last executing test programs: 7.750474013s ago: executing program 3 (id=5100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r1, @ANYBLOB, @ANYRES32, @ANYBLOB="36000e0080000200080211000001"], 0xfc}}, 0x840) 7.569296377s ago: executing program 3 (id=5103): mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x2000007, 0x32, 0xffffffffffffffff, 0xa0838000) accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x0) (async) accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000300)={0x0, "d17c9de74149aa8c43893d72187cc9ce"}) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000300)={0x0, "d17c9de74149aa8c43893d72187cc9ce"}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r1 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000005e40)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000005e40)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a00)=ANY=[@ANYBLOB], 0x1028}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a00)=ANY=[@ANYBLOB], 0x1028}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x13d, &(0x7f0000000240)=ANY=[], 0x0, 0xf}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x13d, &(0x7f0000000240)=ANY=[], 0x0, 0xf}, 0x94) syz_emit_ethernet(0x9a, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000000643afffe8000000000000000000000000000bbff02000000000000000000000000000186009078ec0000000000000000000000050aa78c000000008080a80300370094fc542087aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c40dd3be27df3e34066d42ca0a5c15b37adac15084dbaf5f6b41e5af1802000084e57ef5459ac7ff5925726cbeea9cd734cbd7eb449eba90e03d7780db83d460ae8b1882c031103e26d5c39f395048"], 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="0a000000010001", 0x7) (async) write(r3, &(0x7f0000000000)="0a000000010001", 0x7) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x1, 0x0, 0x0) (async) setsockopt$inet_int(r4, 0x0, 0x1, 0x0, 0x0) r5 = socket(0x1e, 0x805, 0x0) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}}}, 0x10) unshare(0x6a040000) (async) unshare(0x6a040000) unshare(0x44000000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80010}, 0x40800) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) 3.711230139s ago: executing program 1 (id=5130): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) r2 = socket(0x2, 0x3, 0xff) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x26, 0x0, 0x1ff, 0x760}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x9, 0xc5, @vifc_lcl_addr=@private=0xa010100, @remote}, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(0x0, r3) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="03000000", @ANYRES16=r7], 0x3c}, 0x1, 0x0, 0x0, 0x404c0a0}, 0x20000000) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4048000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r8, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) 3.324176038s ago: executing program 3 (id=5133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x1070bd28, 0xfffff003, {0x0, 0x0, 0x0, r4, {0xf000, 0x7}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0x33}, {0x34, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x5}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0xffff}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x200c8000) close(0x3) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) 3.074994686s ago: executing program 0 (id=5134): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x1e, 0x4, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) (async) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000080)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000005c0)='\t4', 0x2}], 0x1}}], 0x1, 0x4000001) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x79, &(0x7f0000000180)=ANY=[], 0x8) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x700, 0x0, [@sadb_key={0x5, 0x9, 0xe0, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac55"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x78}, 0x1, 0x7}, 0x10) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x0, 0x1ff, 0x1, 0x1}, 0x1c) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) (async) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) epoll_create1(0x0) (async) bind$tipc(r3, 0x0, 0x0) (async) recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r4}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000fddbdf2507000000080001000000005a"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async) pselect6(0x40, &(0x7f0000000200)={0x55, 0x100000001, 0x7, 0x4, 0x8001, 0x6, 0x9, 0x3}, &(0x7f0000000240)={0x4d, 0x7, 0x8, 0x69, 0x5, 0xfffffffffffffff7, 0x4, 0x3354}, 0x0, 0x0, 0x0) 2.889025643s ago: executing program 0 (id=5135): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004}, 0x94) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_emit_ethernet(0x31e, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x2e8, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xc, 0x1, 0x0, 0x0, [{0x2, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x4, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x33, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c700000000a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3ccc4dc265095b3e9c206f360"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/54}, {0x0, 0x6, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d26"}]}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x13, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@nat={'nat\x00', 0x19, 0x1, 0x24e, [0x200000000180, 0x0, 0x0, 0x20000000036e, 0x20000000039e], 0x0, &(0x7f0000000080), &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x59, 0x3, 'ip6tnl0\x00', 'vlan1\x00', 'veth0_virt_wifi\x00', 'wg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0x0, 0x0, 0xff], @broadcast, [0xff, 0x0, 0x0, 0xff], 0x14e, 0x186, 0x1be, [@stp={{'stp\x00', 0x0, 0x48}, {{0x87, {0xb, 0x9, 0x7f, @multicast, [0xff, 0xff, 0xff, 0xff], 0x2, 0x2, 0xfffc, 0x7, @empty, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x4e22, 0x4e24, 0xfffc, 0xffa1, 0x5, 0xc8, 0x36, 0x9, 0x7, 0x4}, 0x0, 0x210}}}, @physdev={{'physdev\x00', 0x0, 0x48}, {{'team_slave_0\x00', {0xff}, 'ip6_vti0\x00', {}, 0x10, 0x10}}}], [@arpreply={'arpreply\x00', 0x10, {{@random="85131b99077e", 0xfffffffffffffffd}}}], @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x2c6) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @rand_addr=0x64010101}, {0x2, 0x4e22, @rand_addr=0x64010102}, {0x2, 0x4e21, @local}, 0xe4, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3, 0x40, 0xc34}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x30, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa28}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x4c880) 2.769019498s ago: executing program 3 (id=5136): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x1, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x1df, &(0x7f0000001d00)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "932fc7", 0x1a9, 0x89, 0xff, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, {[@srh={0x0, 0x4, 0x4, 0x2, 0xb, 0x30, 0x3, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @routing={0x2c, 0x10, 0x1, 0x10, 0x0, [@empty, @empty, @loopback, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @dev={0xfe, 0x80, '\x00', 0xb}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0x32, 0xd, '\x00', [@generic={0x8, 0x56, "ef155c9473362209affaedb40f503f65f024f956ecbcbef83ea3a335131b865fe3cf085ae4e29cae2649a1c3dd0dd2b93c1aafa49654b7f464265e9f29d279f63b2719beb9e46dcb0ce12c404dcb0211bb7bfa8f4062"}, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}], "6e6ff7b208ee08d61fc1ce3c4e26fe92c7755d1ea30247183aa3f48cd875427229c74003353427db69d75f0347c13e616bf8c346ff32363e8c725cdf4f163134f35354e50a41ac21e5b4adee03a2abc22af9d4fc1dde9b21028111fddd5f3edd5d0c0d3a19579510cbfc81fc312d0e695dc13a3de7f6817d791f9c0cc78e18bc3a"}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004001) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x8, 0x1}, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(r3, 0x0, 0x0) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) (async, rerun: 32) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) (rerun: 32) socket$netlink(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)={0x14, 0x2d, 0x9, 0x70bd26, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) (async, rerun: 64) close(0x3) (async, rerun: 64) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000001cc0)) 2.767204758s ago: executing program 0 (id=5137): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1200000014000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp=r3}, 0x20) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000040)={0x0, 0x15, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="130000000303010400000000000000000000000000000200ffffffff0000000300000200fffffffc0001000000000200fffffffefffffffc0000034000000aed002132000000000000000200fffffff800000002000003400000000700000200fffffffc0000000300000200fffffffe000008000000034000000091"], 0x14}}, 0x8004) syz_emit_ethernet(0x3e, &(0x7f0000000540)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x9, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0x64010101}}}}}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x42000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x8, 0x4000010, r6, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x77f45bb99217680f}, "ba9508fb307528e2", "727577480b23e0463b1795d0e3038b20", "61eab8ad", "15f715a53c7cdbe5"}, 0x28) shutdown(r2, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2.377119872s ago: executing program 1 (id=5140): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000004000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000dfffffff8500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 2.210024223s ago: executing program 1 (id=5141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) r1 = socket(0x11, 0x3, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000540)=[{{&(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x200c4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8954, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="050300000000000000000700efff070003"], 0x1c}}, 0x24044080) shutdown(r0, 0x1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r10, 0x200, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 2.03522026s ago: executing program 4 (id=5143): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x1d4e, 0x3, 0x1}) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000280)={0x15, 0x80, 0x9, 0x3}) (async) r1 = socket$inet6(0xa, 0x5, 0x7) (async) r2 = socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r4, 0x917, 0x0, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x100002}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, @xdp={0x2c, 0x1, r6, 0x1f}, @sco, @xdp={0x2c, 0x8, r6, 0x30}, 0x3fe, 0x0, 0x0, 0x0, 0x92ed, &(0x7f0000000100)='nr0\x00', 0x6, 0x5, 0x5}) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0xbf, 0x12, &(0x7f00000002c0)="e1911725bd01d5f3953455582415436126607505af30775b8dafdf87a36489c533bf870ad70069b7150a6e2b61e6a9792e0de9e05f1e67b4d0698d735b75850e8c654bdd5b5cfbc5025ee6c295616bab7e6a9d825029682fff1b0f20aa931c1a15f3d146909deb3d63646cf8743ea90a813f048913e45c65dc22ee323bdc4ba832316386f095a4c395b5507630c19c2d004b09b6256419d0b0ad374c7c81cd3709114b2d5f2aa4662d5fb6d0875df41fa1f5af170bb7877f9867624bd78996", &(0x7f00000003c0)=""/18, 0xfffffffa, 0x0, 0xe7, 0xa0, &(0x7f0000000480)="dca7034659418db18404918b15c9851ecf9185a6a3ba84e9462cc30785c70dbdefb4782f263dc91ac1427bacb930a9d59b7ef20d27d089e8d6e809aac366f4422c903c501df0f11b57e5558721168c844031890ae52cd6cea09605768e0aee4f57b402e85f8a13bc431b60d4047f355a1c09644bf6fdeab043aacb7f5605b9ebb3d4b29e41f94d01a4e07f1bbbf93a3532699932e5186eb251d0f4d8e3f40da9550afd64e9de6acadf6730c42f6b2fd3bedc1445577fc8b9afc8c83559b47312d3dc64b91abdb9285060fccb650344f245b84685faeeabf4e330d9b505d90623e4da4d7a32ba33", &(0x7f0000000580)="7d5fc43913cb9b45ccdea47a731503e5a5c1fcdac3cc3d06bf861afabf984eb273e0d98fde74b73d0fd013195efb98e2414de7aa68eba0eb549319ffdb5e7590b09ca46a9c8dbaa77c32dbf6044e3bd6ebadc3a5bc4bc2a4265af627e8768e81ef5e5a2a70ff1cc794532941b5b230304fa22354a7fb5c8ce52ad1b3ed24ecd4d1fee2f55e33a661744ae0edd7709f6ed870b2b0cbfffdfa848351a68cb16249", 0x1, 0x0, 0xd3}, 0x50) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x80f, 0x0, 0x7, 0x7ff}, &(0x7f0000000640)=0x18) (async) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r10, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x8, 0x0, 0x0}}, 0x10) connect$llc(r8, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x2, @remote}, 0x10) (async) accept$ax25(r8, 0x0, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x4}]}]}, 0x80}}, 0x0) (async) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x84, 0x0, 0x0) 1.878499903s ago: executing program 4 (id=5144): ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)={0x6, 0x0, 0x8, 0x4, 0x40}) (async) r0 = socket$kcm(0xa, 0x2, 0x3a) (async) r1 = socket$netlink(0x10, 0x3, 0x14) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0x3, [@int={0xa, 0x0, 0x0, 0x1, 0x0, 0x74, 0x0, 0x59, 0x5}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0xb, 0x3a35}]}, @union={0x6, 0x5, 0x0, 0x5, 0x0, 0x3ff, [{0xb, 0x2, 0x4}, {0xf, 0x1, 0xe}, {0x6, 0x5, 0x6053}, {0x7, 0x2}, {0x7, 0x1, 0x7}]}, @enum={0xb, 0x3, 0x0, 0x6, 0x4, [{0xf, 0x7}, {0x2, 0x6}, {0x9, 0x8a1}]}, @var={0x7, 0x0, 0x0, 0xe, 0x5, 0x2}, @func={0x2, 0x0, 0x0, 0xc, 0x1}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x4, 0x5}, @enum64={0xc, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x1, 0x8, 0x9}]}]}, {0x0, [0x30]}}, &(0x7f0000000540)=""/218, 0xef, 0xda, 0x1, 0x2}, 0x28) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x200004, 0x4, 0x8, 0x1014}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r4], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r6, &(0x7f0000000080), 0x0}, 0x20) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf250900000005003800000000000800320001040000080032000600000006002800010000000800310006000000080032000700000008000300", @ANYRES32=r8, @ANYBLOB="05002f0000000000"], 0x54}, 0x1, 0x0, 0x0, 0x200008c0}, 0x8000) (async) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x2000c094) (async) r9 = epoll_create(0x92) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x10010, r9, 0xe8ffd000) 1.830888357s ago: executing program 0 (id=5146): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x6, 0xfff3}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2022) ioctl$SIOCSIFHWADDR(r2, 0xff04, 0x0) (async, rerun: 64) openat$cgroup_ro(r2, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (rerun: 64) 1.784280763s ago: executing program 2 (id=5147): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1.652884486s ago: executing program 2 (id=5148): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x25dfdbfe, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000341053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000cc0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x80, @bcast, @bpq0, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18020000040000000000000000000002180000000100008000000000060000003c2200f10000000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x1f00, 0x3}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000c80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x50, r3, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4aa}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x73}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="4b0c78a9019c4736bdeba55b4fc6713731002aa3df6d", 0x16}], 0x1, &(0x7f0000000340)=[{0x48, 0x84, 0x80, "3e34eecf24e678f7c48795123ae0dfd57f720d292a231df8f1a4f85443618f4de20b49b6d4a164f8935aa3fe7502134c77e44122"}, {0x78, 0x10b, 0x1, "3a955fac5611d7fe17dd52db057ccd8736972a5f90a67db400b9f99f7e45d5379501d53c81b7dd102a327ee05678cd497ca99cb8fa6acd4f536a6e32eb4f26d7896f32183aa8ae722c5942883de135ca549beb3d9a5dcb5f6fcb9a03f7decb76b2bf834418"}, {0x38, 0x0, 0x1d9, "bb8ecd30206372104e0367982ff23ffe0933a53d09037297419edd40d65cd30b6e"}], 0xf8}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000180)="50a76658515ace12521e0a52f22df27635f66a4a09d941a154", 0x19}, {&(0x7f0000000440)="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", 0xfc}, {&(0x7f0000000540)="1981591383d797beb830e51e4c9e72997a0739a41e6eac261cb22cb4eda1af12b7c8079532495579a35a7de2330b797e652ec172dab73328b55071ac91dc0816922ff1e192e7845fde086d652bd581b1dd5ed7d65b1e1f44995e4a19be0d4f528dbb57180bc6266586e98f442163b14322dc60bd9de1a225314d41602fde921849347e8331012fc577cd171f73f850d4455c5c5c16eaa59fbe0f42043d880f158536a4b59653fbead8b1770a615345806518617b197c56340fbdf0ee8e13e43607056f321b37c91ef8f84ae19480", 0xce}, {&(0x7f00000001c0)="49dcbf32265107fff5f7f71b1614f84717a7d6cd1dd74176d3b028ac102d83969bd010c768a019a672ddb77a76f8e61e13b9c0605cd951a72a4407339f60090fe9fcb55c597876d6c9006c3f082c3fc99a6aacb56c7114be4ba56bb2f7d55550c0cc792d73e832b979b751eea2e61da1833fdac3821e8c7a101f83feafe65b08", 0x80}, {&(0x7f0000000640)="168951cf69b84a0fbaaf8b7e739f11e8a8cc937d2734fcbebbaf6ba16cfc3f47ee85d5ae636b8cafd60428fe2ccd24dea6a331cc4b4e3705f8a493dbda062603687b942bba33f75059ee18c406c068b40a235203bf34eee1ada9c6848215ba9b55e4f31949a19e", 0x67}, {&(0x7f00000006c0)="a5fdfaa9be7e96aa9b699490174e0e9a33ee916d3e7ebde85a53d4881e60271f10a9367867330a2ee7ea46f0e60822ef780e8a4636e6eb7448e553459fa3c1d5636ee7fad7fb8af6fb90825f69c63c20d780a04f75f7eb000ffc64f4bcefec2d68ccd5a3e9a3260de0a024513b7bc83ee576974cfd19510b941eec5d888380fce5c2b3332ef191083825451c58410c3a632e78f21801af1c4c7d59cf843a9fef7effdc62d3a63eae470aff4ed697ad2d480586ad442f", 0xb6}, {&(0x7f0000000780)="b03053e8ea606bc2236a7391719044ff7909e04ec0ba50828e2ded3fff95d9cce71dbdfac9e101bb250bcbe7b9eaeddb733428992326da9ff522de96c4d22968ec61094dadeffcfb543fda2ec6627b4a7903d8e6c0ff38f9c7d95a665b6038d0ccb7d6f1462ca0b37d2210f07080ecaed121eca8915878f3550592d47d1db0cda5fa88f523913204fe452ffccc39e65e2097ca5000f70655c8864875f177e12a0b4e724df8da2057de850f82902eb41e08f4aed651700ea9e916b1621bca7814e0951b485691dc362c8d3f22cb36294d0af19d863493ae807b5d8343f65a3121df9823d3d3b70521814131b3795d896ef4a7", 0xf2}, {&(0x7f0000000880)="d900f98de8d8182fffb7241ed400bb16a0da6d12a0f15af99cc969b1fcd5bf9be236c012e336edbfe47976b8f3c0323c62a16e23116cc80381b46547f83c41f978c75cc3e62e32fe423cbc442c7f3754d3b158129433c63f9066a68f205ec8095d5a9e68507f211c4c382aade58f88bdc427372695fd390dff91041c1befdbeaebc07c8d83491459eb14186805193c017f703cfa166e47dea170b48cd9e86aa2cd58b68713ffcb51b02d00a7c23566d7b69d034f7144c70b", 0xb8}, {&(0x7f0000000940)="bf9b65c15c920e0ee94cc38e3f798808f390120efd7080b7e0627ee56d4ab1635bd17c246b450aebc173c4250d3f7f0ea1509141470af61c6776357fceec55c1a33e02ea10f38f85c2d1", 0x4a}, {&(0x7f00000009c0)="796c85d2e8648ec4e542cdcf30d27c3f3de05748700f7b83548651045e9d0aab0530e7560e84583f98c7f8734612287fc71d9ebcd54c013e76c5cfe6162a6d771fcd31bf177c76e0e8f6c73926b9d471ac8a47bc920217e5811cb6dfc0d9631e948317d6e3094828751f7d08dbe2f1b2604bb1338e3350420d47b56413d5fccfe6cb7922d916b8bceca6e688586b03ff46c7884d919f3d62db1e665fd8ac", 0x9e}], 0xa}}], 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x25dfdbfe, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000341053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000cc0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x80, @bcast, @bpq0, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18020000040000000000000000000002180000000100008000000000060000003c2200f10000000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x1f00, 0x3}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000c80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x50, r3, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4aa}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x73}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg(r4, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="4b0c78a9019c4736bdeba55b4fc6713731002aa3df6d", 0x16}], 0x1, &(0x7f0000000340)=[{0x48, 0x84, 0x80, "3e34eecf24e678f7c48795123ae0dfd57f720d292a231df8f1a4f85443618f4de20b49b6d4a164f8935aa3fe7502134c77e44122"}, {0x78, 0x10b, 0x1, "3a955fac5611d7fe17dd52db057ccd8736972a5f90a67db400b9f99f7e45d5379501d53c81b7dd102a327ee05678cd497ca99cb8fa6acd4f536a6e32eb4f26d7896f32183aa8ae722c5942883de135ca549beb3d9a5dcb5f6fcb9a03f7decb76b2bf834418"}, {0x38, 0x0, 0x1d9, "bb8ecd30206372104e0367982ff23ffe0933a53d09037297419edd40d65cd30b6e"}], 0xf8}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000180)="50a76658515ace12521e0a52f22df27635f66a4a09d941a154", 0x19}, {&(0x7f0000000440)="c2c2b211d270755de29a9e74a2f15e521a6e84efd67a0f88fde4a31f91e2c54de8ab487ee8065029251deac49775b549c1bcf184e54993fcf4bc2a38397a2073317a0c58ad0d685d1f75df9fa86c3e746d9084f69f4ea01d5fc9ed247c5452b77a44a51c1a901e136081595e1f0b20095b65390f8acd228ab58f2515458b8f88baf71d574bfcc0993ff1f1112bd462fa92ff1f3e15a62b0d11cfccf39829534063643c2a7a2e93f068b8f6e984a66187ba31613d2a9fb323124c92aae4fac96ccb9400a770b08727ae7a717a5bfedc49578262aea55627acd89f3cdd1449edec5ee36e2517dbc53d1362de8abb4cc1475a5195c1d559c95ecd55731b", 0xfc}, {&(0x7f0000000540)="1981591383d797beb830e51e4c9e72997a0739a41e6eac261cb22cb4eda1af12b7c8079532495579a35a7de2330b797e652ec172dab73328b55071ac91dc0816922ff1e192e7845fde086d652bd581b1dd5ed7d65b1e1f44995e4a19be0d4f528dbb57180bc6266586e98f442163b14322dc60bd9de1a225314d41602fde921849347e8331012fc577cd171f73f850d4455c5c5c16eaa59fbe0f42043d880f158536a4b59653fbead8b1770a615345806518617b197c56340fbdf0ee8e13e43607056f321b37c91ef8f84ae19480", 0xce}, {&(0x7f00000001c0)="49dcbf32265107fff5f7f71b1614f84717a7d6cd1dd74176d3b028ac102d83969bd010c768a019a672ddb77a76f8e61e13b9c0605cd951a72a4407339f60090fe9fcb55c597876d6c9006c3f082c3fc99a6aacb56c7114be4ba56bb2f7d55550c0cc792d73e832b979b751eea2e61da1833fdac3821e8c7a101f83feafe65b08", 0x80}, {&(0x7f0000000640)="168951cf69b84a0fbaaf8b7e739f11e8a8cc937d2734fcbebbaf6ba16cfc3f47ee85d5ae636b8cafd60428fe2ccd24dea6a331cc4b4e3705f8a493dbda062603687b942bba33f75059ee18c406c068b40a235203bf34eee1ada9c6848215ba9b55e4f31949a19e", 0x67}, {&(0x7f00000006c0)="a5fdfaa9be7e96aa9b699490174e0e9a33ee916d3e7ebde85a53d4881e60271f10a9367867330a2ee7ea46f0e60822ef780e8a4636e6eb7448e553459fa3c1d5636ee7fad7fb8af6fb90825f69c63c20d780a04f75f7eb000ffc64f4bcefec2d68ccd5a3e9a3260de0a024513b7bc83ee576974cfd19510b941eec5d888380fce5c2b3332ef191083825451c58410c3a632e78f21801af1c4c7d59cf843a9fef7effdc62d3a63eae470aff4ed697ad2d480586ad442f", 0xb6}, {&(0x7f0000000780)="b03053e8ea606bc2236a7391719044ff7909e04ec0ba50828e2ded3fff95d9cce71dbdfac9e101bb250bcbe7b9eaeddb733428992326da9ff522de96c4d22968ec61094dadeffcfb543fda2ec6627b4a7903d8e6c0ff38f9c7d95a665b6038d0ccb7d6f1462ca0b37d2210f07080ecaed121eca8915878f3550592d47d1db0cda5fa88f523913204fe452ffccc39e65e2097ca5000f70655c8864875f177e12a0b4e724df8da2057de850f82902eb41e08f4aed651700ea9e916b1621bca7814e0951b485691dc362c8d3f22cb36294d0af19d863493ae807b5d8343f65a3121df9823d3d3b70521814131b3795d896ef4a7", 0xf2}, {&(0x7f0000000880)="d900f98de8d8182fffb7241ed400bb16a0da6d12a0f15af99cc969b1fcd5bf9be236c012e336edbfe47976b8f3c0323c62a16e23116cc80381b46547f83c41f978c75cc3e62e32fe423cbc442c7f3754d3b158129433c63f9066a68f205ec8095d5a9e68507f211c4c382aade58f88bdc427372695fd390dff91041c1befdbeaebc07c8d83491459eb14186805193c017f703cfa166e47dea170b48cd9e86aa2cd58b68713ffcb51b02d00a7c23566d7b69d034f7144c70b", 0xb8}, {&(0x7f0000000940)="bf9b65c15c920e0ee94cc38e3f798808f390120efd7080b7e0627ee56d4ab1635bd17c246b450aebc173c4250d3f7f0ea1509141470af61c6776357fceec55c1a33e02ea10f38f85c2d1", 0x4a}, {&(0x7f00000009c0)="796c85d2e8648ec4e542cdcf30d27c3f3de05748700f7b83548651045e9d0aab0530e7560e84583f98c7f8734612287fc71d9ebcd54c013e76c5cfe6162a6d771fcd31bf177c76e0e8f6c73926b9d471ac8a47bc920217e5811cb6dfc0d9631e948317d6e3094828751f7d08dbe2f1b2604bb1338e3350420d47b56413d5fccfe6cb7922d916b8bceca6e688586b03ff46c7884d919f3d62db1e665fd8ac", 