.746004][T14053] gretap0: entered allmulticast mode [ 464.772694][T14055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 464.802098][T14053] netlink: 'syz.4.2021': attribute type 13 has an invalid length. [ 464.811795][ T9638] bond1: (slave macvlan2): link status definitely down, disabling slave [ 464.820727][ T9638] bond1: now running without any active interface! [ 464.960973][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2023'. [ 464.981994][T14059] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2023'. [ 465.009393][T14059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2023'. [ 465.109802][T14065] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2025'. [ 465.129899][T14065] 1ªX¹¦À: renamed from 60ªX¹¦À [ 465.140758][T14065] 1ªX¹¦À: entered allmulticast mode [ 465.146099][T14065] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 465.169223][T14066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2025'. [ 465.322677][T14070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2026'. [ 465.894165][T14092] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 466.916397][T14128] netlink: 'syz.0.2039': attribute type 11 has an invalid length. [ 467.546657][T14146] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 467.864282][T14157] _ÐZ`Ô€@YÿÃ: entered promiscuous mode [ 467.883431][T14157] __nla_validate_parse: 4 callbacks suppressed [ 467.883449][T14157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2051'. [ 467.990775][T14163] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 468.081152][T14168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2056'. [ 468.217156][T14168] vxcan1 speed is unknown, defaulting to 1000 [ 468.245945][T14172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2056'. [ 468.259488][T14172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2056'. [ 468.672874][T14168] lo speed is unknown, defaulting to 1000 [ 468.919268][T14182] lo: entered promiscuous mode [ 468.924349][T14182] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 469.091923][T14190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2062'. [ 469.135984][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'. [ 469.191546][T14185] tipc: Enabled bearer , priority 0 [ 469.252299][T14185] syzkaller0: entered promiscuous mode [ 469.262243][T14185] syzkaller0: entered allmulticast mode [ 469.333219][T14185] tipc: Resetting bearer [ 469.385511][T14185] tipc: Disabling bearer [ 469.613665][T14213] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2069'. [ 469.629043][T14213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2069'. [ 469.724365][T14217] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 469.743631][T14219] tipc: Enabling of bearer rejected, failed to enable media [ 470.095079][T14239] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 470.128379][T14239] CPU: 1 UID: 0 PID: 14239 Comm: syz.3.2075 Not tainted syzkaller #0 PREEMPT(full) [ 470.128406][T14239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 470.128417][T14239] Call Trace: [ 470.128425][T14239] [ 470.128434][T14239] dump_stack_lvl+0x189/0x250 [ 470.128462][T14239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.128482][T14239] ? __pfx__printk+0x10/0x10 [ 470.128505][T14239] ? kernfs_path_from_node+0x2f/0x290 [ 470.128533][T14239] ? kernfs_path_from_node+0x250/0x290 [ 470.128554][T14239] ? kernfs_path_from_node+0x2f/0x290 [ 470.128583][T14239] sysfs_warn_dup+0x8e/0xa0 [ 470.128607][T14239] sysfs_do_create_link_sd+0xc0/0x110 [ 470.128631][T14239] device_add_class_symlinks+0x1cf/0x240 [ 470.128657][T14239] device_add+0x475/0xb50 [ 470.128682][T14239] wiphy_register+0x1c81/0x2aa0 [ 470.128724][T14239] ? __pfx_wiphy_register+0x10/0x10 [ 470.128746][T14239] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 470.128774][T14239] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 470.128797][T14239] ieee80211_register_hw+0x3473/0x40d0 [ 470.128833][T14239] ? ieee80211_register_hw+0x1491/0x40d0 [ 470.128873][T14239] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 470.128891][T14239] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 470.128918][T14239] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 470.128939][T14239] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 470.128969][T14239] ? __hrtimer_setup+0x187/0x210 [ 470.128990][T14239] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 470.129015][T14239] mac80211_hwsim_new_radio+0x2f7a/0x5210 [ 470.129071][T14239] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 470.129092][T14239] ? trace_kmalloc+0x1f/0xd0 [ 470.129106][T14239] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 470.129123][T14239] ? kstrndup+0xbf/0x160 [ 470.129155][T14239] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 470.129186][T14239] ? __pfx___nla_validate_parse+0x10/0x10 [ 470.129220][T14239] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 470.129257][T14239] ? __nla_parse+0x40/0x60 [ 470.129280][T14239] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 470.129306][T14239] genl_family_rcv_msg_doit+0x215/0x300 [ 470.129330][T14239] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 470.129360][T14239] ? bpf_lsm_capable+0x9/0x20 [ 470.129375][T14239] ? security_capable+0x7e/0x2e0 [ 470.129402][T14239] genl_rcv_msg+0x60e/0x790 [ 470.129425][T14239] ? __pfx_genl_rcv_msg+0x10/0x10 [ 470.129439][T14239] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 470.129479][T14239] netlink_rcv_skb+0x208/0x470 [ 470.129497][T14239] ? __lock_acquire+0xab9/0xd20 [ 470.129518][T14239] ? __pfx_genl_rcv_msg+0x10/0x10 [ 470.129536][T14239] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 470.129577][T14239] ? down_read+0x1ad/0x2e0 [ 470.129596][T14239] genl_rcv+0x28/0x40 [ 470.129609][T14239] netlink_unicast+0x82f/0x9e0 [ 470.129638][T14239] ? __pfx_netlink_unicast+0x10/0x10 [ 470.129659][T14239] ? netlink_sendmsg+0x642/0xb30 [ 470.129678][T14239] ? skb_put+0x11b/0x210 [ 470.129703][T14239] netlink_sendmsg+0x805/0xb30 [ 470.129734][T14239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.129758][T14239] ? aa_sock_msg_perm+0xf1/0x1d0 [ 470.129781][T14239] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 470.129801][T14239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.129823][T14239] __sock_sendmsg+0x21c/0x270 [ 470.129850][T14239] ____sys_sendmsg+0x505/0x830 [ 470.129881][T14239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 470.129914][T14239] ? import_iovec+0x74/0xa0 [ 470.129941][T14239] ___sys_sendmsg+0x21f/0x2a0 [ 470.129967][T14239] ? __pfx____sys_sendmsg+0x10/0x10 [ 470.130030][T14239] ? __fget_files+0x2a/0x420 [ 470.130048][T14239] ? __fget_files+0x3a0/0x420 [ 470.130078][T14239] __x64_sys_sendmsg+0x19b/0x260 [ 470.130104][T14239] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 470.130145][T14239] ? do_syscall_64+0xbe/0xfa0 [ 470.130171][T14239] do_syscall_64+0xfa/0xfa0 [ 470.130191][T14239] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.130212][T14239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.130228][T14239] ? clear_bhb_loop+0x60/0xb0 [ 470.130248][T14239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.130263][T14239] RIP: 0033:0x7f9a0db8eec9 [ 470.130279][T14239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.130293][T14239] RSP: 002b:00007f9a0e9a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.130311][T14239] RAX: ffffffffffffffda RBX: 00007f9a0dde5fa0 RCX: 00007f9a0db8eec9 [ 470.130324][T14239] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 470.130335][T14239] RBP: 00007f9a0dc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 470.130346][T14239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.130356][T14239] R13: 00007f9a0dde6038 R14: 00007f9a0dde5fa0 R15: 00007fff6d21c588 [ 470.130389][T14239] [ 470.642411][T14238] vxcan1 speed is unknown, defaulting to 1000 [ 470.883797][T14238] lo speed is unknown, defaulting to 1000 [ 470.940134][T14244] : entered promiscuous mode [ 471.041342][T14250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2077'. [ 471.075492][T14250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2077'. [ 471.466512][T14275] rdma_rxe: rxe_newlink: failed to add lo [ 471.776752][T14282] vlan6: entered promiscuous mode [ 471.788654][T14282] batadv0: entered promiscuous mode [ 471.859245][T14285] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 472.696874][T14300] team0 (unregistering): Port