last executing test programs: 12.00289806s ago: executing program 1 (id=2953): r0 = socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=@newtfilter={0x2df0, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x8}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x2dc0, 0x2, [@TCA_BASIC_CLASSID={0x4, 0x1, {0x4, 0xd}}, @TCA_BASIC_ACT={0x17bc, 0x3, [@m_xt={0x288, 0x1e, 0x0, 0x0, {{0x7}, {0x16c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x63}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0xc7, 0x6, {0x3, 'security\x00', 0x3, 0xf, "3b5035f6d0119df5fd776bec1bcbe2226b0796b05daad948337f7dfbf8ef4f75e8d24256bddf8b8ecbb656d7843a8f5cbe5059bbf21d4265f9132640a54927ac52400aa3abcae261e235eebe470f9f463b3bdc17c1fd29d519c7f22e9fd3431effc6c89258fd9b6dc12ebe3c9703ddf3f0669dba9dc22a96ca71c6af1855ce151578f882ef7fb1af7dbc97ea174dd35d4b3f3719c7bce660a1f85ea73a"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x47, 0x6, {0x2, 'raw\x00', 0x5, 0x2, "18af7ba4439e4771a21d03b4defd9cdb1ccc17208e581688f29469efce"}}]}, {0xf8, 0x6, "e036c45bb31c0de60ae38954d16ca16e1455e7f12cd06b238860efaca34f7c2f3fb112e0037699e414d2773cfd68d17f514024632d4b73eefd249feeb96c283c5f8ebc96171541aeabecbcfac7a85e3e474f21cedeb3f4c893c59aeca99fc60761a9ce0b5cf623c275ecbfeeb4b0e9628bbedabf032043d8acbd45fe548a2c4e3831540813d76afb70094969b45d49331047e3aa7e2a245f4229e872b45b3f627ee398dbac46c0dd361a77d72de05fd50c5431f6ae937d95dd0e5da2309c6a44a248922f75e22e62d8f0a309e91d6776f388f0bfd716acca5fc0cc2ab9c636155911bf56e68418fd5f23fdd246a427755c858c35"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x130, 0x1, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="7bdafbd68d0c"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6f7, 0x5, 0xffffffffffffffff, 0xf, 0x4}, 0x9}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfbff}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0xa8, 0x6, "8fdfb106eb3a89f9117a888791d263eac07f323cf7b306129cd5ae61d501a899d286a7c30e173180c14991efd38666275ec6c91738840ba0eeb6132c9d51c4a57c5499de0cb32c42cc1dabf76810cd361c0ea3cfb2b0bf738ef6b1ed955344cd3db4bd905680d4d884a88ac7ad3430522e39124a3f2717f40e3409f2bc4964d226b9715114595bd68c06cc55cae2e6ce83af7dc3cc9af2484ae8242445e09b1b9958bd5a"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0xa0, 0x18, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0x49, 0x6, "30e42aba0868442ff2d1ebd90115c78e480887641069f8fa988ce123aa5d0a83437e981d2f289a17b6a8929dc93f7d50a6ba46da9a36fb56346ab362559d956e34be30468a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0xc4, 0x11, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}]}, {0x8e, 0x6, "e307b63c0152e871cc5ab7363ca35a9dc7128819ba4cbaa0d094826d10b087544d2cfa9ff74adf019bd58767b59c6b37e8568c3a2eb7d589ba05216aa57be507a1195ed53ecae784ee70c27ff5c091efca8cb36f7cda12a6a9e07f698c497075cb31752a4b882761f8f3a213bb2c48879db9ebb0013b55840bfc90cf26e77c2239307d2f1475e432081d"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x104c, 0x16, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8b0, 0x7, 0x8, 0xd4}, 0x5b}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xbc, 0x10, 0x0, 0x0, {{0x9}, {0x80, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0xffffffff, 0x5, 0x81, 0x1}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x5ec}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x666}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8001, 0x80, 0xffffffffdffffffb, 0x9, 0x8001}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x0, 0x4, 0x620001}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7f7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x12, 0x6, "9460668e074b9ab34b347bc26e60"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x194, 0x12, 0x0, 0x0, {{0xb}, {0x80, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0xe5, 0x2, 0x2, 0x1}, 0xa}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x200, 0x8, 0x1004000, 0xff}, 0xa}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0xec, 0x6, "0a629a277c79bda386b3b310a59b83d7b27eb50557144ad3d82f3f7896aae2b594feba922f5e00e1ec8860597b61df3b8c1826f360295d5259b173d4c4e1bae532eade9a517645e6ba35f7ef5b122ce24af57d551f144da6c284c3cbf86744c9027e67bc1dcce76c5be151b4ba4f568b108beb50b0dcc9b27a2a353c28dba735f2cb81cbca7b0df29ed295d2a6ec6ddcb7e136976b82ece15bf7e93e6f94eb0025755811f53bd40001355c83644a5d9d3d83d1113d26442849be9f86e2e603e1ac71b87a62ac370006e271d5a7dbf0790b83e63a891e96e351b28064284f8de78565783f40b27d12"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BASIC_EMATCHES={0x1148, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xa, 0x3, 0x26e8}, {0xc41, 0xc7}}}]}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x4, 0x8, 0xa}, {0x3, 0x3}}}, @TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x35bf, 0x0, 0x6}, '\"'}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xfffd, 0x3, 0xc38}, {0x10000, 0x2, 0xffffffff, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x10d4, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0x8eb8}, {0x8, 0x80000000, 0x57b, 0x0, 0x8, 0x1, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0x4}, {0xffffffffffffffff, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0x24, 0x1, 0x0, 0x0, {{0x8, 0x0, 0x9}, "c50bbb7cf3656425a77a33923143bf32a6499b2a50081b"}}, @TCF_EM_META={0x50, 0x3, 0x0, 0x0, {{0x50, 0x4, 0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x1}, {0x1, 0x4}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7fff, 0xf, 0x1}, {0x7, 0x18, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xfd, 0x2}, {0x4, 0x6, 0x1}}}, @TCA_EM_META_RVALUE={0x1f, 0x3, [@TCF_META_TYPE_VAR="927d", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="8dcd5118bfc31cb115", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x6]}]}}, @TCF_EM_CONTAINER={0x100c, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x100}, "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"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7ff, 0x1, 0x7fff}, {0x5, 0x7fffffff, 0x7, 0x0, 0x1, 0x0, 0x2}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7, 0x8, 0xffff}, {0x4, 0x3, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_BASIC_EMATCHES={0x410, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_META={0x2c, 0x2, 0x0, 0x0, {{0xf, 0x4, 0xd}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="e51009806f3c714a", @TCF_META_TYPE_VAR="3dbe", @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x5}, {{}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xb0, 0x1, 0x0, 0x0, {{0xff}, "336677770856170faec11551a48ec9b48072eb7b19119045eb4a11c81dfa8cc834770c9c8571c24db26cbc0c64c0b53bd9d619325376a4a638882440ba168c8f6d905e70f2fe389dd13f4aeef1267c00abe102f3008323782f39a524303eb3fad0bc464135b5fca5bbc32612e284a326739dc1516798ffa6a205e92e1667df12770f58bf6b71ce1f147434c8a27c90b00b72e097112d9610071379e726320d044f274ecd"}}]}, @TCA_EMATCH_TREE_LIST={0x124, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x2, 0x800}, {0x9, 0x9, 0x2, "63836cdddcde0b2b02"}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xfff, 0x2, 0x5}, {0x5, 0x4, 0x2, "169928ff"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x0, 0x8, 0x8}, {0x0, 0x4, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xfff6}, {0x5, 0x81, 0x5, 0x4, 0xf, 0x0, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xeb, 0x3, 0x3}, {0x101, 0x8, 0x9, 0xd29}}}, @TCF_EM_META={0xac, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0xfa}, {0x4, 0x6, 0x2}}}, @TCA_EM_META_LVALUE={0xb, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR='W%', @TCF_META_TYPE_VAR="10"]}, @TCA_EM_META_LVALUE={0xa, 0x2, [@TCF_META_TYPE_VAR="6e676bdf6345"]}, @TCA_EM_META_LVALUE={0x39, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="119692c7f5b1572c0b8c", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="c691decc06748f446025", @TCF_META_TYPE_VAR="8aec8aaa02a0", @TCF_META_TYPE_VAR="9525386590881d", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x4a}, {0x3, 0x3, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xc21, 0x7}, {0xce24, 0x5}}}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="ce", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x3, 0x2}, {0x0, 0x5, 0x2}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xaf}}, @TCA_EMATCH_TREE_HDR={0x0, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8c8}}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0x3}}, @TCA_BASIC_ACT={0x98, 0x3, [@m_skbedit={0x94, 0x13, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x2, 0x10000000, 0x3, 0x101}}]}, {0x48, 0x6, "583cf49767fd9e6c543eab3debf2a932c55ef5b8cecf287e5be7520d3898b7910129f0e2d43379fc26d18bc294369f343fbdc948ffad130cd959590cc6da51e6363fd6b9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x2df0}}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000043000701fefffffffcdbdf25027c00001800458014000400070000000000000004000000000000aa080001"], 0x34}}, 0x2004c000) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000600)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x5, 0xc3, &(0x7f0000000440)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x0, 0x12, 0x0, &(0x7f00000005c0)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200, 0xfc0c0000, 0x0, 0x0, &(0x7f0000000600), &(0x7f0000000640), 0x0, 0xcfc}, 0x28) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x1}}, 0x10, 0x0}, 0x20) 11.80410132s ago: executing program 1 (id=2956): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf251000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x20008880) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32, @ANYBLOB="729ecc0e00"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="02000000050000000300000000000000000000000000000028275f9900"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x18, 0xb, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x997, 0x0, 0x0, 0x0, 0x4}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query, @generic={0x9, 0x2, 0xf, 0x55, 0x40}, @ldst={0x0, 0x3, 0x1, 0x0, 0xa, 0x50, 0x4}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0xee, &(0x7f0000000980)=""/238, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x3404c816) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000170a01010000e8ffffff0000020000030900010073797a30000000000900020073797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4048100}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)) 11.515379326s ago: executing program 1 (id=2962): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x728, 0x268, 0x268, 0x0, 0x428, 0x428, 0x658, 0x658, 0x658, 0x658, 0x658, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x160, 0x188, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xfffffffe, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x788) 11.349338468s ago: executing program 1 (id=2966): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2000c844) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) sendto$inet(r0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000002000010000000000000000000a804040000000060000000014000200fc0200000000000000000000000000011400010020010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2717, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c00000010003904000000000000000000008000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02"], 0x5c}}, 0x7000000) 11.138229221s ago: executing program 1 (id=2969): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200008c0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0x5c}}, 0x4) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x1c, r4, 0x1, 0x101, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000180)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r6) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000500)={r0, &(0x7f0000000400)='*-][-\',\x00', 0x100, &(0x7f0000000440)={@_ha_fsid={[0x8, 0xfbc]}, {0x9, 0x3, 0xc7fc, 0xf610}}, 0x4a2, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0x67}) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000540)=@assoc_value={0x0}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f00000005c0)={r10, 0x0, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000000600)={r10, 0x1, 0x20, 0x2, 0xd}, &(0x7f0000000640)=0x18) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r11, 0x215eb000) socket$inet_icmp(0x2, 0x2, 0x1) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000740)={0x8607, 0x3, 0xe, 0xa2}, 0x10) sendmsg$nl_generic(r12, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="200000001600010a0000002200000000810000000400000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x48007}, 0x8000) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000680)={0x3, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="02030003120000002cbd7040fcdbdf2503000900800000001cdc0dca6960e56de42944af05000600000000000a004e2300000007ff010000000008000000000000c38bfb3f0000800000000002000100000000000001070c0000008005000500000000000a004e23000000fffe8000000000000000000000000000aaff010000000000000100140008000000"], 0x90}, 0x1, 0x7}, 0x0) 7.872949323s ago: executing program 1 (id=2977): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000240)=0x6e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000900)={'veth0_vlan\x00', 0x0}) r5 = gettid() r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r4, @ANYBLOB="089805000750050008001300", @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private1}}, &(0x7f0000000b00)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b40)={0x0, 0x0, 0x0}, &(0x7f0000000b80)=0xc) sendmsg$unix(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)="c1635d9828657c811ac71999e1f54426d3c789a6f6b20b936011b93fb3c07465f032b44a217c109f0213a6cf292d233b8e848fe9c60b80b70e6f5f371e6f49ce0406371d31338edb8be2314ed52350443a806695755d6405b5546ef5", 0x5c}, {&(0x7f0000000300)="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", 0xfd}, {&(0x7f0000000400)="fa75b256315c8aa31894bb88a8e43f26828574d992c063d36420a63f35", 0x1d}, {&(0x7f0000000440)="69c761b99a2f65e6c7e5a13f0ae8ee7b0fa8e0b0ff4e0e8c9def96c4a78317d00df38f01b1ba2254455dff9ff8284fa9c9f5f9e5d292cec521bef8d68c7735cdd33343f0d2266263017896dbcb2b8adc4fb36b50ebe30619b138461759114f67d23ba8a95c27a1ff5f06cfa68de8612548b2268b638f91f33c132f1e43451496c224b7680870c0ad4eebf3597faee2773e113b780bbe67260b0a9feb981f2774d844ca04978045c4ac1c11c7265e4315075f55191a116e12485497ae8cfe8caff77f5734af682fef968346", 0xcb}, {&(0x7f0000000540)="31a0702d014a0d4d12663867c5b7f8afa0156fa03fbb0d7a88d8eade9ce9f061c0eef0c1ff594ce3681d032a4efb3c6858a516b43abffa0fd003d677c7756963bcee5aee574a7fa6af1df53645d85e7931bd8015e0fee132ddea178020e599cbd35c0a8d5924770f1f280a99ccf4aa8d2661480b722d7298e995d64f1cf6e3a584c85250b9348f1d2e0dc5a294b9e7e6a40691f005f30dd35e456dd30cfe4c138877e387a11b7f3cf1e01e6974c76c89dfe91b0bf4975969daa421ed2eee52c67eadd4576b2192707ecb6207fe2d1e3322791b8684d91952f4608047", 0xdc}, {&(0x7f0000000640)="d0ed4ecca23fc4c19002a8e51113bd0c9f1eed0cbd0757f12596c008909ff229", 