0x9e}], 0xa}}], 0x2, 0x0) (async) 1.18194094s ago: executing program 2 (id=5149): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_emit_ethernet(0x12a, &(0x7f0000000540)={@local, @random="b523270c6454", @void, {@ipv4={0x800, @igmp={{0x10, 0x4, 0x0, 0x4, 0x11c, 0x66, 0x0, 0x2, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @multicast1, {[@noop, @rr={0x7, 0x7, 0x4d, [@local]}, @generic={0x86, 0x5, "731936"}, @timestamp_addr={0x44, 0x4, 0x41, 0x1, 0x8}, @lsrr={0x83, 0x1b, 0x43, [@loopback, @private=0xa010100, @local, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}]}}, {0x16, 0xa, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "d6fe3f8b21d0100074d0792cd7b13e4d9ad256632a4f917c36ae8495bbb9a64ca8698c36a53835f028bb4c105ee6b9ef7bc137d722108c4c672a1c079898da86f17598cc73216cc0db455bbd6dfd8e434b16ad01408480b61698096a230dd4bf43400561606eb134863a65aaf85305116330cd9abdddec549ab88573118c7514f4e8a912e638712e904c5e7381275858db2e20111acd29451c44e5f61b1e33b6054a57a6d8dc7fd3cc66651a3d68eb18f2fd21f62dbe1975817212249088e9f0449ccab698a1814544c0a764c8c29673f344c074"}}}}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x3, "fae047"}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0xffffffff) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @remote, 0x1, 0x7, [@private=0xa010102, @loopback, @multicast1, @multicast1, @private=0xa010100, @loopback, @multicast1]}, 0x2c) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="14005a801000018004000500"], 0x30}}, 0x20004044) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) 1.174687859s ago: executing program 3 (id=5150): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) unshare(0x68040200) socket(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0xc, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="bf1ea0e3c19ed614ebadd2db8662", 0x0, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e83, 0x1, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x3}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0xffffff7f}, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff3}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=@newtaction={0x417c, 0x30, 0x4, 0x70bd2c, 0x25dfdbff, {}, [{0x31c, 0x1, [@m_csum={0x194, 0x1, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x4, 0x9, 0x8}, 0x16}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x676, 0x5, 0x4, 0x4}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x2, 0xfffffffffffffff9, 0xf, 0x7}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7f, 0x0, 0x3, 0x2, 0x401}, 0xd}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x4, 0xfffffff7, 0x6}}}]}, {0xdb, 0x6, "4e597f2f240d7d8eba85920f9d8ed379b76aad3e0071cbaca4dc5aa284656f517b6cbf5c41d8a27cb3d56775b37c0f4203e8a7890da86aeb9b10d0fb96006260e534d43bc8647e36c7d57229d0ef2732ae3baa6885d3fcf990b633e731d3093d0af32116fb649ef64e7f7fdff283cd5933c47f8f76f9dd73f8d2ddf2cce0d5e2742eff28f0515b98f7c0a0734c3fa65864b92fa323bd3a5d4295308fd3f1ba4ea7346317ea588bd1e9a803bd47e01563276ee4ec521ea22479bf07f3b95c21c6c3263751ab4b525ac280350329041eb43e917396c5bc33"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_csum={0x184, 0x1f, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x101, 0x5, 0x1098, 0x6}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1, 0xffffffffffffffff, 0x9}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x5, 0xfffffffffffffffc, 0x80000000, 0x38000000}, 0x73}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffa0, 0x5, 0x2000000c, 0x23c, 0xa}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x43, 0xffffffffffffffff, 0x5, 0x9f}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x20000000}, 0x48}}]}, {0xad, 0x6, "1947e397cad1ea1b995d9c108d55bf6feb37fab58bda315be1fd645466d2b772a7c9fc2f291f8876bdf65925fca8a84e3cfa861cdea3a0231bcaf689772512630438418d15af9b826c04257442047651ade9f35c547034ad86b44910d984d55b93315a7caee2993da7ce4a3c998e77a2103cde8add3d2251a73d219e4ae6919dce18f66854a1f4dd6cb320e6680a74d0ab0a4fcd2fc94fb99586b878a227c2c3fcf1902e846206074e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x2680, 0x1, [@m_gact={0xec, 0x6, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x80000000, 0x3, 0x7, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1056, 0x20000002}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe5, 0x607, 0x1, 0x7, 0x7fff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x90, 0x8, 0x101}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x23f2, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x762, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x5, 0x5, 0x8001, 0x736f}}]}, {0x3a, 0x6, "d693ddeabb7bd15b2be24e4a7ce2b95389f4eef2c889808276991e838205899e516444713b117ed615df56bcf5a0d2df4c9364a54466"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_police={0x2590, 0x4, 0x0, 0x0, {{0xb}, {0x253c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x4, 0xffff, 0xc7f, 0x5, 0x40, 0x2, 0x7, 0x401, 0x5, 0x4, 0x6, 0x8, 0x547, 0xf9, 0x2, 0x8, 0x7ff, 0x1, 0x7f, 0x8, 0x7, 0x8, 0xb, 0x8, 0x1, 0x5, 0x8000, 0x3, 0xa, 0xc84, 0x7, 0x101, 0x8fcb, 0x5, 0x0, 0x82, 0x0, 0x7, 0x6, 0x3, 0x6, 0x855b, 0x7fffffff, 0x4, 0xcff, 0x9, 0x2, 0x9, 0xe7b, 0x2, 0x1, 0x8, 0x100, 0x7, 0x33, 0x3, 0x7, 0x9, 0x50dc, 0xaa7, 0x8, 0x7, 0x1, 0x7, 0x28, 0x3, 0x5, 0x4, 0x2, 0x80000000, 0x7fff, 0x4, 0x3, 0x5, 0x3e00000, 0x100, 0x4, 0x80000000, 0x81, 0x5, 0xfffffff9, 0xfffffff9, 0xfffffffc, 0x1, 0x0, 0x3ad, 0x8, 0x6, 0xf, 0xc, 0x1b, 0x5, 0x7fffffff, 0x1, 0x7fff, 0xeea2, 0xb, 0x80000000, 0x400, 0x0, 0x7, 0xdf5f, 0x6, 0xc, 0x101, 0x1ff, 0x3, 0x9, 0x6, 0x0, 0x2, 0x7, 0x716a, 0x9, 0x8000, 0x9, 0x200, 0xf, 0xbaa, 0x9, 0x4, 0x7, 0x9, 0x5, 0x3, 0x8001, 0xfffffff4, 0x57, 0x37, 0xc, 0xff, 0xa, 0x7, 0x5fb5, 0x0, 0xb, 0x5, 0x0, 0x7f, 0x7fffffff, 0x9, 0xffff, 0x2, 0x9, 0x6, 0x7, 0x1, 0x3, 0x7fffffff, 0x1000, 0x0, 0x301, 0xed7d8a7, 0x0, 0x7, 0x2, 0x5d1, 0xfc7, 0x2, 0xf3, 0x8, 0x7, 0x9, 0xbf, 0x8, 0x10, 0x6, 0x9, 0x2, 0x80000000, 0x200000, 0x8, 0x0, 0x0, 0x5, 0x0, 0xfffffff5, 0x8, 0x0, 0x7fffffff, 0x4, 0x3, 0xd, 0x400, 0x5, 0x4, 0x5, 0x6, 0x9, 0x77d57d86, 0x61, 0xac5b, 0x0, 0x3, 0x9, 0x3, 0x9, 0x7, 0x5, 0xbd2, 0x9, 0xc, 0xb, 0x40, 0x101, 0x79c, 0x1, 0x8, 0x2, 0x8, 0x1e7, 0x7, 0x8, 0x101, 0x8, 0x4, 0xffff, 0x8, 0x3f58, 0xc1e6, 0x8, 0x8, 0x401, 0xc19, 0x0, 0x9, 0x6, 0x7fffffff, 0x5, 0x80, 0x0, 0x3, 0xc, 0x6, 0xc, 0x2, 0x1, 0x7, 0x9, 0x4, 0xfffffc01, 0x3, 0x5, 0x9603, 0x0, 0x2, 0x8, 0x0, 0x4, 0x5, 0x9, 0x1, 0x8, 0x4, 0x800]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x1000, 0x1, 0x1, {0x7, 0x2, 0x1, 0x5, 0x3, 0x200}, {0x9, 0x0, 0x5, 0x1, 0x7, 0x5}, 0x7, 0x8, 0x9}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xdf, 0x0, 0x2, 0x9, 0x0, 0x9, 0xc7b, 0x8, 0xfffffffc, 0xc, 0x10000, 0x0, 0x0, 0x30, 0xfffffff8, 0x7, 0x9, 0x8, 0x35b1, 0x8, 0xa66b, 0x9, 0x4a, 0x3, 0xb3, 0x9, 0x1, 0x2, 0x9ac, 0x5, 0x2, 0x1c, 0x3, 0xa, 0x6, 0xc9, 0x2, 0x400, 0x81, 0x3, 0x3, 0x6, 0x10, 0x7, 0x1, 0x8, 0x80, 0x9, 0xffffffff, 0x5, 0x1, 0x9, 0x0, 0xa0fe, 0x2a, 0x1ff, 0x25e4, 0x5, 0xba, 0x0, 0x4, 0x3, 0x8, 0x0, 0xb, 0x8, 0x9, 0x101, 0xfffffffb, 0x4, 0x9, 0x3, 0x1ff, 0x5, 0x0, 0x3, 0x4, 0x3, 0x100, 0x7, 0x7, 0x6, 0x6, 0x2, 0x9, 0x4, 0xf7, 0x2, 0x2, 0x2, 0x5, 0x2, 0x5, 0x4, 0x9, 0x1, 0x80000001, 0x40, 0x4, 0x7, 0x8, 0x8, 0x7, 0x6, 0x80000000, 0xffff9347, 0xffff8000, 0x8, 0xf, 0x4, 0xbd89, 0x4, 0x4, 0x24c, 0xc0, 0xfff, 0x7, 0x1, 0x1e0b, 0x92, 0x3, 0x7, 0x2, 0xdd, 0x1, 0x88, 0x6, 0xf76, 0x10, 0x80000000, 0x10001, 0x541, 0x100, 0x10001, 0x401, 0x40000000, 0x3ff, 0x7, 0x6, 0x7167, 0x0, 0xb1d, 0x9, 0x5, 0x2, 0x8, 0x0, 0x5, 0x6, 0xba, 0x9, 0x1, 0x3, 0x8, 0x100, 0x0, 0xd3f, 0xb, 0x1, 0xfffffffb, 0x6, 0x100, 0xbc2, 0xc504, 0x7e3, 0xfffffffd, 0x6, 0xe, 0x3, 0x69, 0x2, 0x4, 0x8, 0x1, 0x10, 0x800, 0x10, 0xf, 0x8, 0x6, 0x5e, 0x8, 0x96b, 0x0, 0x1ee, 0x0, 0x6, 0x7, 0x80000000, 0x7, 0x3, 0x5, 0x3, 0xfffffffd, 0x8, 0x8, 0x4, 0x2, 0x7fffffff, 0x3, 0x3, 0x800, 0x83, 0x7, 0x10, 0x7, 0x101, 0x8d88, 0x8001, 0x1000, 0x0, 0x2, 0x5, 0x2, 0x2, 0x8, 0x5, 0x3, 0x9, 0x9, 0x80000001, 0x5, 0x8, 0x9, 0xb9, 0x7, 0x2, 0x0, 0x3, 0x1, 0x7, 0x4, 0xa, 0x3, 0xf, 0x2, 0x5100, 0xfffffff0, 0x80000000, 0x4, 0x66, 0xdc5, 0x200, 0x9, 0x10001, 0x10000, 0xe, 0x10001, 0x1, 0xfffffff9, 0xe06, 0x8, 0x5, 0x3, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x84, 0x0, 0x9, 0x5, 0x5, 0x9, 0x101, 0xa, 0x700000, 0xfffffffa, 0xf5c5, 0x8, 0x0, 0x5, 0x3ff, 0x0, 0x0, 0x3, 0x101, 0x3, 0x80, 0x5, 0x8, 0x8, 0x1, 0xf6, 0x1, 0x1, 0x5d, 0x0, 0x5, 0x4, 0x80000000, 0x101, 0xf98696a5, 0x19b, 0xfffffff9, 0x5, 0x1, 0x6, 0xc, 0x6, 0x8, 0xa4, 0x5, 0x529f, 0x0, 0x58ae, 0x6, 0xfff, 0x0, 0x0, 0x2bd5, 0x9, 0x6, 0x20, 0x4, 0x401, 0x5, 0x8, 0x7, 0x1c0000, 0x3, 0x8, 0x1, 0x0, 0xfffffff9, 0x80, 0x5, 0x3, 0xd3cc, 0xfffffffa, 0x10000, 0x4a, 0x3, 0x1, 0x8, 0x5, 0x200, 0x2, 0x40, 0x9, 0xf237, 0x0, 0x8, 0x1, 0x8, 0xae4, 0x47, 0x2, 0x10001, 0x40, 0x8, 0x3ff, 0x800, 0x3, 0x0, 0x9, 0x7, 0xffff8815, 0x7ff, 0x8, 0xa07, 0x400, 0x3, 0xfffffff4, 0x10, 0x2, 0x9, 0x5, 0x0, 0x52d, 0x9, 0x8, 0x76e, 0x2, 0x4, 0x401, 0x0, 0x7, 0x3, 0x80, 0x6, 0x6, 0x49, 0x1, 0x5, 0x40, 0x3, 0x5, 0xfff, 0x5, 0x7, 0x0, 0xce0, 0x3, 0x2, 0xffffffff, 0x4, 0x401, 0x5, 0x0, 0x6e0d, 0xd, 0x1, 0x6, 0x4, 0x64, 0x567, 0xe, 0x4, 0xc2, 0xffffff80, 0x1, 0x7, 0x9, 0x800, 0x0, 0x6, 0x5, 0x9dbf, 0x7, 0x401, 0x5, 0x7, 0x1, 0x8, 0xfff, 0x0, 0x1, 0x898, 0x1ea, 0xc41, 0x4, 0x6, 0x0, 0xfffffffb, 0x3ff, 0x6, 0x3, 0x5, 0x8, 0xfffffff9, 0x9, 0x1, 0xd86e, 0xc0000, 0xfffffbff, 0x9, 0x4, 0x7fff, 0x1, 0x8, 0xda4, 0x78b, 0x9, 0xfffffff8, 0x8, 0x3, 0x8, 0x401, 0x4, 0xfffffff7, 0x1, 0x0, 0x10001, 0xb, 0x6, 0x3, 0xdb4, 0x9, 0xfffffff8, 0x9f, 0x1, 0xf76, 0x0, 0x9, 0x0, 0xff, 0x7, 0x1, 0x7fff, 0x800, 0xfffffc00, 0xa79d, 0x9, 0x800, 0x10, 0x1ff, 0x80000001, 0x7d, 0xf88, 0x9, 0x6, 0x9, 0x800, 0x4, 0x9, 0x3, 0x6, 0x6, 0xfffffff9, 0x3589, 0xffff, 0x6, 0x4, 0x7, 0xfffffffa, 0x7, 0xff, 0xf1, 0x80, 0x9e3, 0x100, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x5, 0x2, 0x5, 0x2, 0x4, 0x6, 0xffffffff, 0x3ff, 0x8, 0x1000000, 0x4, 0x15, 0x6, 0x8, 0x4, 0x8, 0x6, 0x101, 0x4, 0xf, 0x200, 0x503, 0x7, 0x1, 0x1228, 0x40, 0x5, 0x7fffffff, 0x1, 0x5, 0x9, 0x7d, 0xa, 0x8, 0x1ff, 0x400, 0x68ee, 0xfff, 0x2, 0x47f1de0e, 0x6, 0x101, 0x2, 0x0, 0x9, 0xf, 0xfffff4f2, 0x7, 0x6, 0x9, 0x7fff, 0x5, 0xd, 0x100, 0x81, 0x6, 0x4, 0x0, 0x2000000, 0x4, 0xfff, 0x6, 0x9, 0x55a, 0xc, 0x6, 0x1, 0x3b, 0x6, 0x4, 0xb97f, 0x53da, 0x7, 0x8, 0x7ff, 0x101, 0x3, 0x6, 0x5, 0x3, 0x1ff, 0x0, 0x2, 0x7fff, 0x81, 0x6, 0xfffffeff, 0x10, 0x8, 0x1, 0x8, 0x0, 0x10000, 0xfff, 0x7f, 0x6, 0x7, 0x9, 0x5, 0x44, 0xff, 0x44cc, 0x8, 0x9, 0xf, 0x7f, 0x1000, 0x7, 0x0, 0x2, 0xf, 0xcf8, 0x4, 0xfb35, 0x200, 0xfffffff8, 0x2, 0x8, 0x6, 0x7, 0x6, 0x4, 0x3, 0x8, 0x97, 0x4, 0x743, 0x1, 0x2, 0x7, 0x4, 0x8, 0x6, 0x3, 0x4, 0x7, 0x4, 0x8, 0x101, 0x6, 0x1, 0x8, 0x8, 0x3, 0x8, 0x400, 0xffffe2a5, 0x7ffa, 0x3, 0x5, 0x3, 0x6, 0xe, 0x8, 0x7fff, 0x2, 0x1, 0x10000, 0x9518000, 0xffffe33e, 0x64, 0x0, 0x1, 0x8, 0x6, 0x5, 0x8, 0xfffffff8, 0xf35, 0x5, 0x3ff, 0x27f2d2c7, 0xd8cf, 0x4810, 0x0, 0x80000001, 0x4, 0x40, 0x400, 0x3, 0x1, 0x1, 0x3e0210be, 0xfffffff7, 0x4, 0x1, 0x6, 0x2502, 0xb21, 0x0, 0xfffffff3, 0x7fff, 0x8, 0x2, 0x7, 0x8, 0x7, 0x6, 0x6, 0x40, 0xffffff8c, 0x9, 0x3, 0xffffffff, 0xc, 0x1000, 0xffff1f71, 0x1, 0x7, 0x80000001, 0x334, 0x7c28, 0xffffffff, 0x5, 0xf, 0x1, 0xa, 0x1, 0x5, 0x7, 0x30, 0x6, 0x2, 0x4f, 0x9000000, 0x1, 0x1, 0x101, 0x9, 0x2, 0x8, 0x10000, 0x3, 0x1, 0x1, 0xff, 0x3, 0x7, 0x82, 0x5, 0xffffffff, 0x0, 0x3, 0xb, 0x101, 0xd0, 0x8000, 0x8c62cb8, 0x6, 0x0, 0x80, 0x2, 0x4, 0x1, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffc, 0xdc9, 0x3, 0x8, 0x40, 0x0, 0x8001, 0x6, 0xff, 0x9, 0x3, 0x401, 0x6, 0x8, 0x1f, 0x8000, 0x654, 0x9, 0x2cf, 0x1, 0x2, 0xff, 0x5, 0x632c, 0x7, 0x5d2, 0x5e, 0xfffffe2d, 0x401, 0x4, 0xfffffff8, 0x80000001, 0x800, 0x81, 0x0, 0x22e4, 0xa7, 0x5, 0x39, 0x7, 0x8001, 0x8, 0x1, 0x9, 0x8, 0x1, 0x9, 0x0, 0x7, 0x8, 0x80, 0x80000001, 0x401, 0x1, 0x9800, 0x3, 0x40000000, 0x0, 0x9, 0x47bc8c37, 0x7f, 0x2, 0x401, 0x9, 0x8, 0x7ff, 0x4000000, 0x0, 0x3, 0x1, 0x4, 0x0, 0x7f, 0x800, 0xa99, 0x3, 0x5, 0x7, 0x4, 0xdb9, 0x5, 0xf, 0x9, 0x2, 0x6, 0x1, 0xf, 0x4, 0x800, 0x3, 0x8000, 0x10, 0x3ce7, 0x10000, 0x7, 0x67be, 0x9, 0x1000, 0x5, 0x8000, 0x2, 0x4, 0x1, 0x1, 0x0, 0x6f25, 0x3, 0x3, 0x3, 0x9, 0x8, 0x9, 0x4, 0x5, 0x9, 0x3, 0x99, 0x2f27, 0xffff0bd8, 0x2, 0x1, 0x8, 0xc, 0x18c, 0x6, 0x7ff, 0x9, 0x2, 0xea29, 0x5, 0x1, 0x3, 0x7ff, 0x6bc, 0x8a4, 0x1000, 0x5, 0xfffffffb, 0xaa, 0xfffffff8, 0x5, 0x6, 0x4, 0x8, 0x5d9ec26f, 0xf, 0x7, 0x4, 0x8144, 0x9, 0x8000, 0xfffffff9, 0x9, 0x1, 0x7, 0xc12, 0x37f1000, 0x6, 0x8, 0x1, 0x6, 0x2, 0x9, 0x6, 0x5, 0x1, 0x0, 0x2, 0x9, 0x0, 0x9, 0x5, 0x7, 0x0, 0xffffdc5f, 0xfffffffa, 0x4, 0x6, 0x7fffffff, 0x4, 0x4, 0x858d, 0x4, 0x3, 0x9, 0x2, 0x1, 0x4, 0x2, 0x458, 0x2, 0xfffffffa, 0x7, 0x5, 0x7fffffff, 0xfffffffb, 0x1, 0x5, 0xf000, 0x8, 0x2, 0x18, 0x3, 0x8, 0x6a, 0xfaa, 0xd, 0x3, 0x8, 0x7, 0x5, 0xcc, 0x8, 0x1, 0x5, 0x8, 0x5, 0x4, 0xfff, 0xc1, 0x0, 0x3, 0x0, 0x5, 0x4, 0x7, 0x5, 0x6, 0x4, 0x3d, 0x6, 0x8, 0x1, 0xffff, 0x2, 0x5, 0x10001, 0x7, 0x83, 0x9, 0x10000, 0xffffffff, 0x7, 0x6, 0x7, 0x9, 0x3, 0x2, 0x6, 0x7, 0x7, 0xc, 0x3, 0xfffffff7, 0xd51, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x8, 0x883d, 0x7fff, {0x2a, 0x2, 0x8, 0x4, 0x5, 0x1}, {0x2, 0x2, 0x7, 0x5, 0x2e}, 0x9, 0x54d, 0x8}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x2, 0xee8b, 0x3, 0xfffffffc, {0x2, 0x0, 0xfff5, 0xfffa, 0x9, 0xf}, {0xdb, 0x1, 0x7fff, 0x2, 0x3a33, 0x456}, 0xfffffff0, 0x7, 0xf556}}, @TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x0, 0x1, 0xfff, 0x1, 0x0, 0x7, 0x10000, 0x7, 0x10, 0x401, 0x1, 0x8, 0x0, 0x4, 0x6, 0x9, 0x800, 0xb2, 0x4, 0x8, 0x2, 0xfffff78a, 0x6, 0x2, 0x9, 0xd, 0x80000000, 0x0, 0x1, 0xc, 0xffff, 0x56cb, 0x9, 0x7, 0x44, 0x7, 0x6, 0x7, 0x0, 0x3, 0x3, 0x101, 0x6, 0x2, 0x8001, 0xa297, 0x1, 0x2d53, 0x1, 0x4, 0x7, 0x7adc, 0x100, 0x9, 0x1000, 0x4, 0x9, 0x2, 0x4, 0xfffffffa, 0x0, 0x7fffffff, 0x6, 0x0, 0x8000, 0x37b, 0x5, 0x3b, 0x0, 0x4, 0x6, 0x4, 0x9, 0x7, 0xffffffff, 0x6, 0xff, 0x3, 0x4, 0x5, 0x8, 0x6, 0x6, 0x4, 0xffffffff, 0x7, 0x5, 0x3e6, 0x4, 0x6, 0x280, 0x1, 0x9, 0xa, 0x200, 0xa8b, 0x71d5, 0x1, 0x40, 0x3ff, 0x9d84, 0x2, 0x0, 0x5890, 0x2645cad4, 0x1, 0x8, 0x3, 0x4, 0x4, 0x3, 0x1, 0x0, 0x6, 0x2, 0x3ff, 0x30000000, 0x2, 0x6, 0x5047, 0x9, 0x7c, 0xfffffffb, 0xffffffff, 0x1, 0xfffffff9, 0x0, 0x8, 0x6, 0x7f84e184, 0x9b, 0x3, 0x7, 0x0, 0x4, 0x1, 0x1, 0x5, 0xffffffff, 0xfffffffb, 0x0, 0x4, 0x0, 0xa, 0xfff, 0xb0000, 0x9, 0xc, 0xc0000000, 0xfff, 0x7, 0x5, 0x1ff, 0x2, 0x2, 0x3, 0x4, 0x6, 0x141, 0x8, 0x10, 0x2, 0x80000001, 0x3, 0x6, 0x400, 0x80000001, 0x3, 0xd, 0xa8, 0x1, 0x0, 0x7fb8, 0x47, 0x4, 0x8, 0x2, 0x3, 0x0, 0x2, 0x8000, 0xdd, 0x2, 0x80000000, 0x6, 0x80000001, 0xc, 0x7000000, 0x7, 0x2, 0x9, 0x74f99c13, 0xf, 0x2, 0x1, 0x9, 0x9, 0x9, 0x5e83, 0x6, 0x5, 0x7fffffff, 0x1, 0x800, 0x7, 0x38, 0x3, 0xb6dd, 0xff, 0x1, 0x6, 0x2, 0xc, 0xce04, 0xc, 0x6, 0x0, 0x4, 0x7bb, 0xe6c, 0x5, 0x7ff, 0x4b, 0x5, 0xe, 0x5, 0x40, 0x8, 0x1fee, 0xb1, 0x3, 0x6, 0x7ff, 0x8, 0x7, 0x401, 0x1ff, 0xeb0f938, 0x4, 0x0, 0x2, 0x34247bbd, 0x2, 0x2, 0xffd, 0x1, 0x742, 0x4, 0x6, 0x4, 0x30000, 0x11, 0xfffffffe, 0x2, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x401, 0xc120, 0x7, 0xb36e, 0x5, 0x4, 0x9, 0x61, 0x4, 0xfffffff8, 0x4, 0xfffffffb, 0xc, 0x6d1, 0x1, 0x3, 0x3, 0x2, 0x0, 0x9, 0x9, 0x0, 0x3, 0x6, 0xff, 0xb0, 0x3, 0xd0, 0x8, 0xaade, 0x6, 0x6, 0x101, 0x10001, 0x6c, 0x9b6, 0xffffe3ea, 0xb, 0x8, 0x2, 0x4, 0x1, 0x0, 0x8, 0x7, 0x5, 0xff, 0x43, 0x80, 0x4, 0x9, 0xff, 0x2, 0x5250, 0x0, 0x73eaa97c, 0x80000001, 0x1, 0x2, 0x40, 0x7, 0x0, 0x2, 0x6, 0xfcf, 0xbce, 0xfffffff9, 0x200, 0x4, 0x7bc, 0xfffffff1, 0x5, 0x8, 0x8, 0x0, 0xfffffff7, 0x1, 0x4, 0x10, 0x660, 0xfffff3d3, 0x489, 0x7, 0x7, 0x1, 0xf, 0x9, 0x6, 0x39, 0x4, 0x800, 0x1000, 0x6, 0x2, 0x2, 0x7ed, 0x7, 0x40, 0x6, 0x3, 0x6, 0xf, 0x2, 0x1ff, 0x1, 0x0, 0x7c, 0x101, 0x1c25, 0xfffffff7, 0xbc3, 0x48000, 0x200, 0x9, 0x4, 0x20, 0x6fee, 0x2, 0x8630, 0xe, 0x800, 0x7, 0x9, 0x222, 0x0, 0xe, 0x7, 0x39a, 0x3, 0x257, 0x3, 0x7, 0xfffffff7, 0xffff, 0x8001, 0x9, 0x5, 0x3, 0x10, 0x7, 0xd064, 0x7, 0x8, 0xd, 0x94b6, 0x3, 0x8eb6, 0xda4, 0x5, 0x52bf, 0x6, 0x1ff, 0x9, 0x7fff, 0x706666a9, 0x7, 0x0, 0x7fff, 0x5071, 0x8, 0xab8f, 0x1, 0x3, 0x9, 0xff, 0x2368, 0x5, 0x25, 0x3, 0x63552120, 0x444, 0x100, 0xb31, 0x3, 0x40, 0x0, 0x3, 0x3, 0x8001, 0xfff, 0x3, 0xffffffff, 0xffffffbb, 0xfffffff3, 0x6, 0x66f, 0x487, 0x2, 0xae, 0x4, 0x0, 0x9, 0x1, 0xf35, 0x0, 0x7, 0xcf, 0xd3, 0x1, 0x7, 0x4, 0x8001, 0x4, 0x400, 0x4, 0x7a5e, 0x1, 0x2, 0x4, 0x0, 0x1, 0x3, 0xa5, 0xa1e, 0xffff, 0xa3af, 0x1, 0x8, 0xc424, 0x7, 0x3, 0x4, 0x0, 0x0, 0x7, 0x9, 0x6, 0x7f, 0x0, 0x9, 0x2, 0x7, 0x3, 0x7, 0x51f, 0x10, 0x6, 0xfffffff9, 0x401, 0x2, 0x9, 0x3, 0x8, 0x7, 0x0, 0x735, 0xfffffff7, 0x10, 0x2, 0x9, 0x0, 0x8, 0xff, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x101, 0x3, 0x3, 0x10, 0x1, 0x0, 0x5, 0x5, 0xec, 0xfffffffa, 0x1, 0x6, 0x10000, 0x9, 0xfffffffc, 0x80, 0x3ff, 0x2, 0x2, 0x5e, 0xc2, 0xffff, 0xe, 0xc, 0xe, 0x3, 0x9, 0x40, 0xb, 0x4, 0x8, 0x5, 0x52, 0x6c, 0xb4de, 0x8001, 0x9, 0xb, 0x2, 0x6, 0x2, 0x8, 0x400, 0x9, 0x34, 0x5, 0xfffffff7, 0x4, 0xc, 0x1, 0xffff0000, 0xe, 0x1000, 0x9, 0x9, 0x1, 0x3, 0x0, 0x4, 0x1ff, 0x8, 0x148, 0x8, 0xe, 0x8, 0xa, 0xb, 0x1, 0x1, 0x7fff, 0x9, 0x8, 0xe, 0x41, 0x1, 0x7, 0x3, 0xf, 0x2000, 0x1, 0x8, 0x5, 0x800, 0x3, 0x7, 0xffffffff, 0x6, 0xd, 0xc6b, 0x8000, 0x1000, 0x200, 0x6, 0x9, 0xfed, 0xffffffff, 0x9, 0x35, 0x0, 0x4, 0x80000000, 0xa, 0x8, 0x9, 0x0, 0x5, 0x5, 0x4, 0x4, 0x8, 0xffffffff, 0x7, 0x1, 0x1, 0xa, 0x0, 0x40, 0x1, 0x4, 0xf, 0x8, 0x8, 0x5, 0x2, 0x0, 0x7f, 0x88b, 0x6, 0x4, 0x1, 0xe, 0xf, 0x0, 0x8, 0x8, 0xffff0dc4, 0x2, 0x3, 0x5, 0x101, 0x9, 0x7, 0x4, 0xfffffffa, 0x9, 0x80000000, 0x6, 0x6a2, 0xfffffffe, 0x8, 0xfffffffb, 0x3, 0x14, 0x1, 0x7ff, 0xe, 0x80000000, 0x842, 0xffff9d72, 0x30, 0x6, 0x3, 0x3, 0x7ff, 0xd1b, 0x1ff, 0xde9, 0xf5800000, 0x1, 0xc0000000, 0x9, 0x1400000, 0x3621, 0x8, 0xf239, 0x400, 0x1, 0x88f3, 0x4, 0x2, 0x5, 0x2, 0xfff, 0x391, 0x7ff, 0x1, 0x9, 0x6, 0x0, 0x3, 0xfffffffa, 0x32, 0x2, 0x63b, 0x0, 0xd, 0x75, 0x2, 0x1, 0x0, 0x3, 0xe, 0x9, 0x6, 0x95, 0x3, 0xf1d, 0x10000, 0x0, 0xec, 0xff, 0x1, 0x2, 0x3, 0x6, 0x6, 0x9, 0x3, 0x10001, 0x0, 0x924f, 0x7, 0x0, 0xe, 0x4, 0x7af, 0x8001, 0x40, 0x5, 0x0, 0x5b1d, 0xe9, 0x4e, 0x5, 0x2, 0x15fd, 0x4, 0xffffffff, 0x5, 0x6, 0x77, 0xed, 0x844d, 0x19d, 0x3ff, 0x2, 0x4, 0x1, 0x0, 0x10001, 0x7, 0x9, 0x8, 0xffffffff, 0xfffffff6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}], [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x7fffffff, 0x9, 0x7, 0x5, 0x80000000, 0x1, 0x9, 0x81, 0xffe00, 0x7, 0x3, 0x6, 0x6, 0x1, 0x9, 0x9, 0x9, 0x8, 0x67, 0x8, 0xae4, 0x0, 0x8, 0x7f, 0xe, 0x10000, 0xfffffff8, 0x101, 0x4, 0x10, 0x1, 0xf7, 0x100, 0x5, 0x4, 0x5, 0x3, 0x9, 0x0, 0x1, 0x3, 0x200, 0x6, 0x2, 0x99, 0x8, 0xffff, 0x81, 0x7, 0x111, 0x8, 0x3, 0xff, 0x401, 0x200, 0x9, 0x1, 0x6, 0x3, 0xb4, 0x2, 0x4, 0x9, 0xa, 0x9, 0x800, 0x80000001, 0x101, 0x3ff, 0x5, 0x20c, 0xffff7fff, 0x401, 0xb6a, 0x1, 0xffffffff, 0x3, 0x6, 0x40, 0x2, 0x4fd7, 0x1, 0x8, 0x2, 0x7f, 0x7, 0x1000, 0x4616, 0x0, 0x5e, 0x8, 0x6, 0x6, 0xffff, 0x8, 0x6, 0x86, 0xb, 0x8000, 0x7, 0x80000000, 0x2, 0x0, 0x55, 0x5, 0x4, 0x2, 0x5b4, 0xd382, 0x7, 0x101, 0x0, 0x5a3, 0xffff, 0x100, 0x6, 0x0, 0x80000000, 0x5, 0x5fb, 0x5, 0x6ab3, 0x3, 0x7, 0x9, 0x5, 0x4, 0x5, 0x7fff, 0xbe7, 0xc, 0xb, 0x7, 0x1, 0x71, 0x1, 0x8, 0x1, 0x72, 0x7, 0x2ad, 0x7fffffff, 0x20, 0x0, 0x0, 0x7, 0x3, 0x2, 0x2, 0x9, 0xffffff3d, 0x1, 0x400, 0x7, 0x5, 0x5, 0x300000, 0x5, 0x38c4, 0x7fffffff, 0x0, 0x4, 0x8, 0x5, 0xd6d7, 0x2, 0x3ff, 0x6, 0x6, 0x2, 0x9, 0x3, 0x6, 0x0, 0x3, 0x7, 0x11a, 0x101, 0x6, 0x60, 0x3ff, 0x1ff, 0x7fffffff, 0x73, 0x0, 0x8, 0x5, 0xfffffffe, 0xffffffff, 0x4, 0x1, 0x7, 0xa, 0x5, 0x9, 0xffffffff, 0x1ff, 0xc, 0xc3, 0x5, 0x3f, 0x16, 0x0, 0x4, 0x6, 0x100, 0xffffff11, 0x2, 0x37c1, 0x2c90, 0xa194, 0x159, 0x4, 0x3, 0x40, 0x3, 0x400, 0x10, 0x6, 0x6, 0x3, 0x1, 0x6211, 0x8, 0x0, 0x80000000, 0x2, 0x3, 0x5, 0xffffd322, 0x0, 0x8, 0x3, 0x8, 0x8a, 0x4, 0x8, 0x5, 0x7161, 0x5d, 0x3, 0x4, 0x44, 0x7e, 0x6, 0x5, 0xfff, 0x4, 0xffff7fff, 0x7, 0x200, 0x2, 0x2, 0x0, 0x2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6e}]]}, {0x2a, 0x6, "0f78ec780cb0388bee478937540bf49084b4236791a5bb9705db776536b3d553bedf58c69411"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0xba0d8d62a27caffa, 0x2}}}}]}, {0x2f0, 0x1, [@m_csum={0x12c, 0x8, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x6123a86e, 0x1, 0x9, 0x1}, 0x39}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x18640, 0x1, 0x8, 0x65}, 0x1f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc05, 0x3, 0x0, 0x6, 0x2}, 0x1c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff, 0x4a, 0x8, 0x4, 0x3}, 0x80}}]}, {0x90, 0x6, "8a2d681210f4ac4ef8bb8b079c251e78586f384ff11c3ce13ba9df278a36f44b54acba17768b6b3488af18ab785b44f0a5ba6732712119b14bc5bc399f22d82d8a78a41d35e58ef7cf1887c1dcad0482944520e6366b249ce1ff60341cef8726c5cf356cfd94fe945d9931a990036f86754bea551b7ce07d9600b6ae94850227ac7706eea4ccaafcca2c78a2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x40, 0x5, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x200}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x10000}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x180, 0x1b, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x7, 0x1ff, 0x8}, 0x336}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10001, 0x80000001, 0x10000000, 0x3, 0xfffff4b3}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x3b16, 0x6, 0x1, 0x9}, 0x7a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x8, 0xffffffffffffffff, 0xfffff001}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0x7, 0x2, 0x7}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x1, 0x7, 0xb}, 0x7e}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xffff, 0x7, 0x400000, 0x3}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x722f, 0x3, 0x3, 0x94a0d742, 0x6da2}, 0xc9fd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x276, 0x1, 0x6, 0x8, 0x7}, 0x1}}]}, {0x51, 0x6, "1ee6889a4bb23c44f98d2e130b2cdf635f11d8e362cf3947b5bd39e031acee8d7d4cc678a5e50115061c7235cc917f4d78a274a83f0b7083752d44a2684060db25a8a0a29cc7a6202c01986ed1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x133c, 0x1, [@m_simple={0x148, 0xe, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, 'H$\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x8, 0x3, '\xc1[\\\x00'}, @TCA_DEF_DATA={0x7, 0x3, 'lo\x00'}]}, {0xf9, 0x6, "74e6995c29ff2ff1c237926e6f0b0c0346f457cb172d7005ee7fdcb2ecffb0676901d6715ce13653a5dec10441dcf767c6aac3cc06e58c2779bd72fbd36f0ba845a4cc7e2d21184f73c6c23bb37fc768cc2f528039b05b1de0cc8ee1d989ff7061e55857606afad54d0e479ffa2b6f072051e6212cf8bf4f18ee9aee19fa259e92df75fbed1c7060a5fcd2b0411844e71c6363a25c38fa701e8ee7313465c54358206fa34f52b872fb9753d9240e30c7b45415e52174c594904b8b28ea918fa0bec357b165e728c113f627e6159c1c01fb3b7da1e8b1b78d95b199282a6b7f4eeb2ac613d6095a699397a60d3349533f6b41bec14b"}, {0xc}, {0xc, 0x8, {0x3, 0xcf60dbac1ecf6c47}}}}, @m_csum={0x10d8, 0x19, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fffffff, 0x4, 0xfffffffffffffff6, 0x8, 0xfffffffe}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x200, 0x10000000, 0x6, 0xe}, 0x5d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x5, 0x6, 0x8, 0x1}, 0x68}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x4, 0x3ff, 0x1a}, 0xa}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffa, 0x6, 0x2}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x1, 0x0, 0x6b29, 0x183f}, 0x4e}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x118, 0x1f, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffff, 0x5, 0x5, 0xb11}, @local, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x4, 0x4, 0x4, 0x2}, @multicast1, @remote, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x80, 