device netdevsim0 removed [ 473.940384][T14375] netlink: 'syz.1.2114': attribute type 1 has an invalid length. [ 474.016973][T14380] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 474.214740][T14387] vxcan1 speed is unknown, defaulting to 1000 [ 474.224423][T14393] __nla_validate_parse: 9 callbacks suppressed [ 474.224450][T14393] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2120'. [ 474.250775][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2117'. [ 474.318312][T14399] nbd: nbd0 already in use [ 474.677787][T14411] vxcan5: entered allmulticast mode [ 474.772539][T14417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2127'. [ 474.782544][T14417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2127'. [ 474.916948][T14417] vxcan1 speed is unknown, defaulting to 1000 [ 474.924951][T14387] lo speed is unknown, defaulting to 1000 [ 475.069003][T14418] netlink: 'syz.0.2127': attribute type 10 has an invalid length. [ 475.149405][T14429] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2128'. [ 475.655340][T14417] lo speed is unknown, defaulting to 1000 [ 475.788509][T14435] netlink: 'syz.1.2129': attribute type 11 has an invalid length. [ 476.139502][T14426] Can't find ip_set type hash:ip$mec [ 476.300636][T14447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2133'. [ 476.886467][T14465] vxcan1 speed is unknown, defaulting to 1000 [ 477.196886][T14471] 8021q: adding VLAN 0 to HW filter on device bond8 [ 477.215754][T14465] lo speed is unknown, defaulting to 1000 [ 477.253728][T14474] geneve4: entered promiscuous mode [ 477.482523][T14479] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2140'. [ 509.236840][T14492] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 509.262851][T14492] x_tables: duplicate underflow at hook 3 [ 509.355740][T14501] vxcan1 speed is unknown, defaulting to 1000 [ 509.561362][T14517] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 509.844739][T14501] lo speed is unknown, defaulting to 1000 [ 510.187699][T14541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2158'. [ 510.242472][T14544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2158'. [ 510.296550][T14546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2158'. [ 510.320513][T14546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2158'. [ 510.450165][T14553] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2160'. [ 510.481810][T14548] vxcan1 speed is unknown, defaulting to 1000 [ 510.507854][T14553] veth0_macvtap: left promiscuous mode [ 510.608628][T14556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2161'. [ 510.732334][T14562] netlink: 'syz.0.2163': attribute type 1 has an invalid length. [ 510.764492][T14562] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2163'. [ 510.897905][T14572] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 510.951553][T14573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2166'. [ 511.003635][T14574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2166'. [ 511.094427][T14569] bond7: option miimon: invalid value (18446744073709551607) [ 511.103234][T14569] bond7: option miimon: allowed values 0 - 2147483647 [ 511.113604][T14569] bond7 (unregistering): Released all slaves [ 511.181049][T14548] lo speed is unknown, defaulting to 1000 [ 511.422549][T14590] vxcan1 speed is unknown, defaulting to 1000 [ 511.927482][T14590] lo speed is unknown, defaulting to 1000 [ 512.209019][T14613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2174'. [ 512.402184][T14620] sctp: [Deprecated]: syz.2.2176 (pid 14620) Use of int in max_burst socket option. [ 512.402184][T14620] Use struct sctp_assoc_value instead [ 512.567257][T14613] bridge_slave_1: left allmulticast mode [ 512.573401][T14613] bridge_slave_1: left promiscuous mode [ 512.579706][T14613] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.591912][T14613] bridge_slave_0: left promiscuous mode [ 512.597965][T14613] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.710231][T14630] nbd: socks must be embedded in a SOCK_ITEM attr [ 513.636809][T14636] vxcan1 speed is unknown, defaulting to 1000 [ 513.806580][ T30] audit: type=1804 audit(1759925407.027:10): pid=14651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2184" name="/newroot/447/cgroup.controllers" dev="tmpfs" ino=2317 res=1 errno=0 [ 513.856141][ T30] audit: type=1800 audit(1759925407.027:11): pid=14651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2184" name="cgroup.controllers" dev="tmpfs" ino=2317 res=0 errno=0 [ 513.892616][T14636] lo speed is unknown, defaulting to 1000 [ 514.365338][T14667] vxcan1 speed is unknown, defaulting to 1000 [ 514.443697][T14676] netlink: 'syz.4.2191': attribute type 11 has an invalid length. [ 514.772824][T14678] vlan6: entered promiscuous mode [ 515.022807][T14660] vxcan1 speed is unknown, defaulting to 1000 [ 515.192710][T14660] lo speed is unknown, defaulting to 1000 [ 515.357520][T14682] vxcan1 speed is unknown, defaulting to 1000 [ 515.364344][T14667] lo speed is unknown, defaulting to 1000 [ 515.853465][T14682] lo speed is unknown, defaulting to 1000 [ 516.080430][T14693] __nla_validate_parse: 8 callbacks suppressed [ 516.080450][T14693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2195'. [ 516.719209][T14710] sctp: [Deprecated]: syz.2.2201 (pid 14710) Use of struct sctp_assoc_value in delayed_ack socket option. [ 516.719209][T14710] Use struct sctp_sack_info instead [ 517.301452][T14735] netlink: 'syz.1.2207': attribute type 1 has an invalid length. [ 517.430966][T14735] 8021q: adding VLAN 0 to HW filter on device bond6 [ 517.674811][T14735] netlink: 20824 bytes leftover after parsing attributes in process `syz.1.2207'. [ 517.756371][T14741] sctp: [Deprecated]: syz.3.2209 (pid 14741) Use of int in max_burst socket option deprecated. [ 517.756371][T14741] Use struct sctp_assoc_value instead [ 517.840616][T14743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2210'. [ 517.845765][T14744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2210'. [ 518.303971][T14771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2217'. [ 518.320074][T14771] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2217'. [ 518.354980][T14774] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2218'. [ 518.378887][T14774] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2218'. [ 518.435933][T14778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2217'. [ 518.465185][T14771] netlink: 'syz.4.2217': attribute type 2 has an invalid length. [ 519.025909][T14795] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 519.703041][T14809] tipc: Enabled bearer , priority 0 [ 519.717259][T14812] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2233'. [ 519.733787][T14809] syzkaller0: entered promiscuous mode [ 519.747155][T14809] syzkaller0: entered allmulticast mode [ 519.805020][T14809] tipc: Resetting bearer [ 519.821878][T14808] tipc: Resetting bearer [ 519.863445][T14808] tipc: Disabling bearer [ 520.157436][T14830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.167548][T14830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 520.209216][T13354] lo speed is unknown, defaulting to 1000 [ 520.229649][T13354] syz0: Port: 1 Link ACTIVE [ 520.234350][T13354] lo speed is unknown, defaulting to 1000 [ 520.863786][T14857] raw_sendmsg: syz.2.2248 forgot to set AF_INET. Fix it! [ 521.135260][T14869] __nla_validate_parse: 1 callbacks suppressed [ 521.135278][T14869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2251'. [ 521.315358][T14876] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.2254'. [ 521.719781][T14893] xt_TCPMSS: Only works on TCP SYN packets [ 521.837809][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2260'. [ 521.843175][T14898] netlink: 'syz.4.2261': attribute type 1 has an invalid length. [ 521.904547][T14898] 8021q: adding VLAN 0 to HW filter on device bond9 [ 522.194378][T14903] bond9: (slave ip6gretap2): making interface the new active one [ 522.224524][T14903] bond9: (slave ip6gretap2): Enslaving as an active interface with an up link [ 522.252369][T14898] erspan0: entered allmulticast mode [ 522.306094][T14904] bond9: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 522.384741][T14913] netlink: 'syz.3.2264': attribute type 1 has an invalid length. [ 522.670555][T14915] bond3: (slave bridge3): making interface the new active one [ 522.683846][T14915] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 