0x20}, {&(0x7f0000000680)="689596faa0fa3491f7ac72ff0337190651679213b4c3053102da1124e522e00265fb712f0596136dc5b6024771fc03132e88fbe91425442e", 0x38}, {&(0x7f00000006c0)="e18f036fe8bbcf89eaaeb486", 0xc}, {&(0x7f0000000700)="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", 0xfd}], 0x9, &(0x7f0000000bc0)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r2]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, r8}}}], 0x60, 0x20000040}, 0x8040) 5.614322566s ago: executing program 3 (id=2996): r0 = socket(0x11, 0x800000003, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) connect$netlink(r7, &(0x7f0000000480)=@unspec, 0xc) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x48, 0x2c, 0xd3f, 0x4070bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'veth1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0x0, 0x7, "5e078c", 0x2, 0x6}) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@polexpire={0xcc, 0x1b, 0x57a500b9b82fd89, 0x0, 0x0, {{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x60}, {0x0, 0x0, 0x0, 0x1}, {}, 0xfffffffc}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xcc}}, 0x0) connect$pppl2tp(r10, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4004}}, 0x26) (async) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r12, @ANYBLOB="0100000002"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r13, &(0x7f00000001c0), 0x0}, 0x20) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x4, 0x2], 0x2) 4.496540365s ago: executing program 3 (id=3002): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x58, 0x0, 0x3}]}}, 0x0, 0x26}, 0x20) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r3, 0x12, 0x7, 0x0, &(0x7f0000000240)) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000000)=ANY=[], 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @val={@val={0x88a8, 0x3, 0x1, 0x3}, {0x8100, 0x5}}, {@canfd={0xd, {{0x1, 0x0, 0x0, 0x1}, 0x26, 0x1, 0x0, 0x0, "8335126e052893e2a35cb143a5f60bb0d202d9c0a04ee43553245a001fc35d54464a52fc17e835f1c12689f58fa9e79b52ea04eab7cac7f06ca2373c3bad5d9b"}}}}, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000080), 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x2}, 0x50) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000001100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001180)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r0, &(0x7f00000011c0)=[{{&(0x7f0000001200)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000001280)="15", 0x1}], 0x1}}], 0x1, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20f42, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x6132}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0x2a7209fb) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000012c0), 0x4) 4.090619805s ago: executing program 0 (id=3008): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) unshare(0x20020400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9febe4ed18ba60e35c340d03fbe01d582d010018000000000000000c0000000c00000005000000030000001100000c000000000000006100"], 0x0, 0x29}, 0x20) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x847b0dac5bec178f, &(0x7f00000000c0)}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f00000001c0)={0x6, 'xfrm0\x00', {0x5}, 0xaebe}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000600)={0x0, 'veth0_vlan\x00', {0x1}, 0x7}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r5, &(0x7f0000000600), &(0x7f0000000640)=@tcp, 0x1}, 0x20) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r1, 0xd7735000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x5, 0x0, &(0x7f00000015c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000002b40), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000002b80)={'dvmrp1\x00', 0x800}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000002bc0), 0x20702, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000002c00)={'syzkaller0\x00', 0xca58c30f81b6079f}) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r8, 0x891c, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000002c40), 0x2901, 0x0) close(r9) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002c80)={'syzkaller0\x00', @link_local}) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r10, &(0x7f0000000680)='T', 0x1, 0x0, &(0x7f00000006c0)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r10, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x6e, &(0x7f0000000700), 0x10) write$tun(r7, &(0x7f0000002cc0)=ANY=[], 0x16) 2.277244143s ago: executing program 2 (id=3025): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000380640fe8000000000000000000000000000bbfe800000000000007e1c0000000000aa4e224e22", @ANYRES32=0x0, @ANYBLOB="e038100090"], 0x0) 2.088773395s ago: executing program 2 (id=3026): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c00)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="c80000001000a54627bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c000000000000a000128009000100766c616e0000000090000280060001fa0b0000000c0002001c00000010000000280004800c000142addfcb2b2c3477000c00010008000000f30000000bfa0100050000000b000003080003800c00010001800000ffff00000c0001000600000001f0ffff0c00010007000000040000000c00010001000100070000001c0004800c000100ff010000060000000c000100000000000a00000008000500", @ANYRES8=r1], 0xc8}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 1.261534775s ago: executing program 0 (id=3027): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000004c0)={@random="3f0cb265933b", @remote, @val={@void, {0x8100, 0x0, 0x0, 0x7}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x24, 0x66, 0x0, 0x3, 0x11, 0x0, @empty=0x7f000000, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x2, 0x100}}}}}}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffdfffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}}, {{@in=@multicast2, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f00000003c0)={r2, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000480)=0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) 1.260935919s ago: executing program 2 (id=3028): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000240)={r2, 0x0, 0x0}, 0x10) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002340)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) (async, rerun: 32) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) (async, rerun: 32) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.235336325s ago: executing program 4 (id=3029): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r0, &(0x7f0000000040)="510003000000", 0x6) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bc85, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.160610058s ago: executing program 3 (id=3030): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r1, r0, 0x7}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) sendmsg(r2, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000100)}, {&(0x7f0000000740)="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", 0x1000}], 0x2, &(0x7f0000001780)=[{0x60, 0x84, 0x7, "9f286a28561ad9cf66b43c788faca332ed33eeec493ad987f556bebe7ddd4b7da5fe6d09f4a3831e05d3185435b6713b7f0c4a90f619b0eef5723d057217fa49630e55f97593f870dbcb1044a6a0"}, {0xb8, 0x88, 0x8, "5db7c7a859830ded908a36f94491aff67e7e9f335414a2af3507f994657077c7448447e41962902b62e26a138450b2cb42f9515cd0feb3c38fe7f99ce031cb3e7e6070dc1f4fa2baf72f1b5d805387ef2ba7fc1c4704d412c7da41da8dd7a6722d750e501fd1de94ac48cb7f76deb92f36b29f9056aef41332bd37070360401abb3f3a3452d1a1168331d6da7a251976f80c001537b12b8df8f7cc7f130461229a0d5226"}, {0x20, 0x118, 0xfffffffd, "0823630c6fb934726f4506"}, {0xb8, 0x107, 0x3, "72d140758255d7680db217355ca3d751005b23b5e73f7b3fa8d7610caa40a57054d59cfae07eaba0d00d3592e21556c6a795b40f7fe5e7efa6ca2979d8d1680fca1117500da57ca1881d5fce1012986d783c3bb46d5bff45c64939f06a31b88d3df570b0e1e4c89fc6d7d275a132122ef86e2bd3a1ee6136f341ab5bb3fda0bbcfbd1a3b096510ae83288e0fdafeae2033ab3b58ece54632ac9883fc5267b216bac11ef24b6f9a"}, {0x110, 0x10f, 0xfffffffe, "ac7ca7bd95668a087feab797f285aab2c827f34d0f3856ad8328dcce8da48cdacef1a329b43d81dd53e04384d2bea6d26164aa8bf05925e723088b0cd4d28eb2bd6e14a0006a3f174e95e140e06358b043386b214fa518e8cc7bd2f19877941eeeebc84e3cb86afb14f7b70a9c61ce8c0608e18433cbbfcb72934416b8a9a3e8f8ada2ead1f0e443f654983c7e1c6518e45438ea0e3d09809a8f2e154af8bb6d440483fc92c6db61a45425ced1154bc4b9e1b2da65f3e84a673fc48385ee43ae30efbc2b74beb976c5c7e7de388546f3b88ee2f7e7d6c9ecb18726c442475bb6806501723523e1dccdecc6a1a708a34099cbe323df8ac35b8f01"}, {0x58, 0x0, 0x6, "03ff26a5cce6e82fcd491f8b250f5e11d11ab63cd4c1e309f4c2845e75570fede9f06921eb01884daaadf42e95c521be86349009cd7f8840a11ac37be4283eec657d30cc"}], 0x358}, 0x20000080) 1.073281586s ago: executing program 0 (id=3031): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000010118020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 1.058957597s ago: executing program 3 (id=3032): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002900)={0x3, 0xc, &(0x7f00000029c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000002a40)='GPL\x00'}, 0x90) openat$nci(0xffffffffffffff9c, &(0x7f0000002a80), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000002ac0)={0x0, 0x4, &(0x7f0000002b00)={&(0x7f0000002b40)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00", @ANYRES8=r2], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000050025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="00000000010400000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000001100010000000000000000000500000a95dbd3991776aab554168cb0c1e40102e7baf73339739e7511e2ba8152a466916f6bb52216cd7d28f4804259fdcfb2dd7114f8f083c8083a92b762eda8205a78377a49dfe45e6f56809d33f1531c23b5d6e1702dfb7728ffa950cb049adf0b5a65a3c3302837dcbeeae64a30547fa4fffaf69269934cc58d23d6ae1df748eedd40bce4d56271d8624d54c7b68e00ccfc4a44b24baf490787a75b53dcbe5324bd8b92d8d8f9e8dc4a91efa5e549fcb2237d1a6a25e7a9bf7f24147d9b9e382733c1ba5f0c0236"], 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="63812bbd7000fcdbdf2503000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/2830], &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001440), 0x0, 0x10, &(0x7f0000001480), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001540)="764b9e147583ddd0569ba56a5cfd", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x3, 0x8, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00000027c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002800)={@fallback=r7, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000002840)={@cgroup=r8, r8, 0x2f, 0x18, 0x4, @void, @value, @void, @void, r9}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000028c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000002900)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, 0x12, r11, 0x2cbaf000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r11, 0x1c14b000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002880)={@ifindex, r6, 0x2b, 0x2010, 0x0, @value=r10, @void, @void, @void, r9}, 0x20) socket(0x10, 0x803, 0x0) 992.486321ms ago: executing program 4 (id=3033): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e24, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@remote, 0x4d4, 0x6c}, @in6=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xeffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="a00000002100010000000000feffffff7f00000100000000000000000000000000000000000000000000000000000001fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc0200000020500300000000000000007688f27e0000000000040000dd4231fd00000000000000000000ffffffffffffffffffff0000000000000000000000006c01000004"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 864.073327ms ago: executing program 0 (id=3034): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="06000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000e5ffffff0000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000690200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002480)={r1, 0x20, &(0x7f0000002440)={0x0, 0x0, 0x0, &(0x7f00000023c0)=""/105, 0x69}}, 0x10) 816.845803ms ago: executing program 2 (id=3035): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000180000000000cc3ad63167084bc27756b51eb9000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000200"/28], 0x50) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000f10400"/20, @ANYRES32=r3, @ANYBLOB="0a000600040c01001c001280000001006d6163766c616e000000028000000400aaaaaaaaaabb000000000700050000000000010000000000000004000000000000000000000007000600000000000300000000000000070010000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000980)={'batadv0\x00', 0x0}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r7) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="f5af25bd7000000000000e20000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r10, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0xd27, 0x78bd25, 0x2, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x8c90}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYRESOCT=r13, @ANYRES32=0x0, @ANYBLOB="000728a7c446c66458f1508add333fdf430ea1efdfbb0caa817a581177f22b812387188a399c965b126b9b", @ANYRES32=r11, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x2400c081}, 0x40000) (async) socket(0x10, 0x3, 0x0) (async) r14 = socket$inet6_udp(0xa, 0x2, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r16, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e00fcff400010"], 0x40}}, 0x0) sendmsg$nl_route(r15, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010166379b11c61bab500000000000000", @ANYRES32=r16, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e000000000010000000"], 0x40}}, 0x0) 816.1321ms ago: executing program 4 (id=3036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x44005) 696.246594ms ago: executing program 4 (id=3037): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x5, 0x0, &(0x7f00000015c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000002b40), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002b80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000002bc0), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000002c00)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000002c40), 0x2901, 0x0) close(r3) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002c80)={'syzkaller0\x00', @link_local}) write$tun(r2, &(0x7f0000002cc0)=ANY=[], 0x16) write$cgroup_subtree(r1, &(0x7f0000002d00)=ANY=[], 0x36) 694.934379ms ago: executing program 0 (id=3038): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c00)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="c80000001000a54627bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c000000000000a000128009000100766c616e0000000090000280060001110c0000000c0002001c00000010000000280004800c000142addfcb2b2c3477000c00010008000000f30000000bfa0100050000000b000003080003800c00010001800000ffff00000c0001000600000001f0ffff0c00010007000000040000000c00010001000100070000001c0004800c000100ff010000060000000c000100000000000a00000008000500", @ANYRES8=r1], 