0x6}, @broadcast, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0xffffffff, 0xffffffffffffffff, 0x8, 0x8a6a}, @broadcast, @multicast2, 0x0, 0x1}}]}, {0x4e, 0x6, "d85c4aab757b2e5f9f64c8935bdf97c7cfd40f979d061b9664c2396da8c5fd25a8f209c04a0cd0b3fcf32b66081fa0176a122df2934a303930f20d7b128fd7a5ff9c3624e5bf95d01c52"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x1a0, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xef1, 0x2, 0x0, 0x0, 0x9b53}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_xt={0x154, 0x1f, 0x0, 0x0, {{0x7}, {0x70, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x2f, 0x6, {0x2221, 'filter\x00', 0x4, 0x4, "5009e07770"}}, @TCA_IPT_HOOK={0x8}]}, {0xbf, 0x6, "22df2cbc22a8b71ac8d655e6ade4fc239eb8d674d6f57d1397c5bc1b4a99dd34a781d7513f4bc825140bf4da9a153ba960158a82c2831da6224e5a87b3dd792aa16a6190346afaa72da5bdd17bcad62edd6ab6012d14bbf9506b3ad8255d50573ab250a6b94a0393c1f0cfa64207b43bccdacc3a7359417b502bd086a2272da860a8db827a117ed1a313a10c72a7ff9544d09ae60e2036266bac5935574504b350e71f6fc3ec23dcff9dff66e761b466149777bed756fc9a649838"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x417c}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f7}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000140)="24000000010006", 0x7) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x1, 0x70bd2c, 0x20, {0x0, 0x0, 0x0, 0x0, 0xdf15003157970113, 0x8084}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'ip6gretap0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0x61b, 0x10000, 0x8100}}]}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000010) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000000)) syz_emit_ethernet(0x66, &(0x7f0000000480)={@random="2740abbe4af1", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}}}, {0x8, 0x22eb, 0x2, {{}, 0x2, {0x4}}}}}}}}, 0x0) sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r9, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0xf0, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x31}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "07bd"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "f187dd31"}, @NL80211_ATTR_FILS_ERP_REALM={0x9f, 0xfa, "51128bd830b9b3e44fc230eaed6eba8b825f57918bc5c9137b3e705cfffe5fa200ef454418a63182dcf474d344d4df6546736b1cd739a128e138ffa3b9a3dd8f8a72e3dd294b634ceaadb344f3905dbd4ae363ab704f3dae7462fca517cfe5f4ab7b1443999fb163e92b26ef1e61c896ac0f2da425ef8b32d78e609bdb2ceceee378a0160ee4d59018e1a128e4e49f923a81858b86516bde6752db"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x14e}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "2d3fc7fab75e"}], @NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x9, 0xae, 0xf0}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) setsockopt$sock_attach_bpf(r7, 0x1, 0x9, &(0x7f0000000080), 0x4) 1.173255733s ago: executing program 4 (id=5151): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000dfffffff8500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 590.806623ms ago: executing program 1 (id=5152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000f3ffffff000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 590.101715ms ago: executing program 4 (id=5153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x108, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0xf}, {}, {0xfffffffffffffffe, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xd8, 0x2, [@TCA_CGROUP_EMATCHES={0xd4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xc8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x201}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xe85, 0x6e4, 0x3ff, 0xe406}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}, @TCF_EM_META={0x98, 0x1, 0x0, 0x0, {{0xd8, 0x4, 0xe8}, [@TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_VAR="f8c73c514c233597", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="9608"]}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="eff7db", @TCF_META_TYPE_VAR="39b9b4"]}, @TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="afc7bf9d", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="090226", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x5}, {0x7fff, 0x4, 0x1}}}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="ed7fb8c2", @TCF_META_TYPE_VAR="895d", @TCF_META_TYPE_VAR="e6ec13", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0xd, 0x9, 0x1}, {0xff, 0xd, 0x2}}}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="85"]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6e4}}]}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x0) 589.239152ms ago: executing program 1 (id=5154): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0xc000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb88}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) close(r6) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 589.113469ms ago: executing program 0 (id=5155): unshare(0x22020600) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc7, &(0x7f0000000080)=""/199, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) socket$nl_route(0x10, 0x3, 0x0) 588.839344ms ago: executing program 0 (id=5156): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x4, 0x1, 0x9, 0x9, 0x3, 0xffffffffffffffe0, 0x10}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x25}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$caif_stream(0x25, 0x1, 0x1) recvmmsg(r2, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40010140, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x190, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x81, 0x0, 0x9}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x29, 0x1ff, 0x6, 0xb0e6, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x800, 0x93, 0x6, 'netbios-ns\x00', 'syz0\x00', {0x6}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x10, 0x1, 'syz0\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="f0c406defd959d5054d628320f03", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmmsg$unix(r5, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)="c9efea", 0x3}, {&(0x7f0000000500)="1daf960d05cb", 0x6}], 0x2}}], 0x1, 0x4001) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x4, 0x1, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0}, 0x40) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r9, @ANYRES32, @ANYBLOB='0\x00'/12, @ANYRES32=r10, @ANYBLOB="32101c9876750c7e96420f5f4d824053f7774887a8253ecf055b6f90", @ANYRES64=r8], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0x6, &(0x7f0000000cc0)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, r7, 0x6}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r11, 0x84, 0x19, &(0x7f0000000040)={r13, 0xf}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000380)={r13, 0xd8c}, 0x8) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="58000000020603000000000000000010020000065e00010007000000050005000200000010000300686173683a69702c6d6163000000040001000000050005000000000010000300686173683a69702c6d616300"], 0x58}, 0x1, 0x0, 0x0, 0x4004800}, 0x20048888) 588.119804ms ago: executing program 2 (id=5157): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="24002d8005000100fe000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$netlink(0x10, 0x3, 0x14) socket(0x2, 0x80805, 0x0) socket$kcm(0x23, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="0f011070", @ANYRES16, @ANYBLOB="02002dbd7000fedbdf2514000000800002801c000380080002000002000008000200ff000000080002001d0f0000040004003c000380080001000300000008000200ff03000008000200ff0100000800020009000000080002000100000008000100050000000800010003000000040004"], 0x170}, 0x1, 0x0, 0x0, 0x4001}, 0x48000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a73300008000200000000000800070026093a0914000600626f6e64300000000000000003000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 569.035608ms ago: executing program 4 (id=5158): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}]}}}]}, 0x48}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd700000dcdf251800000008000300", @ANYRES32=r5, @ANYBLOB="1c003080180001800c00050000000000000080030800010005"], 0x38}}, 0x4040084) close(r0) 423.52447ms ago: executing program 4 (id=5159): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r2}, 0x38) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x1}}}}, 0x36) 341.040068ms ago: executing program 2 (id=5160): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r2, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r10) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x48, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x8044) 339.048117ms ago: executing program 1 (id=5161): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000040), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, {}, {}, 0x0, 0x1}, {}, {}], 0x140) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010004000000fbdbdf253900000008000300", @ANYRES64=r4, @ANYBLOB="24005a802000038005000400c2"], 0x40}, 0x1, 0x0, 0x0, 0x24040802}, 0x8010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1d, 0xa, 0x805, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0xc}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000740)={{r6}, r7, 0x2, @unused=[0x6, 0x10000, 0x2, 0xf2], @devid=r8}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0xc}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000000740)={{r9}, r10, 0x2, @unused=[0x6, 0x10000, 0x2, 0xf2], @devid=r11}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000002c0)={"e90c92611b9d2129ba1ff037d4474d02", r7, r10, {0x100000001, 0x7}, {0x7, 0x101}, 0x500000000000, [0xd3e, 0x2, 0x7, 0x401, 0x7, 0x2, 0xfffffffffffffff9, 0xad, 0x80, 0x6, 0x1, 0x4, 0x1, 0x5, 0x3, 0x5]}) 31.414589ms ago: executing program 3 (id=5162): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@delchain={0x40, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x2000) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c"], 0x78}}, 0x0) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x8}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="0100", 0x2}], 0x1}, 0x240448c1) recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) (async) sendmsg$inet(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="04", 0x1}], 0x1}, 0x1) (async) recvmsg$unix(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/22, 0x16}], 0x1}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) (async, rerun: 64) r7 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b0013"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x4, 0x9, [0x8000, 0x6, 0x800, 0x2, 0x21, 0x0, 0x91f2, 0x6, 0x956]}, &(0x7f00000001c0)=0x1a) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000200)={r9, 0x91c, 0x401}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/480], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async, rerun: 32) bind$alg(r7, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(nhpoly1305-sse2)\x00'}, 0x58) (rerun: 32) 0s ago: executing program 2 (id=5163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x6c}, {0x6}]}, 0x10) close(r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$packet(r2, &(0x7f00000003c0)={0x11, 0x6, r3, 0x1, 0xd1, 0x6, @local}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x1, 0x7, 0x7ff, 0x946, 0x10}, {0x6, 0x2, 0x0, 0x5dc, 0x3, 0xfffdfff8}, 0xffff, 0x3, 0x17cf}}, @TCA_TBF_BURST={0x8, 0x6, 0xffffff01}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000000240)={'veth1_to_batadv\x00', @broadcast}) kernel console output (not intermixed with test programs): netlink: 20 bytes leftover after parsing attributes in process `syz.0.3651'. [ 440.122263][T19202] netlink: 'syz.2.3653': attribute type 1 has an invalid length. [ 440.169741][T19209] netlink: 'syz.3.3654': attribute type 8 has an invalid length. [ 440.178304][T19209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3654'. [ 440.191269][T19202] bond1: entered promiscuous mode [ 440.197027][T19202] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.220468][T19209] bond0: entered promiscuous mode [ 440.239217][T19216] netlink: 'syz.3.3654': attribute type 8 has an invalid length. [ 440.262730][T19209] bond_slave_0: entered promiscuous mode [ 440.271868][T19216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3654'. [ 440.272116][T19209] bond_slave_1: entered promiscuous mode [ 440.293905][T19209] bond0: left promiscuous mode [ 440.298747][T19209] bond_slave_0: left promiscuous mode [ 440.307721][T19209] bond_slave_1: left promiscuous mode [ 440.341657][T19201] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 440.378134][T19218] netlink: 'syz.0.3656': attribute type 6 has an invalid length. [ 440.405970][T19216] bond0: entered promiscuous mode [ 440.411429][T19216] bond_slave_0: entered promiscuous mode [ 440.436416][T19216] bond_slave_1: entered promiscuous mode [ 440.469050][T19216] bond0: left promiscuous mode [ 440.481300][T19230] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3658'. [ 440.490517][T19216] bond_slave_0: left promiscuous mode [ 440.503448][T19216] bond_slave_1: left promiscuous mode [ 440.805204][T19250] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3661'. [ 440.917395][T19257] lo speed is unknown, defaulting to 1000 [ 440.935789][T19256] lo speed is unknown, defaulting to 1000 [ 440.954052][T19252] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3663'. [ 441.546649][T19277] 8021q: adding VLAN 0 to HW filter on device bond2 [ 441.617693][T19277] macvlan0: entered promiscuous mode [ 441.632630][T19277] macvlan0: entered allmulticast mode [ 441.644143][T19277] bond2: entered promiscuous mode [ 441.661262][T19277] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 441.677462][T19277] bond2: left promiscuous mode [ 441.774683][T19283] lo speed is unknown, defaulting to 1000 [ 442.076508][T19300] delete_channel: no stack [ 442.278281][T19311] xt_l2tp: missing protocol rule (udp|l2tpip) [ 442.784390][T19334] can: request_module (can-proto-0) failed. [ 443.155885][ T1135] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x35 [ 443.645982][T19377] syz_tun: entered allmulticast mode [ 443.682252][T19377] dvmrp3: entered allmulticast mode [ 443.708674][T19375] syz_tun: left allmulticast mode [ 443.714081][T19375] dvmrp3: left allmulticast mode [ 443.792349][T19378] lo speed is unknown, defaulting to 1000 [ 444.166751][T19398] __nla_validate_parse: 7 callbacks suppressed [ 444.166774][T19398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3700'. [ 444.203647][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3699'. [ 444.549937][T19416] syzkaller0: entered promiscuous mode [ 444.558272][T19416] syzkaller0: entered allmulticast mode [ 444.626163][T19422] lo speed is unknown, defaulting to 1000 [ 444.769508][T19423] mac80211_hwsim hwsim53 wlan1: entered promiscuous mode [ 444.779815][T19423] macsec1: entered promiscuous mode [ 444.789791][T19423] mac80211_hwsim hwsim53 wlan1: left promiscuous mode [ 445.279222][T19439] sctp: [Deprecated]: syz.3.3710 (pid 19439) Use of int in maxseg socket option. [ 445.279222][T19439] Use struct sctp_assoc_value instead [ 446.952225][T19464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3718'. [ 446.995977][T19461] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3717'. [ 447.050036][T19449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.099188][T19464] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 447.123276][T19464] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 447.143662][T19464] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 447.313591][T19473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3720'. [ 447.378568][T19476] syzkaller1: entered promiscuous mode [ 447.424888][T19476] syzkaller1: entered allmulticast mode [ 447.635772][T19489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3723'. [ 447.757736][T19499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3726'. [ 448.060981][T19513] netlink: 'syz.4.3728': attribute type 29 has an invalid length. [ 448.186878][T19513] macsec1: entered promiscuous mode [ 448.192737][T19513] ip6gretap0: entered promiscuous mode [ 448.207877][T19516] netlink: 'syz.4.3728': attribute type 29 has an invalid length. [ 448.219359][T19518] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3731'. [ 448.418663][T19532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3733'. [ 448.467803][T19532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3733'. [ 448.574517][T19545] netlink: 'syz.1.3736': attribute type 5 has an invalid length. [ 448.855734][T19554] block nbd3: Unsupported socket: should be TCP or UNIX. [ 449.092309][T19577] netlink: 'syz.4.3746': attribute type 10 has an invalid length. [ 449.199195][T19568] syzkaller0: entered promiscuous mode [ 449.207187][T19568] syzkaller0: entered allmulticast mode [ 451.268565][T19615] __nla_validate_parse: 3 callbacks suppressed [ 451.268590][T19615] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3756'. [ 451.990793][T19608] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.998901][T19608] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.417519][T19608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.438482][T19608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.630061][T19616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3755'. [ 452.691444][ T1164] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.751190][ T1164] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.794598][ T1164] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 452.830178][ T1164] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.853030][ T1164] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.872423][ T1164] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 452.894975][ T1164] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.912945][ T1164] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.931849][ T1164] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 452.965487][ T1164] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.994696][ T1164] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.018690][ T1164] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 453.368080][T19655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3765'. [ 453.430769][T19657] lo speed is unknown, defaulting to 1000 [ 453.465954][T19663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3767'. [ 453.513251][T19663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3767'. [ 453.584296][T19668] netlink: 'syz.4.3766': attribute type 21 has an invalid length. [ 453.599564][T19662] lo speed is unknown, defaulting to 1000 [ 453.614822][T19659] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3768'. [ 453.648949][T19659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3768'. [ 453.669553][T19659] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3768'. [ 453.683998][T19659] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3768'. [ 453.687513][T19668] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3766'. [ 454.372359][T19702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.463230][T19702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.495248][T19713] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 454.701903][T19718] bond2: option ad_select: invalid value (34) [ 454.711850][T19718] bond2 (unregistering): Released all slaves [ 454.988785][T19726] block nbd3: server does not support multiple connections per device. [ 455.004227][T19726] block nbd3: shutting down sockets [ 455.013826][T19733] netlink: zone id is out of range [ 455.019136][T19733] netlink: zone id is out of range [ 455.024689][T19733] netlink: get zone limit has 8 unknown bytes [ 455.093133][T19728] block nbd3: server does not support multiple connections per device. [ 455.104082][T19728] block nbd3: shutting down sockets [ 455.191882][T19746] netlink: 'syz.3.3789': attribute type 16 has an invalid length. [ 455.299492][T19756] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 455.609354][T19765] lo speed is unknown, defaulting to 1000 [ 456.003964][T19780] lo speed is unknown, defaulting to 1000 [ 456.257403][T19801] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 456.299607][T19798] netlink: 'syz.0.3802': attribute type 17 has an invalid length. [ 457.186679][T19826] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 457.223490][T19826] __nla_validate_parse: 15 callbacks suppressed [ 457.223516][T19826] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3811'. [ 457.355714][T19836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3815'. [ 457.407731][T19836] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3815'. [ 457.463454][T19839] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3815'. [ 457.551347][T19847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3818'. [ 457.760548][T19851] lo speed is unknown, defaulting to 1000 [ 457.799844][T19859] lo speed is unknown, defaulting to 1000 [ 458.237909][T19872] tipc: Enabling of bearer rejected, failed to enable media [ 458.719187][T19890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3830'. [ 458.901082][T19901] netlink: 'syz.2.3829': attribute type 10 has an invalid length. [ 458.944658][T19901] bond0: (slave dummy0): Releasing backup interface [ 458.992626][T19901] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 459.102962][T19901] team0: Failed to send options change via netlink (err -105) [ 459.162799][T19901] team0: Port device dummy0 added [ 459.438418][T19922] Cannot find del_set index 2 as target [ 459.443082][T19918] nbd4: detected capacity change from 0 to 127 [ 459.481640][T19922] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3838'. [ 459.502133][ T51] block nbd4: Receive control failed (result -32) [ 459.706533][T19936] netlink: 'syz.1.3841': attribute type 10 has an invalid length. [ 459.753102][T19938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3843'. [ 459.753466][T19936] team0: Device ipvlan1 failed to register rx_handler [ 459.813729][T19938] veth1: entered promiscuous mode [ 459.829218][T19938] veth1: left promiscuous mode [ 459.915184][T19940] tipc: Started in network mode [ 459.920119][T19940] tipc: Node identity daf9ee98fd3, cluster identity 4711 [ 459.938635][T19940] tipc: Enabled bearer , priority 0 [ 459.957093][T19934] syzkaller0: entered promiscuous mode [ 459.969113][T19934] syzkaller0: entered allmulticast mode [ 460.021487][T19931] tipc: Resetting bearer [ 460.182154][T19931] tipc: Disabling bearer [ 460.293136][T19966] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3850'. [ 460.533962][T19979] syzkaller1: entered promiscuous mode [ 460.553179][T19979] syzkaller1: entered allmulticast mode [ 460.673102][T19983] lo speed is unknown, defaulting to 1000 [ 460.842409][T19993] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3856'. [ 460.918550][T20001] netlink: 'syz.4.3858': attribute type 10 has an invalid length. [ 460.976112][T20001] mac80211_hwsim hwsim47 wlan1: entered promiscuous mode [ 460.992056][T20001] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 461.046208][T20007] bridge: RTM_NEWNEIGH with invalid ether address [ 461.090684][T20004] tipc: Enabled bearer , priority 0 [ 461.130022][T20004] syzkaller0: entered promiscuous mode [ 461.153593][T20004] syzkaller0: entered allmulticast mode [ 461.200815][T20004] tipc: Resetting bearer [ 461.219983][T20010] lo speed is unknown, defaulting to 1000 [ 461.250291][T20003] tipc: Resetting bearer [ 461.464186][T20003] tipc: Disabling bearer [ 462.090383][T20035] netlink: 'syz.3.3869': attribute type 1 has an invalid length. [ 462.182886][T20035] 8021q: adding VLAN 0 to HW filter on device bond3 [ 462.364875][T20040] erspan0: entered allmulticast mode [ 462.379619][T20040] bond3: (slave erspan0): making interface the new active one [ 462.392242][T20040] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 