522.694568][T14902] vxcan1 speed is unknown, defaulting to 1000 [ 522.919737][T14924] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2265'. [ 523.277338][T14902] lo speed is unknown, defaulting to 1000 [ 523.527313][T14956] batadv_slave_1: entered promiscuous mode [ 523.566616][T14952] batadv_slave_1: left promiscuous mode [ 524.053682][T14981] vxcan1 speed is unknown, defaulting to 1000 [ 524.155679][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 524.177403][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 524.221135][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 524.241236][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 524.242191][T14990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2284'. [ 524.501447][T14981] lo speed is unknown, defaulting to 1000 [ 524.544377][T15000] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2287'. [ 524.570342][T15000] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2287'. [ 524.596173][T15001] IPVS: Error connecting to the multicast addr [ 525.188982][T15036] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2296'. [ 525.211885][T15037] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2294'. [ 525.361424][T15045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2300'. [ 526.255563][T15073] __nla_validate_parse: 2 callbacks suppressed [ 526.255580][T15073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2304'. [ 526.271794][T15068] lo: Caught tx_queue_len zero misconfig [ 526.340119][T15073] bond5: left allmulticast mode [ 526.345168][T15073] bond5: left promiscuous mode [ 526.360114][T15073] bridge0: port 3(bond5) entered disabled state [ 526.392566][T15073] bridge_slave_1: left allmulticast mode [ 526.418143][T15073] bridge_slave_1: left promiscuous mode [ 526.432816][T15073] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.466802][T15073] bridge_slave_0: left promiscuous mode [ 526.481903][T15073] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.661256][T15074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2305'. [ 527.249198][T15099] netlink: 'syz.1.2313': attribute type 1 has an invalid length. [ 527.256961][T15099] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2313'. [ 527.298991][T15100] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2314'. [ 527.368294][T15105] netlink: 'syz.3.2315': attribute type 1 has an invalid length. [ 527.638237][T15115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2318'. [ 527.671073][T15119] netlink: 'syz.1.2317': attribute type 1 has an invalid length. [ 527.701315][T15118] IPVS: length: 24 != 119185342488 [ 527.752446][T15119] 8021q: adding VLAN 0 to HW filter on device bond7 [ 527.853229][T15107] bond7: (slave wlan0): Enslaving as an active interface with a down link [ 527.912088][T15110] vlan3: entered allmulticast mode [ 527.925347][T15110] bond7: (slave vlan3): Error -34 calling dev_set_mtu [ 528.180962][T15138] netlink: 'syz.3.2325': attribute type 21 has an invalid length. [ 528.195303][T15138] netlink: 'syz.3.2325': attribute type 22 has an invalid length. [ 528.205235][T15138] netlink: 'syz.3.2325': attribute type 23 has an invalid length. [ 528.225808][T15138] netlink: 'syz.3.2325': attribute type 25 has an invalid length. [ 528.244830][T15138] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2325'. [ 528.303647][T15155] veth12: entered allmulticast mode [ 528.457780][T15153] vxcan1 speed is unknown, defaulting to 1000 [ 528.545468][T15171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2336'. [ 528.601048][T15171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2336'. [ 528.643525][T15177] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2338'. [ 528.664178][T15177] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2338'. [ 528.703032][T15181] x_tables: duplicate underflow at hook 1 [ 528.871609][T15153] lo speed is unknown, defaulting to 1000 [ 529.155787][T15208] netlink: 'syz.4.2346': attribute type 6 has an invalid length. [ 529.191054][T15208] IPv6: NLM_F_CREATE should be specified when creating new route [ 529.253217][T15209] bond10: entered promiscuous mode [ 529.259409][T15209] bond10: entered allmulticast mode [ 529.311264][T15209] 8021q: adding VLAN 0 to HW filter on device bond10 [ 529.930628][T15222] netlink: 'syz.4.2350': attribute type 10 has an invalid length. [ 530.298281][T15221] gretap2: entered promiscuous mode [ 530.300582][T15237] netlink: 'syz.1.2351': attribute type 16 has an invalid length. [ 530.323089][T15237] netlink: 'syz.1.2351': attribute type 17 has an invalid length. [ 530.332805][T15222] veth1_vlan: entered allmulticast mode [ 530.443745][T15237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 530.626566][T15251] bond7 (unregistering): Released all slaves [ 530.730676][T15248] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 530.887238][T15261] netlink: 'syz.0.2358': attribute type 13 has an invalid length. [ 531.106004][T15261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 531.154993][T15265] team_slave_1: Caught tx_queue_len zero misconfig [ 531.309746][T15273] __nla_validate_parse: 5 callbacks suppressed [ 531.309765][T15273] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2361'. [ 531.361140][T15281] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2364'. [ 531.371191][T15281] dummy0: entered promiscuous mode [ 531.376954][T15281] bridge0: port 1(dummy0) entered blocking state [ 531.395715][T15281] bridge0: port 1(dummy0) entered disabled state [ 531.404899][T15281] dummy0: entered allmulticast mode [ 531.414017][T15281] bridge0: port 1(dummy0) entered blocking state [ 531.420581][T15281] bridge0: port 1(dummy0) entered forwarding state [ 531.441780][T15288] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2363'. [ 531.459878][T15289] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2362'. [ 531.715001][T15295] bond5: entered promiscuous mode [ 531.722509][T15295] bond5: entered allmulticast mode [ 531.728969][T15295] 8021q: adding VLAN 0 to HW filter on device bond5 [ 531.806908][T15313] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2371'. [ 531.892728][T15324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2369'. [ 531.931380][T15295] bond5 (unregistering): Released all slaves [ 531.966447][T15326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2369'. [ 532.005563][T15310] bond11: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 532.019236][T15310] bond11 (unregistering): Released all slaves [ 532.335264][T15341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2376'. [ 532.363713][T15341] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2376'. [ 532.595387][T15355] vxcan1 speed is unknown, defaulting to 1000 [ 532.806020][T15366] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2381'. [ 532.822466][T15368] validate_nla: 3 callbacks suppressed [ 532.822485][T15368] netlink: 'syz.0.2382': attribute type 1 has an invalid length. [ 532.911076][T15368] 8021q: adding VLAN 0 to HW filter on device bond7 [ 533.007395][T15373] 8021q: adding VLAN 0 to HW filter on device bond7 [ 533.015767][T15373] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 533.027688][T15373] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 533.060160][T15368] veth9: entered promiscuous mode [ 533.070519][T15368] bond7: (slave veth9): Enslaving as an active interface with a down link [ 533.086371][T15355] lo speed is unknown, defaulting to 1000 [ 533.099095][ T9638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.119136][ T9638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.177912][T15413] vxcan1 speed is unknown, defaulting to 1000 [ 534.676879][T15413] lo speed is unknown, defaulting to 1000 [ 534.741413][T15425] netlink: 'syz.3.2396': attribute type 13 has an invalid length. [ 534.773090][T15425] bond5: option fail_over_mac: invalid value (6) [ 534.792993][T15425] bond5 (unregistering): Released all slaves [ 535.459450][T15461] vxcan1 speed is unknown, defaulting to 1000 [ 536.182253][T15495] netlink: 'syz.2.2411': attribute type 1 has an invalid length. [ 536.230138][T15461] lo speed is unknown, defaulting to 1000 [ 536.366978][T15512] __nla_validate_parse: 8 callbacks suppressed [ 536.366997][T15512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2412'. [ 536.431895][T15514] sctp: [Deprecated]: syz.0.2414 (pid 15514) Use of struct sctp_assoc_value in delayed_ack