0xc8}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 522.206406ms ago: executing program 4 (id=3039): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = socket(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x122, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x122, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x4001}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x4001}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) (async) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f00000005c0)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000640)=ANY=[], 0x32600) (async) write$cgroup_subtree(r6, &(0x7f0000000640)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000680)={0x0, 0x1c, &(0x7f00000006c0)=[@in6={0xa, 0x4, 0x0, @private2}]}, &(0x7f0000000700)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x6d, &(0x7f0000000740)={0x0, 0xffff}, &(0x7f0000000780)=0x18) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x6d, &(0x7f0000000740)={0x0, 0xffff}, &(0x7f0000000780)=0x18) r8 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r8, &(0x7f00000003c0)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r8, 0x5) write$tun(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000a00001c"], 0x4a) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@getchain={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 483.931758ms ago: executing program 0 (id=3040): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x20008880) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r6], 0xc4}}, 0x0) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e80)=@o_path={&(0x7f0000000e40)='./file0\x00', 0x0, 0x10}, 0x18) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32, @ANYBLOB="729ecc0e00"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="02000000050000000300000000000000000000000000000028275f9900000000be8fbe710599"], 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000001080)={{r4, &(0x7f0000000f40)='-{%\x00', 0x20000, &(0x7f0000000f80)={@_ha_fsid={[0x3054, 0x8001]}, {0x3, 0x6, 0xda}}, 0x4, &(0x7f0000000fc0), &(0x7f0000001000)=0x9}, {[0x8000, 0x74, 0xd561, 0xc]}, 0x9ee, 0x3, &(0x7f0000001040)=""/3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x18, 0xb, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x997, 0x0, 0x0, 0x0, 0x4}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query, @generic={0x9, 0x2, 0xf, 0x55, 0x40}, @ldst={0x0, 0x3, 0x1, 0x0, 0xa, 0x50, 0x4}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0xee, &(0x7f0000000980)=""/238, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, r9, r10], 0x0, 0x10, 0x1}, 0x94) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x3404c816) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000170a01010000e8ffffff0000020000030900010073797a30000000000900020073797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4048100}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)) 428.702199ms ago: executing program 2 (id=3041): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'sit0\x00'}) 316.886421ms ago: executing program 3 (id=3042): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000380640fe8000000000000000000000000000bbfe8000000000000000400000000000aa4e224e22", @ANYRES32=0x0, @ANYBLOB="e038100090"], 0x0) 270.411404ms ago: executing program 4 (id=3043): r0 = socket(0x23, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delchain={0x17, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYBLOB="341c79db3f1e5fe4d37e89d0f0b427940134e1ff3d088d1e841678a03b22d4f49878ca1b20eef7f9251a64545d6d8e929ad291d4f7b734779deefd7fce121b6aa792fdd8b4bffeeacfdd227960dc", @ANYRES32=r3, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00"], 0x3c}, 0x1, 0x0, 0x0, 0x281c1a58e22bf257}, 0x804) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000900), &(0x7f0000000940), 0x1000000}, 0x20) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000980)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a00)='cpuacct.usage_all\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10001, '\x00', r1, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c80)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000cc0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x13, 0x1f, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xe}, @tail_call, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x92}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @jmp={0x5, 0x1, 0xd, 0x5, 0x8, 0x4, 0x10}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x10}, @jmp={0x5, 0x1, 0x2, 0x0, 0x0, 0x100, 0xfffffffffffffffc}]}, &(0x7f0000000b40)='GPL\x00', 0x1ff, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000bc0)={0x5, 0x10, 0x0, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000d00)=[r7, r2, r8], &(0x7f0000000d40), 0x10, 0xe}, 0x94) r9 = socket$igmp(0x2, 0x3, 0x2) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r10) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="2c17000000000000040108071000000000027f0c000600000000000000c20432cf649a0001000001000c95f3b110c7530cc2638a646aa9aeff7231d27817479258c44c83a16b59025f05ad0644c989f6833e4e19ddc51980c532a25006ac037643dfec4ce1d9b365ba57222bedbb7b5ad37ed8f308110323e387b380e6ba96f7f26b8782e7f77ba79fbccdd9eed06b5bd4fa976fff5584f4f342e415068855e0aa4ff6216c9d9a357b0625f53c2b43c41d3e6a40c7a0fd6022e2162370880d7a"], 0xc0) sendmsg$nl_route(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="5000000010000305000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0001000000000000000000050009000000000008000500", @ANYRES32=r12], 0x50}}, 0x0) bind$can_j1939(r0, &(0x7f00000006c0)={0x1d, r12, 0x2, {0x0, 0xf0, 0x2}, 0x1}, 0x18) getsockname$packet(r10, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ffffffff000000070000000000000000da49030095000000007ad7c38e02dd95832ab530613647f75059f143d89bacb1"], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x108}, 0x94) sendmsg$inet(r9, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 16.225257ms ago: executing program 2 (id=3044): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="23000000d584000002000000ffff000005"], 0x48) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000540)={'netdevsim0\x00', &(0x7f0000000580)=@ethtool_rxfh={0x2a, 0x8, 0x0, 0x9, 0x4, "226ac5", 0x5}}) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000480)={&(0x7f00000004c0), 0x0, 0x0, 0x0, 0x2, r1}, 0x38) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="5010000030810000240012800e00010069703665727370616e00000010000280050016004200000004001200"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r6, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), r5) syz_emit_ethernet(0x1f, &(0x7f0000000500)={@local, @link_local={0x3}, @void, {@llc_tr={0x11, {@snap={0x0, 0xab, 'I', "282896", 0xd, "f69b32a2a5cb407308"}}}}}, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r7, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}}, 0x4) ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f00000004c0)={'dvmrp1\x00', {0x2, 0x0, @initdev}}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0x12, 0x0, 0x0) close(r5) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0xfffffffffffffca3, {0x0, 0x0, 0x0, 0xff80}}]}]}}}}}}}, 0x0) 0s ago: executing program 3 (id=3045): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000710435000000000095000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket(0x10, 0x80002, 0x0) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r3) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000079c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f0000007a00)={0x0, 0x0, &(0x7f0000007a40)={&(0x7f0000007a80)={0x24, r4, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) (async) sendmmsg$alg(r1, &(0x7f0000000240)=[{0x3, 0x0, &(0x7f0000000300), 0x6, &(0x7f0000000340), 0xc}], 0x492492492492856, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) (async) r7 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000480)=0x60, 0x80800) sendmsg$nl_route_sched(r1, &(0x7f0000007980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000007940)={&(0x7f00000004c0)=@deltfilter={0x744c, 0x2d, 0x800, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x4, 0x7}, {0x0, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xf7, 0x5}}, @TCA_RATE={0x6, 0x5, {0x81, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0xee8}, @filter_kind_options=@f_matchall={{0xd}, {0x1ae0, 0x2, [@TCA_MATCHALL_ACT={0x15c4, 0x2, [@m_ife={0x1a0, 0x1c, 0x0, 0x0, {{0x8}, {0x98, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_METALST={0x34, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xffff7fff}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_PRIO={0x8}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x2}, @IFE_META_PRIO={0x8, 0x3, @val=0xe}]}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}, @IFE_META_PRIO={0x8, 0x3, @val=0x1}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xf48, 0x6, 0x9}}}]}, {0xe1, 0x6, "5113c4ee64f6554608dc35b9358a60a0dfd635f4adf6dea0bca07db29dfe90fb705b88fc425998e696c6920ca507258e4a71f39fd4c7a14a80a755fadc505eac73feaadb31e0870d39e6b4645d5018b30cab18634a8f74b3caff4a4becc724607f33c0c425108073e7f3bd5eb2cb120bac6e821d1847a10e4fbd80937eb2b5835b26e625aacb2673483a8e12bcbd220a85260838367002a2d89310914d01437643b4e17d594bb7f52cf5a17324057032d5858032454740200ba5e985f5172dbc008bf503259c45940e9dfad2a10c6def35f1c1e869bef159dd7c9cf608"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x8c, 0x2, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x33, 0x6, "e094924ed124553cb856cd15bc4e218ad09556d56f1306dade1dc8cdea7619e06f28dd58216153cda9923f8ed9828d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x70, 0x15, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "158c6faff78cefde9c16f4ef7cb554d6"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}]}, {0x29, 0x6, "8b8b8df0463e81eabd1923c1316eb280065208647ca2926efc4c048e825c93b72bb711da80"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_bpf={0x154, 0x4, 0x0, 0x0, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0xfff, 0x4a, 0x7, 0x8}, {0x0, 0x4, 0x4}, {0x5, 0xd, 0xbb, 0x8}, {0x8, 0x0, 0xb, 0x8}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0xfff9, 0x7, 0x2, 0x4}, {0x3c4, 0x0, 0xe, 0x3}, {0x3, 0x7, 0x0, 0x94b2}, {0x800, 0xae, 0xff, 0x1}, {0x400, 0x3, 0xc3, 0x7fffffff}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x6, 0xf2, 0x7f, 0xff}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xff, 0x3, 0x4, 0x8, 0x2}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x7a, 0x6, "1dbbea29418934ef63492cdf60b23b5c2f4a57faae079394c0acb49f7be0cd47c6f03810efa4a091b6e522e303856355790c90378558953c394790c7bb82ae562255a43f9d752d383cd8a469414f6087028da0581d5ba0da011ba7373874d3b437af4ad8f71933b14c13d93d915d6166d26549d41145"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0xa4, 0x1f, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffff7, 0xa, 0x8, 0x0, 0x3}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x575}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x97, 0x59, 0xffffffffcffffff3, 0xa5, 0x4}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x471}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}]}, {0x18, 0x6, "13320a3891b67ddcd6dbf41140ef7318099ec67c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x112c, 0x15, 0x0, 0x0, {{0xb}, {0x10d8, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x8, 0x4, 0x5, 0x9191, {0x9, 0x2, 0x3, 0x6, 0x5, 0x6}, {0x4, 0x0, 0x1, 0x7, 0x3ff, 0x9}, 0x2, 0x8, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x9e3, 0x3, 0xe, 0x3, 0x1, 0x3d501b30, 0x100, 0x1, 0x6, 0x1ff, 0x2, 0x10, 0x0, 0x1, 0x6, 0x6c54, 0x4, 0x7f, 0x3, 0xfffffeff, 0x6, 0x5, 0xf, 0x7fffffff, 0x1, 0xb, 0x8000, 0x80000000, 0x4, 0x6, 0xffff6798, 0x7, 0x0, 0x80000000, 0x80000001, 0x3, 0x2, 0xa8, 0x9, 0x0, 0xfffffffd, 0x800, 0x4, 0x7, 0x26, 0x5, 0x8, 0x9, 0x2, 0x4, 0xfff, 0xcc, 0x7, 0x8, 0x2, 0x8, 0x0, 0xfffffffb, 0x5, 0x1, 0x8, 0x9, 0x6909, 0x5, 0x3, 0x7, 0x7fffffff, 0x90, 0x0, 0x19, 0x63c4, 0xfffffffb, 0x4, 0x0, 0x3, 0x5, 0x1ff, 0x1a, 0x7, 0x3793, 0x10, 0x8, 0x0, 0x4, 0x2, 0x4, 0x97, 0x6, 0xd, 0x5, 0x77, 0x8, 0x8, 0x3ed, 0x0, 0x81, 0xc, 0x40, 0xc40, 0x1, 0xed, 0x9, 0x9, 0x3ff, 0x2, 0x1000, 0x400, 0xfffffffa, 0xea, 0x0, 0x6, 0x2, 0x7, 0x3, 0x9, 0x9, 0xe35, 0x0, 0x3ff, 0xff, 0x0, 0x2, 0x6, 0x9, 0x40eb33ed, 0x400, 0x21, 0x6, 0x401, 0x8, 0xf6d6, 0x8, 0x0, 0x0, 0x8, 0x30d, 0x8000, 0x7, 0x8, 0xffff5cca, 0x6, 0xfffff800, 0x2d9b, 0x5, 0xa1, 0xe38, 0x2, 0x0, 0x1, 0x7f, 0x8, 0xff, 0x100, 0x3, 0x0, 0xffff, 0xfffffff7, 0x7, 0x8, 0x9, 0x5, 0xfffffffe, 0x200, 0x7, 0x1, 0x3, 0x8, 0x7, 0x0, 0x7f, 0x1ff, 0x2, 0x7d5, 0x100, 0xa, 0xffffd09b, 0x3, 0x6, 0x8, 0x4, 0x0, 0x4, 0x7b8, 0x35da, 0x1, 0x5, 0x2, 0x928cef07, 0x1, 0x1, 0x3, 0x5, 0x6, 0x9, 0x6, 0x5, 0xfffffeff, 0x514d3d4c, 0x1, 0x7, 0x2, 0x7fff, 0x3ff, 0xfffffffc, 0xffffff7d, 0x0, 0x3, 0x101, 0x8c1, 0xffff, 0x8, 0x4, 0x6d7, 0x4, 0x7, 0x2, 0x4, 0x2, 0x4, 0x8, 0x1, 0x8001, 0x0, 0x200, 0x20000000, 0x101, 0x9, 0xb709, 0x2, 0x5, 0x2, 0x100, 0x401, 0xa, 0xa0000, 0xcd0, 0x5, 0x4, 0x1, 0x1, 0x4, 0xce1, 0x3ff, 0x1, 0x3, 0x10, 0x80000001, 0x401, 0x2, 0x6, 0x6, 0x1, 0x9, 0x80, 0x3, 0x10001]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x85}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x30000, 0x5, 0x7cd, 0x9, 0x335fb61, 0x8, 0xff, 0x2, 0x7, 0x2, 0x7, 0xffffffff, 0x10, 0x8, 0x9, 0x0, 0x3, 0x40, 0x6ff, 0x0, 0x8, 0x3, 0x0, 0x5, 0x2, 0x3ff, 0x1, 0x10, 0x73, 0x0, 0x101, 0x4, 0xf3, 0x8, 0x3, 0x1, 0x401, 0x7f, 0xfffffff9, 0x81, 0x1, 0xd50, 0x7ff, 0x4, 0xfffffffc, 0x1ff, 0x10000, 0xc7, 0x2, 0x9, 0x723e, 0x0, 0x5, 0x3, 0xa15, 0x11736d42, 0xfff, 0x5, 0x8000, 0xf3, 0x2b8230a7, 0x7, 0x5, 0x4, 0x8, 0x3, 0x9, 0x5, 0x1, 0x9, 0x6, 0xac99, 0x9, 0x2, 0x747, 0x80000000, 0x8, 0x0, 0x5, 0x8, 0x5, 0x2, 0xce37, 0x2, 0xfff, 0x5, 0xc49, 0x3, 0x4, 0x4, 0x96, 0xfffeffff, 0x6, 0x4, 0x5, 0x6dd, 0x9, 0x1ff, 0xfffffff9, 0x5, 0x2, 0x7, 0x0, 0x3, 0xf, 0x9, 0x4, 0x2ad, 0x4, 0x8, 0x800, 0xd, 0xd59d, 0x0, 0x2, 0x81, 0xc, 0x67, 0x2, 0x7fff, 0x200, 0xffff, 0x200, 0x3ff, 0x5, 0x10, 0x2, 0x100, 0x3, 0x1, 0x1, 0x8000, 0xfffff8e3, 0x6, 0x5, 0xffffffff, 0x6, 0x1e55, 0x5, 0x3, 0x2, 0xffffffff, 0xffff, 0x1, 0x4, 0x7, 0x5, 0x1000, 0x5, 0x1, 0x0, 0x0, 0x479b, 0x3d9, 0x3, 0x0, 0xfffffffa, 0xe64, 0x10, 0xf2b3, 0x6, 0x9, 0xf, 0x7, 0x0, 0x15, 0x185d, 0x90, 0xffffffff, 0xa2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x638eeed8, 0xfffeffff, 0x6, 0x3, 0x10001, 0x1, 0x0, 0x7f, 0x0, 0xfff, 0x2, 0xa, 0x3, 0x5, 0x0, 0x6, 0x8, 0xa, 0x2, 0x0, 0x200, 0x5, 0x1, 0x7, 0x2, 0x5, 0xc, 0x6, 0x2, 0xdfb7, 0x8, 0x7, 0x1a4, 0xf, 0xec0d, 0x2, 0x45, 0x3, 0xfd5, 0x2, 0xf05, 0x400, 0x9, 0x1, 0x401, 0x1, 0x400, 0x7, 0x6, 0x4, 0x2, 0x4, 0x400, 0x8, 0x9, 0x1, 0x9, 0x4, 0x8, 0x3, 0x9, 0x6, 0x8, 0x6fb0, 0x3, 0x81, 0x0, 0x7abcd494, 0x400, 0x1000, 0x9, 0x9, 0x5, 0xef, 0xffffffff, 0x3, 0xffffff87, 