462.501902][T20026] lo speed is unknown, defaulting to 1000 [ 462.620342][T20059] pim6reg1: entered promiscuous mode [ 462.627151][T20059] pim6reg1: entered allmulticast mode [ 462.665153][T20061] netlink: 'syz.3.3876': attribute type 13 has an invalid length. [ 462.673666][T20061] netlink: 'syz.3.3876': attribute type 17 has an invalid length. [ 462.713835][T20061] erspan0: left allmulticast mode [ 462.765627][T20061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.774976][T20061] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.787902][T20061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 462.950910][T20062] lo speed is unknown, defaulting to 1000 [ 463.219153][T20073] Cannot find add_set index 0 as target [ 463.690765][T20094] lo speed is unknown, defaulting to 1000 [ 463.998984][T20094] __nla_validate_parse: 4 callbacks suppressed [ 463.999007][T20094] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3883'. [ 464.059397][T20094] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3883'. [ 464.100056][T20094] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3883'. [ 464.130581][T20109] lo speed is unknown, defaulting to 1000 [ 464.137045][T20094] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3883'. [ 464.201841][T20117] lo speed is unknown, defaulting to 1000 [ 464.247837][T20122] geneve3: entered promiscuous mode [ 464.289977][T20125] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3889'. [ 464.299267][T20125] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3889'. [ 464.314374][T20125] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3889'. [ 464.348980][T20125] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3889'. [ 464.512063][T20134] lo: entered allmulticast mode [ 464.527167][T20134] netlink: 'syz.1.3893': attribute type 5 has an invalid length. [ 464.650016][T20139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3894'. [ 464.834961][T20145] syzkaller0: entered promiscuous mode [ 464.840524][T20145] syzkaller0: entered allmulticast mode [ 464.947828][T20143] lo speed is unknown, defaulting to 1000 [ 464.999851][T20145] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3895'. [ 465.165583][T20146] lo speed is unknown, defaulting to 1000 [ 465.376718][T20171] ieee802154 phy0 wpan0: encryption failed: -22 [ 466.930571][T20213] dvmrp8: entered allmulticast mode [ 467.050058][T20218] lo speed is unknown, defaulting to 1000 [ 467.080900][T20236] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 467.334151][T20238] netlink: 'syz.2.3918': attribute type 22 has an invalid length. [ 467.503778][T20238] netlink: 'syz.2.3918': attribute type 22 has an invalid length. [ 467.550608][ T1135] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.564071][T20263] netlink: 'syz.3.3924': attribute type 1 has an invalid length. [ 467.571592][ T1135] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.607931][ T1135] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.641460][ T1135] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.953852][T20276] wg1: entered promiscuous mode [ 467.970105][T20276] wg1: entered allmulticast mode [ 468.231170][T20298] FAULT_INJECTION: forcing a failure. [ 468.231170][T20298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.292756][T20298] CPU: 1 UID: 0 PID: 20298 Comm: syz.1.3934 Not tainted syzkaller #0 PREEMPT(full) [ 468.292788][T20298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 468.292807][T20298] Call Trace: [ 468.292817][T20298] [ 468.292827][T20298] dump_stack_lvl+0x189/0x250 [ 468.292857][T20298] ? __pfx____ratelimit+0x10/0x10 [ 468.292889][T20298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.292913][T20298] ? __pfx__printk+0x10/0x10 [ 468.292945][T20298] ? __might_fault+0xb0/0x130 [ 468.292982][T20298] should_fail_ex+0x414/0x560 [ 468.293011][T20298] _copy_from_user+0x2d/0xb0 [ 468.293045][T20298] __sys_bpf+0x1e3/0x860 [ 468.293079][T20298] ? __pfx___sys_bpf+0x10/0x10 [ 468.293127][T20298] ? ksys_write+0x22a/0x250 [ 468.293165][T20298] __x64_sys_bpf+0x7c/0x90 [ 468.293194][T20298] do_syscall_64+0xfa/0xfa0 [ 468.293226][T20298] ? lockdep_hardirqs_on+0x9c/0x150 [ 468.293259][T20298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.293281][T20298] ? clear_bhb_loop+0x60/0xb0 [ 468.293309][T20298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.293337][T20298] RIP: 0033:0x7f7bf698eec9 [ 468.293358][T20298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.293378][T20298] RSP: 002b:00007f7bf77cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 468.293403][T20298] RAX: ffffffffffffffda RBX: 00007f7bf6be5fa0 RCX: 00007f7bf698eec9 [ 468.293419][T20298] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 468.293433][T20298] RBP: 00007f7bf77cf090 R08: 0000000000000000 R09: 0000000000000000 [ 468.293446][T20298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.293460][T20298] R13: 00007f7bf6be6038 R14: 00007f7bf6be5fa0 R15: 00007ffc47da64f8 [ 468.293498][T20298] [ 468.639336][T20305] netlink: 'syz.1.3938': attribute type 15 has an invalid length. [ 468.885100][T20315] lo speed is unknown, defaulting to 1000 [ 468.978097][T20324] netlink: 'syz.3.3941': attribute type 13 has an invalid length. [ 469.003635][T20324] netlink: 'syz.3.3941': attribute type 17 has an invalid length. [ 469.046603][T20324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 469.174185][T20329] xt_CT: You must specify a L4 protocol and not use inversions on it [ 469.176884][T20326] lo speed is unknown, defaulting to 1000 [ 469.256586][T20332] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 469.390019][T20338] __nla_validate_parse: 18 callbacks suppressed [ 469.390051][T20338] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3944'. [ 469.576116][T20343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3948'. [ 469.620931][T20343] geneve2: entered promiscuous mode [ 469.645217][T20343] geneve2: entered allmulticast mode [ 469.652875][T20350] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3949'. [ 469.696384][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.721572][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.739071][T20355] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3947'. [ 469.753212][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.771841][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.790625][T20343] can: request_module (can-proto-0) failed. [ 469.870898][T20357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3950'. [ 469.895694][T20352] lo speed is unknown, defaulting to 1000 [ 470.418916][T20382] tipc: Started in network mode [ 470.428491][T20382] tipc: Node identity 2a0cc6943d21, cluster identity 4711 [ 470.436283][T20382] tipc: Enabled bearer , priority 0 [ 470.531874][T20382] syzkaller0: entered promiscuous mode [ 470.548537][T20382] syzkaller0: entered allmulticast mode [ 470.655448][T20382] tipc: Resetting bearer [ 470.665920][T20385] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 470.671751][T20385] dvmrp1: linktype set to 768 [ 470.696283][T20381] tipc: Resetting bearer [ 470.717519][T20381] tipc: Disabling bearer [ 471.426482][T20397] infiniband !yz!: set down [ 471.440282][T20397] infiniband !yz!: added team_slave_0 [ 471.516922][T20397] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 471.534227][T20397] infiniband !yz!: Couldn't open port 1 [ 471.690702][T20397] RDS/IB: !yz!: added [ 471.705098][T20397] smc: adding ib device !yz! with port count 1 [ 471.790083][T20397] smc: ib device !yz! port 1 has no pnetid [ 472.011988][ T3518] dvmrp1 (unregistering): left allmulticast mode [ 472.034924][ T3518] dvmrp0 (unregistering): left allmulticast mode [ 472.060222][ T3518] bond9 (unregistering): (slave geneve3): Releasing active interface [ 472.084596][ T3518] geneve3 (unregistering): left promiscuous mode [ 472.609570][ T3518] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 472.618453][ T3518] bond0 (unregistering): Released all slaves [ 472.635989][ T3518] bond1 (unregistering): Released all slaves [ 472.757013][ T3518] bond2 (unregistering): Released all slaves [ 472.771645][ T3518] bond3 (unregistering): Released all slaves [ 472.787313][ T3518] bond4 (unregistering): Released all slaves [ 472.909209][ T3518] bond5 (unregistering): (slave vcan0): Releasing backup interface [ 472.918639][ T3518] bond5 (unregistering): (slave vcan1): Releasing backup interface [ 472.927788][ T3518] bond5 (unregistering): Released all slaves [ 473.040775][ T3518] bond6 (unregistering): (slave veth5): Releasing active interface [ 473.050020][ T3518] bond6 (unregistering): Released all slaves [ 473.161847][ T3518] bond7 (unregistering): Released all slaves [ 473.277509][ T3518] bond8 (unregistering): Released all slaves [ 473.391439][ T3518] bond9 (unregistering): Released all slaves [ 473.500921][ T3518] bond10 (unregistering): Released all slaves [ 473.588625][T20423] lo speed is unknown, defaulting to 1000 [ 473.703069][ T3518] _pie: left promiscuous mode [ 473.860359][ T3518] tipc: Left network mode [ 473.897586][T20433] lo speed is unknown, defaulting to 1000 [ 473.962388][T20436] netlink: 'syz.0.3969': attribute type 1 has an invalid length. [ 473.978313][T20435] lo speed is unknown, defaulting to 1000 [ 474.041350][T20436] 8021q: adding VLAN 0 to HW filter on device bond1 [ 474.294432][T20447] vxcan3: entered allmulticast mode [ 474.940296][T20461] sctp: [Deprecated]: syz.3.3974 (pid 20461) Use of int in max_burst socket option. [ 474.940296][T20461] Use struct sctp_assoc_value instead [ 475.441673][T20468] netlink: 'syz.0.3976': attribute type 5 has an invalid length. [ 475.580906][T20473] netlink: 'syz.0.3977': attribute type 83 has an invalid length. [ 475.810753][T20480] tipc: Enabled bearer , priority 0 [ 475.820391][T20480] syzkaller0: entered promiscuous mode [ 475.826150][T20480] syzkaller0: entered allmulticast mode [ 475.878453][T20483] netlink: 'syz.3.3980': attribute type 1 has an invalid length. [ 475.886437][T20483] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3980'. [ 475.895998][T20483] netlink: 'syz.3.3980': attribute type 1 has an invalid length. [ 475.904440][T20483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3980'. [ 475.919968][T20480] tipc: Resetting bearer [ 476.027533][T20479] tipc: Resetting bearer [ 476.124239][T20479] tipc: Disabling bearer [ 476.455343][T20494] : renamed from vlan0 (while UP) [ 476.477095][T20494] tap0: tun_chr_ioctl cmd 1074025680 [ 476.486483][T20494] tipc: Enabling of bearer rejected, failed to enable media [ 476.698223][T20496] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3984'. [ 476.730978][T20496] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3984'. [ 476.740583][T20496] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3984'. [ 476.781021][T20496] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3984'. [ 476.805344][T20496] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3984'. [ 476.837959][T20496] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3984'. [ 476.872296][T20496] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3984'. [ 476.895081][T20496] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3984'. [ 477.089944][T20496] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.097828][T20496] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.535042][T20496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.584526][T20496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.830100][T20500] tipc: Enabling of bearer rejected, failed to enable media [ 477.849076][T17179] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.883414][T17179] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.891859][T17179] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.943443][T17179] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.062096][T20518] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 478.841086][T20538] FAULT_INJECTION: forcing a failure. [ 478.841086][T20538] name failslab, interval 1, probability 0, space 0, times 0 [ 478.874212][T20538] CPU: 0 UID: 0 PID: 20538 Comm: syz.0.3994 Not tainted syzkaller #0 PREEMPT(full) [ 478.874251][T20538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 478.874264][T20538] Call Trace: [ 478.874274][T20538] [ 478.874286][T20538] dump_stack_lvl+0x189/0x250 [ 478.874315][T20538] ? __pfx____ratelimit+0x10/0x10 [ 478.874348][T20538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.874371][T20538] ? __pfx__printk+0x10/0x10 [ 478.874402][T20538] ? __pfx___might_resched+0x10/0x10 [ 478.874442][T20538] should_fail_ex+0x414/0x560 [ 478.874479][T20538] should_failslab+0xa8/0x100 [ 478.874509][T20538] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 478.874539][T20538] ? __alloc_skb+0x112/0x2d0 [ 478.874573][T20538] __alloc_skb+0x112/0x2d0 [ 478.874608][T20538] netlink_dump+0x1b7/0xe90 [ 478.874652][T20538] ? __pfx_netlink_dump+0x10/0x10 [ 478.874678][T20538] ? genl_start+0x1c9/0x6c0 [ 478.874718][T20538] ? genl_start+0x499/0x6c0 [ 478.874749][T20538] __netlink_dump_start+0x5cb/0x7e0 [ 478.874788][T20538] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 478.874816][T20538] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 478.874837][T20538] ? genl_get_cmd+0x7d9/0x910 [ 478.874878][T20538] ? __pfx_genl_start+0x10/0x10 [ 478.874896][T20538] ? __pfx_genl_dumpit+0x10/0x10 [ 478.874915][T20538] ? __pfx_genl_done+0x10/0x10 [ 478.874943][T20538] ? stack_trace_save+0x9c/0xe0 [ 478.874975][T20538] genl_rcv_msg+0x5da/0x790 [ 478.875014][T20538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 478.875039][T20538] ? __pfx_macsec_dump_txsc+0x10/0x10 [ 478.875091][T20538] netlink_rcv_skb+0x208/0x470 [ 478.875117][T20538] ? __lock_acquire+0xab9/0xd20 [ 478.875148][T20538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 478.875172][T20538] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 478.875224][T20538] ? down_read+0x1ad/0x2e0 [ 478.875250][T20538] genl_rcv+0x28/0x40 [ 478.875269][T20538] netlink_unicast+0x82f/0x9e0 [ 478.875306][T20538] ? __pfx_netlink_unicast+0x10/0x10 [ 478.875335][T20538] ? netlink_sendmsg+0x642/0xb30 [ 478.875361][T20538] ? skb_put+0x11b/0x210 [ 478.875395][T20538] netlink_sendmsg+0x805/0xb30 [ 478.875436][T20538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.875470][T20538] ? aa_sock_msg_perm+0xf1/0x1d0 [ 478.875502][T20538] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 478.875533][T20538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.875563][T20538] __sock_sendmsg+0x21c/0x270 [ 478.875592][T20538] ____sys_sendmsg+0x505/0x830 [ 478.875631][T20538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 478.875675][T20538] ? import_iovec+0x74/0xa0 [ 478.875717][T20538] ___sys_sendmsg+0x21f/0x2a0 [ 478.875753][T20538] ? __pfx____sys_sendmsg+0x10/0x10 [ 478.875836][T20538] ? __fget_files+0x2a/0x420 [ 478.875861][T20538] ? __fget_files+0x3a0/0x420 [ 478.875901][T20538] __x64_sys_sendmsg+0x19b/0x260 [ 478.875937][T20538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 478.876051][T20538] ? __pfx_ksys_write+0x10/0x10 [ 478.876080][T20538] ? do_syscall_64+0xbe/0xfa0 [ 478.876123][T20538] do_syscall_64+0xfa/0xfa0 [ 478.876155][T20538] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.876187][T20538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.876209][T20538] ? clear_bhb_loop+0x60/0xb0 [ 478.876236][T20538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.876257][T20538] RIP: 0033:0x7fddb218eec9 [ 478.876278][T20538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.876298][T20538] RSP: 002b:00007fddb2fdb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.876321][T20538] RAX: ffffffffffffffda RBX: 00007fddb23e6090 RCX: 00007fddb218eec9 [ 478.876338][T20538] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000007 [ 478.876351][T20538] RBP: 00007fddb2fdb090 R08: 0000000000000000 R09: 0000000000000000 [ 478.876365][T20538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.876378][T20538] R13: 00007fddb23e6128 R14: 00007fddb23e6090 R15: 00007ffd50522768 [ 478.876418][T20538] [ 480.010514][T20559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.070061][T20559] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 480.234508][T20562] bridge_slave_1: left allmulticast mode [ 480.241081][T20562] bridge_slave_1: left promiscuous mode [ 480.248051][T20562] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.259921][T20562] bridge_slave_0: left promiscuous mode [ 480.299338][T20562] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.544481][T20582] __nla_validate_parse: 141 callbacks suppressed [ 481.544504][T20582] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4004'. [ 481.788486][ T3518] IPVS: stop unused estimator thread 0... [ 482.536536][T20612] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4011'. [ 482.650681][T20614] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 483.052915][ T5145] Bluetooth: hci5: command 0x0406 tx timeout [ 483.177782][T20628] tipc: Enabling of bearer rejected, failed to enable media [ 483.354547][T20632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4018'. [ 483.725753][T20645] lo speed is unknown, defaulting to 1000 [ 483.881331][T20658] netlink: 'syz.2.4024': attribute type 21 has an invalid length. [ 483.922663][T20658] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4024'. [ 483.931821][T20658] netlink: 'syz.2.4024': attribute type 5 has an invalid length. [ 483.952593][T20658] netlink: 'syz.2.4024': attribute type 6 has an invalid length. [ 483.960387][T20658] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4024'. [ 484.559547][T20679] netlink: 'syz.3.4029': attribute type 1 has an invalid length. [ 484.664463][T20688] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4028'. [ 484.673686][T20688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4028'. [ 484.683089][T20688] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4028'. [ 484.692202][T20688] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4028'. [ 484.704363][T20679] 8021q: adding VLAN 0 to HW filter on device bond4 [ 484.810395][T20687] dvmrp0: entered allmulticast mode [ 484.868248][T20676] lo speed is unknown, defaulting to 1000 [ 485.047952][T20696] lo speed is unknown, defaulting to 1000 [ 485.314332][T20692] lo speed is unknown, defaulting to 1000 [ 485.319252][T20702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4034'. [ 485.383347][T20700] lo speed is unknown, defaulting to 1000 [ 486.768149][T20719] lo speed is unknown, defaulting to 1000 [ 487.347328][T20726] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 487.695477][T20729] lo speed is unknown, defaulting to 1000 [ 488.055775][T20748] netlink: 'syz.4.4044': attribute type 6 has an invalid length. [ 488.073577][T20748] netlink: 'syz.4.4044': attribute type 6 has an invalid length. [ 488.102940][T20751] __nla_validate_parse: 1 callbacks suppressed [ 488.102961][T20751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4045'. [ 488.418699][T20762] lo speed is unknown, defaulting to 1000 [ 488.661471][T20768] lo speed is unknown, defaulting to 1000 [ 488.699973][T20770] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4049'. [ 488.724859][T20770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4049'. [ 488.753924][T20770] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4049'. [ 488.764564][T20770] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4049'. [ 489.286963][T20781] Bluetooth: MGMT ver 1.23 [ 489.316479][T20781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4053'. [ 489.516257][T20783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4054'. [ 489.586389][T20790] syzkaller0: entered promiscuous mode [ 489.632584][T20790] syzkaller0: entered allmulticast mode [ 489.950537][T20797] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4058'. [ 490.120312][T20794] lo speed is unknown, defaulting to 1000 [ 490.469758][T20812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4060'. [ 490.488802][T20812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4060'. [ 490.836028][T20819] tap0: tun_chr_ioctl cmd 2147767507 [ 491.274538][T20831] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 491.283103][T20831] syzkaller1: linktype set to 519 [ 491.299753][T20833] wg2: entered allmulticast mode [ 491.549992][T20836] syzkaller1: entered promiscuous mode [ 491.568349][T20836] syzkaller1: entered allmulticast mode [ 491.862332][T13212] IPVS: starting estimator thread 0... [ 491.963573][T20874] IPVS: using max 24 ests per chain, 57600 per kthread [ 492.175313][T20887] bond2: entered promiscuous mode [ 492.182077][T20887] 8021q: adding VLAN 0 to HW filter on device bond2 [ 492.250665][T20892] bond3: entered promiscuous mode [ 492.256954][T20892] 8021q: adding VLAN 0 to HW filter on device bond3 [ 492.342236][T20895] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 493.097616][T20913] bond4: entered promiscuous mode [ 493.116785][T20913] bond4: entered allmulticast mode [ 493.130376][T20913] 8021q: adding VLAN 0 to HW filter on device bond4 [ 493.298651][ T5145] Bluetooth: hci2: command 0x0401 tx timeout [ 493.375327][T20929] IPVS: stopping backup sync thread 19801 ... [ 493.546890][T20913] bond4 (unregistering): Released all slaves [ 493.576416][T20918] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 493.584695][T20920] __nla_validate_parse: 5 callbacks suppressed [ 493.584717][T20920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4097'. [ 493.801322][T20937] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 493.824230][T20940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4102'. [ 493.922165][T20941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4102'. [ 494.183522][T20952] netlink: 'syz.4.4106': attribute type 1 has an invalid length. [ 494.212054][T20956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4107'. [ 494.535540][T20976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4109'. [ 494.544789][T20973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4109'. [ 494.746976][T20985] lo speed is unknown, defaulting to 1000 [ 494.902875][T20990] tc_dump_action: action bad kind [ 495.046581][T20993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4114'. [ 495.099023][T20993] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4114'. [ 495.139935][T20993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.173216][T20995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4115'. [ 495.679883][T21004] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4118'. [ 497.273744][T21047] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.285826][T21047] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.450595][T21047] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.471366][T21047] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.652610][T21047] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.664875][T21047] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.835418][T21047] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.849031][T21047] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.102192][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.123102][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.170902][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.193236][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.234340][ T36] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.251892][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.332641][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.340883][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.411242][T21083] lo speed is unknown, defaulting to 1000 [ 498.574863][T21107] netlink: 'syz.3.4151': attribute