socket option. [ 536.431895][T15514] Use struct sctp_sack_info instead [ 536.454909][T15514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2414'. [ 536.475678][T15514] netlink: 'syz.0.2414': attribute type 3 has an invalid length. [ 536.528444][T15521] netlink: 'syz.2.2413': attribute type 16 has an invalid length. [ 536.592423][T15520] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2413'. [ 536.752662][T15526] SET target dimension over the limit! [ 536.893340][T15529] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 537.051621][T15539] ip6tnl0: Caught tx_queue_len zero misconfig [ 537.279404][T15549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2423'. [ 538.284213][T15595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2437'. [ 538.491565][T15602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2439'. [ 538.505098][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2440'. [ 538.636127][T15609] vxcan1 speed is unknown, defaulting to 1000 [ 538.726270][T15614] !: renamed from dummy0 (while UP) [ 539.079602][T15622] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2447'. [ 539.202742][T15625] netlink: 'syz.3.2447': attribute type 13 has an invalid length. [ 539.212396][T15625] netlink: 'syz.3.2447': attribute type 17 has an invalid length. [ 539.220905][T15625] lo: left promiscuous mode [ 539.374113][T15625] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.429377][T15635] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2444'. [ 539.542816][T15639] pim6reg1: entered promiscuous mode [ 539.552638][T15639] pim6reg1: entered allmulticast mode [ 539.561076][T15618] vxcan1 speed is unknown, defaulting to 1000 [ 539.585766][T15609] lo speed is unknown, defaulting to 1000 [ 539.985526][T15626] vxcan1 speed is unknown, defaulting to 1000 [ 540.364847][T15659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2442'. [ 540.565697][T15659] 8021q: adding VLAN 0 to HW filter on device bond8 [ 540.587252][T15651] vxcan1 speed is unknown, defaulting to 1000 [ 540.614697][T15618] lo speed is unknown, defaulting to 1000 [ 540.924395][T15626] lo speed is unknown, defaulting to 1000 [ 541.118541][T15669] syz_tun: entered promiscuous mode [ 541.490458][T15680] veth1_to_bridge (unregistering): left promiscuous mode [ 541.551013][T15688] netlink: 'syz.0.2460': attribute type 4 has an invalid length. [ 541.602114][T15651] lo speed is unknown, defaulting to 1000 [ 541.605217][T15691] netlink: 'syz.0.2460': attribute type 4 has an invalid length. [ 541.757935][T11366] lo speed is unknown, defaulting to 1000 [ 541.837809][T11366] lo speed is unknown, defaulting to 1000 [ 541.861999][T11365] lo speed is unknown, defaulting to 1000 [ 542.331647][T15697] __nla_validate_parse: 1 callbacks suppressed [ 542.331665][T15697] netlink: 15 bytes leftover after parsing attributes in process `syz.0.2462'. [ 542.535489][T15702] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2464'. [ 542.781000][T15702] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2464'. [ 542.791448][T15699] vxcan1 speed is unknown, defaulting to 1000 [ 542.791446][T15703] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2464'. [ 542.791472][T15703] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2464'. [ 542.912917][T15706] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2463'. [ 543.016172][T15706] netlink: 'syz.1.2463': attribute type 2 has an invalid length. [ 543.323530][T15699] lo speed is unknown, defaulting to 1000 [ 543.785408][T15750] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2476'. [ 543.896369][T15754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2477'. [ 543.930220][T15757] netlink: 'syz.0.2478': attribute type 11 has an invalid length. [ 545.122703][T15781] Unsupported ieee802154 address type: 0 [ 545.225453][T15784] vxcan1 speed is unknown, defaulting to 1000 [ 545.308866][T15790] netlink: 20824 bytes leftover after parsing attributes in process `syz.3.2486'. [ 545.433674][T15785] netlink: 'syz.3.2486': attribute type 10 has an invalid length. [ 545.464467][T15797] FAULT_INJECTION: forcing a failure. [ 545.464467][T15797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.509137][T15797] CPU: 0 UID: 0 PID: 15797 Comm: syz.0.2489 Not tainted syzkaller #0 PREEMPT(full) [ 545.509164][T15797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 545.509176][T15797] Call Trace: [ 545.509183][T15797] [ 545.509192][T15797] dump_stack_lvl+0x189/0x250 [ 545.509217][T15797] ? __pfx____ratelimit+0x10/0x10 [ 545.509241][T15797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 545.509259][T15797] ? __pfx__printk+0x10/0x10 [ 545.509277][T15797] ? __might_fault+0xb0/0x130 [ 545.509309][T15797] should_fail_ex+0x414/0x560 [ 545.509334][T15797] _copy_from_user+0x2d/0xb0 [ 545.509359][T15797] do_ipt_set_ctl+0x696/0xcd0 [ 545.509388][T15797] ? rcu_is_watching+0x15/0xb0 [ 545.509406][T15797] ? trace_contention_end+0x39/0x120 [ 545.509425][T15797] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 545.509471][T15797] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 545.509500][T15797] ? __pfx_aa_sk_perm+0x10/0x10 [ 545.509533][T15797] nf_setsockopt+0x26f/0x290 [ 545.509553][T15797] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 545.509576][T15797] do_sock_setsockopt+0x179/0x1b0 [ 545.509604][T15797] __x64_sys_setsockopt+0x13f/0x1b0 [ 545.509632][T15797] do_syscall_64+0xfa/0xfa0 [ 545.509655][T15797] ? lockdep_hardirqs_on+0x9c/0x150 [ 545.509677][T15797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.509693][T15797] ? clear_bhb_loop+0x60/0xb0 [ 545.509714][T15797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.509730][T15797] RIP: 0033:0x7f3e81d8eec9 [ 545.509747][T15797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.509763][T15797] RSP: 002b:00007f3e7fff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 545.509783][T15797] RAX: ffffffffffffffda RBX: 00007f3e81fe5fa0 RCX: 00007f3e81d8eec9 [ 545.509796][T15797] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 545.509807][T15797] RBP: 00007f3e7fff6090 R08: 0000000000000298 R09: 0000000000000000 [ 545.509819][T15797] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.509829][T15797] R13: 00007f3e81fe6038 R14: 00007f3e81fe5fa0 R15: 00007ffeddc86ca8 [ 545.509862][T15797] [ 545.823920][T15784] lo speed is unknown, defaulting to 1000 [ 545.926750][T15807] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2490'. [ 547.514325][T15864] IPv6: NLM_F_CREATE should be specified when creating new route [ 547.862657][T15879] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2508'. [ 548.057231][T15883] pim6reg: entered allmulticast mode [ 548.063942][T15884] bond0: Device is already in use. [ 548.075750][T15883] pim6reg: left allmulticast mode [ 548.386029][T15893] vxcan1 speed is unknown, defaulting to 1000 [ 548.407098][T15887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2512'. [ 548.456603][T15887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2512'. [ 548.509532][T15887] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 548.820046][T15893] lo speed is unknown, defaulting to 1000 [ 549.091686][T15914] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 549.157866][T15897] lo speed is unknown, defaulting to 1000 [ 549.199995][T15897] lo speed is unknown, defaulting to 1000 [ 549.205950][T15914] batadv_slave_0: entered promiscuous mode [ 549.214880][T15914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2519'. [ 549.230827][T15914] netlink: 428 bytes leftover after parsing attributes in process `syz.0.2519'. [ 549.235676][T15897] lo speed is unknown, defaulting to 1000 [ 549.240661][T15914] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2519'. [ 549.297893][T15897] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 549.353081][T15897] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 549.443256][T15897] lo speed is unknown, defaulting to 1000 [ 549.455881][T15897] lo speed is unknown, defaulting to 1000 [ 549.463306][T15923] netlink: 'syz.1.2522': attribute type 1 has an invalid length. [ 549.479807][T15897] lo speed is unknown, defaulting to 1000 [ 549.512727][T15897] lo speed is unknown, defaulting to 1000 [ 549.531556][T15897] lo speed is unknown, defaulting to 1000 [ 549.553014][T15897] lo speed is unknown, defaulting to 1000 [ 549.875198][T15938] tipc: Enabling of bearer rejected, already enabled [ 550.619464][T15965] netlink: 