0x4, 0x16627cab, 0xd, 0x3]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x5f, 0xffffff00, 0xfffffff8, 0x5e, 0x3, 0x0, 0x1, 0x9, 0x0, 0x0, 0x32, 0x4, 0xfd0b6b2, 0x2, 0x5, 0x13f, 0xd, 0x2, 0x5, 0x8, 0x7ff, 0x401, 0x1ff, 0x1, 0x200, 0x8, 0xffff, 0x0, 0x60, 0x0, 0x6, 0x8000, 0x1000, 0xfae, 0x6, 0x54, 0xa, 0xffffffff, 0x10, 0xa, 0x1000, 0xc2, 0xff, 0x6, 0x4, 0x8, 0xccd8, 0x800, 0x80000001, 0x1, 0x0, 0x9, 0x200, 0x1, 0x3, 0x9a2d, 0x1, 0xffff, 0xeb, 0xfffffffe, 0xdaa, 0x7, 0x1, 0x2, 0x200, 0x9, 0x6, 0x6, 0x1000, 0x7b5e, 0x5, 0x5, 0x4, 0x200, 0x1, 0x10, 0x3, 0xc38, 0x9, 0x9, 0x2, 0x9, 0x9, 0x7, 0x3, 0x3, 0x9, 0x4, 0x7, 0xfd61, 0x0, 0x7, 0xfffffffc, 0x3, 0x43cc, 0x441, 0x7fffffff, 0x5b42, 0x8, 0x7, 0x4dc2, 0x4, 0x0, 0xd, 0x2, 0xa, 0x7, 0x8, 0x9, 0xfffffff2, 0x31, 0x800, 0x9, 0x9, 0x9, 0x6, 0x6, 0x8, 0x2, 0xc, 0x10, 0x72, 0xfa79, 0xfffffc01, 0x289f, 0x4, 0xc000000, 0x7ff, 0x6, 0xec5d, 0x0, 0x2, 0x6, 0x0, 0x8, 0x3ff, 0x8, 0x3, 0x3, 0x5, 0x9, 0x7, 0x1, 0x9, 0x9c, 0x8, 0xa, 0x2, 0x4, 0x1, 0x3, 0x5, 0x9d, 0x5, 0x5, 0x7, 0x7, 0x3, 0x4, 0x0, 0xffffff4a, 0x401, 0x4, 0x8, 0x100, 0x400, 0x5, 0x9, 0x8b07, 0x7, 0x1, 0x1000, 0x6, 0xb8, 0x8, 0xc, 0xfffeffff, 0x3, 0x0, 0x4, 0x5, 0x4, 0x2, 0x8, 0x480, 0x9, 0x200, 0x17c4, 0x10000, 0xf, 0x8, 0x4, 0x67b, 0x101, 0x1, 0x5, 0x6, 0x7fff, 0x200, 0x2, 0x1, 0x7, 0x3, 0xfffffff8, 0x3, 0x0, 0x3ff, 0x9, 0x1ff, 0x4, 0x101, 0x879, 0x8000, 0x6, 0x10000, 0x4351, 0x4, 0x6, 0xfffffffb, 0x0, 0x3, 0x0, 0x3da, 0x8, 0x8001, 0x400, 0x6, 0x100, 0x101, 0xd21, 0x865, 0x0, 0x5, 0x5, 0xb, 0x3, 0x0, 0x1, 0xffffffff, 0x8, 0xfffffff3, 0x0, 0x6c5, 0x7, 0xf, 0x6, 0x0, 0x5, 0x8, 0x5, 0x1, 0x6, 0x60, 0x5, 0x1400]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0x2, 0x0, 0x7ff, {0x6, 0x0, 0x652, 0x1, 0x0, 0x8}, {0x9, 0x1, 0xfff9, 0x2, 0x36d2, 0x100}, 0xffffffff, 0x2, 0xf05}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x81}, @TCA_POLICE_RATE={0x404, 0x2, [0xa7e, 0xffffff3f, 0xa6b, 0x101, 0x7, 0x4421, 0x8, 0xc70, 0x2, 0xa7, 0x4, 0x4, 0xa, 0x5, 0xb, 0x9, 0xbc, 0x1, 0xf, 0x5, 0x605d, 0x6, 0x2, 0x3, 0xffffffff, 0x757d, 0x800, 0x7, 0x80000000, 0x0, 0x6, 0x6, 0x2, 0x0, 0xc, 0x8, 0x100, 0x2b, 0x1c0, 0xff, 0xd, 0x1ff, 0x1000000, 0x9, 0x7, 0x8, 0x3, 0x80000000, 0x0, 0x1, 0x27ac, 0xfffffffb, 0x3, 0xb5, 0x5169, 0x8, 0x1, 0x1, 0x3, 0x7f, 0x3, 0x5, 0x9, 0x7, 0x100, 0x4ac2, 0x7b3, 0x8, 0x43e, 0x6ed, 0x7, 0x32, 0x7, 0x800, 0x9, 0x9, 0x0, 0x80, 0x1, 0x7, 0x3, 0x6, 0x9, 0x2, 0x5, 0xfffffeff, 0x7, 0x9, 0x401, 0xa, 0x2, 0x8, 0x6, 0x0, 0x7, 0x96, 0x8, 0x8, 0xfa2, 0x3f, 0x9, 0x8089, 0x2, 0x0, 0xf5, 0x6, 0x0, 0x2, 0x8, 0x2000000, 0xa6, 0x67148138, 0x5, 0x7, 0x3, 0x6, 0x4, 0x0, 0x4, 0x1, 0x2, 0x4, 0x3, 0x8, 0xfffffff8, 0x1, 0x9, 0x200, 0x10000000, 0xf, 0x8, 0xc, 0x6, 0x7f, 0x7, 0x3568, 0x6, 0x6, 0x7, 0x800, 0x4, 0x7fffffff, 0x5, 0x3, 0x9, 0x3, 0x1, 0x1, 0x10, 0x5, 0x2, 0x8, 0x2c2, 0x7, 0x81, 0x164, 0x8, 0x8, 0xf93, 0x3, 0x8, 0x40, 0x8, 0x9, 0x2, 0x5, 0x8, 0x2, 0xbe0f, 0x7f, 0x4, 0x4, 0x0, 0x7, 0x1, 0x2, 0x7fff, 0x101, 0x8000, 0xd, 0x6, 0x9, 0x8, 0x3ff, 0x9, 0x1, 0x10, 0x4, 0x3, 0x4, 0x2, 0x1, 0x7, 0x1, 0xe, 0x9, 0x3, 0x9, 0x2, 0x50000000, 0x6, 0x1, 0x5, 0x5, 0x0, 0x3, 0x9c, 0x7, 0x1, 0xd4, 0x7, 0x80, 0xfffffffd, 0x9, 0x2, 0x9, 0x10, 0xfffffc01, 0x5, 0x9, 0x6a6, 0xd, 0x5, 0x4, 0x0, 0x7ff, 0x0, 0x8, 0x2, 0x613, 0x8001, 0x200, 0xb, 0x3, 0x1, 0x4, 0x80000000, 0x7fff, 0x200, 0xe, 0xff, 0x8, 0x1, 0x3, 0xa092, 0x10, 0x3ff, 0x3, 0x4, 0x3948, 0x9, 0xad, 0xab, 0xe, 0x6, 0x9]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]]}, {0x2c, 0x6, "b2fa14b582f2515e87305dd56596ab2ced78f1a19e0f78753109f577130f6fad908a124332d3176d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_ACT={0x88, 0x2, [@m_csum={0x84, 0x1a, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x6, 0x0, 0xf}, 0x52}}]}, {0x3a, 0x6, "ace5ac3050743ef390cfbf5a0863e1845285753050281a1690a4cec79527b106f699a77d114301b52c30e68865f621c2ede74c1bc6fa"}, {0xc, 0x7, {0x1}}, {0xc}}}]}, @TCA_MATCHALL_ACT={0x480, 0x2, [@m_connmark={0x1f4, 0xa, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x1, 0x1000, 0x8001}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x687f, 0x0, 0x1, 0x5300000, 0x9}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x8001, 0x0, 0x8000, 0x7}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffc, 0x3, 0x10000000, 0x80000000, 0x4}, 0xe9b}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x6, 0x4, 0x8}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x6, 0x3ff, 0x8}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x20000000, 0x9, 0x10001}, 0x2}}]}, {0xfe, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0xb4, 0x14, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x2, 0x8, 0x2, 0x9}, 0x3}}]}, {0x69, 0x6, "b2795dcda5aded586764ab58c9d092e37d74119cbf9e3d25fe1bdb301edee5ae7f690dbc1c11372e89ba67c405eea17988d1d06b20ca705c85f4651812ff192e3778e893d9b5e4cb08b7ce6b773e87dd555add563c08e9d2f8b11c4b70dac7e1d63bf5e253"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x9c, 0x0, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0xffff}}]}, {0x65, 0x6, "8a600b48761b220ed3c9a4d6085f1086f3002857f97fa49fcc6d9eedbc759c0c99156485b32352027c46083a12316603f8447e6dad5f28279dfe8a25fcf20c8c6ea8290b8586e807822f0bbef8065babfad46df476f59dde143dc334d3ab3399cb"}, {0xc}, {0xc, 0x8, {0x1, 0xb3f212af6868353}}}}, @m_simple={0x138, 0x8, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '\xdb\x00'}, @TCA_DEF_DATA={0xf, 0x3, 'syzkaller1\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1000, 0x5, 0x0, 0x8000000, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0xa, 0x6, 0x20000000, 0x0, 0x8000}}]}, {0xc4, 0x6, "5feb783635e3b2be25217b42dd1bb501a6d496fb7c6d9e96c44c1984610d4d8a5e6bb61c55e0b7cc457182fe69468687e892d2c2b8b8fcaa1afeb66175b39dda2247649f2c19c15c3e7c54084032c6469d89ddddb13617e6a5bbd6e2d79e515788ce176aa6d76a0bb5210386520d05f80853aa5304192522cf6f4b8220f940103ed3bcd27120dfa4906a4c997e22a2b1725ce0bc1cd6c97187c562c2943674df05f41ce182c0f89ec27fa1c8142b6948c7474b89246cd61ca986ff057a597298"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x4}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xffe9}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_basic={{0xa}, {0x438, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x80}}]}, @TCA_BASIC_POLICE={0x428, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x8, 0x1, 0x7, 0x7ff, 0x8, 0x2, 0x800, 0x4, 0x80000001, 0x4, 0x6, 0x1, 0x2, 0xffff7fff, 0x80000000, 0x6, 0x47, 0x496, 0xa1, 0x6, 0x9, 0x2, 0x4, 0xfffffffc, 0x7f, 0x5, 0x4, 0xa18, 0x3, 0x0, 0x400, 0x5d, 0x4, 0x4, 0xa, 0x6, 0x9, 0x401, 0x6, 0x9, 0x20000000, 0xb31, 0x3ff, 0x2, 0x1571, 0x80000001, 0x4, 0x4, 0x5, 0xe2, 0x40, 0x5, 0x3, 0x7, 0x8, 0xe7f, 0x6, 0x7, 0x2448, 0x2, 0x1, 0xe, 0x6, 0x7, 0xd, 0x9, 0x31, 0x401, 0x800, 0xe8, 0x0, 0x38e5, 0xfe75, 0x5, 0x101, 0x0, 0x4, 0x1000, 0xaf92395, 0x9, 0x9, 0x6, 0x3, 0xcc0, 0xc545, 0xfffeffff, 0x1, 0x40, 0x9, 0x5, 0xb04, 0x2, 0x9, 0x10001, 0x1200, 0xe8, 0xa, 0x0, 0x0, 0x358, 0x12b3, 0x6, 0x1, 0x1000, 0xc, 0x5, 0x5, 0xe, 0x5, 0x4, 0x4, 0x2, 0xff, 0x3, 0x7, 0x7, 0x86e, 0x6, 0xcf6, 0x1, 0x1, 0x6, 0x7fffffff, 0x3, 0x1, 0x5, 0x7, 0x7ff, 0x401, 0xfffffff7, 0xf4e2, 0x2, 0x2, 0x1ff, 0x8, 0x3, 0x1, 0x2, 0x10, 0x2f24, 0x2, 0x0, 0x65e, 0x80000000, 0xe8, 0x893, 0xe60000, 0xfff, 0x10000, 0xffff, 0xba64, 0x4b, 0x0, 0x200, 0x6d0, 0x10000, 0x4, 0x2, 0x9, 0x4, 0x1877, 0x0, 0x40, 0xaed, 0x3, 0x9, 0x9bef, 0x0, 0x3, 0x7, 0xab7, 0x7, 0x800, 0x6, 0x3, 0x2, 0x3, 0x8, 0x101, 0x400, 0x8, 0x0, 0x8, 0x2, 0x4, 0x5, 0x442d, 0xd, 0x81, 0xef7, 0x800, 0xee1, 0xe0, 0x8, 0x7, 0x1, 0x1, 0x7ff, 0x0, 0x2, 0x4d71fd09, 0x9, 0x3, 0xfffffffb, 0x6, 0x8, 0x8, 0x9, 0x1, 0x1, 0x7, 0x7, 0x1, 0x1, 0xffff, 0xb258, 0x2, 0x10, 0x9325, 0x3fc, 0x401, 0x6, 0x65, 0x4, 0xfffffd0b, 0x800, 0x36d9, 0x4, 0x17, 0x9, 0x3, 0x2, 0xe26, 0x4, 0x2, 0x6, 0x8, 0x7, 0x7fff, 0x7, 0xcb3, 0xab6, 0x2fb1, 0x1, 0x9, 0xfffffffa, 0x5e5f, 0x1, 0x2, 0x2, 0x1b, 0x0, 0x101, 0xf, 0x7ff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4f}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffd}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0x70, 0x2, [@TCA_FW_POLICE={0x6c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x200}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x3, 0x7fff, 0xff, 0x6, {0x7, 0x1, 0x9, 0x5, 0xfff9, 0xff}, {0x9d, 0x0, 0xfff, 0x5, 0x100, 0x3}, 0x6, 0x5, 0x3ff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7da1451}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x56}}, @filter_kind_options=@f_basic={{0xa}, {0x5440, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0x9}}, @TCA_BASIC_ACT={0x4f5c, 0x3, [@m_mpls={0xe4, 0xb, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_LABEL={0x8, 0x5, 0x53fd}, @TCA_MPLS_PROTO={0x6, 0x4, 0xf8}]}, {0x9e, 0x6, "4e0b13193b6d6055a6f1b03ce95a084b10e93459981d130b38441631ed8ff06a8cdd7490b2e7592000351b5cbf96aa651b69e10e1f22812a5e0e13fc354435e52f6e4ef85f38267bc766357a3627292f8a6a14779a42ff91418cff20d93141d1fd38ef8ff810d129d4af44b3913c475680aea9c3e87833dc9043f8abad4f60f4a813817d55891dc7928081c46eed6a7de1b4daff6a02773e3f37"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_csum={0x1e8, 0x1e, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x257, 0x4, 0xac1, 0x10001}, 0x68}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6a3, 0x7, 0x0, 0x101}, 0x5d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0xffffffff, 0x8, 0x1, 0x2cf}, 0x3b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x400, 0x8, 0x0, 0x7, 0x80000000}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x800, 0x80000001, 0x7, 0xa, 0x5}, 0x63}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x101, 0x6, 0xff, 0x10000}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x3, 0x2, 0x2}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x1ff, 0x6, 0x1, 0xfffffff9}, 0x20}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xb4d, 0x6, 0x2, 0x7}, 0x2f}}]}, {0xbf, 0x6, "b754e32db33fecc734725435fe5ab97cf52b24cc1853111859826e4c56df3f728cf4e9acef72c839b045c8376aea2bd4ed2b9b744d832f6114ccfb4b45a273489b2b0c4f76db7c0768d126ccd0f3c58f4b343a7dd5b82c6dc6d12bfba6dd83a5450c7402871a1db74af16fc6703e8ee2cb1de0cc373bf6e4889ce0fcebe9675bb6b3de89c8107ecb2405ed7c77025425edf33058dc8fc5c695e7e6f9daaa880784a0e9cd94af9acc3f13f84337bf6021e5cbb59ff10cf6a9658805"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x1108, 0xf, 0x0, 0x0, {{0x8}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x6, 0x6, 0x200, 0x9}}}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_PRIO={0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x101}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x500}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1f3, 0x7, 0x1, 0x8, 0x9}}}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x2}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xff}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_SMAC={0xa, 0x4, @random="b154662f3f6a"}, @TCA_IFE_DMAC={0xa, 0x3, @random="24e16e60cd13"}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x94, 0x8000, 0x6, 0x7, 0x1}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa1a, 0x5a65, 0x5, 0x3, 0x400}, 0x1}}]}, {0x1004, 0x6, "f44f479563601ee013ea86e0453f54bfb2fedd33b141978b2069dfc811630c27c43037d5a45c58804fc495a2c7f7e4cf95f6662371eca027d3937cf81e18a19da1cd0b506fbbce32e76f891bbe17551bc44ac47e5d1722b19f282aa4f2678fa3d1beec259f2060ac234da3a240c85387f1d9a17ee09e620f9c0bdcae6cba2f04ddab84c40dc637ef1109888f0d3def89e503aa691c5b7f52ea512fae31c96077e3b16379e8688654f686bdb771cbbef206121fc62ba00b0ccfff47c59d8426679d1d7467b5d3f61283f5043ad3f5c4416a57dd0e322ca4bea23b0de581981f0829b1982e6f8163da69b5814320391ec47dca0981a314dce6d9d8eb3a285bde1e84d7c4006c20d7a37cc920403f5f98e7d95476cb78488462bc9acc8fcf1b25d8b5457767371f099158ce9c5140669d07b05c5fae3294057fbd98c3777d5d8e2e2d55b4a69e09d819d91f0d94f59dae429f93837a17b994bd6d0305d7d7ccb353ec1f7f821a5c7a5e054cfc16f0fb584cadf1716418234de1287634d5dd3397fb690d7c34c2e3c4a8a1a330dfb8e8a2a40922c5dc57ffc4ee99d4c69eda0f4682f980330e4ce133720a3a0e99e31a1d2939e5856b8682747a752a7a2f2bb84b0c9f9a46ceb7730266a3b533980a768de4c0c6b7ee1b7583ebcd18b7fc88e9922bc0c624c3b2070f8d1d2aa0065233ed8637681b2cfc960a22c6f52aa6258f99ecd7cff42372922b913d2fae0023011631760bc160bc88bf440bd6a02a1b196d3a1109fdda60b91f9b6ab3a0edac831fe97eb35c1c3b4cc2292bb5f5fbc57cdbe3704732dfdc7ea19e57007de7963bbf80267822e3724bdc3db1157420ff6793a292e728e6da369aa8a8f4e34a172b8c6551c95330c3b1e89bc7e5150e79fc231d7de4c616c171a39da6be18fcccc2032df2cf30ee21620a973b1e9c4ff85a864472157235972531ab5d22ef84b5302b0acdbdff91256f93d39b35de000072bdeee8250b248ce62f98c819cdbbf77e3f3ce54118276d19839e7180639f533a7a6b90448ac4b4526595f455a8c53a7872772e6b30411e3159f9df4dd9d2cfb3abd1379be1039483ea01a883ac9b72e4819ffef7961fc37d9ffa9084f54c844968b44feb727734b39a433910117320e05bd791ef1830070578c1d677992286cc8c489a16e2cb9d9e262cdeacf81535e44059ae7ac9d5f3b8657b76433ba543745a4358ea798f0349ee5806d156b37f984f6df708b2a12f5f9856437484b3653d0441abc8318a4fcc42406a633755741704d379dc93f8aac7f061366a3596595af03082a676cff8fa7be4b749b291eca69c25d7f58f8aee2ce39fae62fac6516983172a4c4019eea0cd9820984bcefc59bf6be0598a2348d9c8570ffceeabef8e7aa9496276db0a32c12542a25f1b88f5de848d5621e1c37840fe69baf382d580fa6cf7627a7c2352a46434ede6bcededdde4b6bc06688609fd602c23b2d754bdf0213a45c64d93c6e442afc41dffc2122e287a06d98decb79e685bf10d995db20c1c9eb6b2ca37179395ec777deb567352c3b1b542de62a7c1ed2109531ea4ced01828a29d3b681e49a2aa25435ea759a6d04e194b3618c38efa2fa7fc71cdedd26177f4e3135a4efa020ae3623037852682f507e56cd612f66df55f5ffcd250fb741babbc6f774c654862b351cbd219db17a9a58ae81ad4372df92b69b1f880492e0d00dc6ac089d48c9392ad12f2ddcfd5e17d7c04cbd63b947d36a6c5cb1f763c50a6704c95ec766e1628f8ba6ef2bc6c787a51973d14c9fd43def158750e395199008cb807f5249e20593fa9b3008bc72af7f39fecb6263f9912ede72fabdbc50ac1e1934fb5a1c579fadeaa5694f9d663536d3366176555c2136370393c7dbf6d04ca8de0514d93be03b74712cf2a3a88cef8d1fb911172e3c5494d9f0145895f93b9d7614da96a71cea5c502266ecf0fbfc261b90718da279f72c8a80f0df5bbc1907fe9b206c80a411a1d5228c563509025eb18d210d07aa305e8fcc4cec099d7d3820bfd3fd41aee7494e112aaaaefe581af27ddc7dc8b9d5994402c5d330223358d32082d3dff4fdfe94947ee4037bfa10cc958df170018461250f61f7a9e1208ccd10d17a5f8b58b1bdccff3ef19e39f1a13854eadd94bbe52155e233f13ef494991b9f98146f56fdeff12341146298a7be4eb94d2011b2090133718b6146a10e23fb94e46d7e4e1ea40ee16bb1e94e52a6d170db0c267a5cd39d03d4338d92e7765283ca7f8222eec6518c00b168ee68e062050b64eb2868cc80c3c219d024b1b23a0f54560ca82363a7ce6fb4665fb3fe15fadd58d24a6f982f347a914d50c56279d4ac89e449f34dad63888fc944e7d37871b62ba18db78d05e45631a035a5c02ab68fc47f78f5c5c4f887f76dcb6362accea60de6d0d1963b12bd24d8d20eacd717f7202cffb00eee6fdac4d4d594d51c1035ce4fbc1add61ba866351bd3fc5ac45ae9fb62497e9876781482837fdedec77b0d0458b25e6cd7440e9bd552166779cdb0602a17906bf076cde59dd7641ec8e6f2acb0a6685f4840411123944a04b9772865ae2d126de20cf933906edcb87b4ecc7d7da9ac09b62b66628fe07a16e48623d9bb2213c0f53db6be89706c8c2f257f86ea7ba4fb9f695a0ca247ed832abf71108d5c398d53d4661