type 4 has an invalid length. [ 498.715039][T21107] __nla_validate_parse: 6 callbacks suppressed [ 498.715061][T21107] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4151'. [ 499.058798][T21117] tipc: Enabling of bearer rejected, failed to enable media [ 499.101913][T21117] netlink: 'syz.1.4152': attribute type 10 has an invalid length. [ 500.386206][T21154] batadv_slave_1: entered promiscuous mode [ 500.408062][T21154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4161'. [ 500.435958][T21153] batadv_slave_1: left promiscuous mode [ 501.035089][T21174] netlink: 'syz.3.4167': attribute type 1 has an invalid length. [ 501.053695][T21174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4167'. [ 501.078119][T21176] lo speed is unknown, defaulting to 1000 [ 501.085796][T21174] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20004 [ 501.228874][T21182] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20003 [ 501.284591][T21183] team0: Cannot enslave team device to itself [ 501.290858][T21183] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 501.377808][T21185] netlink: zone id is out of range [ 501.390161][T21185] netlink: zone id is out of range [ 501.402377][T21185] netlink: zone id is out of range [ 501.416670][T21185] netlink: zone id is out of range [ 501.428744][T21185] netlink: zone id is out of range [ 501.444427][T21185] netlink: zone id is out of range [ 501.460071][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.494663][T21185] netlink: zone id is out of range [ 501.499945][T21185] netlink: zone id is out of range [ 501.505411][T21185] netlink: zone id is out of range [ 501.583589][T21189] netlink: 8224 bytes leftover after parsing attributes in process `syz.0.4170'. [ 502.042209][T21208] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4177'. [ 502.197111][T21210] xt_HMARK: proto mask must be zero with L3 mode [ 502.236142][T21212] tipc: Enabled bearer , priority 0 [ 502.260111][T21212] syzkaller0: entered promiscuous mode [ 502.269408][T21212] syzkaller0: entered allmulticast mode [ 502.284703][T21215] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4180'. [ 502.328119][T21215] netlink: 'syz.3.4180': attribute type 8 has an invalid length. [ 502.349653][T21212] tipc: Resetting bearer [ 502.465767][T21212] lo speed is unknown, defaulting to 1000 [ 503.164719][T21211] tipc: Resetting bearer [ 503.327348][ T9] tipc: Node number set to 1722175643 [ 503.366903][T21211] tipc: Disabling bearer [ 503.447139][T21235] pimreg: entered allmulticast mode [ 503.540106][T21235] pimreg: left allmulticast mode [ 503.796076][T21247] smc: net device tunl0 applied user defined pnetid SYZ1 [ 503.819433][T21250] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4186'. [ 503.985432][T21255] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4188'. [ 504.128241][T21256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4188'. [ 504.213232][T21255] vlan4: entered allmulticast mode [ 504.219012][T21255] bridge_slave_0: entered allmulticast mode [ 504.557132][T21260] 8021q: adding VLAN 0 to HW filter on device bond5 [ 504.667276][T21260] team0: Port device bond5 added [ 504.832963][T21272] tap0: tun_chr_ioctl cmd 1074025677 [ 504.842048][T21272] tap0: linktype set to 270 [ 504.847391][T21274] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4193'. [ 504.861757][T21274] syz_tun: entered allmulticast mode [ 504.884873][T21274] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 504.953199][T21278] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.463468][T21268] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4191'. [ 505.506288][T21273] syz_tun: left allmulticast mode [ 506.165071][T21294] 8021q: adding VLAN 0 to HW filter on device bond2 [ 506.195161][T21305] macvlan2: entered promiscuous mode [ 506.200679][T21305] macvlan2: entered allmulticast mode [ 506.208636][T21305] bond2: entered promiscuous mode [ 506.214608][T21305] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 506.395831][T21305] bond2: left promiscuous mode [ 507.013539][T21336] netlink: 'syz.2.4209': attribute type 13 has an invalid length. [ 507.156535][T21336] netlink: 'syz.2.4209': attribute type 17 has an invalid length. [ 507.231334][T21341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4212'. [ 507.670097][T21355] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4215'. [ 507.884361][T21336] net_ratelimit: 7 callbacks suppressed [ 507.884375][T21336] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 507.929912][T21350] IPv6: sit2: Disabled Multicast RS [ 507.938881][T21350] sit2: entered allmulticast mode [ 508.010162][T21342] lo speed is unknown, defaulting to 1000 [ 508.131331][T21368] tipc: Enabling of bearer rejected, failed to enable media [ 508.515202][T21390] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4224'. [ 509.149053][T21417] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4231'. [ 509.329035][T21423] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4232'. [ 509.548516][T21428] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 509.740708][T21433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4237'. [ 510.044091][T21444] netlink: 'syz.3.4238': attribute type 4 has an invalid length. [ 510.075861][T21444] netlink: 'syz.3.4238': attribute type 4 has an invalid length. [ 510.484468][T21460] lo speed is unknown, defaulting to 1000 [ 510.513675][T21462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4245'. [ 510.699251][T21470] bond6: invalid ARP target 0.0.0.0 specified for addition [ 510.727734][T21470] bond6: option arp_ip_target: invalid value (0) [ 510.750219][T21470] bond6 (unregistering): Released all slaves [ 510.930283][T21488] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4250'. [ 511.437662][T21506] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4252'. [ 511.516419][ T5894] IPVS: starting estimator thread 0... [ 511.523497][T21507] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4254'. [ 511.530971][T21509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4255'. [ 511.581074][T21509] netlink: 'syz.3.4255': attribute type 30 has an invalid length. [ 511.662883][T21510] IPVS: using max 27 ests per chain, 64800 per kthread [ 511.778805][T21509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4255'. [ 511.821729][ T1164] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.851627][ T1164] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.869455][T21509] netlink: 'syz.3.4255': attribute type 30 has an invalid length. [ 511.885498][T21518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4257'. [ 511.931303][T21518] netlink: 'syz.2.4257': attribute type 1 has an invalid length. [ 511.941303][T21518] netlink: 'syz.2.4257': attribute type 2 has an invalid length. [ 511.971813][ T1164] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.030698][ T1164] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.509602][T21535] netlink: 'syz.1.4262': attribute type 1 has an invalid length. [ 512.589884][T21535] 8021q: adding VLAN 0 to HW filter on device bond2 [ 512.656087][T21541] 8021q: adding VLAN 0 to HW filter on device bond2 [ 512.663970][T21541] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 512.675912][T21541] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 512.698647][T21549] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 512.777673][T21535] veth3: entered promiscuous mode [ 512.854548][T21558] bond3: (slave erspan0): Releasing active interface [ 512.894125][T21558] bond0: (slave bond_slave_0): Releasing backup interface [ 512.986714][T21558] bond0: (slave bond_slave_1): Releasing backup interface [ 513.008173][T21558] team0: Port device team_slave_0 removed [ 513.017587][T21558] team0: Port device team_slave_1 removed [ 513.024602][T21558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.033655][T21558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.043016][T21558] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 513.185046][T21564] macvtap1: entered allmulticast mode [ 513.204032][T21564] veth0_macvtap: entered allmulticast mode [ 513.348515][T21562] lo speed is unknown, defaulting to 1000 [ 514.359678][T21591] __nla_validate_parse: 2 callbacks suppressed [ 514.359701][T21591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4277'. [ 514.403610][T21593] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 514.718363][T21604] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4282'. [ 514.898952][T21608] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 515.019610][T21612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4286'. [ 515.081476][T21617] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 515.136234][T21619] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 515.283874][T21625] netlink: 'syz.3.4291': attribute type 30 has an invalid length. [ 515.328807][T21625] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 515.377678][T21626] lo speed is unknown, defaulting to 1000 [ 515.644741][T21646] netlink: 'syz.3.4293': attribute type 1 has an invalid length. [ 515.767546][T21652] xt_CT: You must specify a L4 protocol and not use inversions on it [ 516.267197][T21663] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4297'. [ 516.504483][T21668] siw: device registration error -23 [ 516.559850][T21673] tipc: Enabling of bearer rejected, failed to enable media [ 516.570156][T21666] lo speed is unknown, defaulting to 1000 [ 516.646868][T21675] netlink: 'syz.0.4299': attribute type 8 has an invalid length. [ 516.830592][T21687] netlink: 'syz.0.4299': attribute type 1 has an invalid length. [ 517.819013][T21696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4303'. [ 518.023420][T21701] hsr0: entered promiscuous mode [ 518.032520][T21701] macsec2: entered allmulticast mode [ 518.037873][T21701] hsr0: entered allmulticast mode [ 518.044500][T21701] hsr_slave_0: entered allmulticast mode [ 518.050283][T21701] hsr_slave_1: entered allmulticast mode [ 518.439098][T21712] netlink: 732 bytes leftover after parsing attributes in process `syz.0.4308'. [ 518.450874][T21712] netlink: 732 bytes leftover after parsing attributes in process `syz.0.4308'. [ 518.638620][T21716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4310'. [ 519.364997][T21737] FAULT_INJECTION: forcing a failure. [ 519.364997][T21737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.392752][T21737] CPU: 0 UID: 0 PID: 21737 Comm: syz.4.4316 Not tainted syzkaller #0 PREEMPT(full) [ 519.392806][T21737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 519.392821][T21737] Call Trace: [ 519.392831][T21737] [ 519.392841][T21737] dump_stack_lvl+0x189/0x250 [ 519.392871][T21737] ? __pfx____ratelimit+0x10/0x10 [ 519.392902][T21737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.392924][T21737] ? __pfx__printk+0x10/0x10 [ 519.392946][T21737] ? __might_fault+0xb0/0x130 [ 519.392982][T21737] should_fail_ex+0x414/0x560 [ 519.393009][T21737] _copy_from_user+0x2d/0xb0 [ 519.393040][T21737] ___sys_sendmsg+0x158/0x2a0 [ 519.393077][T21737] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.393153][T21737] ? __fget_files+0x2a/0x420 [ 519.393178][T21737] ? __fget_files+0x3a0/0x420 [ 519.393215][T21737] __x64_sys_sendmsg+0x19b/0x260 [ 519.393249][T21737] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 519.393292][T21737] ? __pfx_ksys_write+0x10/0x10 [ 519.393318][T21737] ? do_syscall_64+0xbe/0xfa0 [ 519.393353][T21737] do_syscall_64+0xfa/0xfa0 [ 519.393384][T21737] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.393416][T21737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.393437][T21737] ? clear_bhb_loop+0x60/0xb0 [ 519.393465][T21737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.393487][T21737] RIP: 0033:0x7ff94178eec9 [ 519.393507][T21737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.393526][T21737] RSP: 002b:00007ff942582038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.393550][T21737] RAX: ffffffffffffffda RBX: 00007ff9419e6090 RCX: 00007ff94178eec9 [ 519.393566][T21737] RDX: 0000000000044010 RSI: 0000200000000140 RDI: 0000000000000005 [ 519.393581][T21737] RBP: 00007ff942582090 R08: 0000000000000000 R09: 0000000000000000 [ 519.393595][T21737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.393615][T21737] R13: 00007ff9419e6128 R14: 00007ff9419e6090 R15: 00007ffc7914f408 [ 519.393654][T21737] [ 519.639938][T21733] lo speed is unknown, defaulting to 1000 [ 520.052220][T21748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4319'. [ 520.095755][T21748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4319'. [ 520.216132][T21748] bond3: entered promiscuous mode [ 520.221441][T21748] bond3: entered allmulticast mode [ 520.249506][T21748] 8021q: adding VLAN 0 to HW filter on device bond3 [ 520.470597][T21748] lo speed is unknown, defaulting to 1000 [ 520.557466][T21763] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4322'. [ 521.140330][T21779] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4324'. [ 521.488554][T21785] FAULT_INJECTION: forcing a failure. [ 521.488554][T21785] name failslab, interval 1, probability 0, space 0, times 0 [ 521.542133][T21785] CPU: 0 UID: 0 PID: 21785 Comm: syz.2.4327 Not tainted syzkaller #0 PREEMPT(full) [ 521.542165][T21785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 521.542180][T21785] Call Trace: [ 521.542188][T21785] [ 521.542199][T21785] dump_stack_lvl+0x189/0x250 [ 521.542228][T21785] ? __pfx____ratelimit+0x10/0x10 [ 521.542261][T21785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 521.542282][T21785] ? __pfx__printk+0x10/0x10 [ 521.542311][T21785] ? __pfx___might_resched+0x10/0x10 [ 521.542348][T21785] should_fail_ex+0x414/0x560 [ 521.542378][T21785] should_failslab+0xa8/0x100 [ 521.542411][T21785] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 521.542435][T21785] ? __alloc_skb+0x112/0x2d0 [ 521.542467][T21785] __alloc_skb+0x112/0x2d0 [ 521.542499][T21785] netlink_sendmsg+0x5c6/0xb30 [ 521.542541][T21785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.542575][T21785] ? aa_sock_msg_perm+0xf1/0x1d0 [ 521.542614][T21785] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 521.542644][T21785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.542675][T21785] __sock_sendmsg+0x21c/0x270 [ 521.542703][T21785] ____sys_sendmsg+0x505/0x830 [ 521.542743][T21785] ? __pfx_____sys_sendmsg+0x10/0x10 [ 521.542786][T21785] ? import_iovec+0x74/0xa0 [ 521.542819][T21785] ___sys_sendmsg+0x21f/0x2a0 [ 521.542853][T21785] ? __pfx____sys_sendmsg+0x10/0x10 [ 521.542927][T21785] ? __fget_files+0x2a/0x420 [ 521.542952][T21785] ? __fget_files+0x3a0/0x420 [ 521.542991][T21785] __x64_sys_sendmsg+0x19b/0x260 [ 521.543026][T21785] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 521.543070][T21785] ? __pfx_ksys_write+0x10/0x10 [ 521.543098][T21785] ? do_syscall_64+0xbe/0xfa0 [ 521.543136][T21785] do_syscall_64+0xfa/0xfa0 [ 521.543166][T21785] ? lockdep_hardirqs_on+0x9c/0x150 [ 521.543198][T21785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.543220][T21785] ? clear_bhb_loop+0x60/0xb0 [ 521.543247][T21785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.543269][T21785] RIP: 0033:0x7fc76838eec9 [ 521.543289][T21785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.543308][T21785] RSP: 002b:00007fc769271038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 521.543332][T21785] RAX: ffffffffffffffda RBX: 00007fc7685e6090 RCX: 00007fc76838eec9 [ 521.543349][T21785] RDX: 0000000000044010 RSI: 0000200000000140 RDI: 0000000000000005 [ 521.543363][T21785] RBP: 00007fc769271090 R08: 0000000000000000 R09: 0000000000000000 [ 521.543377][T21785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.543390][T21785] R13: 00007fc7685e6128 R14: 00007fc7685e6090 R15: 00007ffeb6d19fe8 [ 521.543428][T21785] [ 521.838983][T21791] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 522.242874][T21813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4336'. [ 522.262986][T21813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4336'. [ 522.481199][T21820] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20003 [ 522.518560][T21816] lo speed is unknown, defaulting to 1000 [ 522.893638][T21832] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 523.131034][T21837] sctp: [Deprecated]: syz.4.4343 (pid 21837) Use of int in max_burst socket option. [ 523.131034][T21837] Use struct sctp_assoc_value instead [ 523.836978][T21860] tipc: Enabled bearer , priority 0 [ 523.869251][T21860] syzkaller0: entered promiscuous mode [ 523.895687][T21860] syzkaller0: entered allmulticast mode [ 524.013058][ T5145] Bluetooth: hci4: command 0x0405 tx timeout [ 524.093288][T21860] tipc: Resetting bearer [ 524.211647][T21882] FAULT_INJECTION: forcing a failure. [ 524.211647][T21882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.242324][T21881] dvmrp8: entered allmulticast mode [ 524.279611][T21882] CPU: 0 UID: 0 PID: 21882 Comm: syz.4.4356 Not tainted syzkaller #0 PREEMPT(full) [ 524.279643][T21882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 524.279658][T21882] Call Trace: [ 524.279666][T21882] [ 524.279677][T21882] dump_stack_lvl+0x189/0x250 [ 524.279705][T21882] ? __pfx____ratelimit+0x10/0x10 [ 524.279738][T21882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 524.279761][T21882] ? __pfx__printk+0x10/0x10 [ 524.279784][T21882] ? __might_fault+0xb0/0x130 [ 524.279822][T21882] should_fail_ex+0x414/0x560 [ 524.279853][T21882] _copy_from_iter+0x1de/0x1790 [ 524.279890][T21882] ? rcu_is_watching+0x15/0xb0 [ 524.279918][T21882] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 524.279945][T21882] ? __pfx__copy_from_iter+0x10/0x10 [ 524.279976][T21882] ? __build_skb_around+0x257/0x3e0 [ 524.280011][T21882] ? netlink_sendmsg+0x642/0xb30 [ 524.280039][T21882] ? skb_put+0x11b/0x210 [ 524.280073][T21882] netlink_sendmsg+0x6b2/0xb30 [ 524.280115][T21882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.280156][T21882] ? aa_sock_msg_perm+0xf1/0x1d0 [ 524.280188][T21882] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 524.280218][T21882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.280250][T21882] __sock_sendmsg+0x21c/0x270 [ 524.280279][T21882] ____sys_sendmsg+0x505/0x830 [ 524.280318][T21882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 524.280362][T21882] ? import_iovec+0x74/0xa0 [ 524.280398][T21882] ___sys_sendmsg+0x21f/0x2a0 [ 524.280433][T21882] ? __pfx____sys_sendmsg+0x10/0x10 [ 524.280509][T21882] ? __fget_files+0x2a/0x420 [ 524.280535][T21882] ? __fget_files+0x3a0/0x420 [ 524.280572][T21882] __x64_sys_sendmsg+0x19b/0x260 [ 524.280607][T21882] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 524.280649][T21882] ? __pfx_ksys_write+0x10/0x10 [ 524.280676][T21882] ? do_syscall_64+0xbe/0xfa0 [ 524.280712][T21882] do_syscall_64+0xfa/0xfa0 [ 524.280742][T21882] ? lockdep_hardirqs_on+0x9c/0x150 [ 524.280773][T21882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.280794][T21882] ? clear_bhb_loop+0x60/0xb0 [ 524.280821][T21882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.280842][T21882] RIP: 0033:0x7ff94178eec9 [ 524.280863][T21882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.280882][T21882] RSP: 002b:00007ff942582038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.280906][T21882] RAX: ffffffffffffffda RBX: 00007ff9419e6090 RCX: 00007ff94178eec9 [ 524.280922][T21882] RDX: 0000000000044010 RSI: 0000200000000140 RDI: 0000000000000005 [ 524.280936][T21882] RBP: 00007ff942582090 R08: 0000000000000000 R09: 0000000000000000 [ 524.280949][T21882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.280962][T21882] R13: 00007ff9419e6128 R14: 00007ff9419e6090 R15: 00007ffc7914f408 [ 524.280997][T21882] [ 524.334741][T21886] syzkaller0: entered promiscuous mode [ 524.576836][T21886] syzkaller0: entered allmulticast mode [ 524.639397][T21859] tipc: Resetting bearer [ 524.667970][T21859] tipc: Disabling bearer [ 524.678752][T21883] dvmrp8: left allmulticast mode [ 524.874486][T21896] lo speed is unknown, defaulting to 1000 [ 525.024986][T21909] Cannot find add_set index 1 as target [ 525.044675][T21909] netlink: 'syz.2.4366': attribute type 7 has an invalid length. [ 525.064579][T21909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4366'. [ 525.423432][T21930] FAULT_INJECTION: forcing a failure. [ 525.423432][T21930] name failslab, interval 1, probability 0, space 0, times 0 [ 525.463575][T21930] CPU: 0 UID: 0 PID: 21930 Comm: syz.0.4371 Not tainted syzkaller #0 PREEMPT(full) [ 525.463608][T21930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 525.463623][T21930] Call Trace: [ 525.463633][T21930] [ 525.463643][T21930] dump_stack_lvl+0x189/0x250 [ 525.463672][T21930] ? __pfx____ratelimit+0x10/0x10 [ 525.463704][T21930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 525.463726][T21930] ? __pfx__printk+0x10/0x10 [ 525.463755][T21930] ? __pfx___might_resched+0x10/0x10 [ 525.463787][T21930] ? fs_reclaim_acquire+0x7d/0x100 [ 525.463819][T21930] should_fail_ex+0x414/0x560 [ 525.463848][T21930] should_failslab+0xa8/0x100 [ 525.463876][T21930] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 525.463900][T21930] ? __alloc_skb+0x112/0x2d0 [ 525.463933][T21930] __alloc_skb+0x112/0x2d0 [ 525.463966][T21930] netlink_ack+0x146/0xa50 [ 525.463992][T21930] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 525.464038][T21930] netlink_rcv_skb+0x28c/0x470 [ 525.464064][T21930] ? __lock_acquire+0xab9/0xd20 [ 525.464106][T21930] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 525.464136][T21930] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 525.464178][T21930] ? netlink_deliver_tap+0x2e/0x1b0 [ 525.464216][T21930] netlink_unicast+0x82f/0x9e0 [ 525.464252][T21930] ? __pfx_netlink_unicast+0x10/0x10 [ 525.464280][T21930] ? netlink_sendmsg+0x642/0xb30 [ 525.464305][T21930] ? skb_put+0x11b/0x210 [ 525.464337][T21930] netlink_sendmsg+0x805/0xb30 [ 525.464375][T21930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.464408][T21930] ? aa_sock_msg_perm+0xf1/0x1d0 [ 525.464439][T21930] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 525.464468][T21930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.464499][T21930] __sock_sendmsg+0x21c/0x270 [ 525.464525][T21930] ____sys_sendmsg+0x505/0x830 [ 525.464564][T21930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.464608][T21930] ? import_iovec+0x74/0xa0 [ 525.464643][T21930] ___sys_sendmsg+0x21f/0x2a0 [ 525.464678][T21930] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.464751][T21930] ? __fget_files+0x2a/0x420 [ 525.464778][T21930] ? __fget_files+0x3a0/0x420 [ 525.464818][T21930] __x64_sys_sendmsg+0x19b/0x260 [ 525.464854][T21930] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 525.464898][T21930] ? __pfx_ksys_write+0x10/0x10 [ 525.464925][T21930] ? do_syscall_64+0xbe/0xfa0 [ 525.464962][T21930] do_syscall_64+0xfa/0xfa0 [ 525.464993][T21930] ? lockdep_hardirqs_on+0x9c/0x150 [ 525.465025][T21930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.465053][T21930] ? clear_bhb_loop+0x60/0xb0 [ 525.465087][T21930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.465109][T21930] RIP: 0033:0x7fddb218eec9 [ 525.465130][T21930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.465150][T21930] RSP: 002b:00007fddb2fdb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.465174][T21930] RAX: ffffffffffffffda RBX: 00007fddb23e6090 RCX: 00007fddb218eec9 [ 525.465191][T21930] RDX: 0000000000044010 RSI: 0000200000000140 RDI: 0000000000000005 [ 525.465206][T21930] RBP: 00007fddb2fdb090 R08: 0000000000000000 R09: 0000000000000000 [ 525.465219][T21930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.465232][T21930] R13: 00007fddb23e6128 R14: 00007fddb23e6090 R15: 00007ffd50522768 [ 525.465270][T21930] [ 526.017691][ T5894] IPVS: starting estimator thread 0... [ 526.113103][T21945] IPVS: using max 23 ests per chain, 55200 per kthread [ 526.417067][T21962] nft_compat: unsupported protocol 0 [ 526.500818][T21966] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4381'. [ 526.629049][T21971] netlink: 200 bytes leftover after parsing attributes in process `syz.4.4384'. [ 526.671523][T21971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4384'. [ 526.901077][T21981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4387'. [ 526.936681][T21982] FAULT_INJECTION: forcing a failure. [ 526.936681][T21982] name failslab, interval 1, probability 0, space 0, times 0 [ 526.947916][T21983] netlink: 'syz.0.4379': attribute type 1 has an invalid length. [ 526.957550][T21983] netlink: 'syz.0.4379': attribute type 1 has an invalid length. [ 526.967292][T21983] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4379'. [ 526.993877][T21982] CPU: 0 UID: 0 PID: 21982 Comm: syz.2.4386 Not tainted syzkaller #0 PREEMPT(full) [ 526.993920][T21982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 526.993938][T21982] Call Trace: [ 526.993946][T21982] [ 526.993956][T21982] dump_stack_lvl+0x189/0x250 [ 526.993984][T21982] ? __pfx____ratelimit+0x10/0x10 [ 526.994016][T21982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 526.994038][T21982] ? __pfx__printk+0x10/0x10 [ 526.994062][T21982] ? __lock_acquire+0xab9/0xd20 [ 526.994102][T21982] should_fail_ex+0x414/0x560 [ 526.994130][T21982] should_failslab+0xa8/0x100 [ 526.994157][T21982] kmem_cache_alloc_noprof+0x73/0x3c0 [ 526.994180][T21982] ? skb_clone+0x212/0x3a0 [ 526.994217][T21982] skb_clone+0x212/0x3a0 [ 526.994255][T21982] __netlink_deliver_tap+0x404/0x850 [ 526.994300][T21982] ? netlink_deliver_tap+0x2e/0x1b0 [ 526.994331][T21982] netlink_deliver_tap+0x19c/0x1b0 [ 526.994361][T21982] netlink_unicast+0x7fa/0x9e0 [ 526.994396][T21982] ? __pfx_netlink_unicast+0x10/0x10 [ 526.994425][T21982] ? netlink_sendmsg+0x642/0xb30 [ 526.994452][T21982] ? skb_put+0x11b/0x210 [ 526.994486][T21982] netlink_sendmsg+0x805/0xb30 [ 526.994527][T21982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.994561][T21982] ? aa_sock_msg_perm+0xf1/0x1d0 [ 526.994593][T21982] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 526.994623][T21982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.994654][T21982] __sock_sendmsg+0x21c/0x270 [ 526.994682][T21982] ____sys_sendmsg+0x505/0x830 [ 526.994720][T21982] ? __pfx_____sys_sendmsg+0x10/0x10 [ 526.994762][T21982] ? import_iovec+0x74/0xa0 [ 526.994796][T21982] ___sys_sendmsg+0x21f/0x2a0 [ 526.994831][T21982] ? __pfx____sys_sendmsg+0x10/0x10 [ 526.994913][T21982] ? __fget_files+0x2a/0x420 [ 526.994939][T21982] ? __fget_files+0x3a0/0x420 [ 526.994977][T21982] __x64_sys_sendmsg+0x19b/0x260 [ 526.995008][T21982] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 526.995054][T21982] ? __pfx_ksys_write+0x10/0x10 [ 526.995082][T21982] ? do_syscall_64+0xbe/0xfa0 [ 526.995119][T21982] do_syscall_64+0xfa/0xfa0 [ 526.995150][T21982] ? lockdep_hardirqs_on+0x9c/0x150 [ 526.995181][T21982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.995202][T21982] ? clear_bhb_loop+0x60/0xb0 [ 526.995229][T21982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.995249][T21982] RIP: 0033:0x7fc76838eec9 [ 526.995270][T21982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.995288][T21982] RSP: 002b:00007fc769271038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.995311][T21982] RAX: ffffffffffffffda RBX: 00007fc7685e6090 RCX: 00007fc76838eec9 [ 526.995328][T21982] RDX: 0000000000044010 RSI: 0000200000000140 RDI: 0000000000000005 [ 526.995343][T21982] RBP: 00007fc769271090 R08: 0000000000000000 R09: 0000000000000000 [ 526.995356][T21982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.995369][T21982] R13: 00007fc7685e6128 R14: 00007fc7685e6090 R15: 00007ffeb6d19fe8 [ 526.995407][T21982] [ 527.087529][T21986] vlan2: entered promiscuous mode [ 527.323087][T21986] hsr0: entered promiscuous mode [ 527.329080][T21986] vlan2: entered allmulticast mode [ 527.363458][T21986] hsr0: entered allmulticast mode [ 527.394748][T21986] hsr_slave_0: entered allmulticast mode [ 527.433506][T21986] hsr_slave_1: entered allmulticast mode [ 527.564649][T22001] netlink: 'syz.3.4391': attribute type 1 has an invalid length. [ 527.621286][T22001] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4391'. [ 527.876853][T22017] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 528.023170][T22017] netlink: 308 bytes leftover after parsing attributes in process `syz.3.4396'. [ 528.067837][T22028] netlink: 'syz.0.4399': attribute type 1 has an invalid length. [ 528.169868][T22028] 8021q: adding VLAN 0 to HW filter on device bond3 [ 528.209400][T22036] bond3: (slave wlan0): Enslaving as an active interface with a down link [ 528.247240][T22043] ip6_vti0: entered promiscuous mode [ 528.260958][T22043] ip6_vti0: entered allmulticast mode [ 528.368478][T22046] netlink: 'syz.0.4405': attribute type 4 has an invalid length. [ 528.382557][T22046] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.4405'. [ 528.617241][T22062] IPv6: sit3: Disabled Multicast RS [ 528.617912][T22061] netlink: 208 bytes leftover after parsing attributes in process `syz.3.4409'. [ 529.045726][T22091] IPVS: Error connecting to the multicast addr [ 529.246388][T22102] FAULT_INJECTION: forcing a failure. [ 529.246388][T22102] name failslab, interval 1, probability 0, space 0, times 0 [ 529.293364][T22102] CPU: 1 UID: 0 PID: 22102 Comm: syz.4.4421 Not tainted syzkaller #0 PREEMPT(full) [ 529.293396][T22102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 529.293411][T22102] Call Trace: [ 529.293421][T22102] [ 529.293431][T22102] dump_stack_lvl+0x189/0x250 [ 529.293460][T22102] ? __pfx____ratelimit+0x10/0x10 [ 529.293493][T22102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.293516][T22102] ? __pfx__printk+0x10/0x10 [ 529.293546][T22102] ? __pfx___might_resched+0x10/0x10 [ 529.293586][T22102] should_fail_ex+0x414/0x560 [ 529.293615][T22102] should_failslab+0xa8/0x100 [ 529.293644][T22102] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 529.293669][T22102] ? __alloc_skb+0x112/0x2d0 [ 529.293703][T22102] __alloc_skb+0x112/0x2d0 [ 529.293738][T22102] netlink_sendmsg+0x5c6/0xb30 [ 529.293793][T22102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.293827][T22102] ? aa_sock_msg_perm+0xf1/0x1d0 [ 529.293859][T22102] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 529.293890][T22102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.293921][T22102] __sock_sendmsg+0x21c/0x270 [ 529.293950][T22102] ____sys_sendmsg+0x505/0x830 [ 529.293990][T22102] ? __pfx_____sys_sendmsg+0x10/0x10 [ 529.294034][T22102] ? import_iovec+0x74/0xa0 [ 529.294070][T22102] ___sys_sendmsg+0x21f/0x2a0 [ 529.294106][T22102] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.294183][T22102] ? __fget_files+0x2a/0x420 [ 529.294209][T22102] ? __fget_files+0x3a0/0x420 [ 529.294249][T22102] __x64_sys_sendmsg+0x19b/0x260 [ 529.294285][T22102] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 529.294329][T22102] ? __pfx_ksys_write+0x10/0x10 [ 529.294358][T22102] ? do_syscall_64+0xbe/0xfa0 [ 529.294397][T22102] do_syscall_64+0xfa/0xfa0 [ 529.294427][T22102] ? lockdep_hardirqs_on+0x9c/0x150 [ 529.294460][T22102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.294482][T22102] ? clear_bhb_loop+0x60/0xb0 [ 529.294509][T22102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.294530][T22102] RIP: 0033:0x7ff94178eec9 [ 529.294550][T22102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.294570][T22102] RSP: 002b:00007ff942582038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.294593][T22102] RAX: ffffffffffffffda RBX: 00007ff9419e6090 RCX: 00007ff94178eec9 [ 529.294610][T22102] RDX: 0000000024000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 529.294624][T22102] RBP: 00007ff942582090 R08: 0000000000000000 R09: 0000000000000000 [ 529.294639][T22102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.294652][T22102] R13: 00007ff9419e6128 R14: 00007ff9419e6090 R15: 00007ffc7914f408 [ 529.294690][T22102] [ 530.139202][T22135] netlink: 'syz.0.4425': attribute type 1 has an invalid length. [ 530.148345][T22135] netlink: 'syz.0.4425': attribute type 4 has an invalid length. [ 530.162627][T22135] __nla_validate_parse: 4 callbacks suppressed [ 530.162659][T22135] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4425'. [ 530.182121][T22135] netlink: 'syz.0.4425': attribute type 1 has an invalid length. [ 530.190298][T22135] netlink: 'syz.0.4425': attribute type 4 has an invalid length. [ 530.199495][T22135] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4425'. [ 530.232010][T22104] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 530.559650][T22149] sctp: [Deprecated]: syz.3.4433 (pid 22149) Use of int in max_burst socket option deprecated. [ 530.559650][T22149] Use struct sctp_assoc_value instead [ 530.745864][T22156] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4435'. [ 531.591730][T22213] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4448'. [ 531.615334][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 531.654478][T22215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4451'. [ 531.767317][T22223] FAULT_INJECTION: forcing a failure. [ 531.767317][T22223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.815677][T22223] CPU: 1 UID: 0 PID: 22223 Comm: syz.0.4452 Not tainted syzkaller #0 PREEMPT(full) [ 531.815712][T22223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 531.815727][T22223] Call Trace: [ 531.815736][T22223] [ 531.815747][T22223] dump_stack_lvl+0x189/0x250 [ 531.815777][T22223] ? __pfx____ratelimit+0x10/0x10 [ 531.815810][T22223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 531.815842][T22223] ? __pfx__printk+0x10/0x10 [ 531.815866][T22223] ? __might_fault+0xb0/0x130 [ 531.815904][T22223] should_fail_ex+0x414/0x560 [ 531.815934][T22223] _copy_from_iter+0x1de/0x1790 [ 531.815972][T22223] ? rcu_is_watching+0x15/0xb0 [ 531.815996][T22223] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 531.816023][T22223] ? __pfx__copy_from_iter+0x10/0x10 [ 531.816054][T22223] ? __build_skb_around+0x257/0x3e0 [ 531.816087][T22223] ? netlink_sendmsg+0x642/0xb30 [ 531.816116][T22223] ? skb_put+0x11b/0x210 [ 531.816149][T22223] netlink_sendmsg+0x6b2/0xb30 [ 531.816189][T22223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.816222][T22223] ? aa_sock_msg_perm+0xf1/0x1d0 [ 531.816252][T22223] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 531.816283][T22223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.816313][T22223] __sock_sendmsg+0x21c/0x270 [ 531.816341][T22223] ____sys_sendmsg+0x505/0x830 [ 531.816417][T22223] ? __pfx_____sys_sendmsg+0x10/0x10 [ 531.816461][T22223] ? import_iovec+0x74/0xa0 [ 531.816497][T22223] ___sys_sendmsg+0x21f/0x2a0 [ 531.816533][T22223] ? __pfx____sys_sendmsg+0x10/0x10 [ 531.816605][T22223] ? __fget_files+0x2a/0x420 [ 531.816630][T22223] ? __fget_files+0x3a0/0x420 [ 531.816668][T22223] __x64_sys_sendmsg+0x19b/0x260 [ 531.816703][T22223] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 531.816752][T22223] ? __pfx_ksys_write+0x10/0x10 [ 531.816781][T22223] ? do_syscall_64+0xbe/0xfa0 [ 531.816819][T22223] do_syscall_64+0xfa/0xfa0 [ 531.816858][T22223] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.816891][T22223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.816913][T22223] ? clear_bhb_loop+0x60/0xb0 [ 531.816941][T22223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.816962][T22223] RIP: 0033:0x7fddb218eec9 [ 531.816983][T22223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.817003][T22223] RSP: 002b:00007fddb2fdb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.817027][T22223] RAX: ffffffffffffffda RBX: 00007fddb23e6090 RCX: 00007fddb218eec9 [ 531.817044][T22223] RDX: 0000000024000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 531.817058][T22223] RBP: 00007fddb2fdb090 R08: 0000000000000000 R09: 0000000000000000 [ 531.817072][T22223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.817086][T22223] R13: 00007fddb23e6128 R14: 00007fddb23e6090 R15: 00007ffd50522768 [ 531.817123][T22223] [ 532.279142][T22237] netlink: 'syz.1.4455': attribute type 7 has an invalid length. [ 532.287730][T22237] netlink: 'syz.1.4455': attribute type 8 has an invalid length. [ 532.295880][T22237] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4455'. [ 532.563034][T22250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4454'. [ 532.588232][T22250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4454'. [ 532.638318][T22250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4454'. [ 532.859990][T22267] atomic_op ffff88807da66198 conn xmit_atomic 0000000000000000 [ 533.058115][T22280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4464'. [ 533.092252][T22275] netlink: 'syz.4.4464': attribute type 1 has an invalid length. [ 533.356120][T22295] FAULT_INJECTION: forcing a failure. [ 533.356120][T22295] name failslab, interval 1, probability 0, space 0, times 0 [ 533.437798][T22295] CPU: 1 UID: 0 PID: 22295 Comm: syz.1.4468 Not tainted syzkaller #0 PREEMPT(full) [ 533.437836][T22295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 533.437852][T22295] Call Trace: [ 533.437863][T22295] [ 533.437874][T22295] dump_stack_lvl+0x189/0x250 [ 533.437906][T22295] ? __pfx____ratelimit+0x10/0x10 [ 533.437943][T22295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.437968][T22295] ? __pfx__printk+0x10/0x10 [ 533.438000][T22295] ? __pfx___might_resched+0x10/0x10 [ 533.438035][T22295] ? fs_reclaim_acquire+0x7d/0x100 [ 533.438072][T22295] should_fail_ex+0x414/0x560 [ 533.438105][T22295] should_failslab+0xa8/0x100 [ 533.438136][T22295] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 533.438163][T22295] ? __alloc_skb+0x112/0x2d0 [ 533.438200][T22295] __alloc_skb+0x112/0x2d0 [ 533.438237][T22295] netlink_ack+0x146/0xa50 [ 533.438266][T22295] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 533.438318][T22295] netlink_rcv_skb+0x28c/0x470 [ 533.438346][T22295] ? __lock_acquire+0xab9/0xd20 [ 533.438383][T22295] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 533.438416][T22295] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 533.438461][T22295] ? netlink_deliver_tap+0x2e/0x1b0 [ 533.438504][T22295] netlink_unicast+0x82f/0x9e0 [ 533.438546][T22295] ? __pfx_netlink_unicast+0x10/0x10 [ 533.438578][T22295] ? netlink_sendmsg+0x642/0xb30 [ 533.438618][T22295] ? skb_put+0x11b/0x210 [ 533.438655][T22295] netlink_sendmsg+0x805/0xb30 [ 533.438701][T22295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.438739][T22295] ? aa_sock_msg_perm+0xf1/0x1d0 [ 533.438775][T22295] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.438815][T22295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.438849][T22295] __sock_sendmsg+0x21c/0x270 [ 533.438881][T22295] ____sys_sendmsg+0x505/0x830 [ 533.438926][T22295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.438975][T22295] ? import_iovec+0x74/0xa0 [ 533.439016][T22295] ___sys_sendmsg+0x21f/0x2a0 [ 533.439055][T22295] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.439132][T22295] ? __fget_files+0x2a/0x420 [ 533.439163][T22295] ? __fget_files+0x3a0/0x420 [ 533.439206][T22295] __x64_sys_sendmsg+0x19b/0x260 [ 533.439244][T22295] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 533.439294][T22295] ? __pfx_ksys_write+0x10/0x10 [ 533.439325][T22295] ? do_syscall_64+0xbe/0xfa0 [ 533.439366][T22295] do_syscall_64+0xfa/0xfa0 [ 533.439401][T22295] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.439437][T22295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.439460][T22295] ? clear_bhb_loop+0x60/0xb0 [ 533.439491][T22295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.439513][T22295] RIP: 0033:0x7f7bf698eec9 [ 533.439535][T22295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.439557][T22295] RSP: 002b:00007f7bf77ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.439582][T22295] RAX: ffffffffffffffda RBX: 00007f7bf6be6090 RCX: 00007f7bf698eec9 [ 533.439612][T22295] RDX: 0000000024000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 533.439628][T22295] RBP: 00007f7bf77ae090 R08: 0000000000000000 R09: 0000000000000000 [ 533.439643][T22295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.439656][T22295] R13: 00007f7bf6be6128 R14: 00007f7bf6be6090 R15: 00007ffc47da64f8 [ 533.439695][T22295] [ 533.907505][T11127] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0 [ 533.916042][T22308] tipc: Enabled bearer , priority 0 [ 533.924236][T22308] syzkaller0: entered promiscuous mode [ 533.929871][T22308] syzkaller0: entered allmulticast mode [ 533.952596][T11127] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0 [ 534.002305][T22308] tipc: Resetting bearer [ 534.014404][T22307] tipc: Resetting bearer [ 534.033021][T11127] hid-generic 0005:16BF:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 534.223447][T22307] tipc: Disabling bearer [ 534.480590][T22323] pim6reg: entered allmulticast mode [ 534.542096][T22337] pim6reg: left allmulticast mode [ 535.344666][T22350] __nla_validate_parse: 5 callbacks suppressed [ 535.344689][T22350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4482'. [ 535.442687][T22352] netlink: 'syz.0.4483': attribute type 15 has an invalid length. [ 535.600990][T22356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4484'. [ 536.068558][T22377] netlink: 21 bytes leftover after parsing attributes in process `syz.1.4490'. [ 536.261315][T22381] lo speed is unknown, defaulting to 1000 [ 536.346080][T22382] lo speed is unknown, defaulting to 1000 [ 536.449820][T22396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4495'. [ 536.860529][T22395] pim6reg: entered allmulticast mode [ 539.188493][T22394] pim6reg: left allmulticast mode [ 539.779707][T22419] lo speed is unknown, defaulting to 1000 [ 539.806683][T22425] netlink: 'syz.2.4504': attribute type 13 has an invalid length. [ 539.829769][T22425] netlink: 'syz.2.4504': attribute type 17 has an invalid length. [ 539.955556][T22425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 540.160242][ T3518] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20001 - 0 [ 540.170189][T22433] lo speed is unknown, defaulting to 1000 [ 540.229882][ T3518] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20001 - 0 [ 540.253728][ T3518] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20001 - 0 [ 540.262352][ T3518] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20001 - 0 [ 540.264419][T22440] lo speed is unknown, defaulting to 1000 [ 540.816812][T22443] netlink: 'syz.0.4507': attribute type 1 has an invalid length. [ 540.854901][T22443] 8021q: adding VLAN 0 to HW filter on device bond4 [ 540.895184][T22443] 8021q: adding VLAN 0 to HW filter on device bond4 [ 540.904372][T22443] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 540.915776][T22443] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 540.964621][T22445] veth9: entered promiscuous mode [ 540.978590][T22445] bond4: (slave veth9): Enslaving as an active interface with a down link [ 540.990299][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.000673][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.063735][ T37] bond3: (slave wlan0): failed to get link speed/duplex [ 541.172589][ T3518] bond3: (slave wlan0): failed to get link speed/duplex [ 541.824390][ T51] Bluetooth: hci1: link tx timeout [ 541.830340][ T51] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 541.840911][ T51] Bluetooth: hci1: link tx timeout [ 541.846454][ T51] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 541.905786][ T3518] bond3: (slave wlan0): failed to get link speed/duplex [ 542.085443][ T3518] bond3: (slave wlan0): failed to get link speed/duplex [ 542.124682][T22462] netlink: 'syz.0.4511': attribute type 6 has an invalid length. [ 542.218544][T22473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4513'. [ 542.228209][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 542.352991][ T13] bond3: (slave wlan0): failed to get link speed/duplex [ 542.472957][ T36] bond3: (slave wlan0): failed to get link speed/duplex [ 542.578556][T22482] x_tables: duplicate underflow at hook 1 [ 542.593137][ T37] bond3: (slave wlan0): failed to get link speed/duplex [ 542.638661][T22483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4518'. [ 542.713269][ T37] bond3: (slave wlan0): failed to get link speed/duplex [ 542.881202][T22499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4523'. [ 542.892037][T22502] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 542.941563][T22504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4522'. [ 542.951652][T22504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4522'. [ 543.141440][T22513] tipc: Enabled bearer , priority 0 [ 543.246763][T22513] tipc: Disabling bearer [ 543.314428][T22525] nbd: must specify an index to disconnect [ 543.481933][T22534] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4533'. [ 543.682135][T22539] lo speed is unknown, defaulting to 1000 [ 543.944598][ T51] Bluetooth: hci1: command 0x0405 tx timeout [ 544.026413][T22555] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4539'. [ 544.289002][T22565] tipc: Enabled bearer , priority 0 [ 544.351974][T22567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4542'. [ 544.464241][T22565] syzkaller0: entered promiscuous mode [ 544.469890][T22565] syzkaller0: entered allmulticast mode [ 544.482986][T22565] tipc: Resetting bearer [ 544.560252][ T13] tipc: Resetting bearer [ 544.591278][T22564] tipc: Resetting bearer [ 545.303943][T11125] tipc: Node number set to 2217027726 [ 546.030397][ T51] Bluetooth: hci1: command 0x0405 tx timeout [ 547.034940][T22564] tipc: Disabling bearer [ 547.073818][ T37] net_ratelimit: 10 callbacks suppressed [ 547.073844][ T37] bond3: (slave wlan0): failed to get link speed/duplex [ 547.214516][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 547.349057][ T37] bond3: (slave wlan0): failed to get link speed/duplex [ 547.472282][T22611] netlink: 'syz.4.4553': attribute type 2 has an invalid length. [ 547.484104][ T37] bond3: (slave wlan0): failed to get link speed/duplex [ 547.498930][T22616] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4551'. [ 547.525327][T22612] macsec2: entered promiscuous mode [ 547.563611][T22612] macsec2: entered allmulticast mode [ 547.594370][ T37] bond3: (slave wlan0): failed to get link speed/duplex [ 547.704187][ T3518] bond3: (slave wlan0): failed to get link speed/duplex [ 547.813377][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 547.922680][ T3518] bond3: (slave wlan0): failed to get link speed/duplex [ 548.032814][ T3518] bond3: (slave wlan0): failed to get link speed/duplex [ 548.074410][T22643] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 548.103450][ T5145] Bluetooth: hci1: command 0x0405 tx timeout [ 548.165624][ T3518] bond3: (slave wlan0): failed to get link speed/duplex [ 548.394009][T22659] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4569'. [ 548.507118][T22666] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4571'. [ 548.644633][T22671] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4572'. [ 548.820443][T22675] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4573'. [ 548.895740][T22684] netlink: 'syz.4.4573': attribute type 13 has an invalid length. [ 548.920865][T22684] netlink: 'syz.4.4573': attribute type 17 has an invalid length. [ 548.948370][T22689] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4574'. [ 549.034491][T22692] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4578'. [ 