'syz.1.2532': attribute type 1 has an invalid length. [ 550.630701][T15969] vxcan1 speed is unknown, defaulting to 1000 [ 550.877622][T15975] bond9: (slave gretap5): making interface the new active one [ 550.990611][T15975] bond9: (slave gretap5): Enslaving as an active interface with an up link [ 551.290622][T15969] lo speed is unknown, defaulting to 1000 [ 551.293559][T15972] vxcan1 speed is unknown, defaulting to 1000 [ 551.761071][T15969] lo speed is unknown, defaulting to 1000 [ 551.879804][T15972] lo speed is unknown, defaulting to 1000 [ 551.920934][T15992] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2539'. [ 552.176085][T16001] vxcan1 speed is unknown, defaulting to 1000 [ 552.215546][T16004] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2540'. [ 552.313178][T16002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 552.379670][ T5942] lo speed is unknown, defaulting to 1000 [ 552.554625][T16001] lo speed is unknown, defaulting to 1000 [ 552.632140][T16020] tipc: Enabling of bearer rejected, failed to enable media [ 552.762088][T15972] lo speed is unknown, defaulting to 1000 [ 552.847267][T16001] lo speed is unknown, defaulting to 1000 [ 553.029802][T16023] veth1_to_bond: entered allmulticast mode [ 553.335175][T16030] nbd: nbd0 already in use [ 553.571804][T16033] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 553.595170][T16033] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2552'. [ 553.617602][T16033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2552'. [ 553.917905][T16046] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 554.583057][T16058] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2558'. [ 554.595515][T16058] netlink: 'syz.4.2558': attribute type 13 has an invalid length. [ 554.934816][T16069] tipc: Enabling of bearer rejected, already enabled [ 555.052288][T16074] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2564'. [ 555.181152][T16077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2565'. [ 555.512580][T16085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2568'. [ 555.557634][T16085] netlink: 201916 bytes leftover after parsing attributes in process `syz.4.2568'. [ 556.032447][T16110] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 556.286984][T16118] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.359252][T16118] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.419456][T16118] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.481752][T16118] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.547235][T16129] syzkaller1: entered promiscuous mode [ 556.558387][T16129] syzkaller1: entered allmulticast mode [ 556.613729][ T3544] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.646879][ T3544] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.675918][ T3544] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.717601][ T3544] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.857502][T16141] netlink: 71 bytes leftover after parsing attributes in process `syz.4.2585'. [ 557.006556][T16148] syzkaller0: entered promiscuous mode [ 557.013088][T16148] syzkaller0: entered allmulticast mode [ 557.035283][T16155] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2589'. [ 557.133921][T16159] batadv_slave_0: Caught tx_queue_len zero misconfig [ 557.221792][T16162] vxcan1 speed is unknown, defaulting to 1000 [ 557.603327][T16164] vxcan1 speed is unknown, defaulting to 1000 [ 557.656005][T16162] lo speed is unknown, defaulting to 1000 [ 557.853757][T16171] vxcan1 speed is unknown, defaulting to 1000 [ 558.230634][T16193] pimreg3: entered allmulticast mode [ 558.299439][T16195] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2599'. [ 558.434160][T16164] lo speed is unknown, defaulting to 1000 [ 558.465640][T16162] lo speed is unknown, defaulting to 1000 [ 558.881659][T16171] lo speed is unknown, defaulting to 1000 [ 558.896969][T16164] lo speed is unknown, defaulting to 1000 [ 559.175410][T16228] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2608'. [ 559.327572][T16220] vxcan1 speed is unknown, defaulting to 1000 [ 559.842871][T16234] vxcan1 speed is unknown, defaulting to 1000 [ 559.843338][T16220] lo speed is unknown, defaulting to 1000 [ 559.849468][T16171] lo speed is unknown, defaulting to 1000 [ 560.389471][T16236] vxcan1 speed is unknown, defaulting to 1000 [ 560.773656][T16220] lo speed is unknown, defaulting to 1000 [ 560.793508][T16234] lo speed is unknown, defaulting to 1000 [ 560.994719][T16259] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2614'. [ 561.023493][T16245] vxcan1 speed is unknown, defaulting to 1000 [ 561.513167][T16236] lo speed is unknown, defaulting to 1000 [ 561.513911][T16257] vxcan1 speed is unknown, defaulting to 1000 [ 561.927069][T16234] lo speed is unknown, defaulting to 1000 [ 561.930483][T16245] lo speed is unknown, defaulting to 1000 [ 561.943080][T16286] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2620'. [ 561.977894][T16236] lo speed is unknown, defaulting to 1000 [ 561.986689][T16286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2620'. [ 562.422037][T16294] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2624'. [ 562.441961][T16257] lo speed is unknown, defaulting to 1000 [ 562.605927][T16300] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2626'. [ 562.618484][T16300] netlink: 572 bytes leftover after parsing attributes in process `syz.2.2626'. [ 562.627640][T16300] gre0: entered allmulticast mode [ 562.641237][T16300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2626'. [ 562.744782][T16302] syzkaller1: entered promiscuous mode [ 562.750445][T16302] syzkaller1: entered allmulticast mode [ 562.975329][T16257] lo speed is unknown, defaulting to 1000 [ 563.116650][T16245] lo speed is unknown, defaulting to 1000 [ 563.655440][T16332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.728695][T16332] bond0: (slave rose0): Enslaving as an active interface with an up link [ 564.124253][T16346] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2640'. [ 564.159247][T16344] sctp: [Deprecated]: syz.2.2640 (pid 16344) Use of int in max_burst socket option. [ 564.159247][T16344] Use struct sctp_assoc_value instead [ 564.218080][T16346] hsr_slave_0: left promiscuous mode [ 564.242878][T16346] hsr_slave_1: left promiscuous mode [ 564.681002][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'. [ 564.698448][T16356] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2644'. [ 565.091347][T16365] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2646'. [ 565.101844][T16365] nbd: illegal input index 65508 [ 565.183919][T16368] netlink: 'syz.3.2646': attribute type 12 has an invalid length. [ 565.199710][T16370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2648'. [ 565.219432][T16368] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.2646'. [ 565.410267][T16381] vxcan1 speed is unknown, defaulting to 1000 [ 565.619601][T16381] lo speed is unknown, defaulting to 1000 [ 565.823381][T16381] lo speed is unknown, defaulting to 1000 [ 566.073173][T16421] netlink: 'syz.4.2662': attribute type 21 has an invalid length. [ 566.081555][T16421] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2662'. [ 566.111678][T16423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2661'. [ 566.726363][T16435] vxcan1 speed is unknown, defaulting to 1000 [ 566.935784][T16435] lo speed is unknown, defaulting to 1000 [ 567.389069][T16462] vxcan1 speed is unknown, defaulting to 1000 [ 567.761507][T16435] lo speed is unknown, defaulting to 1000 [ 567.761557][T16466] vxcan1 speed is unknown, defaulting to 1000 [ 567.770995][T16462] lo speed is unknown, defaulting to 1000 [ 568.010753][T16472] erspan0: entered promiscuous mode [ 568.027713][T16472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2677'. [ 568.305946][T16466] lo speed is unknown, defaulting to 1000 [ 568.313481][T16462] lo speed is unknown, defaulting to 1000 [ 568.417178][T16490] netlink: 'syz.0.2682': attribute type 3 has an invalid length. [ 568.425960][T16490] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2682'. [ 568.825152][T16466] lo speed is unknown, defaulting to 1000 [ 568.993450][T16508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2688'. [ 570.552180][T16571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2706'. [ 570.627854][T16583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'. [ 