991a237d149df8e584eb1b1e11541f0bd28f94af5822526cf6ccefc8d7cc9aafd8108736e8cf30ddb02b4d9715796a68dc7222ecf841bd9667260ed47fa99cd3212d556ee131e4cc291452e5da1d9e7122fb31883d3375b2f83320f3fd2803a9110eed9f2e64ba7127497a410fcdcb86ddecd430058890d9eff1913d69b7ff9f65a06ebcf6b95d58c014b4542663712eb56068adb1e9c95fc79ed9370168133f41d857af42e56594dbabf57bcc82478f01a2b0a6d4b06e5428c99f0af4d897701b32f5ea3e3d17840acc17d098d5dab0c3c5c40e9d02146810898867bfca5454901a9f4ff64915f6e970e3872e43450a508d3012585b06c75f5c87ab630b0b084971d2cd918fdc18c301e6f70a609e8d02a73e2f02090b6733938f19ff7d16085a25266610233e88e753907cdcbbf01832cf96e9baa34eb300aee1af23263ac357355284f1f3b698becff28fa831c36cf7e2ef8f6e3597e1644c77fab449d1f4d0d6e957730a9c47fd57cb503877c95109e6615773cafeaecb2a9717a4984d94dbb5b04cb1bba44267977e9711bff99fd51b709973768ddcd1c5da795cae5adeea28c3056c67e7a03099251449be8cec0140753ec73a1582849baae3eb97471c54a687ccb70a8ebe103396f0b58b4be92d4b08a22fecdccda892b59f482a1df2f8b1a3b0765dd259e3466055dbf0b411b9c18116dcd14f18a85277929e9b119ed7c6cf1c90c785d1c1c5d28c3f772c2d418e221e55041636fb9438b517d9f3d793f062c5d3fed0d341de641a7cb5d34ef661c684ae8250da3b188fafc0a817e8bf498869ec02abad5abafe9b95c8d6f4e7c61d8530f904cf7e7268d7bceea35c871b50042d672b1ccc7f5a895ec355a48465764189d5778304dd20a31cc3279171811d4a26a4a8aeca08b1ac910ef11a070ea2b89e6f521b78666bfe30ae832acd2a8a51db5832a6e124abb496eb2f8dda2ba0f048e21aefd3619d124c5d67adeaeeef939381bb3cdc0edcbaa1a72e150928d68d4557e46ebfa17100b8a51aa1899c07ff6b7d35ace26cf6dbf2b948d363515f659a3fbd99f8cc7d71bdff3ff5ea0170c40c32762ac4adde4424d61a2341887da3cd0f1baeab50c0d754c6e737604768505b7c8810f31374c18af28ac79d67ff0fc7e856f16cda3613d4d10a736995a1ccddb4894a4b1eafbde315a26865ef5be0b4e2ca0b09e26661a6a0c11066ca83af050d01c7d1557963385b7ba5f3b53a620d38ce5eb05b895a0674dbafc9bacb9664c85e6ed6a559fd5f1ceb6a61087ad7fd6567a95dbbb7e4c2dbc2485f599394ac54f810eb6ae6043ff41b8b0dacb9f8876349a6f3591f5ffe68eff054c373140ad52a08379eb1c58a05ae61845c46536e8220765763268142ff3c09dac9758848f9aa4bf62e4882b0a244ffccfa257b65e94a0762bce6538a5d9822fc2666cbcd81dfee231dd0c7304aeb31366f30380e11c50ab67f81b9eb6bf27ec9c94524ae4bbd3bd242517652a0a0148268f9983d383a30b3a8b2bcfba8e583894118655d9a424a37dd20121498e2b444eabc7eae1cdd21acc2b13e48f4a48a3f350bfca84ac49bc0ec6e95d8c2de12ae88e8e8b31b340d6c0a0a814d3c330fa6568b1e50ee1c003d1466061fd9b3d201904f6a28c592997766451a9566f59aa3e96256daa912b2544c475dad99c0ba1e6ceec49db12466934432a2e2d34092a65da0e75fb28016164de27e23541d6455db04fcf972683ee55831ce88b1a72ff2a1a66cf80730fa8f190fc790440943088d7213f7ab0512a2522c793143cd021a474c00d3a8902b3c1e717d3eb9db624e9d26bfade861a34fc0201d14a7e8d6202602d3c9c95e9109932a33611980fba7a0569a7c92ba6ced43430a2b7d4239a08a58550572d52cadba84b576348c58d4e8b6b2a50b343b06b55ede11448edcc5b5beb8b1143791df8b16d6045317f602acd8c90bc3e96fec81c3c36cbffa3e5a16d944554b3c2720e0db9573d7f3c067a5564306b7ef78da73284ae71a5d1d77b35d1d2ea20fddb81714383037df5b8a0fca2749a4b42ca4caadedfe7eaa2774a21bf3c19f88f5bc0cb76b0e6e893457e0bfae102e113061afa7e8e30ef3d71f117169b547d13ed43f4590db641c08386d79a3d26fb08ea6370dc293529c689cac222e78ffcbe07d88666c6d5ccecaaec44fd3642d4f83844b6e7fe61eaa3025c1b13194d7f0a941f195ba12c3097d3276796155ea3fa60420147d22ad136bb51d38af8416dea09b25d5f3ac606d1f23d605ce3e5f8a47d9840e1f130e67788f4bb4744474f96758d77c9f190c85c54c05fdccca861efe016135024206d1e1bf57d18714b8ffcba23e0816640cc48ca753af167c9f8bffdfd39dc74e695b7d11800aa3ed58f217560a854cd3c9de92082421fb39fbc3bca069456d2cd4b20e80860c72620e307509136076b0cc9158b05d8adf1ef59cf4ffc69df497316e3f8ad2ff109c2c2e4e44d7b5b7c2a6d105676e8b9a2f47e158952959eb07c10ebff1aac4545ce51214dafd84ab6c541caac58b60bfdf9d565f34a03b594fbdff75284fbb9f95e43365d166c991c3f382f01b2abebaa3fd06d5f183c01e6bc9e2fc1ed8d3717896d4cecf03e7a4b13be02be92731205a99397102c7af1737797287667fd6e976de8ab6565af14cc8ee70b615a60b626cb628392778f4913701d2b5eb4ed9b786191718913b94a61bd2f2799215e24e19cf15ed1ee5482393b64675170fa8b49951bc29ba6489040bcac23055c842bfbf119408dcb4d8a68162a6a457c6dce31f719da337b74f59b044cac4bb695f08365b6e2d06ccd6cd36ab0afb6f99a1e01a5b2cbdd5db6c11cc9b01d5d4e12605c87ba508b16d129cd21fb448b8c47baa3c3f25997fb9518a12d72c98bfcbc20e090111c6df78db832a168b915ce17f324f6883125bec1b39b7d8f24755e7fdcbbda714a515794fac90c7daa2118c947402852beb1547149b8277d22b69988cb5d129258af5ccd67b075d948cc80b45aa101679a70969241c640644115ba6534b06c6520f01c4cae75b732ea677d6d7903a5d5f6a3abd331764307f1"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbedit={0xdc, 0x12, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10000}]}, {0x9d, 0x6, "15092368a2c8ce063b12617106b1ee34ada0b37b24f1eb01e8f965b0c9163a2aa8b18081365ef95135eca930b1346b9f666b0a1cc7ceacfa5a60febc602b5168e6ed4e5bd1ecc3e340c39861ada3fff8c5fbb6f3bfee7b08e27ec5d82e8e9e0a26b26088d2a44f889f7ebe5697ccb31024361dd4200ad26b3cbe3edc1147f221c6c9137c3c63decd9aaf34df0788a7832df23f86a0838bb254"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_police={0x3aa8, 0x12, 0x0, 0x0, {{0xb}, {0x2a7c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10001}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x8, 0xfffffffd, 0xc, 0x1, 0x612, 0xb479, 0x6, 0xb, 0xffffff20, 0xe85, 0xe5d2, 0xd, 0x1, 0x7, 0x7f699d9c, 0xa1, 0xa, 0x4, 0x40, 0x3, 0xff, 0xff, 0x1, 0x3, 0x0, 0x6, 0x7, 0x442e, 0x400, 0x3, 0x8, 0x3, 0x0, 0x401, 0x1, 0x8, 0x968, 0x83, 0x9, 0x61c, 0x4, 0x6846, 0x1, 0x2, 0xffff, 0x1000, 0x10001, 0x401, 0x90a9, 0x7, 0x3c, 0x3, 0x7f, 0x2, 0x4, 0x2d, 0x9, 0x8, 0x40, 0x1, 0x4, 0x7, 0x6, 0xd, 0x7, 0x6eb, 0x2, 0x40, 0xa, 0x3, 0xd6f, 0x7, 0x9, 0x1ff, 0x5, 0x7, 0x8, 0xdca, 0x0, 0x8, 0x1, 0x0, 0x8, 0x4, 0x0, 0x3, 0x3, 0x1, 0x101, 0x8, 0xffffffff, 0xffffffff, 0x8f89, 0x5, 0x3, 0xd7, 0x0, 0x6, 0xf663, 0x3, 0x9, 0xffff0001, 0x6, 0x9, 0x3, 0x0, 0xfffffff8, 0x1, 0x1000, 0x7, 0x4, 0x3, 0x101, 0x0, 0xfffffff1, 0x8, 0xfe7, 0x0, 0x4, 0x3, 0x0, 0x1, 0x1, 0x10000, 0x3, 0x200, 0x9, 0x2, 0xfffffc00, 0x7b, 0x8abd, 0x3f1a, 0x8, 0xa, 0x3, 0x4, 0x4, 0x3, 0x14000, 0x6, 0x9, 0x9, 0x1, 0x9, 0x8e79, 0x3ff, 0x8, 0x9, 0xd, 0x3, 0x8, 0x1, 0x6, 0xfffffffd, 0x5, 0x80000001, 0xcd, 0x9, 0x8, 0x34f, 0x7, 0x5, 0x7, 0x9, 0x200, 0x1, 0x400, 0x6, 0x6, 0x147, 0x6, 0x3372, 0x80000001, 0x4, 0x6, 0x7, 0x9, 0xda1, 0x6, 0x3, 0xff, 0x7f7, 0x6, 0x2b7b, 0x40, 0x27, 0x6, 0x15a0, 0x8, 0x80000001, 0x6, 0x2, 0x999, 0x1, 0x2736, 0x80000001, 0x2, 0x699, 0x3ff, 0x6, 0x40, 0xe, 0x1, 0x1, 0x2089, 0x1, 0x40000000, 0xfffffffb, 0xac, 0x10, 0x1, 0x3, 0x2, 0x200000, 0x9, 0xd, 0x80000001, 0x4, 0x731, 0x2, 0x0, 0x3, 0x5, 0x80, 0x40, 0x1, 0x7fff, 0x4, 0x6, 0x6, 0x57ea23eb, 0x1, 0x3, 0x10001, 0x8, 0xffffffff, 0x10001, 0x3, 0x1ff, 0x1ff, 0x100, 0x2f, 0x4, 0x7f, 0x8000, 0xb806, 0x3, 0xf, 0x7, 0x100, 0x3, 0x7fffffff, 0xc, 0x3a, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x0, 0x0, 0x2, 0x0, {0x6, 0x1, 0x7, 0x1c, 0xb81c, 0x9}, {0xa, 0x2, 0x6, 0x7, 0x5145, 0x697}, 0x7, 0xffff}}], [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x4, 0xdd42, 0x2, 0x7, {0xb, 0x2, 0x800, 0x8, 0x5, 0x15}, {0xfc, 0x1, 0x4, 0x9, 0x2}, 0x5, 0x2, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x33, 0xfffffff8, 0x1, 0x0, 0x3, 0x4, 0x7, 0x6, 0x3, 0x400, 0xfffffd64, 0xa7f2, 0x2, 0x1, 0x0, 0x6, 0x1eb, 0x3ff, 0x800, 0x0, 0x8, 0x3d5b142a, 0xfffffff8, 0x800, 0x0, 0xfff, 0x10001, 0x8, 0x4, 0x6, 0x1, 0x3, 0x10, 0x3ff, 0xa52c, 0x81, 0x2, 0x3, 0x3, 0x5864, 0x9844, 0x7fff, 0xd0d1, 0xa6b7, 0x8, 0x6, 0x5, 0xfffffff8, 0x2, 0x5, 0x3, 0x78, 0x10001, 0x0, 0x8, 0xfb, 0xfffffffd, 0x99, 0xc6c, 0x9, 0x8, 0x6, 0x101, 0x3, 0x1, 0x9, 0x2, 0x6, 0x4, 0x64d, 0x80000001, 0x1, 0x10000, 0xace, 0xfffffff8, 0x837, 0x1, 0x3, 0x3, 0x6, 0xfff, 0xc0000000, 0x0, 0xffff, 0x3000, 0xec, 0x80, 0x0, 0x0, 0x8, 0x7, 0x3, 0x10, 0x80000000, 0x5ca5, 0x6, 0xfffffff2, 0xfff, 0x4d0, 0xfffffffa, 0x6, 0x8, 0x3, 0x4, 0x2, 0x3ff, 0x7f, 0xc963, 0x6, 0x10000, 0x9, 0x5, 0x2, 0xe, 0xff, 0xffffffc0, 0x401, 0x5, 0x4, 0xc0, 0x9ca, 0xd, 0x8, 0x8, 0x6, 0x2, 0x5, 0x7, 0xfffffffa, 0x7, 0x1, 0x8001, 0x800, 0x200, 0x781, 0x9, 0x7, 0x800, 0x6, 0x30, 0x10001, 0x3, 0x4, 0x10, 0xfffffffd, 0x6, 0x3, 0xe7d, 0x8, 0x5, 0x1, 0x0, 0x1, 0x9, 0xecd, 0xca, 0x4, 0x8, 0x10, 0x8, 0x9, 0x7, 0x7f, 0x3, 0x8, 0xa2, 0x5, 0x2, 0x7ff, 0x8, 0x8, 0x492f, 0x7, 0x9, 0x8d28, 0x3, 0xf, 0x39f, 0x4a5, 0xa0, 0x5d87, 0xfff, 0x1000, 0x5, 0x0, 0x2, 0x7, 0x4, 0x2, 0xe, 0x8, 0x7, 0x1ff, 0xf, 0x1, 0x200, 0x7, 0x8, 0x10000, 0x5, 0x2b, 0x3, 0x75b, 0xf5, 0x10, 0xa, 0x0, 0x6, 0x9, 0x5, 0x0, 0x4, 0x6, 0xfffffff9, 0x9, 0x5, 0x9, 0xab5, 0x2, 0x8, 0xb23, 0x10001, 0x58, 0x4693, 0x3, 0x1, 0x3, 0x401, 0xf, 0x401, 0x5, 0x3, 0x2, 0x8001, 0x20000000, 0x800, 0xfffffff9, 0x7fffffff, 0x0, 0x6, 0x6, 0xc28, 0x1, 0x1, 0xfffffff9, 0x4, 0x401, 0xff, 0x864f, 0x1ff, 0x36, 0x0, 0xff, 0x85]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x2, 0x3, 0x3, 0x800, 0xd3, 0x10000, 0x0, 0x5, 0xc379, 0x7d, 0xc, 0x4205d68b, 0x2, 0x6, 0x70000000, 0x9, 0x7d, 0x0, 0x3, 0xb, 0x0, 0x9, 0xe, 0x7, 0x6, 0x7, 0xffff, 0x9, 0x1, 0x40, 0x7d39, 0x7, 0x2, 0x7, 0x339d, 0x5, 0xca, 0x1000, 0x0, 0xa, 0x0, 0x0, 0x4, 0x655, 0x0, 0x9, 0x7, 0x7fffffff, 0xc, 0x5, 0x5, 0xff, 0xa, 0x1, 0x7ff, 0x8, 0x4, 0x100, 0x8001, 0x9, 0x8, 0xffffff7f, 0x2f, 0x2, 0x0, 0x27a, 0x396, 0x5, 0x7, 0x8, 0x1, 0x9, 0x8cd, 0x35800000, 0xf9c, 0x9, 0xffffffff, 0x80000001, 0x6, 0x42, 0x101, 0x1, 0x3a78, 0x10001, 0x5, 0xb9, 0x8000, 0x41c, 0x5, 0x4, 0x7fff, 0x3ff, 0x6, 0xedf, 0xb1, 0x9, 0x8, 0x8, 0x1, 0x5, 0x1, 0x3, 0x8, 0x10001, 0x2, 0x94, 0x9, 0x5, 0x101, 0xd, 0x5cf, 0x4, 0x4f6b, 0x7, 0x3, 0x4, 0x8, 0x0, 0x9, 0x9, 0x57d08380, 0x6, 0x3, 0x7, 0x0, 0x7, 0x95, 0x67, 0x5, 0xfffffff2, 0x0, 0x7, 0x6, 0x80000001, 0x6bd, 0x9, 0x2, 0x8b86, 0x10, 0x0, 0xfd0b, 0x9, 0xffffffff, 0x9, 0x1, 0xd9b, 0x6, 0x2, 0x4, 0x96, 0x0, 0x9, 0xffffffff, 0x4, 0x5, 0x7fffffff, 0x3, 0x2, 0x101, 0x21e4, 0x8e, 0x10000, 0x10, 0x0, 0x3, 0x3, 0x4, 0x6, 0xb, 0x200, 0xfffffffc, 0x9, 0x2, 0xc9d, 0x9, 0x7, 0x9, 0x6, 0x2, 0x0, 0x10000, 0x633465d, 0x7, 0x8, 0x6, 0x1, 0x7, 0x6, 0x8, 0xfffffe01, 0x9, 0x9, 0xfa5, 0x3, 0x80000000, 0x0, 0x3, 0xff, 0x80000000, 0x80000001, 0x80000000, 0x5, 0x9, 0x9, 0xd, 0xa, 0x6, 0xd, 0x0, 0x6, 0x81d, 0x4, 0x9, 0x8, 0x1, 0x7bb4, 0x10000, 0x8, 0x8, 0x8001, 0x3, 0x24, 0x1, 0x40, 0x1000, 0x3, 0x200, 0x12f, 0x80, 0x32, 0xffffffff, 0x8, 0x200, 0x800, 0x7, 0xe, 0x22800000, 0x7f, 0x2, 0xb31, 0xfffffce6, 0x7, 0x800, 0x3, 0x1, 0xfff, 0x1f8e, 0x5, 0x7, 0x7, 0x9, 0x0, 0x10, 0x7, 0x1ff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}], [], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xa, 0x5, 0x40e, 0xff, 0x4, 0x1, 0x1, 0x5, 0x8, 0x401, 0x4356, 0x1, 0x0, 0x8, 0xfffffffe, 0x9, 0x8, 0x8, 0x4, 0xffffffff, 0x3, 0x2d, 0x3ff, 0x3, 0x5, 0x8001, 0xfffffffb, 0x0, 0x9, 0xffff, 0x0, 0x9, 0x5, 0x6, 0x2, 0xfb, 0x0, 0x3, 0x101, 0xfffff781, 0xfffffff7, 0x3ff, 0x8, 0x10001, 0x800, 0xb, 0x81, 0xff, 0x4, 0x80000000, 0x70, 0x3, 0x7fff, 0x2, 0x9, 0x7, 0x7, 0xf9c, 0x80000001, 0x277, 0x1000, 0x1, 0x1000, 0x4, 0x7, 0xfffffe01, 0xfbd, 0xcc65, 0x9, 0x1, 0x7, 0x8, 0x5f, 0xe, 0xfffff123, 0xd2, 0x3, 0x1, 0x9, 0x10001, 0x0, 0x6, 0x8, 0x7, 0x1ff, 0x3, 0x1000, 0xb, 0x1000, 0x2, 0x6, 0x10, 0x7, 0x1, 0x7, 0xc, 0xf, 0x8, 0x3, 0x40, 0x0, 0x4, 0x1, 0x4, 0x4, 0x10000, 0x10001, 0xaf, 0x6, 0xfffffff7, 0x0, 0xc8880000, 0x10000, 0x4, 0x0, 0x61e, 0x910, 0x400, 0x7, 0x363d, 0x4, 0xc7, 0x400, 0x6, 0x9, 0xf, 0x43, 0x18, 0x8, 0x1ff, 0x9, 0x4, 0xa2ba, 0x4, 0xfffffffb, 0x2, 0x7f, 0x101, 0x0, 0x3, 0x1b, 0xfffffffa, 0xc0b, 0x9, 0x517a8d00, 0x61d231da, 0xffffffff, 0x10, 0x6, 0x3, 0x7fff, 0x9, 0x2, 0x1000, 0x1, 0x1000, 0x10001, 0xfffffffc, 0x0, 0x5, 0x8, 0x3, 0xb, 0xfffffffc, 0x1, 0x9, 0x5, 0x3, 0x2, 0x4, 0x7, 0x4, 0x2, 0xffffffff, 0x1c000, 0x2, 0x440, 0x6, 0x80000000, 0x6, 0x5, 0xb130, 0xa, 0x8, 0xfffffffc, 0x7ff, 0x8, 0xa266, 0x1, 0x2, 0x200, 0x4, 0xf4c7, 0xfffffff9, 0x8, 0x0, 0x9, 0xea34, 0x4957, 0x200, 0x3, 0x401, 0xffffffff, 0x9, 0xffff826d, 0x6, 0x0, 0x5, 0x10, 0x1ff, 0x6, 0x1, 0x6, 0x400, 0x1, 0x10, 0x82e, 0x5, 0x70a, 0x1, 0x7, 0x4, 0x9, 0x6, 0x3ff, 0x6, 0x5e7, 0x3, 0xd2, 0x9, 0x1, 0x609b, 0x0, 0x9, 0xf, 0xb61, 0x4, 0x468, 0x3, 0x10001, 0x3, 0x1, 0x8, 0x9, 0x10001, 0xff, 0x9, 0x80000000, 0xfff, 0x40, 0xd, 0x10, 0x5, 0x7, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffd}, @TCA_POLICE_RATE64={0xc, 0x8, 0x14a}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xb8, 0x0, 0x3, 0x6, 0x2, 0x4, 0x7, 0x4, 0x3, 0x3ff, 0x40, 0x7, 0x8, 0xfffffff3, 0x1, 0x80, 0x7ff, 0x57ee1aa9, 0x8, 0xfff, 0x9, 0x3bc, 0x2, 0x6, 0x3, 0x9, 0x4, 0x1, 0x100, 0x3, 0x1, 0x10001, 0x9, 0x7, 0x7, 0x4, 0x9, 0xf8, 0x6, 0xfe, 0xffffffff, 0x7, 0x9, 0x7, 0x10, 0x7, 0x10000, 0x5323, 0x9, 0x81, 0x0, 0xad20, 0x7, 0x200, 0x1000000, 0xb7a, 0x4, 0xf, 0x9, 0x2bd600, 0x8, 0x2, 0x5, 0x1000, 0x2, 0x2, 0x1, 0x9, 0x3, 0x7, 0x9, 0x3, 0x200, 0x7fff, 0x5, 0xe, 0x2, 0x1, 0xffffff81, 0x6, 0x1, 0x2, 0x4, 0x4, 0x2, 0xde, 0x3, 0x8, 0x8, 0x3, 0x83a3, 0x8, 0x2, 0x0, 0x62, 0x3, 0xfffffffc, 0x7, 0x4, 0x7, 0xf18, 0x4f, 0xfffffffb, 0x5, 0x3, 0x8, 0xa, 0x101, 0x9, 0x7, 0x1, 0x4, 0xd, 0x8, 0x8, 0x9, 0xc, 0xfffffffa, 0x3, 0x1, 0xffffffc0, 0x5, 0xfffffc00, 0x1, 0x404f, 0x1, 0x8000, 0x53316b75, 0x4, 0xa135, 0x7, 0x2, 0x6cb1, 0x800, 0x5, 0xa, 0x3, 0x80, 0x7, 0x7, 0x6, 0x82f8000, 0x3, 0x1, 0x2, 0x6, 0x5, 0x5, 0x3, 0x456, 0x0, 0x8, 0x7fff, 0xfff, 0x7, 0x8000, 0x3, 0x1, 0x923, 0x9, 0x80, 0x0, 0x3, 0x7, 0x5, 0x5164, 0x5b2, 0x0, 0x9d, 0x2, 0x82, 0x7f, 0x7, 0xfffffa2c, 0x400, 0x80000001, 0x86, 0x4, 0x7fff, 0x3ff, 0x3, 0x8000, 0x6, 0x9, 0x10001, 0x9, 0xc5d, 0x8, 0x101, 0x0, 0x0, 0x39c3, 0x8000, 0x10, 0x217, 0x845, 0x3, 0x3, 0x3, 0x8, 0xc95, 0x3, 0x1, 0xf, 0x6, 0xffff0001, 0xd, 0x2, 0x0, 0x919, 0xffff1e7e, 0x100, 0x6, 0xf, 0x2, 0x6, 0x54, 0xa, 0xe348, 0xffffffff, 0x1, 0xfffffffb, 0x100, 0x6, 0x3, 0x7fff, 0x6, 0x8, 0x75, 0xffffffa5, 0xfffffffe, 0x400, 0xfffff076, 0xc4e, 0x6, 0x2400, 0x8, 0x7f, 0xfffffff7, 0x8000, 0x7fffffff, 0x1, 0x9, 0xa1f, 0x3, 0x7, 0x7, 0x33, 0x80000001, 0x0, 0xffffffff, 0x5, 0x9, 0x7, 0xb23d]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x0, 0xb8, 0x4, 0x6, 0x401, 0x2, 0x2, 0x754, 0x8, 0x5, 0x4, 0x6261, 0x8, 0x0, 0xfffffe00, 0x6, 0x3, 0xb, 0x10000, 0x8, 0x2, 0xffffffff, 0x1, 0x6, 0x80000000, 0x0, 0x0, 0x1, 0x5c9d202c, 0x8, 0x8, 0x1, 0x7, 0x6, 0x4, 0x973, 0x2, 0x1, 0x5, 0x2, 0x1, 0x1000, 0xed1d, 0x8, 0x10001, 0x8, 0xd59c, 0x1e49, 0x7fff, 0x6, 0x0, 0x8, 0x8000, 0x83, 0x7, 0x9, 0x5, 0xcb, 0x1, 0x0, 0x6, 0x9, 0x3, 0x3, 0x7fffffff, 0x8001, 0x7, 0x101, 0xfffffff9, 0x6, 0x6a4bb74a, 0x1000, 0x9, 0x6d74, 0x8, 0x8e, 0xfffffffb, 0x1c7a7fdc, 0x6209, 0x8, 0x7, 0xffff, 0x200000, 0x6, 0x5, 0x80000000, 0x6, 0x1, 0x4, 0x10, 0xb06, 0x10000, 0xffffffff, 0xc48, 0xac, 0x8, 0x7, 0x3, 0x5, 0x6, 0x5, 0x9, 0xdd8, 0xccd, 0x0, 0x5, 0x7, 0x6, 0x7fffffff, 0x7, 0x7fffffff, 0x5d, 0x10001, 0x0, 0x1, 0x3, 0x4, 0x7, 0xffb1, 0xb, 0x100, 0x3, 0x71, 0x9, 0xfffffff8, 0x9, 0x0, 0x778, 0x68aa, 0x4, 0xf2, 0x101, 0x1, 0x3, 0x0, 0x1000, 0xf5, 0x2eb0, 0x3, 0x1, 0x67, 0x3, 0xa3, 0x912b, 0x3, 0x4, 0x8000, 0x597, 0x8, 0x693bfcf6, 0x3, 0x4e, 0x7, 0x4, 0x6, 0x1a84f15b, 0xa8b, 0x6, 0x7, 0x9, 0x80, 0x3, 0x6, 0xff, 0xc3, 0x2, 0x8, 0xf, 