549.078346][T22697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4580'. [ 549.119070][T22684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.139029][T22684] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.211960][T22701] syzkaller1: entered promiscuous mode [ 549.235432][T22701] syzkaller1: entered allmulticast mode [ 549.253119][T22690] lo speed is unknown, defaulting to 1000 [ 550.601268][T22740] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 550.705640][T22744] 8021q: VLANs not supported on tunl0 [ 550.726536][T22744] 8021q: VLANs not supported on tunl0 [ 550.810859][T22751] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4593'. [ 550.836145][T22753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4594'. [ 551.159416][T22762] lo speed is unknown, defaulting to 1000 [ 551.813984][T22791] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 552.040277][T22792] pim6reg: entered allmulticast mode [ 552.149912][T22794] pim6reg: left allmulticast mode [ 552.267656][T22797] macvtap1: entered promiscuous mode [ 552.293652][T22797] veth1_to_hsr: entered promiscuous mode [ 552.306559][T22797] macvtap1: entered allmulticast mode [ 552.318188][T22797] veth1_to_hsr: entered allmulticast mode [ 552.493247][ T67] net_ratelimit: 28 callbacks suppressed [ 552.493270][ T67] bond3: (slave wlan0): failed to get link speed/duplex [ 552.613244][ T67] bond3: (slave wlan0): failed to get link speed/duplex [ 552.723276][ T13] bond3: (slave wlan0): failed to get link speed/duplex [ 552.833298][ T36] bond3: (slave wlan0): failed to get link speed/duplex [ 552.931777][T22828] __nla_validate_parse: 5 callbacks suppressed [ 552.931798][T22828] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4615'. [ 552.935758][T22824] xt_TPROXY: Can be used only with -p tcp or -p udp [ 552.954825][ T36] bond3: (slave wlan0): failed to get link speed/duplex [ 553.016246][T22829] syzkaller1: entered promiscuous mode [ 553.041042][T22829] syzkaller1: entered allmulticast mode [ 553.098224][T22824] dvmrp1: entered allmulticast mode [ 553.180835][T22824] dvmrp1: left allmulticast mode [ 553.271619][T22843] netlink: 'syz.3.4620': attribute type 16 has an invalid length. [ 553.273311][ T67] bond3: (slave wlan0): failed to get link speed/duplex [ 553.297202][T22843] netlink: 'syz.3.4620': attribute type 17 has an invalid length. [ 553.337214][T22847] IPv6: NLM_F_REPLACE set, but no existing node found! [ 553.353721][T22849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.501669][T22856] netlink: 'syz.2.4622': attribute type 1 has an invalid length. [ 553.765483][T22843] veth0_macvtap: left allmulticast mode [ 553.823596][ T67] bond3: (slave wlan0): failed to get link speed/duplex [ 553.843300][ T13] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.856074][ T13] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.866061][ T13] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.896615][ T13] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.927205][T22861] lo speed is unknown, defaulting to 1000 [ 553.933336][ T67] bond3: (slave wlan0): failed to get link speed/duplex [ 554.043704][ T67] bond3: (slave wlan0): failed to get link speed/duplex [ 554.064759][T22869] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 554.120338][T22870] netlink: 'syz.3.4626': attribute type 1 has an invalid length. [ 554.230016][T22870] 8021q: adding VLAN 0 to HW filter on device bond6 [ 554.306087][T22874] bond6: (slave gretap1): making interface the new active one [ 554.330917][T22874] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 554.725298][T22892] lo speed is unknown, defaulting to 1000 [ 555.103395][T22906] team0: Cannot enslave team device to itself [ 555.948778][T22932] lo speed is unknown, defaulting to 1000 [ 556.117022][T22940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4644'. [ 556.697958][T22949] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 557.095755][T22945] lo speed is unknown, defaulting to 1000 [ 557.516323][T22971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4653'. [ 557.547007][T22971] netlink: 'syz.0.4653': attribute type 7 has an invalid length. [ 557.580608][T22971] netlink: 'syz.0.4653': attribute type 8 has an invalid length. [ 557.603460][ T13] net_ratelimit: 26 callbacks suppressed [ 557.603485][ T13] bond3: (slave wlan0): failed to get link speed/duplex [ 557.619198][T22971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4653'. [ 557.681154][T22978] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4655'. [ 557.829205][ T13] bond3: (slave wlan0): failed to get link speed/duplex [ 557.892223][T22983] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4657'. [ 558.026647][ T36] bond3: (slave wlan0): failed to get link speed/duplex [ 558.143184][ T13] bond3: (slave wlan0): failed to get link speed/duplex [ 558.157522][T22990] netlink: 'syz.3.4658': attribute type 1 has an invalid length. [ 558.177259][T22990] netlink: 'syz.3.4658': attribute type 1 has an invalid length. [ 558.252735][ T36] bond3: (slave wlan0): failed to get link speed/duplex [ 558.424044][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 558.543621][ T3518] bond3: (slave wlan0): failed to get link speed/duplex [ 558.795081][T23023] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4664'. [ 558.805358][T23023] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4664'. [ 558.838737][T23023] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4664'. [ 558.897092][T23028] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4665'. [ 558.943203][ T3518] bond3: (slave wlan0): failed to get link speed/duplex [ 559.194315][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 559.384116][ T3518] bond3: (slave wlan0): failed to get link speed/duplex [ 559.513766][T23064] nbd: nbd2 already in use [ 559.523605][T23064] block nbd2: NBD_DISCONNECT [ 559.528277][T23064] block nbd2: Send disconnect failed -32 [ 559.613594][T23064] block nbd2: shutting down sockets [ 559.641805][T23067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4676'. [ 559.679331][T23067] vlan2: entered promiscuous mode [ 559.710204][T23067] gretap0: entered promiscuous mode [ 559.859913][T23083] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4679'. [ 559.870989][T23083] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4679'. [ 560.077576][T23091] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4683'. [ 560.125666][T23093] 8021q: VLANs not supported on ip6_vti0 [ 560.428299][T23108] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4690'. [ 560.660737][T23122] netlink: 296 bytes leftover after parsing attributes in process `syz.1.4692'. [ 560.854541][T23124] lo speed is unknown, defaulting to 1000 [ 561.296514][T23156] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 562.313634][T23153] xt_CT: No such helper "syz1" [ 562.693008][T17179] net_ratelimit: 22 callbacks suppressed [ 562.696237][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 562.785695][T23195] sctp: [Deprecated]: syz.3.4713 (pid 23195) Use of int in maxseg socket option. [ 562.785695][T23195] Use struct sctp_assoc_value instead [ 562.843087][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 562.881868][T23204] netlink: 'syz.2.4716': attribute type 8 has an invalid length. [ 562.953590][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 563.034782][T23212] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 563.064122][ T36] bond3: (slave wlan0): failed to get link speed/duplex [ 563.173516][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 563.271405][T23218] lo speed is unknown, defaulting to 1000 [ 563.303291][ T67] bond3: (slave wlan0): failed to get link speed/duplex [ 563.523243][ T36] bond3: (slave wlan0): failed to get link speed/duplex [ 563.643373][ T67] bond3: (slave wlan0): failed to get link speed/duplex [ 563.889045][T23257] __nla_validate_parse: 7 callbacks suppressed [ 563.889076][T23257] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4731'. [ 563.905658][ T3518] bond3: (slave wlan0): failed to get link speed/duplex [ 563.929972][T23245] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 563.980232][T23260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4732'. [ 564.072924][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 564.779013][T23290] bridge5: port 1(macvlan2) entered blocking state [ 564.787136][T23290] bridge5: port 1(macvlan2) entered disabled state [ 564.794347][T23290] macvlan2: entered allmulticast mode [ 564.803117][T23290] macvlan2: entered promiscuous mode [ 565.010578][T23300] tipc: MTU too low for tipc bearer [ 565.037840][T23300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4742'. [ 565.090631][T23304] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4743'. [ 565.242168][T23301] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4742'. [ 565.471330][T23333] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4751'. [ 565.523536][T23337] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4751'. [ 565.536268][T23335] vlan2: entered allmulticast mode [ 565.603648][T23342] netlink: 'syz.0.4753': attribute type 8 has an invalid length. [ 565.645964][T23337] ip6gretap1: entered promiscuous mode [ 565.661120][T23333] erspan0: entered allmulticast mode [ 565.990414][T23368] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4762'. [ 566.087606][T23374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4763'. [ 567.712581][ T36] net_ratelimit: 25 callbacks suppressed [ 567.712608][ T36] bond3: (slave wlan0): failed to get link speed/duplex [ 567.832552][ T36] bond3: (slave wlan0): failed to get link speed/duplex [ 568.096267][T23396] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4770'. [ 568.163572][T23396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.207131][T23396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.330276][T23412] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 568.355408][ T37] bond3: (slave wlan0): failed to get link speed/duplex [ 568.410154][T23401] lo speed is unknown, defaulting to 1000 [ 568.482988][ T67] bond3: (slave wlan0): failed to get link speed/duplex [ 568.613062][ T37] bond3: (slave wlan0): failed to get link speed/duplex [ 568.732741][ T36] bond3: (slave wlan0): failed to get link speed/duplex [ 568.853425][ T67] bond3: (slave wlan0): failed to get link speed/duplex [ 569.003412][ T36] bond3: (slave wlan0): failed to get link speed/duplex [ 569.134884][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 569.205516][T23445] __nla_validate_parse: 4 callbacks suppressed [ 569.205540][T23445] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4782'. [ 569.234144][T23446] netlink: 'syz.0.4781': attribute type 20 has an invalid length. [ 569.245482][T23446] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.4781'. [ 569.296856][ T36] bond3: (slave wlan0): failed to get link speed/duplex [ 569.544608][T23445] lo speed is unknown, defaulting to 1000 [ 569.544737][T23451] hsr0: entered allmulticast mode [ 569.595431][T23451] hsr_slave_0: entered allmulticast mode [ 569.629206][T23451] hsr_slave_1: entered allmulticast mode [ 569.663104][T23454] hsr_slave_0: left promiscuous mode [ 569.686334][T23454] hsr_slave_1: left promiscuous mode [ 569.729564][T23454] hsr0 (unregistering): left allmulticast mode [ 569.973834][T23465] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4787'. [ 569.975817][T23464] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4788'. [ 570.206507][T23476] IPVS: length: 216 != 24 [ 570.265520][T23473] syzkaller0: entered promiscuous mode [ 570.281397][T23473] syzkaller0: entered allmulticast mode [ 570.465273][T23480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4794'. [ 570.792078][T23496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4794'. [ 573.056469][T23523] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4804'. [ 573.139995][T23517] net_ratelimit: 5 callbacks suppressed [ 573.140019][T23517] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 573.152986][T23517] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 573.160264][T23517] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 573.167667][T23517] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 573.174977][T23517] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 573.182239][T23517] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 573.189569][T23517] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 573.193595][T23534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4807'. [ 573.196860][T23517] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 573.213005][T23517] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 573.220280][T23517] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 573.440097][T23529] lo speed is unknown, defaulting to 1000 [ 573.495068][T23521] lo speed is unknown, defaulting to 1000 [ 573.868016][T23550] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4813'. [ 574.086155][T23556] syzkaller1: entered promiscuous mode [ 574.091708][T23556] syzkaller1: entered allmulticast mode [ 574.134925][T23558] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4816'. [ 577.204619][T23568] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4819'. [ 577.223757][T23562] lo speed is unknown, defaulting to 1000 [ 577.498329][T23572] bond4 (unregistering): Released all slaves [ 577.994154][T23600] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4830'. [ 578.243604][ T1164] net_ratelimit: 3268 callbacks suppressed [ 578.243628][ T1164] bond3: (slave wlan0): failed to get link speed/duplex [ 578.393263][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 578.403252][T23606] lo speed is unknown, defaulting to 1000 [ 578.497151][T23613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4834'. [ 578.542740][ T3518] bond3: (slave wlan0): failed to get link speed/duplex [ 578.543202][T23613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4834'. [ 579.133787][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 579.155242][T23626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4837'. [ 579.166627][T23626] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4837'. [ 579.326989][ T36] bond3: (slave wlan0): failed to get link speed/duplex [ 579.874149][T23643] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4842'. [ 579.913099][ T36] bond3: (slave wlan0): failed to get link speed/duplex [ 580.112160][ T36] bond3: (slave wlan0): failed to get link speed/duplex [ 580.192111][T23645] lo speed is unknown, defaulting to 1000 [ 580.253723][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 580.268093][T23658] netlink: 'syz.1.4846': attribute type 1 has an invalid length. [ 580.362583][ T1135] bond3: (slave wlan0): failed to get link speed/duplex [ 580.553589][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 581.485397][T23674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4850'. [ 581.763855][T23680] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 581.783622][T23680] dvmrp1: linktype set to 773 [ 581.957979][T23687] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20003 [ 582.080343][T23691] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4857'. [ 582.135372][T23695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4859'. [ 582.289114][T23703] netlink: 'syz.0.4862': attribute type 10 has an invalid length. [ 582.311401][T23703] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.331030][T23703] bond0: (slave team0): Enslaving as an active interface with an up link [ 582.357258][T23706] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4861'. [ 582.491848][T23708] lo speed is unknown, defaulting to 1000 [ 583.012949][T23733] 8021q: adding VLAN 0 to HW filter on device bond3 [ 583.027921][T23738] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 583.067115][T23741] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4872'. [ 583.313302][ T1164] net_ratelimit: 19 callbacks suppressed [ 583.313328][ T1164] bond3: (slave wlan0): failed to get link speed/duplex [ 583.336467][T23751] tipc: Enabled bearer , priority 0 [ 583.355699][T23751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4875'. [ 583.418011][T23751] tipc: Resetting bearer [ 583.438618][T23748] tipc: Disabling bearer [ 583.533173][ T3518] bond3: (slave wlan0): failed to get link speed/duplex [ 583.643794][ T1135] bond3: (slave wlan0): failed to get link speed/duplex [ 583.762303][T23764] netlink: 2980 bytes leftover after parsing attributes in process `syz.4.4880'. [ 583.798798][T23762] bridge8: entered allmulticast mode [ 583.863240][ T1135] bond3: (slave wlan0): failed to get link speed/duplex [ 583.895955][T23762] netlink: 'syz.1.4879': attribute type 4 has an invalid length. [ 583.926620][T23762] netlink: 'syz.1.4879': attribute type 4 has an invalid length. [ 583.973427][ T1164] bond3: (slave wlan0): failed to get link speed/duplex [ 584.124796][ T1164] bond3: (slave wlan0): failed to get link speed/duplex [ 584.223919][T23776] netlink: 'syz.1.4882': attribute type 7 has an invalid length. [ 584.397061][T23789] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4884'. [ 584.585293][T23795] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4888'. [ 584.903760][ T1135] bond3: (slave wlan0): failed to get link speed/duplex [ 585.063420][ T36] bond3: (slave wlan0): failed to get link speed/duplex [ 585.087038][T23801] siw: device registration error -23 [ 585.116911][T23802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4889'. [ 585.142870][T23802] netlink: 'syz.0.4889': attribute type 20 has an invalid length. [ 585.200868][T23806] netlink: 3740 bytes leftover after parsing attributes in process `syz.0.4889'. [ 585.210463][T23802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4889'. [ 585.210491][T23802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4889'. [ 585.210517][T23802] netlink: 'syz.0.4889': attribute type 20 has an invalid length. [ 585.223245][ T1164] bond3: (slave wlan0): failed to get link speed/duplex [ 585.335359][ T1135] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.344676][ T1135] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.365169][ T1135] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.410255][ T1135] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.453240][ T1135] bond3: (slave wlan0): failed to get link speed/duplex [ 585.820251][T23825] bridge6: entered promiscuous mode [ 585.840307][T23825] bridge6: entered allmulticast mode [ 586.050755][T23836] netlink: 'syz.0.4902': attribute type 1 has an invalid length. [ 586.070448][T23836] netlink: 'syz.0.4902': attribute type 2 has an invalid length. [ 586.141781][T23845] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:0 [ 586.569831][T23862] netlink: 'syz.2.4909': attribute type 1 has an invalid length. [ 586.696215][T23864] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 586.706985][T23864] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 586.720147][T23864] bond5: (slave vti0): making interface the new active one [ 586.728728][T23864] bond5: (slave vti0): Enslaving as an active interface with an up link [ 587.190203][T23895] netlink: 'syz.3.4918': attribute type 1 has an invalid length. [ 587.234913][T23887] tipc: Enabled bearer , priority 0 [ 587.280259][T23887] syzkaller0: entered promiscuous mode [ 587.297476][T23887] syzkaller0: entered allmulticast mode [ 587.415966][T23883] tipc: Resetting bearer [ 587.448028][T23907] netlink: 'syz.1.4921': attribute type 20 has an invalid length. [ 587.469312][T23907] __nla_validate_parse: 11 callbacks suppressed [ 587.469333][T23907] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4921'. [ 587.489180][T23883] tipc: Disabling bearer [ 587.526028][T23912] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4922'. [ 587.557486][T23904] lo speed is unknown, defaulting to 1000 [ 587.675718][T23918] IPVS: Error connecting to the multicast addr [ 587.726094][T23915] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4923'. [ 587.809257][T23919] lo speed is unknown, defaulting to 1000 [ 587.876858][T23925] netlink: 'syz.1.4927': attribute type 15 has an invalid length. [ 588.200064][T23944] netlink: 'syz.1.4932': attribute type 29 has an invalid length. [ 588.472868][T17179] net_ratelimit: 20 callbacks suppressed [ 588.472892][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 588.603318][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 588.612683][T23953] syzkaller1: entered allmulticast mode [ 588.688540][T23964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4935'. [ 588.961053][T23969] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4938'. [ 589.054973][ T1164] bond3: (slave wlan0): failed to get link speed/duplex [ 589.216110][T23979] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4940'. [ 589.240112][T23979] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4940'. [ 589.383330][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 589.442223][T23989] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4943'. [ 589.493762][ T1135] bond3: (slave wlan0): failed to get link speed/duplex [ 589.584349][T23989] nbd: socks must be embedded in a SOCK_ITEM attr [ 589.632691][ T3518] bond3: (slave wlan0): failed to get link speed/duplex [ 589.808917][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 589.963159][ T1164] bond3: (slave wlan0): failed to get link speed/duplex [ 590.072721][ T1164] bond3: (slave wlan0): failed to get link speed/duplex [ 590.222540][ T1135] bond3: (slave wlan0): failed to get link speed/duplex [ 590.406853][T24024] vlan4: entered promiscuous mode [ 591.000075][T24056] lo speed is unknown, defaulting to 1000 [ 591.509330][T24082] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 591.566769][T24086] netlink: 'syz.3.4971': attribute type 7 has an invalid length. [ 591.627326][T24086] netlink: 'syz.3.4971': attribute type 7 has an invalid length. [ 591.807605][T24095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4975'. [ 591.930735][T24101] ip6gretap1: entered promiscuous mode [ 591.954410][T24097] netlink: 'syz.0.4976': attribute type 10 has an invalid length. [ 592.005540][T24097] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 592.044238][T24103] veth0_to_bridge: entered promiscuous mode [ 592.077269][T24104] mac80211_hwsim hwsim53 wlan1: entered allmulticast mode [ 592.130445][T24102] veth0_to_bridge: left promiscuous mode [ 592.504267][T24123] tipc: Enabled bearer , priority 0 [ 592.512117][T24123] syzkaller0: entered promiscuous mode [ 592.520066][T24123] syzkaller0: entered allmulticast mode [ 592.534356][T24124] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4984'. [ 592.545887][T24127] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4985'. [ 592.603779][T24132] tipc: Resetting bearer [ 592.789472][T24122] tipc: Resetting bearer [ 592.829249][T24122] tipc: Disabling bearer [ 592.909505][T24140] lo speed is unknown, defaulting to 1000 [ 592.925422][T24144] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4990'. [ 593.445274][T24169] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4998'. [ 593.564062][ T1135] net_ratelimit: 23 callbacks suppressed [ 593.564085][ T1135] bond3: (slave wlan0): failed to get link speed/duplex [ 593.693269][ T1164] bond3: (slave wlan0): failed to get link speed/duplex [ 593.942674][ T1164] bond3: (slave wlan0): failed to get link speed/duplex [ 594.062900][ T1164] bond3: (slave wlan0): failed to get link speed/duplex [ 594.285742][T24196] netlink: 'syz.4.5004': attribute type 16 has an invalid length. [ 594.293745][T24196] netlink: 'syz.4.5004': attribute type 17 has an invalid length. [ 594.448477][T24193] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 