570.642744][T16585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2709'. [ 570.657257][T16585] netlink: 'syz.1.2709': attribute type 1 has an invalid length. [ 570.670093][T16585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2709'. [ 570.738405][T16590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2710'. [ 570.779448][T16590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2710'. [ 570.832084][T16598] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2712'. [ 570.851783][T16590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2710'. [ 570.861227][T16590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2710'. [ 570.974042][T16604] tipc: Enabled bearer , priority 0 [ 570.987375][T16604] tipc: Resetting bearer [ 571.007606][T16602] tipc: Disabling bearer [ 571.134191][T16613] vxcan1 speed is unknown, defaulting to 1000 [ 571.491394][T16613] lo speed is unknown, defaulting to 1000 [ 571.491404][T16614] vxcan1 speed is unknown, defaulting to 1000 [ 571.594245][T16627] syzkaller1: entered allmulticast mode [ 572.123293][T16649] netlink: 'syz.4.2725': attribute type 1 has an invalid length. [ 572.132854][T16649] netlink: 'syz.4.2725': attribute type 3 has an invalid length. [ 572.142300][T16649] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2725'. [ 572.152093][T16649] NCSI netlink: No device for ifindex 246 [ 572.159553][T16651] netlink: 'syz.1.2726': attribute type 1 has an invalid length. [ 572.219297][T16613] lo speed is unknown, defaulting to 1000 [ 572.261294][T16614] lo speed is unknown, defaulting to 1000 [ 572.454737][T16664] netlink: 'syz.1.2730': attribute type 4 has an invalid length. [ 572.566240][T16670] vxcan1 speed is unknown, defaulting to 1000 [ 573.090362][T16698] netlink: 'syz.4.2740': attribute type 13 has an invalid length. [ 573.099332][T16698] netlink: 'syz.4.2740': attribute type 17 has an invalid length. [ 573.102404][T16670] lo speed is unknown, defaulting to 1000 [ 573.117374][T16698] gretap0: left promiscuous mode [ 573.123072][T16698] gretap0: left allmulticast mode [ 573.131914][T16698] erspan0: left allmulticast mode [ 573.314192][T16698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 573.331103][T13359] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 573.430443][ T61] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 573.440936][ T61] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 573.479209][T16614] lo speed is unknown, defaulting to 1000 [ 573.490134][T16692] vxcan1 speed is unknown, defaulting to 1000 [ 573.534714][T16670] lo speed is unknown, defaulting to 1000 [ 573.728786][T13359] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 574.199422][T13354] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 574.397661][T16692] lo speed is unknown, defaulting to 1000 [ 574.400509][T16706] vxcan1 speed is unknown, defaulting to 1000 [ 575.019853][T16692] lo speed is unknown, defaulting to 1000 [ 575.065943][T16706] lo speed is unknown, defaulting to 1000 [ 575.631488][T16706] lo speed is unknown, defaulting to 1000 [ 576.047190][T16735] __nla_validate_parse: 4 callbacks suppressed [ 576.047211][T16735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2749'. [ 576.091068][T16735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2749'. [ 576.505203][T16744] dvmrp1: left allmulticast mode [ 576.623969][T16752] netlink: 'syz.1.2754': attribute type 11 has an invalid length. [ 576.666728][T16754] netlink: 4324 bytes leftover after parsing attributes in process `syz.2.2755'. [ 576.685058][T16754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.369670][T16785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2763'. [ 577.458591][T16785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2763'. [ 577.500218][T16783] vxcan1 speed is unknown, defaulting to 1000 [ 577.667101][T16796] xt_l2tp: invalid flags combination: 0 [ 577.716013][T16783] lo speed is unknown, defaulting to 1000 [ 577.734353][T16798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2766'. [ 577.798362][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 577.872972][T16798] bridge9: entered allmulticast mode [ 578.061376][T16783] lo speed is unknown, defaulting to 1000 [ 578.187388][T16813] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2770'. [ 578.316401][T16826] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2773'. [ 578.565875][T16840] netlink: 'syz.4.2776': attribute type 13 has an invalid length. [ 578.596088][T16840] netlink: 'syz.4.2776': attribute type 17 has an invalid length. [ 578.636454][T16843] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2776'. [ 578.690777][T16840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 578.709126][T11365] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 578.746176][T16819] vxcan1 speed is unknown, defaulting to 1000 [ 579.190964][T16853] 8021q: adding VLAN 0 to HW filter on device bond5 [ 579.509687][T16819] lo speed is unknown, defaulting to 1000 [ 579.516690][T16828] vxcan1 speed is unknown, defaulting to 1000 [ 579.571795][T11366] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 579.831313][T16881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2788'. [ 580.291845][T16828] lo speed is unknown, defaulting to 1000 [ 580.375107][T16819] lo speed is unknown, defaulting to 1000 [ 580.381231][T16870] vxcan1 speed is unknown, defaulting to 1000 [ 581.241810][T16891] vxcan1 speed is unknown, defaulting to 1000 [ 581.469035][T16891] lo speed is unknown, defaulting to 1000 [ 581.590359][T16891] lo speed is unknown, defaulting to 1000 [ 581.590799][T16870] lo speed is unknown, defaulting to 1000 [ 581.597928][T16828] lo speed is unknown, defaulting to 1000 [ 581.650909][T16918] vxcan1 speed is unknown, defaulting to 1000 [ 582.254951][T16931] netlink: 'syz.2.2800': attribute type 3 has an invalid length. [ 582.262931][T16931] __nla_validate_parse: 5 callbacks suppressed [ 582.262947][T16931] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2800'. [ 582.309231][T16931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 582.380788][T16918] lo speed is unknown, defaulting to 1000 [ 582.550084][T16870] lo speed is unknown, defaulting to 1000 [ 582.594338][T16918] lo speed is unknown, defaulting to 1000 [ 583.260505][T16938] netlink: 'syz.1.2802': attribute type 1 has an invalid length. [ 583.268752][T16938] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2802'. [ 583.423553][T16943] netlink: 'syz.2.2803': attribute type 16 has an invalid length. [ 583.435649][T16943] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2803'. [ 583.445653][T16938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2802'. [ 583.458963][T16939] tipc: Enabled bearer , priority 10 [ 584.410510][T16980] netlink: 'syz.4.2813': attribute type 2 has an invalid length. [ 584.428183][T16980] netlink: 4264 bytes leftover after parsing attributes in process `syz.4.2813'. [ 584.463322][T16984] sctp: [Deprecated]: syz.0.2815 (pid 16984) Use of int in max_burst socket option deprecated. [ 584.463322][T16984] Use struct sctp_assoc_value instead [ 584.487800][T16980] vxcan1 speed is unknown, defaulting to 1000 [ 584.570606][T11365] tipc: Node number set to 4141509376 [ 584.805515][T17002] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2819'. [ 584.820110][T17002] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2819'. [ 584.967850][T16980] lo speed is unknown, defaulting to 1000 [ 585.389706][T17014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.475390][T17014] batman_adv: batadv0: Adding interface: ip6gretap2 [ 585.500680][T17014] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.556633][T17014] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active [ 585.593063][T16980] lo speed is unknown, defaulting to 1000 [ 585.857065][T17030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2827'. [ 586.015122][T17028] vxcan1 speed is unknown, defaulting to 1000 [ 586.023779][T17040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2830'. [ 586.059952][T17042] netlink: 'syz.3.2831': attribute type 1 has an invalid length. [ 586.094237][T17040] netlink: 'syz.2.2830': attribute type 303 has an invalid length. [ 586.323433][T17055] netlink: 'syz.1.2834': attribute type 4 has an invalid length. [ 586.339983][T17055] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2834'. [ 586.392599][T17028] lo speed is unknown, defaulting to 1000 [ 586.678225][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 