0x3, 0x94, 0x692d5868, 0x1, 0x3, 0x0, 0x10001, 0x5ba5, 0x401, 0x7, 0xffffffff, 0x7fffffff, 0x99aa, 0x0, 0x400, 0x200, 0x5, 0xe, 0xc000, 0xc, 0x2, 0xfffffff8, 0xffffffff, 0x303, 0xe9, 0x2, 0x80000000, 0x1, 0x9, 0x1, 0x1, 0x1, 0x8, 0xc, 0x4, 0x6, 0x4, 0x5411acbd, 0x8, 0x6, 0x0, 0x9, 0x0, 0x7, 0x1000, 0x3, 0x0, 0x10000, 0x8000, 0x8001, 0x1, 0x4, 0x43, 0x7, 0x55, 0x10000, 0x1ff, 0x3, 0x5, 0x7, 0x6, 0xfffffff9, 0x5, 0x7ff, 0x7, 0x6, 0x0, 0x1, 0x67, 0x2, 0x1, 0x401, 0x9, 0xcf6, 0x3, 0x7, 0x9, 0xffff969d, 0x0, 0x5, 0x52, 0x8, 0xffffffff, 0x9, 0xfffeffff, 0xb4, 0xdd]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xc5ec}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff8001, 0x0, 0x3, 0x0, 0x2, 0x7ff, 0x0, 0xffff, 0x8, 0xb2, 0xce20, 0x7, 0x3, 0xe8, 0x3, 0x0, 0xf19, 0x20, 0x9, 0x9, 0x3, 0x3, 0x8, 0x10, 0x9, 0x71, 0x4, 0xcc6, 0x1, 0x9, 0x5, 0x495d8b06, 0x8957, 0x80000001, 0x5, 0x9, 0x7ff, 0x81, 0x4, 0x7, 0xe, 0x4, 0x5, 0x7, 0x2, 0x5, 0x75c, 0xc54, 0x4, 0x4, 0x9, 0x7, 0x1f4000, 0x1c00000, 0x401, 0x6, 0x800, 0x10027356, 0xfffffffe, 0x9, 0x5, 0x2, 0x9, 0x6, 0xa, 0xffff, 0x1, 0x9, 0xb0f3, 0x5, 0x6, 0x8, 0x9, 0x9f, 0x8, 0x1, 0x1ff, 0x0, 0x7, 0x0, 0x100, 0x0, 0x4, 0x8, 0x7, 0x2, 0x80, 0x1000, 0x3, 0x5, 0x9, 0x2a47, 0x8, 0x5, 0x7, 0x69, 0xffff, 0x2, 0x98e, 0xffff, 0x3, 0x7, 0x0, 0x6, 0x5, 0x443f, 0x7, 0x84f0, 0x9, 0xc3, 0x6fa, 0x8, 0x5, 0x822, 0x8, 0x400, 0x200, 0x4, 0x2, 0xfffffffb, 0xe, 0xfffffff7, 0x7, 0x1ff, 0x1f4f, 0x7, 0x2, 0x0, 0x1, 0xc8e, 0x7, 0x9, 0x32, 0xe27, 0x3, 0x9, 0x3987, 0x8001, 0x0, 0x1, 0xffff8001, 0x1, 0x2b, 0x4, 0xb0, 0xa, 0x9, 0xfffeffff, 0x3, 0x1, 0x7, 0xffff8001, 0xe2, 0x3, 0x5, 0x3, 0x9, 0x0, 0xab0, 0x4, 0x5, 0x810a, 0x5, 0xfffffffe, 0x9, 0x80000001, 0x1000, 0x7, 0x8001, 0x7fffffff, 0x9, 0x401, 0x5, 0xeb6, 0x3, 0xe, 0x1, 0xf1, 0x2ac0, 0x6513, 0x10000, 0x80000001, 0x0, 0x600f5d27, 0x2, 0x400, 0x4f2d, 0x5a8d50ab, 0x2, 0x52, 0x8, 0x7, 0x8d, 0x6, 0x0, 0xffffffab, 0xd217, 0x0, 0x800, 0x4, 0x1, 0x6, 0x1, 0xae9, 0x6, 0x0, 0x0, 0xfff, 0x5, 0x6, 0x6, 0x4, 0x5, 0xc257, 0x80000001, 0x101, 0x1, 0x9, 0x3, 0x1, 0x8, 0xfffff000, 0xf, 0xffffffdc, 0x7, 0xffff83f9, 0x8000, 0x4, 0x5, 0x0, 0x4, 0x2, 0x2, 0x6, 0x4219, 0x6e, 0x7, 0x81, 0x691, 0x1000, 0x7ff, 0x3, 0x3, 0x5, 0xee, 0x7, 0x260, 0x9, 0x4, 0xe08b, 0x1, 0x9, 0xa, 0x6, 0x0, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x8, 0xa7, 0x10, 0x3, {0x3, 0x1, 0x5, 0xfff7, 0x8, 0x2}, {0xf, 0x0, 0x0, 0x7, 0x8, 0x231}, 0x4, 0xd27, 0x9}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xb2}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb3e}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0xa2e, 0x400, 0x824, 0x8, 0x3, 0x9, 0x9, 0x4, 0xf2, 0xf, 0x0, 0x3, 0xc, 0x8, 0x5, 0x7, 0x3, 0x3ff, 0x5, 0x200, 0x4, 0x6, 0x7, 0xa, 0x9, 0x0, 0x5b0, 0x3, 0x1, 0x4, 0x3, 0x200, 0x5, 0x9, 0x0, 0x5, 0x5, 0xa7, 0x4, 0x5, 0x9, 0xb5, 0x9, 0x546, 0x3, 0x8, 0xdb2d, 0x6, 0x784, 0x9, 0x0, 0x7f, 0x6, 0x7, 0x6, 0x227a2d40, 0x4, 0x1000, 0xb8b5, 0x8, 0x3, 0xa4, 0x480f80, 0x5, 0x8000, 0x100000, 0x0, 0x8, 0x4, 0xffffffc0, 0x3, 0x3, 0x5, 0x7fffffff, 0x80, 0x2, 0x1, 0x0, 0x3, 0x1, 0x4, 0x0, 0xfffffe01, 0x5, 0x80000001, 0x9, 0x3, 0xdb48, 0x8, 0x800, 0x5, 0x1ff, 0xfff, 0xe, 0x10000, 0x0, 0x1, 0x9, 0x7, 0x0, 0xbb6, 0x61, 0x9, 0x80000000, 0xffff74e6, 0x700, 0xe6, 0x2, 0x3, 0xc8f, 0x5, 0x5, 0x6, 0x3, 0x11aa, 0x6, 0xd, 0x100, 0x2, 0x7, 0x0, 0xa, 0x3, 0xfffffffc, 0x400, 0x3, 0x9, 0x7, 0x4, 0x3, 0x40, 0x2, 0xff, 0x1000, 0xbcb, 0x0, 0x8, 0xb7, 0x17d, 0x9, 0x200, 0x4, 0xffff, 0x8, 0x9, 0x8, 0x2, 0x7f, 0x9e58, 0x1ff, 0x7fffffff, 0x80000001, 0x7ff, 0x8000, 0x1, 0x8, 0x70b, 0x5b, 0x60a726e5, 0x10, 0x0, 0xb5, 0x73e, 0x7, 0x8, 0x5, 0x9, 0x200, 0x0, 0x0, 0xfff, 0x5, 0xffff4932, 0x6, 0x3, 0x3, 0xffffffff, 0x8, 0x4, 0xae, 0x5, 0xfffffffc, 0x5, 0x3, 0xffffff2a, 0xff, 0x7, 0x4, 0x2, 0xb, 0x6, 0x8ff6, 0x2, 0x7, 0xfffffffd, 0x9, 0x5, 0xfffffff7, 0x800, 0x0, 0x400, 0x8, 0xee0d, 0x9, 0x200, 0x5, 0x9, 0x5, 0x7fff, 0x3, 0x9, 0x1, 0x9f, 0x1, 0x3, 0x7, 0xfffffffd, 0x6, 0x2, 0x0, 0x1, 0x240000, 0xe80, 0xd, 0x80000001, 0x800, 0x8000, 0xfffffc00, 0x8, 0x1, 0x3ff, 0x0, 0x1, 0xf, 0x6, 0x9, 0x4, 0x80, 0x9, 0x8001, 0xa, 0xfe, 0x8, 0x1, 0xa57, 0x3, 0x200, 0x0, 0x5, 0x40000, 0x8, 0x916, 0x5, 0x9, 0x9, 0x1ff]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xffffdbef, 0x0, 0x7428, 0x2, 0x0, {0x8, 0x2, 0x31, 0x4e, 0x5ce, 0x3}, {0xb, 0x0, 0x10, 0x1, 0x5, 0x6}, 0xccda, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffb, 0xa, 0x8, 0x81, 0x0, 0x6, 0x9, 0x24, 0x1ff, 0xd, 0x6, 0x58, 0x9, 0xfe4c, 0x9, 0xf, 0x4, 0x10001, 0x9, 0x8001, 0x7, 0xf, 0x7, 0x401, 0x9, 0xbc, 0xf95, 0x2, 0xa, 0xa000000, 0x3, 0x0, 0x2, 0x5, 0x2, 0x0, 0x5, 0x8, 0x4, 0x2, 0x0, 0xc98, 0x1a, 0xfffffaf2, 0x10, 0x4, 0x3, 0x1, 0x8, 0x10000, 0xb, 0x7f, 0x3, 0x5e1, 0x9, 0x3, 0xfffffff7, 0xad, 0xaad5, 0x10001, 0x6, 0xffffffe5, 0x1fc27669, 0x7d, 0x80000001, 0x1, 0x2, 0xffffffff, 0x6, 0x855, 0x5, 0x0, 0x82, 0xffffffff, 0xa, 0x5, 0x8, 0x2, 0x3, 0x7d08166e, 0x80000001, 0x8001, 0xab, 0x9, 0x401, 0x4, 0x8, 0xc5e, 0x7, 0x3, 0x3, 0x9, 0xb, 0x2, 0x1, 0x0, 0x32f, 0x8, 0x8001, 0x1, 0x5, 0x7, 0x65, 0xfffffffb, 0x81, 0x8, 0x5, 0xfff, 0x71e, 0x80000000, 0x9, 0x3, 0x1, 0x36, 0x8, 0x5, 0xe22, 0x3, 0x2, 0x8, 0x1, 0x6, 0x31, 0x2918, 0x2, 0x1, 0x9, 0x9c, 0x7, 0x315, 0x8, 0x2, 0x80000001, 0x8, 0x1c1a80, 0x4, 0x8, 0x4, 0x9, 0x5, 0x4, 0x8001, 0x8, 0x7fffffff, 0x8001, 0x7, 0xbeb0, 0x7, 0x3, 0x7, 0xa, 0x3, 0x6, 0x9, 0x400, 0x6, 0x1, 0x3, 0xc95, 0x5, 0x99, 0xe5, 0x8000, 0x1000, 0xfffffffe, 0x2e9, 0x9, 0x8, 0xfffffffd, 0x6, 0x7, 0x5, 0x9, 0x100, 0x0, 0x101, 0xffffff01, 0x2, 0x9, 0xc2, 0x3ff, 0x5, 0x80000000, 0x9920, 0x3, 0x9f29, 0x3, 0xfffffffc, 0xfff, 0x1, 0x2, 0x4, 0x8, 0xff, 0x57, 0x7f, 0xcf, 0x2, 0x6, 0x0, 0xf43, 0x4, 0xe, 0x0, 0x9, 0x0, 0xb0, 0x7ba2, 0x4, 0x800, 0x4, 0x8, 0x7, 0x6, 0x9a, 0x9, 0x2, 0x843, 0x7, 0x400, 0x80, 0x1, 0x3, 0x6, 0xfffff037, 0x6, 0x5, 0x401, 0x1, 0x1, 0x2, 0x4, 0x40, 0x8, 0x2, 0x1000, 0x3, 0x2, 0x7d5, 0x6, 0x4f, 0x80000000, 0x1ff, 0x5, 0x38000000, 0x8, 0x3, 0x9, 0x10, 0x5, 0x6, 0x5, 0x7, 0x5, 0x0, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x2, 0x30000000, 0x0, 0x7, {0x1, 0x1, 0x5d08, 0x1, 0x1, 0x2}, {0x5, 0x1, 0x96, 0x81, 0xffff, 0x7}, 0xfffffffa, 0x8, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xbf0, 0xf7, 0x24, 0x2908, 0xf, 0x2, 0x4, 0xd6, 0x1, 0x6, 0x6923, 0x6, 0x7, 0x4, 0x7, 0xa, 0x7, 0x3, 0x8001, 0x8001, 0x8, 0x93b, 0x7ff, 0x4, 0x8, 0x0, 0x4, 0x5, 0x2, 0x40, 0x9, 0xffffff07, 0x2, 0xd, 0x7444, 0x2, 0x9, 0xc7, 0x101, 0x6, 0x6, 0x2, 0x742, 0x7f, 0xe, 0x800, 0xcd6, 0x3, 0x8000, 0x8, 0x7, 0x9, 0x9, 0x3, 0xc, 0x800, 0x8, 0x9, 0x9f5b, 0x80, 0x1ff, 0x6, 0xffffffff, 0xfffffffd, 0x2, 0x80000001, 0x8, 0x0, 0x3, 0x7fffffff, 0x8, 0x1, 0x8, 0xb, 0x1000, 0x80, 0xfffffffd, 0x4, 0x401, 0x2, 0x0, 0x2, 0x15, 0x80000000, 0x7ff, 0x10, 0x5, 0x8000, 0x6, 0x4, 0x800, 0xb, 0x0, 0xf, 0xf3b, 0xceb8, 0x0, 0x3, 0x5, 0x5, 0xb1, 0x0, 0xcc0, 0xd00, 0x6, 0x800, 0x7, 0x68c, 0x7, 0x3, 0x9, 0x1, 0x0, 0x4, 0x2, 0x9, 0x0, 0x5, 0x4a, 0x15b, 0x3, 0xfffffff8, 0x10001, 0x3ff, 0x3, 0x5, 0x8, 0x7, 0xfff, 0x0, 0x7441, 0x80000000, 0x9, 0x14000, 0xcd8, 0x9e, 0x200, 0x1, 0x6, 0x6, 0x6, 0x123dae1d, 0xa, 0x1, 0x212, 0x5, 0x2, 0x0, 0x9, 0x7, 0x6, 0x4, 0xfffffffc, 0x10001, 0x2, 0x4, 0x80000001, 0x0, 0x9, 0xffffffc0, 0xfffffffd, 0x7c2, 0xfff, 0xffffff01, 0x4, 0x7, 0x7, 0x6, 0x1, 0xe00, 0xfffffff7, 0x4, 0x5, 0x2, 0x9, 0x4, 0xfffffffc, 0x101, 0x7, 0x9, 0x6, 0x0, 0x0, 0x51, 0x7, 0x40, 0xd, 0x60e, 0x1, 0x7fffffff, 0x8, 0x4, 0x8, 0xffff7fff, 0x2a, 0xd485, 0xe0, 0x450e, 0x0, 0x0, 0x1da0bfc2, 0x10001, 0x2, 0x3ff, 0x5, 0x1, 0x7f, 0x10, 0x4, 0x2, 0xa, 0x4, 0x80000000, 0x80, 0xd, 0x2, 0x4, 0xf, 0x4, 0xa, 0x2c580bf0, 0x101, 0x5, 0x2, 0x7, 0x7fff, 0x100, 0x3ff, 0x7, 0xab5, 0x6, 0x401, 0x4, 0x3, 0x9, 0x40, 0x6, 0x9, 0x40a, 0x7ff, 0x6, 0xbe78, 0xc, 0x3, 0x6, 0xb, 0x80000000, 0x6, 0x80, 0x6, 0x6, 0x3, 0x8, 0x6, 0x5e]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0xffffffffffffffff, 0x5, 0x8001, 0x1, {0x6, 0x2, 0xa1, 0x2, 0x5b, 0x4f0b}, {0xff, 0x2, 0x200, 0x7f, 0x9, 0x7}, 0x9, 0x5, 0x40}}]]}, {0x1004, 0x6, "c96716b234cb1019d688838e88cf29a504fc07e0edce28e070e9aa2c171968e1dc297d412d6658206ca0aad93aa0eb430d00e917a6a1aaeed0dd5f29e2c97240262561ed15a9850529702b7a54458086554821830934a2576cf5cf4b9fcafafc5529a1ec1dc96a582fa6d407ed310ccb134fcec48f84a20bac6dfb3622781f0c8b0bc5aff0df6bdc0d98a47ad96142efe8af7292b54cd974044330a936de5c3c5d27e645281216ef29f9b24d66f0b7b2e0c9f17a153683a15971cc9583a9a39794ea121db1d1dca6a7d9d337fff7398e3a92b2532d72581b03f8430c7aaedf79fc1bd0e70e251afecda126c01c95f3a4d8ddd6b1ce7c600186ac58ceb31212579ab0c57d735d17731754de9a39f1b6da634ec9515c14ee0bbf7e4adc5bf388546bf1116dba22470250d0b4d84d50688ffc7d3e9208cce9faf6f93b5d9edd4d5fcf66177a81ecf32a312c88e6db8265a35fc32717f10b030feedb74696d130b1cf4e05d7cde2d6904a8b1bc31d779bed284f74d85c173a0c6241bd8bc5be12f0b5fb1cfbcbf39b413c02975cc3291a6ea0328d7369d0069c957ecba1a5a88ee93f1efd7313b25a5a7d5df5d8319e05118b7ddd7c282438d1bc590d67f2ab2bb15a3e2f77338b3c2a1780e71e8a4adb13e1b0994d95db68e77caf290188f39a19a5b0aed65e7c6f19f01a06162b06320e15417e94a8bab4952220a07833503929b6207d66598a7d237ce02e3491615217c524b101e854990433431335eae89002da1c68fad3ee477012810432555c207b78f36c821e1ff31221a91fafbcee13ff05f55d9349bb7b3eafb1b74c40c4aad886d4dd06f98c6cbc85dcd76390a0f7e2e0a76755be30124d998726afd3896b90f19fcc14a4b060dd9ed52ddd44b405b9afb02397beb1a930d66cff4135d47243d0b48c8765e692785f01f535896a5d1cc106416ede02205923983660e60db0f43dc1272e166dd7d129ca42afc4e13dca74159caf58bed9cbdc29a98c4b1367dcf6571a787f7dbbf6f0f74459360c3b93d4ae1b885b8c8939b106f6d6a79d1298a49cd9da2b2c03af5e3314998400da07d083b5c125ca29a724cd5586e74ecb572655381ec9c1c492ba99a9766f3baacb5676568c2f062ef381d07693256e7183bc05419bd1f97007bf96c1dbed4353b04d35f1dd746fbfdffc440521791c18518ce3507a7b0fcb8399654ea28d61fa1483933ca44cdb039e31c3c67b02ac1e9e27dd4c7d170d10ce458e24ec6f1c1eb25002a697c6d92095ea9a22a2b24b4cf57173a944247d4148a07a12c93f0aba6f4a423c34a63529359b179062fdafc49318f377c07f8e332f46daeecd4226bf70324398e510ecfe225c359d602760ce5619e8fde8b682cb3c1d89a57f3a5e041dd80352e66c0acee7f998440782406aebd66211855852191eb88cb8ac8f268651a7921ffd8c8576810d540b563789225575ae0fdde55eabe600322548220300259555cc6ba9f5fbdc23a1a823c14a5f8c8bffc3fc5797ed9ba2aae1ff86cf8827346adba01831137021b5acece21f417901bbda9a9828f4e2009ccc4871b235de71fa49b9f4f8234873b7a9d013df79cf4944952508d5df46d14509b163a2bef8ba80d8106b6e7d235f59b07a488f9797a5bc94c4a7b9fb524f0a49df90c64a42fadf16e30f9fabf10a67b6539dd9d33144175925b112f1af12628b2103e592b54a705935f081dbdca67d8ac256bdc7b10ffe584d9581ca9d078a02e2142d1a6e163d80ac9a6fc391a90cdadb43aca1e4d2549ab8ccfe832df9feddcd61ef6d3bf217c0ef9788bb3cb6feed9eaa302ac412dec0265b6456905b5ff3c0376553966b025d689ccf1a780fa9ce605b99eff67cafce4be955fcecd3680aee300cde243aa7781f88e0d1aea2a981899c99582cc41e3506cc1be071a3365f30edbc17220cc78cf064b1d029af5613a3974d196c23aa19137bb98aedd22d3e091bbeaac035afc0c42b27d9511757e83f1fd5266afdfc2caa19db762cca11259dbdac4fd4cda79a09246799e796542bc2fbb927c7265b4981f2cb234556490a43c587fe66c470cb95f0c4b13372d8ed9ddd2283ba8286fd70330150215adb59e9de656017c3b6961f16c617a5272a3cc53d51129be1cf71a529ebb8741bcbd609d5fe1bfc270e9940fde6242e459a51db7d2682763f79d8407ddab8021795bc3fb559b05d07bbc3d1135986b2d5f8b01b3105cb7d8f58fb03eb57fb2801a51908ce6fb7b7f9cf862a56b84de685276f9d2eaae8a4964c2cd071a20f8a3b5b4610b022eb0fcee40bc18c42acedc5ae9c86ba10019cd01c95724f1097d06bd4ae45b6a762aeb1f015b3196795be8f8a50ff536b4b26c009ac285c18c38c0c09576f0e980c6ac5d9ac34db2d4b97e2670e17bd0f1551909842223229499a7452acad753187a9c170054e8a2613a70d00192e233f4737ab69a5c47bc00b92787c8a41408c1b3e3b5a9758deb034bf7b1b45a27965fd15c4587b3dd9122856af7109dd8b77a40d6af8a28134d5dcb2dbd22f63e3b93f500370245a53ff853680c0bb65b10fdbccf688afd8d259a75e7f925812ed7d1ac05b6ff96952dde68e3cd8dac4485b63d1ab00058573bef9a434dc805ca560448a1c94885318e9d647d562e4d17c8be6dacc673bc4693cdeb68928f9f050dae70dee8f1a5725e2e2f83db96ed3fc1db67caf2d7532316998977a2a34f9df969def4e703bff19065479169a6880fc219f75ce381925193dc766359d82e3f866b4c0790ad06840bb9eeede31a7fbc3c43122292d88a6d40242f8f0980643ea8e9dbb53da9381081503f5c43b1934dcce0f8ce77c3dc0fc552112ea60bb9a2676f7193a5804a13454ecfed0a0a9035ec94acabd5e61afa562f9bebacb340586b34eda58b48a955c681b32fbe615e4ebd22003d0df16251f1523081f6e6e988834ba6e43e3f8e2da227b0229d98c36785d94de76e17f103f7a731da879ae08255ae755a12ca52f712c2315600ae6665ac15c7b98a5d576394d081bd2373e6207ff021644a4a7b99f113ef65c4558bf5a1137feb9a2502da0bc95b8e0edd4afd9b78b35d59a31609a2c819a4c9322f369875e97aed4aa92a766fce9908627973be4d625c1fb189ac718b7f2c18bae4306e36673b474dc5cbaeda9548d6ac8520bd561013ece9fd7c77be2becd9eddbceb5d2d5fab699dace8adc39370153a6c9027e4cf8683a489d9bfe12d2c31cfba3222d1bce2d69cdfde7feccf65deb85602742aeb52ff8093c8ff0d7e115768a9371e5d005a6e0304bb601f1833050439142309cb6d769391e51aa7ab74a9bfbf14a372e5c8eb3cd7a31ed1e61d7f8c059c75636936f22f482257d1128eb247298fd968424e43ade9f54ddf0ee78f6eca2f8a116ffbcd003965ce7398ec9d9cef61e3bbf8aef47d7a03467fbe98b458363c64d1835ea31bb2fb873ad291cbb21cfb4d993645db2fa51f83d0b676dcffd863be117b2c2727b37c8dbec24c8567a42312cfa28cfdcf71c7a5cf411bbb7c0f1dfdf144f2cedc023f9de5d71dfc3eb47fb242003ea3f0c13150135cd90298bd53793c7bcfe768b6a34d16ea2de8a6369e2f9db307afa8bdc7912616caaf25b810e6f35ac7b34edd9b6d6ecb010dca7c2a43964408eba664a61be7fe16179b5337d4c9a0daedef0b29cf55d3534c49e10723bfe147ab479ff7163d920c3043d6260bbcad4dcd9c613c800db286c682daded73020b79891c4bb2c068bedc2b7ddeccea3c106c8e90a521080caf50d745a9c4f9df23f11e21f5e98c693074b3625241c420fdc97e757ac8e48a99824eac093c1435874cdc34b2d6e94e34c3fc3e777d2933a52eb0a90c142a930c15d334a99c029aa2101ad5100749991097ae76f932529144734a75e83069c2b86646ac61055ecaaf752ec8cbed546d6c4e2ac187c0af8179a60048afdc2ea6ffffc05f244b210eb406a7a101d9026a770558fd21b74555fbe103a6fd67f93f79268f23cab876aa7dfa41ff9cb34c1fc25c96fc6419b44c51298c36dd088caa58cf3d476b06524751a788ad7b8fd62d5f88db8da08ebe33664ec25115fd83359c3cbea75f907c8af83daad6ae1194f63814f2c855f09b29320483c6ab3b89a27e3566bfeec39cefe3f09dda46a6128c3d00946888da61b0b68d2a3c739f6344b3cb70a4ac897020aeb197f8a668e745619242a7745f72a7a4a9415f592fe8123a5936953b0e024e18e00d50feea05180c0202762d4bb301567214b132f740d763e965a49435f1dc818c4aeba94f2c524dfdeaa973ae1e93b5e0315e813f9a7d89286ff975605313df2ba15241ece89513cefc469a0562d3d02782df69dcc62632cd7f9a2e4db16e25d7d92021595c0afa30e78002a9cdc6d66bba65f87b10bdff8647ddf88939b73690369f4bdf3e5a3b815a137fffcd0f46c732f3e24dfd780ce9eb4470996aefad61da9ecb285fefe08f9840b6cec629062c2b838d85fe450714bbb46d8e55dbb8ec6acd286aba6b04f7ea9a3c3b5eaa9ec2e14f763c0448c1019ea4dbc3d9752a6a072aadd7788307b708d205685444fd8878aac0a74310b2c9c0f095e7627e212ec68d111a98a6ee65d61461264b12baa670b27106f6b568e348ab3a262ad7f27493099abe61714c164bb8e55956efa6ff02c4b48ed9c5d59baaf3e587e4a5e09115e4356b8ecf408666e7779f94f9428fd5ae666b80f4abe703a6e39da004e4ebfd92e7b276d6bde14379cc81dff6e16f4dc1518a1c147141dd488661747c3c053386524ce87d0b2947ce9da70ab35e37d9e57c7a853d59fbe17e5fa00d8216ee6933cce4b7747d64e60dfbb6ef66d0b108d706c567d8166fb262f82c784323472cc836d9a4c0a19d1020ce21dba605442348d5b515133a423f56a08f83af51266f5cdf4c6963d19c8f3f329af640c4edbc1c28310c15bfc65e686282f24d82a75e26bc559e7b24a49215e031119482a4f571c89bbc16db5524c5d7fd162e025881b759849233b5fc4cd0869cd7e1641db107a9fd02143cbcbaf842567a05a13df7a92d9bd33b5818431e53582f894f22f06e131d7dc829761ba2f579edadda4fdfd3986b848cf7ad5d31f1969ff677f99c2f8a288ad9c02385d8afbe5e60822b5bf7117ddd69115bea50f7a4f4295d6d63b4c5edca71a57b23bd2ff1bae9deff891ad2650f990b56427c84c274deaa99cdd210930bea41fdfe155bac24143ea9d2293162cf6209fdf0b40cc6f24fafddac24434796a347e87b08aa07d912363be46f27130f50949455be556d9ec977831952a9dcc5754cbde000d99d89a4a19e8c88458721eda45807143728abf87aad2aebabba9aa58fe059ffa4360dc981ec721edb8306c10ec6ef610036a7b4f0e3a8f7f35dcc533554a127935f12014c6c475fde21800acc458ec060979b778d19e8b85070ac85051808d905b5d650b715af0289acc46b2dff8b7cc8408ca8534b0250d98e21ec6f3f5898581c6e926b0b0236edec99d6ef0cdb6b3105ae045f85f00f85eb43b205bb4fd0d8db49d5bb7351981f53bd0bf70b639a5cc4eafc79b3aeef865259ba800ffd251924c758c9a72bb485866ac9cb8576cb963aa305848b6b23b44d7741a4e746761580432f54e263ff712bc4a2cd8eb718afb4ba37490f2060e9ad51694b7613b55e62f0b4b8e0b7e636615143d933cadcb6c8035a56aa76934dac60385d56bb0041b06cce40a67561c4507b3b42a00127217fdc120da43448d3f09640034d1c8ff084e5f9db"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BASIC_ACT={0x26c, 