594.494952][T24193] bridge7: entered allmulticast mode [ 594.635250][T24196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 594.686304][ T67] bond3: (slave wlan0): failed to get link speed/duplex [ 594.803891][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 595.073624][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 595.182556][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 595.294854][ T1135] bond3: (slave wlan0): failed to get link speed/duplex [ 595.309108][T24225] netlink: 'syz.2.5012': attribute type 23 has an invalid length. [ 595.920275][T24244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5020'. [ 596.010205][T24245] lo speed is unknown, defaulting to 1000 [ 596.588184][T24270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5028'. [ 596.719357][T24276] netlink: 'syz.0.5027': attribute type 1 has an invalid length. [ 596.748172][T24276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5027'. [ 597.248267][T24294] lo speed is unknown, defaulting to 1000 [ 597.516949][T24311] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5036'. [ 597.660214][T24315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5037'. [ 597.689173][T24315] macsec2: entered promiscuous mode [ 597.705791][T24315] macvlan0: entered promiscuous mode [ 597.903632][T24322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5038'. [ 597.940868][T24322] IPv6: sit1: Disabled Multicast RS [ 597.948172][T24322] sit1: entered allmulticast mode [ 598.097411][T24326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5041'. [ 598.199449][T24332] netlink: 'syz.1.5041': attribute type 29 has an invalid length. [ 598.275890][T24335] tipc: Enabled bearer , priority 0 [ 598.470580][T24340] tipc: Disabling bearer [ 598.601525][T24347] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5045'. [ 598.613320][ T67] net_ratelimit: 18 callbacks suppressed [ 598.613345][ T67] bond3: (slave wlan0): failed to get link speed/duplex [ 598.734828][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 598.761947][T24353] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5047'. [ 598.843122][ T67] bond3: (slave wlan0): failed to get link speed/duplex [ 598.869371][T24365] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5050'. [ 598.878767][T24365] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 598.953661][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 599.073667][ T1164] bond3: (slave wlan0): failed to get link speed/duplex [ 599.179036][T24376] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.197126][T24376] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.264863][T24372] bridge0: port 3(erspan0) entered blocking state [ 599.271904][T24372] bridge0: port 3(erspan0) entered disabled state [ 599.300174][T24372] erspan0: entered allmulticast mode [ 599.328397][T24372] erspan0: left allmulticast mode [ 599.385112][T24391] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 599.403672][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 599.525183][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 599.643782][T17179] bond3: (slave wlan0): failed to get link speed/duplex [ 599.778954][T24403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5060'. [ 599.815109][T24403] netlink: 'syz.2.5060': attribute type 30 has an invalid length. [ 599.946343][T24403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5060'. [ 599.975669][T24403] netlink: 'syz.2.5060': attribute type 30 has an invalid length. [ 600.127677][T24411] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 600.253835][T24411] vxcan2: entered allmulticast mode [ 600.383929][T24418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5066'. [ 600.409754][T24418] nbd: must specify at least one socket [ 600.669952][T24436] lo speed is unknown, defaulting to 1000 [ 600.720967][T24437] xt_CT: You must specify a L4 protocol and not use inversions on it [ 601.271178][T24455] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 601.659815][T24464] lo speed is unknown, defaulting to 1000 [ 602.503463][T24468] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 602.529707][T24492] tipc: Enabled bearer , priority 0 [ 602.912858][T24492] tipc: Disabling bearer [ 603.409735][T24518] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5094'. [ 603.430122][T24518] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5094'. [ 603.453880][T24518] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5094'. [ 603.493178][T24520] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5095'. [ 603.502300][T24523] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5094'. [ 603.526219][T24523] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5094'. [ 603.555829][T24523] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5094'. [ 603.575530][T24522] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5096'. [ 603.623247][ T3518] net_ratelimit: 28 callbacks suppressed [ 603.623272][ T3518] bond3: (slave wlan0): failed to get link speed/duplex [ 603.772978][ T37] bond3: (slave wlan0): failed to get link speed/duplex [ 603.815317][T24532] netlink: 'syz.3.5097': attribute type 13 has an invalid length. [ 603.837066][T24532] netlink: 'syz.3.5097': attribute type 17 has an invalid length. [ 603.958748][T24532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.975107][T24532] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.997943][T24532] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 604.200525][ T67] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 604.233238][ T67] bond3: (slave wlan0): failed to get link speed/duplex [ 604.383047][ T67] bond3: (slave wlan0): failed to get link speed/duplex [ 604.494794][ T67] bond3: (slave wlan0): failed to get link speed/duplex [ 604.584987][T24554] lo speed is unknown, defaulting to 1000 [ 604.612652][ T67] bond3: (slave wlan0): failed to get link speed/duplex [ 604.691957][T24552] lo speed is unknown, defaulting to 1000 [ 604.722718][ T67] bond3: (slave wlan0): failed to get link speed/duplex [ 604.733654][T24557] lo speed is unknown, defaulting to 1000 [ 604.842923][ T67] bond3: (slave wlan0): failed to get link speed/duplex [ 604.962511][ T67] bond3: (slave wlan0): failed to get link speed/duplex [ 605.175668][T24567] tipc: Enabled bearer , priority 0 [ 605.215098][T24567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5107'. [ 605.560076][T24571] tipc: Disabling bearer [ 605.614729][T24583] vti0: entered promiscuous mode [ 606.132140][T24592] wg1: left promiscuous mode [ 606.143930][T24592] wg1: left allmulticast mode [ 606.205544][T24592] vlan2: left promiscuous mode [ 606.241832][T24592] macsec1: left promiscuous mode [ 606.280309][T24592] bridge6: left promiscuous mode [ 606.295171][T24592] bridge6: left allmulticast mode [ 606.301807][T24592] bridge7: left allmulticast mode [ 606.314078][T24592] vti0: left promiscuous mode [ 607.254505][T24616] lo speed is unknown, defaulting to 1000 [ 608.376339][T24661] tipc: Enabled bearer , priority 0 [ 608.384180][T24661] syzkaller0: entered promiscuous mode [ 608.392576][T24661] syzkaller0: entered allmulticast mode [ 608.467219][T24661] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 608.492661][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 608.529748][T24661] tipc: Resetting bearer [ 608.573554][T24660] tipc: Resetting bearer [ 608.662107][T24660] tipc: Disabling bearer [ 608.792772][ T1135] net_ratelimit: 48 callbacks suppressed [ 608.792798][ T1135] bond3: (slave wlan0): failed to get link speed/duplex [ 609.043415][ T67] bond3: (slave wlan0): failed to get link speed/duplex [ 609.153398][ T37] bond3: (slave wlan0): failed to get link speed/duplex [ 609.263580][ T37] bond3: (slave wlan0): failed to get link speed/duplex [ 609.373048][ T37] bond3: (slave wlan0): failed to get link speed/duplex [ 609.716947][ T1164] bond3: (slave wlan0): failed to get link speed/duplex [ 609.855576][ T1164] bond3: (slave wlan0): failed to get link speed/duplex [ 609.912319][T24704] vlan2: entered promiscuous mode [ 609.918805][T24704] geneve1: entered promiscuous mode [ 609.925377][T24704] vlan2: entered allmulticast mode [ 609.940621][T24704] geneve1: entered allmulticast mode [ 609.982512][ T1135] bond3: (slave wlan0): failed to get link speed/duplex [ 610.093693][ T1135] bond3: (slave wlan0): failed to get link speed/duplex [ 610.213138][ T1164] bond3: (slave wlan0): failed to get link speed/duplex [ 610.250708][T24732] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5148'. [ 610.890411][T24743] lo speed is unknown, defaulting to 1000 [ 611.165279][T24758] tipc: Enabled bearer , priority 0 [ 611.182196][T24758] syzkaller0: entered promiscuous mode [ 611.195674][T24758] syzkaller0: entered allmulticast mode [ 611.217312][T24758] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 611.297745][T24760] xt_CT: You must specify a L4 protocol and not use inversions on it [ 611.316602][T24758] tipc: Resetting bearer [ 611.345097][T24756] tipc: Resetting bearer [ 611.419276][T24756] tipc: Disabling bearer [ 611.427503][T24771] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5156'. [ 611.449873][T24765] netlink: 'syz.2.5157': attribute type 1 has an invalid length. [ 611.694242][T24780] syzkaller1: entered promiscuous mode [ 611.699964][T24780] syzkaller1: entered allmulticast mode [ 611.748499][T24779] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5161'. [ 611.753540][T24778] netlink: 'syz.2.5160': attribute type 10 has an invalid length. [ 611.829125][T24778] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 611.936196][ C1] ------------[ cut here ]------------ [ 611.939373][T24784] netlink: 'syz.3.5162': attribute type 2 has an invalid length. [ 611.941758][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 611.961006][ C1] WARNING: CPU: 1 PID: 17582 at net/mac80211/rate.c:406 __rate_control_send_low+0x5e2/0x820 [ 611.971217][ C1] Modules linked in: [ 611.975759][ C1] CPU: 1 UID: 0 PID: 17582 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 611.985402][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 611.995012][T24784] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5162'. [ 611.995551][ C1] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 612.010775][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 c0 6d 8a 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 6f 9a c6 f6 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 612.030634][ C1] RSP: 0018:ffffc90000a08758 EFLAGS: 00010246 [ 612.036806][ C1] RAX: 1b8bab617a34d800 RBX: 000000000000000c RCX: ffff888027043c80 [ 612.044879][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 612.052976][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 612.060996][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa138 R12: ffff8880249183e8 [ 612.069083][ C1] R13: 0000000000000000 R14: ffff888058560e80 R15: ffff888058563138 [ 612.077177][ C1] FS: 0000555586c13500(0000) GS:ffff888125e3b000(0000) knlGS:0000000000000000 [ 612.086212][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 612.092886][ C1] CR2: 00007fd4542b1f98 CR3: 000000005db68000 CR4: 00000000003526f0 [ 612.100995][ C1] Call Trace: [ 612.104443][ C1] [ 612.107370][ C1] rate_control_send_low+0x1a7/0x7b0 [ 612.112759][ C1] rate_control_get_rate+0x20b/0x5d0 [ 612.118082][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 612.123965][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 612.130321][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 612.135787][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 612.141536][ C1] ? __ieee80211_beacon_get+0xb24/0x1880 [ 612.147233][ C1] __ieee80211_beacon_get+0xd3d/0x1880 [ 612.152765][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 612.158467][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 612.163995][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 612.170143][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 612.175807][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 612.183093][ C1] __iterate_interfaces+0x2ab/0x590 [ 612.188421][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 612.194575][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 612.201863][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 612.208617][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 612.215718][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 612.220945][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 612.226909][ C1] __hrtimer_run_queues+0x529/0xc60 [ 612.232148][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 612.238544][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 612.244335][ C1] ? read_tsc+0x9/0x20 [ 612.248450][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 612.254359][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 612.259506][ C1] handle_softirqs+0x283/0x870 [ 612.264367][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 612.269295][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 612.274692][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 612.279985][ C1] __irq_exit_rcu+0xca/0x1f0 [ 612.284649][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 612.289941][ C1] irq_exit_rcu+0x9/0x30 [ 612.294280][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 612.299968][ C1] [ 612.303015][ C1] [ 612.305961][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 612.312059][ C1] RIP: 0010:page_table_check_set+0x2f6/0x730 [ 612.318136][ C1] Code: be 04 00 00 00 e8 6a c6 f4 ff 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 55 01 00 00 44 8b 3b <31> ff 44 89 fe e8 10 1e 90 ff 45 85 ff 0f 85 5e 02 00 00 48 8d 7b [ 612.337800][ C1] RSP: 0018:ffffc90003edf348 EFLAGS: 00000246 [ 612.343962][ C1] RAX: 0000000000000000 RBX: ffff88801c079218 RCX: dffffc0000000000 [ 612.351974][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801c079218 [ 612.360009][ C1] RBP: ffff88801c0791d0 R08: ffff88801c07921b R09: 1ffff1100380f243 [ 612.368059][ C1] R10: dffffc0000000000 R11: ffffed100380f244 R12: 0000000000000001 [ 612.376092][ C1] R13: 0000000000000000 R14: 0000000000031839 R15: 0000000000000000 [ 612.384483][ C1] ? page_table_check_set+0x2d6/0x730 [ 612.389922][ C1] ? page_table_check_set+0x18d/0x730 [ 612.395467][ C1] copy_pmd_range+0x4439/0x71d0 [ 612.400473][ C1] ? stack_depot_save_flags+0x40/0x860 [ 612.406017][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 612.411269][ C1] copy_page_range+0xc14/0x1270 [ 612.416220][ C1] ? __lock_acquire+0xab9/0xd20 [ 612.421122][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 612.426833][ C1] ? up_write+0x1c4/0x420 [ 612.431309][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 612.438143][ C1] dup_mmap+0xf57/0x1ac0 [ 612.442481][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 612.447207][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 612.453148][ C1] ? mm_init+0xccb/0xef0 [ 612.457420][ C1] copy_mm+0x13c/0x4b0 [ 612.461500][ C1] copy_process+0x1706/0x3c00 [ 612.466254][ C1] ? copy_process+0x97f/0x3c00 [ 612.471060][ C1] ? __pfx_copy_process+0x10/0x10 [ 612.476150][ C1] kernel_clone+0x21e/0x840 [ 612.480790][ C1] ? css_rstat_updated+0x23a/0x4f0 [ 612.486008][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 612.491259][ C1] ? count_memcg_event_mm+0x21/0x260 [ 612.496755][ C1] __x64_sys_clone+0x18b/0x1e0 [ 612.501573][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 612.506969][ C1] ? do_user_addr_fault+0xc85/0x1380 [ 612.512290][ C1] ? do_syscall_64+0xbe/0xfa0 [ 612.517172][ C1] do_syscall_64+0xfa/0xfa0 [ 612.521799][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 612.527072][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.533198][ C1] ? clear_bhb_loop+0x60/0xb0 [ 612.537924][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.543902][ C1] RIP: 0033:0x7fc768385613 [ 612.548344][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 612.568022][ C1] RSP: 002b:00007ffeb6d1a268 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 612.576586][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc768385613 [ 612.584632][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 612.592681][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 612.600700][ C1] R10: 0000555586c137d0 R11: 0000000000000246 R12: 0000000000000000 [ 612.608762][ C1] R13: 00000000000927c0 R14: 00000000000955e9 R15: 00007ffeb6d1a400 [ 612.616812][ C1] [ 612.619876][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 612.627183][ C1] CPU: 1 UID: 0 PID: 17582 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 612.636788][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 612.646866][ C1] Call Trace: [ 612.650257][ C1] [ 612.653131][ C1] dump_stack_lvl+0x99/0x250 [ 612.657744][ C1] ? __asan_memcpy+0x40/0x70 [ 612.662355][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 612.667594][ C1] ? __pfx__printk+0x10/0x10 [ 612.672209][ C1] vpanic+0x281/0x750 [ 612.676270][ C1] ? __pfx__printk+0x10/0x10 [ 612.680980][ C1] ? __pfx_vpanic+0x10/0x10 [ 612.685554][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 612.690896][ C1] panic+0xb9/0xc0 [ 612.694653][ C1] ? __pfx_panic+0x10/0x10 [ 612.699129][ C1] __warn+0x31b/0x4b0 [ 612.703144][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 612.708806][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 612.714454][ C1] report_bug+0x2be/0x4f0 [ 612.718820][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 612.724583][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 612.730249][ C1] ? __rate_control_send_low+0x5e4/0x820 [ 612.735988][ C1] handle_bug+0x84/0x160 [ 612.740247][ C1] exc_invalid_op+0x1a/0x50 [ 612.744874][ C1] asm_exc_invalid_op+0x1a/0x20 [ 612.749755][ C1] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 612.756046][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 c0 6d 8a 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 6f 9a c6 f6 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 612.776186][ C1] RSP: 0018:ffffc90000a08758 EFLAGS: 00010246 [ 612.782273][ C1] RAX: 1b8bab617a34d800 RBX: 000000000000000c RCX: ffff888027043c80 [ 612.790278][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 612.798368][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 612.806358][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa138 R12: ffff8880249183e8 [ 612.814345][ C1] R13: 0000000000000000 R14: ffff888058560e80 R15: ffff888058563138 [ 612.822355][ C1] ? __rate_control_send_low+0x5e1/0x820 [ 612.828134][ C1] rate_control_send_low+0x1a7/0x7b0 [ 612.833507][ C1] rate_control_get_rate+0x20b/0x5d0 [ 612.838852][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 612.844727][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 612.851102][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 612.856523][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 612.862302][ C1] ? __ieee80211_beacon_get+0xb24/0x1880 [ 612.867966][ C1] __ieee80211_beacon_get+0xd3d/0x1880 [ 612.873463][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 612.879081][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 612.884575][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 612.890824][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 612.896403][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 612.903644][ C1] __iterate_interfaces+0x2ab/0x590 [ 612.908874][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 612.914967][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 612.922191][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 612.928342][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 612.935403][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 612.940636][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 612.946468][ C1] __hrtimer_run_queues+0x529/0xc60 [ 612.951734][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 612.957782][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 612.963623][ C1] ? read_tsc+0x9/0x20 [ 612.967751][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 612.973739][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 612.978956][ C1] handle_softirqs+0x283/0x870 [ 612.983784][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 612.988588][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 612.993915][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 612.999667][ C1] __irq_exit_rcu+0xca/0x1f0 [ 613.004285][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 613.009519][ C1] irq_exit_rcu+0x9/0x30 [ 613.013787][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 613.019443][ C1] [ 613.022393][ C1] [ 613.025347][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 613.031429][ C1] RIP: 0010:page_table_check_set+0x2f6/0x730 [ 613.037429][ C1] Code: be 04 00 00 00 e8 6a c6 f4 ff 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 55 01 00 00 44 8b 3b <31> ff 44 89 fe e8 10 1e 90 ff 45 85 ff 0f 85 5e 02 00 00 48 8d 7b [ 613.057136][ C1] RSP: 0018:ffffc90003edf348 EFLAGS: 00000246 [ 613.063237][ C1] RAX: 0000000000000000 RBX: ffff88801c079218 RCX: dffffc0000000000 [ 613.071294][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801c079218 [ 613.079297][ C1] RBP: ffff88801c0791d0 R08: ffff88801c07921b R09: 1ffff1100380f243 [ 613.087299][ C1] R10: dffffc0000000000 R11: ffffed100380f244 R12: 0000000000000001 [ 613.095298][ C1] R13: 0000000000000000 R14: 0000000000031839 R15: 0000000000000000 [ 613.103309][ C1] ? page_table_check_set+0x2d6/0x730 [ 613.108804][ C1] ? page_table_check_set+0x18d/0x730 [ 613.114214][ C1] copy_pmd_range+0x4439/0x71d0 [ 613.119103][ C1] ? stack_depot_save_flags+0x40/0x860 [ 613.124601][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 613.129865][ C1] copy_page_range+0xc14/0x1270 [ 613.134750][ C1] ? __lock_acquire+0xab9/0xd20 [ 613.139655][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 613.144977][ C1] ? up_write+0x1c4/0x420 [ 613.149325][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 613.156215][ C1] dup_mmap+0xf57/0x1ac0 [ 613.160513][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 613.165325][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 613.171262][ C1] ? mm_init+0xccb/0xef0 [ 613.175556][ C1] copy_mm+0x13c/0x4b0 [ 613.179664][ C1] copy_process+0x1706/0x3c00 [ 613.184367][ C1] ? copy_process+0x97f/0x3c00 [ 613.189175][ C1] ? __pfx_copy_process+0x10/0x10 [ 613.194259][ C1] kernel_clone+0x21e/0x840 [ 613.198782][ C1] ? css_rstat_updated+0x23a/0x4f0 [ 613.203928][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 613.209022][ C1] ? count_memcg_event_mm+0x21/0x260 [ 613.214362][ C1] __x64_sys_clone+0x18b/0x1e0 [ 613.219168][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 613.224495][ C1] ? do_user_addr_fault+0xc85/0x1380 [ 613.229821][ C1] ? do_syscall_64+0xbe/0xfa0 [ 613.234534][ C1] do_syscall_64+0xfa/0xfa0 [ 613.239079][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 613.244323][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.250507][ C1] ? clear_bhb_loop+0x60/0xb0 [ 613.255228][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.261146][ C1] RIP: 0033:0x7fc768385613 [ 613.265590][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 613.285299][ C1] RSP: 002b:00007ffeb6d1a268 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 613.293823][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc768385613 [ 613.301945][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 613.309991][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 613.317989][ C1] R10: 0000555586c137d0 R11: 0000000000000246 R12: 0000000000000000 [ 613.325980][ C1] R13: 00000000000927c0 R14: 00000000000955e9 R15: 00007ffeb6d1a400 [ 613.333996][ C1] [ 613.337361][ C1] Kernel Offset: disabled [ 613.341715][ C1] Rebooting in 86400 seconds..