586.699478][T17070] netlink: 'syz.1.2838': attribute type 10 has an invalid length. [ 586.814390][T17072] gre0: left allmulticast mode [ 586.823149][T17072] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 586.936610][T17028] lo speed is unknown, defaulting to 1000 [ 587.296505][T17089] __nla_validate_parse: 1 callbacks suppressed [ 587.296525][T17089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2844'. [ 587.358126][T17080] vxcan1 speed is unknown, defaulting to 1000 [ 587.401562][T17089] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.485769][T17089] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.546266][T17089] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.615667][T17089] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.742169][ T9632] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.762634][ T9632] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.787302][ T9632] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.800012][T17098] netlink: 'syz.4.2846': attribute type 1 has an invalid length. [ 587.807909][T17098] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2846'. [ 587.826008][ T9632] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.828222][T17098] netlink: 'syz.4.2846': attribute type 1 has an invalid length. [ 587.850847][T17098] netlink: 'syz.4.2846': attribute type 2 has an invalid length. [ 588.048522][T17084] vxcan1 speed is unknown, defaulting to 1000 [ 588.187215][T17103] vlan6: entered promiscuous mode [ 588.379098][T17080] lo speed is unknown, defaulting to 1000 [ 588.389332][T17085] vxcan1 speed is unknown, defaulting to 1000 [ 588.621966][T17115] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2850'. [ 588.906822][T17113] vxcan1 speed is unknown, defaulting to 1000 [ 588.922093][T17121] netlink: 45 bytes leftover after parsing attributes in process `syz.4.2852'. [ 588.932854][T17084] lo speed is unknown, defaulting to 1000 [ 588.938239][T17080] lo speed is unknown, defaulting to 1000 [ 589.271082][T17127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2853'. [ 589.382705][T17127] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2853'. [ 589.392177][T17127] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 589.413088][T17085] lo speed is unknown, defaulting to 1000 [ 589.432280][T17084] lo speed is unknown, defaulting to 1000 [ 589.710550][T17113] lo speed is unknown, defaulting to 1000 [ 589.747743][T17134] syz_tun: entered allmulticast mode [ 589.812034][T17135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2855'. [ 589.879192][T17085] lo speed is unknown, defaulting to 1000 [ 589.891234][T17113] lo speed is unknown, defaulting to 1000 [ 590.628581][T17133] syz_tun: left allmulticast mode [ 590.701187][T17140] vxcan1 speed is unknown, defaulting to 1000 [ 591.205172][T17156] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2858'. [ 591.221018][T17156] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2858'. [ 591.247390][T17156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2858'. [ 591.356099][T17140] lo speed is unknown, defaulting to 1000 [ 591.691485][T17140] lo speed is unknown, defaulting to 1000 [ 592.806400][T17206] tipc: Enabling of bearer rejected, already enabled [ 593.227434][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 593.238088][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 593.247206][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 593.257675][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 593.267547][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 593.307696][ T3544] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.330200][T17217] __nla_validate_parse: 3 callbacks suppressed [ 593.330217][T17217] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2876'. [ 593.334067][T17218] vxcan1 speed is unknown, defaulting to 1000 [ 593.359370][T17226] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2875'. [ 593.368572][T17226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2875'. [ 593.383539][ T3544] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.467008][ T3544] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.543181][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2878'. [ 593.552952][T17231] !: left allmulticast mode [ 593.557805][T17231] bridge0: port 1(0!) entered disabled state [ 593.669049][T17238] Cannot find del_set index 2 as target [ 593.744212][ T3544] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.839634][T17218] lo speed is unknown, defaulting to 1000 [ 594.375184][T17260] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 594.503466][T17263] netlink: 'syz.3.2885': attribute type 1 has an invalid length. [ 594.511531][T17263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2885'. [ 594.679623][ T3544] bond5 (unregistering): (slave gretap3): Releasing active interface [ 594.689773][ T3544] gretap3 (unregistering): left allmulticast mode [ 594.743706][ T3544] bond9 (unregistering): (slave gretap5): Releasing active interface [ 595.152647][ T3544] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 595.345131][ T5826] Bluetooth: hci3: command tx timeout [ 595.593568][ T3544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.605859][ T3544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.622064][ T3544] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 595.640139][ T3544] bond0 (unregistering): Released all slaves [ 595.785931][ T3544] bond1 (unregistering): (slave bond2): Releasing backup interface [ 595.804114][ T3544] bond2 (unregistering): left promiscuous mode [ 595.812022][ T3544] bond2 (unregistering): left allmulticast mode [ 595.818893][ T3544] bond1 (unregistering): Released all slaves [ 595.948548][ T3544] bond2 (unregistering): Released all slaves [ 595.968716][ T3544] bond3 (unregistering): Released all slaves [ 596.151458][ T3544] bond4 (unregistering): (slave macvlan4): Releasing backup interface [ 596.160888][ T3544] veth0: left allmulticast mode [ 596.165766][ T3544] veth0: left promiscuous mode [ 596.172890][ T3544] bond4 (unregistering): Released all slaves [ 596.700656][ T3544] bond5 (unregistering): Released all slaves [ 596.836955][ T3544] bond6 (unregistering): Released all slaves [ 596.963051][ T3544] bond7 (unregistering): (slave wlan0): Releasing active interface [ 596.972818][ T3544] bond7 (unregistering): Released all slaves [ 596.993949][ T3544] bond8 (unregistering): Released all slaves [ 597.016280][ T3544] bond9 (unregistering): Released all slaves [ 597.048878][T17248] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 597.050985][T17249] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2881'. [ 597.091298][T17218] lo speed is unknown, defaulting to 1000 [ 597.267059][ T3544] : left promiscuous mode [ 597.355297][T17245] Set syz1 is full, maxelem 65536 reached [ 597.398154][ T5826] Bluetooth: hci3: command tx timeout [ 597.480994][ T3544] tipc: Disabling bearer [ 597.489170][T17282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2891'. [ 597.498463][ T3544] tipc: Left network mode [ 597.503148][T17280] netlink: 'syz.0.2889': attribute type 6 has an invalid length. [ 598.053941][T17218] chnl_net:caif_netlink_parms(): no params data found [ 598.590957][T17321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2900'. [ 598.661006][T17218] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.678403][T17218] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.685653][T17218] bridge_slave_0: entered allmulticast mode [ 598.740876][T17218] bridge_slave_0: entered promiscuous mode [ 598.767175][T17317] tipc: Enabling of bearer rejected, already enabled [ 598.851661][T17218] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.860636][T17327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2901'. [ 598.876488][T17218] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.884649][T17327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2901'. [ 598.893906][T17218] bridge_slave_1: entered allmulticast mode [ 598.924128][T17218] bridge_slave_1: entered promiscuous mode [ 599.132397][ T3544] hsr_slave_0: left promiscuous mode [ 599.145961][ T3544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.163138][T17337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2904'. [ 599.174280][ T3544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.194132][ T3544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.213211][ T3544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.269698][ T3544] veth1_vlan: left promiscuous mode [ 599.275369][ T3544] veth0_vlan: left promiscuous mode [ 599.474954][ T3544] pimreg3 (unregistering): left allmulticast mode [ 599.488357][ T5826] Bluetooth: hci3: command tx timeout [ 599.724753][ T3544] hsr0 (unregistering): left allmulticast mode [ 600.125985][T17218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.146290][T17218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.360535][T17381] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2911'. [ 600.373265][T17218] team0: Port device team_slave_0 added [ 600.413590][T17218] team0: Port device team_slave_1 added [ 600.572134][T17218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.579666][T17218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.622911][T17394] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2915'. [ 600.623801][T17218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.669995][T17396] pimreg: entered allmulticast mode [ 600.680685][T17218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.687743][T17218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.714460][T17218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.837681][T17394] syzkaller1: entered promiscuous mode [ 600.848720][T17394] syzkaller1: entered allmulticast mode [ 600.881621][ T3544] IPVS: stop unused estimator thread 0... [ 600.918644][T17218] hsr_slave_0: entered promiscuous mode [ 600.935911][T17218] hsr_slave_1: entered promiscuous mode [ 600.942522][T17394] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 601.034423][ T3544] ------------[ cut here ]------------ [ 601.040348][ T3544] WARNING: CPU: 0 PID: 3544 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x26d/0x2f0 [ 601.050474][ T3544] Modules linked in: [ 601.054689][ T3544] CPU: 0 UID: 0 PID: 3544 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 601.064536][ T3544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 601.075018][ T3544] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 601.079996][ T3544] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 601.085563][ T3544] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 eb a8 38 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 19 56 19 f8 e8 d4 fe d3 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 c6 fe d3 f7 90 0f 0b 90 e9 60 fe ff ff [ 601.105292][ T3544] RSP: 0018:ffffc9000c847878 EFLAGS: 00010293 [ 601.111464][ T3544] RAX: ffffffff89eb1c9c RBX: ffff88807bbba480 RCX: ffff8880309d3c80 [ 601.119524][ T3544] RDX: 0000000000000000 RSI: ffffffff8d9c68ab RDI: ffff8880309d3c80 [ 601.127509][ T3544] RBP: ffffc9000c847990 R08: ffffffff8f9d4c37 R09: 1ffffffff1f3a986 [ 601.135580][ T3544] R10: dffffc0000000000 R11: fffffbfff1f3a987 R12: ffffffff8f5ce900 [ 601.143699][ T3544] R13: 1ffff92001908f3c R14: ffff88807bbbb940 R15: dffffc0000000000 [ 601.151747][ T3544] FS: 0000000000000000(0000) GS:ffff888125d3b000(0000) knlGS:0000000000000000 [ 601.160857][ T3544] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 601.167461][ T3544] CR2: 00007fc6e889f1d4 CR3: 00000000372c6000 CR4: 00000000003526f0 [ 601.175498][ T3544] Call Trace: [ 601.178876][ T3544] [ 601.181816][ T3544] xfrm_net_exit+0x2d/0x70 [ 601.186246][ T3544] ops_undo_list+0x49a/0x990 [ 601.190931][ T3544] ? __pfx_ops_undo_list+0x10/0x10 [ 601.196065][ T3544] ? do_raw_spin_unlock+0x122/0x240 [ 601.201382][ T3544] cleanup_net+0x4d8/0x820 [ 601.205826][ T3544] ? __pfx_cleanup_net+0x10/0x10 [ 601.210837][ T3544] ? _raw_spin_unlock_irq+0x23/0x50 [ 601.216048][ T3544] ? process_scheduled_works+0x9ef/0x17b0 [ 601.221844][ T3544] ? process_scheduled_works+0x9ef/0x17b0 [ 601.227587][ T3544] process_scheduled_works+0xade/0x17b0 [ 601.233242][ T3544] ? __pfx_process_scheduled_works+0x10/0x10 [ 601.239362][ T3544] worker_thread+0x8a0/0xda0 [ 601.243981][ T3544] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 601.250394][ T3544] ? __kthread_parkme+0x7b/0x200 [ 601.255440][ T3544] kthread+0x711/0x8a0 [ 601.259565][ T3544] ? __pfx_worker_thread+0x10/0x10 [ 601.264700][ T3544] ? __pfx_kthread+0x10/0x10 [ 601.269351][ T3544] ? _raw_spin_unlock_irq+0x23/0x50 [ 601.274569][ T3544] ? lockdep_hardirqs_on+0x9c/0x150 [ 601.279850][ T3544] ? __pfx_kthread+0x10/0x10 [ 601.284455][ T3544] ret_from_fork+0x4b9/0x870 [ 601.289125][ T3544] ? __pfx_ret_from_fork+0x10/0x10 [ 601.294259][ T3544] ? __switch_to_asm+0x39/0x70 [ 601.299092][ T3544] ? __switch_to_asm+0x33/0x70 [ 601.303864][ T3544] ? __pfx_kthread+0x10/0x10 [ 601.308545][ T3544] ret_from_fork_asm+0x1a/0x30 [ 601.313344][ T3544] [ 601.316375][ T3544] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 601.323653][ T3544] CPU: 0 UID: 0 PID: 3544 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 601.333184][ T3544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 601.343229][ T3544] Workqueue: netns cleanup_net [ 601.347994][ T3544] Call Trace: [ 601.351262][ T3544] [ 601.354181][ T3544] dump_stack_lvl+0x99/0x250 [ 601.358759][ T3544] ? __asan_memcpy+0x40/0x70 [ 601.363341][ T3544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 601.368527][ T3544] ? __pfx__printk+0x10/0x10 [ 601.373116][ T3544] vpanic+0x281/0x750 [ 601.377090][ T3544] ? __pfx__printk+0x10/0x10 [ 601.381667][ T3544] ? __pfx_vpanic+0x10/0x10 [ 601.386165][ T3544] ? is_bpf_text_address+0x292/0x2b0 [ 601.391454][ T3544] panic+0xb9/0xc0 [ 601.395168][ T3544] ? __pfx_panic+0x10/0x10 [ 601.399591][ T3544] __warn+0x31b/0x4b0 [ 601.403563][ T3544] ? xfrm_state_fini+0x26d/0x2f0 [ 601.408491][ T3544] ? xfrm_state_fini+0x26d/0x2f0 [ 601.413412][ T3544] report_bug+0x2be/0x4f0 [ 601.417736][ T3544] ? xfrm_state_fini+0x26d/0x2f0 [ 601.422747][ T3544] ? xfrm_state_fini+0x26d/0x2f0 [ 601.427670][ T3544] ? xfrm_state_fini+0x26f/0x2f0 [ 601.432595][ T3544] handle_bug+0x84/0x160 [ 601.436824][ T3544] exc_invalid_op+0x1a/0x50 [ 601.441312][ T3544] asm_exc_invalid_op+0x1a/0x20 [ 601.446146][ T3544] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 601.451676][ T3544] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 eb a8 38 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 19 56 19 f8 e8 d4 fe d3 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 c6 fe d3 f7 90 0f 0b 90 e9 60 fe ff ff [ 601.471274][ T3544] RSP: 0018:ffffc9000c847878 EFLAGS: 00010293 [ 601.477332][ T3544] RAX: ffffffff89eb1c9c RBX: ffff88807bbba480 RCX: ffff8880309d3c80 [ 601.485287][ T3544] RDX: 0000000000000000 RSI: ffffffff8d9c68ab RDI: ffff8880309d3c80 [ 601.493246][ T3544] RBP: ffffc9000c847990 R08: ffffffff8f9d4c37 R09: 1ffffffff1f3a986 [ 601.501203][ T3544] R10: dffffc0000000000 R11: fffffbfff1f3a987 R12: ffffffff8f5ce900 [ 601.509161][ T3544] R13: 1ffff92001908f3c R14: ffff88807bbbb940 R15: dffffc0000000000 [ 601.517131][ T3544] ? xfrm_state_fini+0x26c/0x2f0 [ 601.522063][ T3544] ? xfrm_state_fini+0x26c/0x2f0 [ 601.526991][ T3544] xfrm_net_exit+0x2d/0x70 [ 601.531397][ T3544] ops_undo_list+0x49a/0x990 [ 601.536072][ T3544] ? __pfx_ops_undo_list+0x10/0x10 [ 601.541174][ T3544] ? do_raw_spin_unlock+0x122/0x240 [ 601.546370][ T3544] cleanup_net+0x4d8/0x820 [ 601.550775][ T3544] ? __pfx_cleanup_net+0x10/0x10 [ 601.555707][ T3544] ? _raw_spin_unlock_irq+0x23/0x50 [ 601.560896][ T3544] ? process_scheduled_works+0x9ef/0x17b0 [ 601.566605][ T3544] ? process_scheduled_works+0x9ef/0x17b0 [ 601.572334][ T3544] process_scheduled_works+0xade/0x17b0 [ 601.577896][ T3544] ? __pfx_process_scheduled_works+0x10/0x10 [ 601.583884][ T3544] worker_thread+0x8a0/0xda0 [ 601.588475][ T3544] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 601.594800][ T3544] ? __kthread_parkme+0x7b/0x200 [ 601.599767][ T3544] kthread+0x711/0x8a0 [ 601.603831][ T3544] ? __pfx_worker_thread+0x10/0x10 [ 601.608934][ T3544] ? __pfx_kthread+0x10/0x10 [ 601.613517][ T3544] ? _raw_spin_unlock_irq+0x23/0x50 [ 601.618711][ T3544] ? lockdep_hardirqs_on+0x9c/0x150 [ 601.623902][ T3544] ? __pfx_kthread+0x10/0x10 [ 601.628484][ T3544] ret_from_fork+0x4b9/0x870 [ 601.633071][ T3544] ? __pfx_ret_from_fork+0x10/0x10 [ 601.638186][ T3544] ? __switch_to_asm+0x39/0x70 [ 601.642937][ T3544] ? __switch_to_asm+0x33/0x70 [ 601.647687][ T3544] ? __pfx_kthread+0x10/0x10 [ 601.652290][ T3544] ret_from_fork_asm+0x1a/0x30 [ 601.657059][ T3544] [ 601.660460][ T3544] Kernel Offset: disabled [ 601.664773][ T3544] Rebooting in 86400 seconds..