0x3, [@m_tunnel_key={0x164, 0x16, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xb}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x4, 0x20000000, 0x0, 0x4}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xda, 0x6, "b6dd0f602bed515d2589f49a2631e0827ca091b6889d8f383d1b0aaaa09cb79729ec3b9d691ef04ce70a6a9e9937d22af3c5f9465dbf8df29777d3409a4e85b2c87a424c9240d8482589dadd420428d3a7f61d0f6a364d0bc7c634ff1baceccab9a95bf4c224bda8ab2efa91134ef1145c5ce2412bd5590c71fd8e4d5c7cf5b2e9640ad20d5ad0c46d714b2e42767a91cdf7b3d8db98d83fe41aee4b5ecb4ad7ec5ea8947ab18398d11f17e0cb4468cb63faa307d066b0b3c69922935f73a9ccf6b8a1c0f72b8be3a33f47304a3ff77df0ceb4fbcc1a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x90, 0xd, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x9}]}, {0x59, 0x6, "9cc4a276e54f37c9bc8e2b38f9faab21f00868e344bb44ec5f101965df6514ee50b77daa469575818aa8abf466184de6c2b0451fb4c66cbcb30cbb3e2c0a417a3a374fe50b1818b7a3df5f2ce061cd6f4b87f56d5e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x74, 0xc, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5, 0x7fff, 0x5, 0xb, 0x6}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x5, 0xb, 0x8, 0xd}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xc, 0x6, "2ff29a12a97ecd98"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0xffff}}, @TCA_BASIC_EMATCHES={0x264, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xe4, 0x2, 0x0, 0x1, [@TCF_EM_META={0x54, 0x3, 0x0, 0x0, {{0x4a28, 0x4, 0xe00}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8001, 0x8, 0x1}, {0x82, 0x4, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x5f}, {0xfffd, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xc0}, {0x4, 0x3}}}, @TCA_EM_META_LVALUE={0x24, 0x2, [@TCF_META_TYPE_VAR="2af43d", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="802cd0f05b", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="8c5a962ec501f4da", @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_CONTAINER={0x8c, 0x2, 0x0, 0x0, {{0x80}, "6ced44dff2f8543cf2224bcf84b070669a63a09cdb5ecdf0666057cdf340bc32e326fde887709aac7cc06166805ee377d6389b723ee4e1c9001a35029bb17202dc1b46b79b115ec6d30cddd38e2dfe47c126040865cdf4fd33325855d05e683ae8a29bd3450b57beee5b4eb783be174d9c3b456fd52917cf5070fea737ab"}}]}, @TCA_EMATCH_TREE_LIST={0x17c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x114, 0x2, 0x0, 0x0, {{0xb, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x18}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_MATCH_DATA={0xd0, 0x5, "405de74a69d1c8bf2efb624696df0f80a7c510b6adea13e17db742b5578efc8538f6d308a9d80f8c361603d96ec4df166635ecaad4c3c403bbf4bc8747592955cc785bdb5f3f4c3dcb9271bf1118a8045a3127d5797c672fae11583555a0519a367cc5461c498114a052f48bdfbe64e29a0b133b9b297f234642f17b6ed67bdca999039aef927ca37dc70ec0990c0221d4dc9277daa5f783a8a53e3eed0945d772cdb9e44f6e6c58772ab35143e269b44362a3501487bf7176da378b8fdc88a47d8fb9cba8c7bb24743f6713"}]}}, @TCF_EM_IPT={0x20, 0x2, 0x0, 0x0, {{0xe1, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0xaf, 0x2, 0x6}, {0x3026, 0x2, 0x0, 'UR'}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xb64, 0x7, 0x9}, {{0x2}, {0x2, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{}, {0x56a5, 0x6, 0x1, 0x4}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}]}, 0x744c}, 0x1, 0x0, 0x0, 0x8020}, 0x4004004) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x9201}) (async) write$tun(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007ac0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000007b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000007b40)={0x0, 0x0, &(0x7f0000007b80)={&(0x7f0000007bc0)={0x2c, r9, 0x1, 0x0, 0xfffffffe, {{0x2}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (async) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000007c40), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000007d00)={&(0x7f0000007c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000007cc0)={&(0x7f0000007c80)={0x40, r11, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040040) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) kernel console output (not intermixed with test programs): [ T9400] R13: 00007fbe2dc26038 R14: 00007fbe2dc25fa0 R15: 00007ffdc4a28028 [ 216.479859][ T9400] [ 216.493612][ T9397] IPVS: using max 31 ests per chain, 74400 per kthread [ 216.833182][ T9413] block nbd0: not configured, cannot reconfigure [ 216.834270][ T1090] IPVS: starting estimator thread 0... [ 216.922412][ T9414] IPVS: using max 33 ests per chain, 79200 per kthread [ 217.000713][ T9416] bridge0: port 1(bond0) entered disabled state [ 217.021629][ T9416] bond0 (unregistering): left allmulticast mode [ 217.021655][ T9416] bond_slave_0: left allmulticast mode [ 217.021672][ T9416] bond_slave_1: left allmulticast mode [ 217.021689][ T9416] bond0 (unregistering): left promiscuous mode [ 217.021700][ T9416] bond_slave_0: left promiscuous mode [ 217.021909][ T9416] bond_slave_1: left promiscuous mode [ 217.022145][ T9416] bridge0: port 1(bond0) entered disabled state [ 217.087840][ T9416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.110133][ T9416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.149316][ T9416] bond0 (unregistering): Released all slaves [ 217.910935][ T9485] xt_hashlimit: size too large, truncated to 1048576 [ 218.440600][ T5623] Bluetooth: hci1: unexpected event for opcode 0x203d [ 220.105384][ T9511] __nla_validate_parse: 12 callbacks suppressed [ 220.105407][ T9511] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1030'. [ 220.105421][ T9511] openvswitch: netlink: Flow key attr not present in new flow. [ 220.146787][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1034'. [ 220.150413][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1034'. [ 220.327360][ T9526] xt_hashlimit: size too large, truncated to 1048576 [ 220.355107][ T9524] lo: entered promiscuous mode [ 220.368030][ T9524] tunl0: entered promiscuous mode [ 220.414497][ T9524] gre0: entered promiscuous mode [ 220.461756][ T9524] gretap0: entered promiscuous mode [ 220.527186][ T9524] erspan0: entered promiscuous mode [ 220.553752][ T9524] ip_vti0: entered promiscuous mode [ 221.457582][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'. [ 221.457606][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'. [ 221.760108][ T9576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1047'. [ 221.941583][ T9582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1047'. [ 222.802363][ T5632] Bluetooth: hci4: command 0x0406 tx timeout [ 223.046816][ T9600] xt_hashlimit: size too large, truncated to 1048576 [ 223.062464][ T9602] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1053'. [ 223.174289][ T9606] ip_tables: iptables: counters copy to user failed while replacing table [ 223.276850][ T9617] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1058'. [ 223.307841][ T9611] netlink: 'syz.0.1056': attribute type 39 has an invalid length. [ 223.710538][ T9611] netlink: 'syz.0.1056': attribute type 39 has an invalid length. [ 223.710742][ T9611] netlink: 'syz.0.1056': attribute type 39 has an invalid length. [ 223.711043][ T9611] netlink: 'syz.0.1056': attribute type 39 has an invalid length. [ 223.711213][ T9611] netlink: 'syz.0.1056': attribute type 39 has an invalid length. [ 223.711385][ T9611] netlink: 'syz.0.1056': attribute type 39 has an invalid length. [ 223.756342][ T9611] netlink: 'syz.0.1056': attribute type 39 has an invalid length. [ 223.756515][ T9611] netlink: 'syz.0.1056': attribute type 39 has an invalid length. [ 223.756690][ T9611] netlink: 'syz.0.1056': attribute type 39 has an invalid length. [ 223.756853][ T9611] netlink: 'syz.0.1056': attribute type 39 has an invalid length. [ 223.977416][ T9661] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1068'. [ 224.035433][ T9666] Cannot find add_set index 0 as target [ 224.088629][ T9668] tipc: Enabling of bearer rejected, failed to enable media [ 224.811367][ T9717] xt_hashlimit: size too large, truncated to 1048576 [ 224.908657][ T9731] openvswitch: netlink: Flow actions attr not present in new flow. [ 224.977908][ T9720] vlan4: entered promiscuous mode [ 224.977929][ T9720] bridge0: entered promiscuous mode [ 224.979649][ T9720] vlan4: entered allmulticast mode [ 224.979666][ T9720] bridge0: entered allmulticast mode [ 225.100050][ T9736] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.158583][ T9750] __nla_validate_parse: 12 callbacks suppressed [ 225.158606][ T9750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1096'. [ 225.195334][ T9739] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.216921][ T9739] bond3: (slave team0): Enslaving as an active interface with an up link [ 225.329778][ T8774] bond3: (slave team0): link status definitely down, disabling slave [ 225.537570][ T9765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1103'. [ 225.537895][ T9765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1103'. [ 225.635322][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1104'. [ 226.091428][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1114'. [ 226.209642][ T9807] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1117'. [ 226.214850][ T9808] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1117'. [ 226.235684][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'. [ 226.236019][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'. [ 226.241049][ T9806] ip_tables: iptables: counters copy to user failed while replacing table [ 226.348729][ T9813] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1119'. [ 226.348763][ T9813] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 226.406792][ T9821] ip6t_hbh: too many supported opts specified [ 226.618609][ T9833] Cannot find add_set index 2 as target [ 226.845057][ T9850] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 227.208264][ T9863] ip_tables: iptables: counters copy to user failed while replacing table [ 227.322382][ T9869] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 227.322582][ T9869] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 227.437265][ T9876] FAULT_INJECTION: forcing a failure. [ 227.437265][ T9876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.437296][ T9876] CPU: 0 UID: 0 PID: 9876 Comm: syz.1.1142 Not tainted syzkaller #0 PREEMPT(full) [ 227.437315][ T9876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 227.437326][ T9876] Call Trace: [ 227.437333][ T9876] [ 227.437340][ T9876] dump_stack_lvl+0xe8/0x150 [ 227.437372][ T9876] should_fail_ex+0x410/0x560 [ 227.437404][ T9876] _copy_from_user+0x2d/0xb0 [ 227.437433][ T9876] ___sys_sendmsg+0x1c6/0x360 [ 227.437453][ T9876] ? __lock_acquire+0x747/0x2de0 [ 227.437478][ T9876] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.437538][ T9876] ? __fget_files+0x2a/0x420 [ 227.437555][ T9876] ? __fget_files+0x3a2/0x420 [ 227.437582][ T9876] __x64_sys_sendmsg+0x1b1/0x290 [ 227.437606][ T9876] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 227.437648][ T9876] do_syscall_64+0x166/0x520 [ 227.437669][ T9876] ? trace_irq_disable+0x3b/0x140 [ 227.437689][ T9876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.437707][ T9876] ? clear_bhb_loop+0x70/0xc0 [ 227.437730][ T9876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.437749][ T9876] RIP: 0033:0x7fa49d39f559 [ 227.437766][ T9876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.437780][ T9876] RSP: 002b:00007fa49e245028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.437806][ T9876] RAX: ffffffffffffffda RBX: 00007fa49d625fa0 RCX: 00007fa49d39f559 [ 227.437819][ T9876] RDX: 0000000000048804 RSI: 0000200000000540 RDI: 0000000000000003 [ 227.437830][ T9876] RBP: 00007fa49e245090 R08: 0000000000000000 R09: 0000000000000000 [ 227.437841][ T9876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.437852][ T9876] R13: 00007fa49d626038 R14: 00007fa49d625fa0 R15: 00007ffe29d66908 [ 227.437883][ T9876] [ 228.160476][ T9912] dvmrp0: entered allmulticast mode [ 228.484837][ T9939] validate_nla: 90 callbacks suppressed [ 228.484858][ T9939] netlink: 'syz.3.1165': attribute type 10 has an invalid length. [ 228.485236][ T9939] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.520915][ T9939] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.520992][ T9939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.526308][ T9939] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 228.536209][ T9940] ip_tables: iptables: counters copy to user failed while replacing table [ 228.539685][ T9939] bridge_slave_1: left allmulticast mode [ 228.539709][ T9939] bridge_slave_1: left promiscuous mode [ 228.539917][ T9939] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.560008][ T9939] bridge_slave_0: left allmulticast mode [ 228.560034][ T9939] bridge_slave_0: left promiscuous mode [ 228.560259][ T9939] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.615212][ T9939] bond0: (slave bridge0): Releasing backup interface [ 229.659031][T10005] xt_ecn: cannot match TCP bits for non-tcp packets [ 229.893748][T10002] udevd[10002]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 229.934049][ T9970] udevd[9970]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 230.308450][T10037] __nla_validate_parse: 23 callbacks suppressed [ 230.308469][T10037] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1194'. [ 230.377931][T10044] FAULT_INJECTION: forcing a failure. [ 230.377931][T10044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.377962][T10044] CPU: 1 UID: 0 PID: 10044 Comm: syz.4.1196 Not tainted syzkaller #0 PREEMPT(full) [ 230.377985][T10044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 230.377995][T10044] Call Trace: [ 230.378002][T10044] [ 230.378010][T10044] dump_stack_lvl+0xe8/0x150 [ 230.378049][T10044] should_fail_ex+0x410/0x560 [ 230.378079][T10044] _copy_from_iter+0x1d3/0x1660 [ 230.378101][T10044] ? __alloc_skb+0x27a/0x7a0 [ 230.378119][T10044] ? __alloc_skb+0x27a/0x7a0 [ 230.378138][T10044] ? __alloc_skb+0x27a/0x7a0 [ 230.378154][T10044] ? __pfx__copy_from_iter+0x10/0x10 [ 230.378177][T10044] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 230.378197][T10044] ? __alloc_skb+0x27a/0x7a0 [ 230.378211][T10044] ? __alloc_skb+0x27a/0x7a0 [ 230.378233][T10044] ? netlink_sendmsg+0x650/0xb40 [ 230.378256][T10044] ? skb_put+0x112/0x210 [ 230.378276][T10044] netlink_sendmsg+0x6c0/0xb40 [ 230.378308][T10044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.378339][T10044] ? apparmor_socket_sendmsg+0x98/0x360 [ 230.378366][T10044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.378387][T10044] sock_sendmsg_nosec+0x13a/0x180 [ 230.378414][T10044] ____sys_sendmsg+0x54e/0x850 [ 230.378440][T10044] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.378469][T10044] ? import_iovec+0x73/0xa0 [ 230.378496][T10044] ___sys_sendmsg+0x2a5/0x360 [ 230.378513][T10044] ? __lock_acquire+0x747/0x2de0 [ 230.378537][T10044] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.378593][T10044] ? __fget_files+0x2a/0x420 [ 230.378610][T10044] ? __fget_files+0x3a2/0x420 [ 230.378637][T10044] __x64_sys_sendmsg+0x1b1/0x290 [ 230.378660][T10044] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 230.378701][T10044] do_syscall_64+0x166/0x520 [ 230.378722][T10044] ? trace_irq_disable+0x3b/0x140 [ 230.378742][T10044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.378760][T10044] ? clear_bhb_loop+0x70/0xc0 [ 230.378782][T10044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.378800][T10044] RIP: 0033:0x7f2f71f9f559 [ 230.378817][T10044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.378831][T10044] RSP: 002b:00007f2f72db7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.378851][T10044] RAX: ffffffffffffffda RBX: 00007f2f72225fa0 RCX: 00007f2f71f9f559 [ 230.378864][T10044] RDX: 0000000000048804 RSI: 0000200000000540 RDI: 0000000000000003 [ 230.378874][T10044] RBP: 00007f2f72db7090 R08: 0000000000000000 R09: 0000000000000000 [ 230.378908][T10044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.378918][T10044] R13: 00007f2f72226038 R14: 00007f2f72225fa0 R15: 00007ffe3b379a38 [ 230.378949][T10044] [ 230.398405][T10045] ip_tables: iptables: counters copy to user failed while replacing table [ 230.719023][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1202'. [ 230.938072][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1205'. [ 231.063966][T10086] FAULT_INJECTION: forcing a failure. [ 231.063966][T10086] name failslab, interval 1, probability 0, space 0, times 0 [ 231.063997][T10086] CPU: 1 UID: 0 PID: 10086 Comm: syz.0.1210 Not tainted syzkaller #0 PREEMPT(full) [ 231.064017][T10086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 231.064030][T10086] Call Trace: [ 231.064037][T10086] [ 231.064045][T10086] dump_stack_lvl+0xe8/0x150 [ 231.064077][T10086] should_fail_ex+0x410/0x560 [ 231.064112][T10086] should_failslab+0xa8/0x100 [ 231.064137][T10086] ? skb_clone+0x212/0x3a0 [ 231.064158][T10086] kmem_cache_alloc_noprof+0xa1/0x600 [ 231.064181][T10086] ? skb_clone+0x212/0x3a0 [ 231.064208][T10086] skb_clone+0x212/0x3a0 [ 231.064232][T10086] __netlink_deliver_tap+0x413/0x860 [ 231.064266][T10086] ? netlink_deliver_tap+0x2e/0x1b0 [ 231.064290][T10086] netlink_deliver_tap+0x19c/0x1b0 [ 231.064314][T10086] netlink_unicast+0x8c1/0xa80 [ 231.064350][T10086] netlink_sendmsg+0x813/0xb40 [ 231.064381][T10086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.064410][T10086] ? apparmor_socket_sendmsg+0x98/0x360 [ 231.064433][T10086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.064453][T10086] sock_sendmsg_nosec+0x13a/0x180 [ 231.064480][T10086] ____sys_sendmsg+0x54e/0x850 [ 231.064505][T10086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.064541][T10086] ? import_iovec+0x73/0xa0 [ 231.064572][T10086] ___sys_sendmsg+0x2a5/0x360 [ 231.064591][T10086] ? __lock_acquire+0x747/0x2de0 [ 231.064617][T10086] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.064673][T10086] ? __fget_files+0x2a/0x420 [ 231.064688][T10086] ? __fget_files+0x3a2/0x420 [ 231.064715][T10086] __x64_sys_sendmsg+0x1b1/0x290 [ 231.064737][T10086] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 231.064780][T10086] do_syscall_64+0x166/0x520 [ 231.064801][T10086] ? trace_irq_disable+0x3b/0x140 [ 231.064821][T10086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.064839][T10086] ? clear_bhb_loop+0x70/0xc0 [ 231.064861][T10086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.064879][T10086] RIP: 0033:0x7fbe2d99f559 [ 231.064896][T10086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.064911][T10086] RSP: 002b:00007fbe2e8b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.064930][T10086] RAX: ffffffffffffffda RBX: 00007fbe2dc25fa0 RCX: 00007fbe2d99f559 [ 231.064943][T10086] RDX: 0000000000048804 RSI: 0000200000000540 RDI: 0000000000000003 [ 231.064955][T10086] RBP: 00007fbe2e8b3090 R08: 0000000000000000 R09: 0000000000000000 [ 231.064966][T10086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.064976][T10086] R13: 00007fbe2dc26038 R14: 00007fbe2dc25fa0 R15: 00007ffdc4a28028 [ 231.065008][T10086] [ 231.155024][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1213'. [ 231.155346][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1213'. [ 231.641661][T10111] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1222'. [ 231.673300][T10117] bond4: option resend_igmp: invalid value (32767) [ 231.673345][T10117] bond4: option resend_igmp: allowed values 0 - 255 [ 231.677412][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1219'. [ 231.680251][T10117] bond4 (unregistering): Released all slaves [ 231.750195][T10128] SET target dimension over the limit! [ 231.785691][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1219'. [ 231.785877][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1219'. [ 231.786069][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1219'. [ 231.790959][T10126] netlink: 'syz.0.1222': attribute type 13 has an invalid length. [ 231.838056][T10126] netlink: 'syz.0.1222': attribute type 13 has an invalid length. [ 231.895106][T10123] bond4: option resend_igmp: invalid value (32767) [ 231.895130][T10123] bond4: option resend_igmp: allowed values 0 - 255 [ 231.898267][T10123] bond4 (unregistering): Released all slaves [ 232.004822][ T1079] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.004868][ T1079] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.004898][ T1079] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.004928][ T1079] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.173903][T10145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.318234][T10151] tc_dump_action: action bad kind [ 232.560313][T10175] FAULT_INJECTION: forcing a failure. [ 232.560313][T10175] name failslab, interval 1, probability 0, space 0, times 0 [ 232.560346][T10175] CPU: 0 UID: 0 PID: 10175 Comm: syz.1.1240 Not tainted syzkaller #0 PREEMPT(full) [ 232.560366][T10175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 232.560377][T10175] Call Trace: [ 232.560384][T10175] [ 232.560392][T10175] dump_stack_lvl+0xe8/0x150 [ 232.560423][T10175] should_fail_ex+0x410/0x560 [ 232.560455][T10175] should_failslab+0xa8/0x100 [ 232.560481][T10175] ? security_inode_alloc+0x39/0x310 [ 232.560498][T10175] kmem_cache_alloc_noprof+0xa1/0x600 [ 232.560518][T10175] ? __pfx_make_kgid+0x10/0x10 [ 232.560536][T10175] ? security_inode_alloc+0x39/0x310 [ 232.560561][T10175] security_inode_alloc+0x39/0x310 [ 232.560581][T10175] inode_init_always_gfp+0x97e/0xd30 [ 232.560613][T10175] ? __pfx_sock_alloc_inode+0x10/0x10 [ 232.560637][T10175] alloc_inode+0x82/0x1b0 [ 232.560663][T10175] __sock_create+0x12d/0x9d0 [ 232.560695][T10175] udp_sock_create4+0xc5/0x480 [ 232.560723][T10175] ? __pfx_udp_sock_create4+0x10/0x10 [ 232.560748][T10175] ? __pfx___nla_validate_parse+0x10/0x10 [ 232.560773][T10175] fou_nl_add_doit+0x1a0/0xaf0 [ 232.560798][T10175] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 232.560817][T10175] ? trace_kmalloc+0x2a/0xf0 [ 232.560850][T10175] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 232.560875][T10175] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 232.560908][T10175] genl_family_rcv_msg_doit+0x233/0x340 [ 232.560940][T10175] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 232.560991][T10175] ? bpf_lsm_capable+0x9/0x20 [ 232.561011][T10175] ? security_capable+0x7e/0x2c0 [ 232.561044][T10175] genl_rcv_msg+0x614/0x7a0 [ 232.561079][T10175] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.561103][T10175] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 232.561134][T10175] netlink_rcv_skb+0x226/0x4a0 [ 232.561158][T10175] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.561185][T10175] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 232.561225][T10175] ? down_read+0x2be/0x330 [ 232.561264][T10175] genl_rcv+0x28/0x40 [ 232.561287][T10175] netlink_unicast+0x8ef/0xa80 [ 232.561322][T10175] netlink_sendmsg+0x813/0xb40 [ 232.561350][T10175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.561379][T10175] ? apparmor_socket_sendmsg+0x98/0x360 [ 232.561406][T10175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.561426][T10175] sock_sendmsg_nosec+0x13a/0x180 [ 232.561453][T10175] ____sys_sendmsg+0x54e/0x850 [ 232.561478][T10175] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.561506][T10175] ? import_iovec+0x73/0xa0 [ 232.561535][T10175] ___sys_sendmsg+0x2a5/0x360 [ 232.561551][T10175] ? __lock_acquire+0x747/0x2de0 [ 232.561574][T10175] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.561626][T10175] ? __fget_files+0x2a/0x420 [ 232.561642][T10175] ? __fget_files+0x3a2/0x420 [ 232.561680][T10175] __x64_sys_sendmsg+0x1b1/0x290 [ 232.561705][T10175] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 232.561745][T10175] do_syscall_64+0x166/0x520 [ 232.561765][T10175] ? trace_irq_disable+0x3b/0x140 [ 232.561784][T10175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.561801][T10175] ? clear_bhb_loop+0x70/0xc0 [ 232.561824][T10175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.561842][T10175] RIP: 0033:0x7fa49d39f559 [ 232.561860][T10175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.561875][T10175] RSP: 002b:00007fa49e245028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.561894][T10175] RAX: ffffffffffffffda RBX: 00007fa49d625fa0 RCX: 00007fa49d39f559 [ 232.561907][T10175] RDX: 0000000000048804 RSI: 0000200000000540 RDI: 0000000000000003 [ 232.561917][T10175] RBP: 00007fa49e245090 R08: 0000000000000000 R09: 0000000000000000 [ 232.561927][T10175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.561937][T10175] R13: 00007fa49d626038 R14: 00007fa49d625fa0 R15: 00007ffe29d66908 [ 232.561968][T10175] [ 232.565664][T10175] socket: no more sockets [ 233.152383][T10190] syzkaller0: left promiscuous mode [ 233.152401][T10190] syzkaller0: left allmulticast mode [ 233.191672][T10190] bond3: Removing last ns target with arp_interval on [ 233.870106][T10243] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 233.870131][T10243] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 234.028355][ T8773] syzkaller1: tun_net_xmit 76 [ 234.028538][ T8773] syzkaller1: tun_net_xmit 48 [ 234.056800][ T5760] syzkaller1: tun_net_xmit 76 [ 234.317145][T10273] netlink: 'syz.3.1276': attribute type 1 has an invalid length. [ 234.324186][ T5760] syzkaller1: tun_net_xmit 76 [ 234.355389][T10270] 8021q: adding VLAN 0 to HW filter on device bond4 [ 234.433628][T10273] bond4 (unregistering): Released all slaves [ 234.824360][T10298] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 235.583838][T10368] __nla_validate_parse: 46 callbacks suppressed [ 235.583861][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1301'. [ 235.612031][T10370] netlink: 'syz.3.1302': attribute type 1 has an invalid length. [ 235.624337][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1301'. [ 235.627738][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1302'. [ 235.631234][T10370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1302'. [ 235.755291][T10377] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1305'. [ 235.755314][T10377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1305'. [ 235.755325][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1305'. [ 235.867547][T10383] netlink: 'syz.4.1307': attribute type 2 has an invalid length. [ 236.040846][T10394] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1311'. [ 236.109653][T10397] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 236.194893][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1313'. [ 236.194918][T10401] netlink: 'syz.1.1313': attribute type 1 has an invalid length. [ 236.249066][T10406] xt_hashlimit: size too large, truncated to 1048576 [ 236.549559][T10424] bridge0: port 4(veth0) entered blocking state [ 236.549668][T10424] bridge0: port 4(veth0) entered disabled state [ 236.549844][T10424] veth0: entered allmulticast mode [ 236.578889][T10424] veth0: entered promiscuous mode [ 236.667167][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1320'. [ 237.101107][T10448] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.190299][T10460] xt_hashlimit: size too large, truncated to 1048576 [ 237.385217][T10472] bridge0: entered allmulticast mode [ 237.669161][T10487] FAULT_INJECTION: forcing a failure. [ 237.669161][T10487] name failslab, interval 1, probability 0, space 0, times 0 [ 237.669196][T10487] CPU: 1 UID: 0 PID: 10487 Comm: syz.2.1345 Not tainted syzkaller #0 PREEMPT(full) [ 237.669216][T10487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 237.669226][T10487] Call Trace: [ 237.669233][T10487] [ 237.669241][T10487] dump_stack_lvl+0xe8/0x150 [ 237.669274][T10487] should_fail_ex+0x410/0x560 [ 237.669304][T10487] should_failslab+0xa8/0x100 [ 237.669327][T10487] ? dst_alloc+0x105/0x170 [ 237.669349][T10487] kmem_cache_alloc_noprof+0xa1/0x600 [ 237.669369][T10487] ? __pfx_stack_trace_save+0x10/0x10 [ 237.669391][T10487] ? dst_alloc+0x105/0x170 [ 237.669428][T10487] dst_alloc+0x105/0x170 [ 237.669457][T10487] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 237.669488][T10487] ? ip_route_input_rcu+0x14f2/0x3190 [ 237.669518][T10487] ? ip_route_output_key_hash+0xd8/0x2a0 [ 237.669547][T10487] ip_route_output_key_hash+0x18d/0x2a0 [ 237.669577][T10487] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 237.669602][T10487] ? ip4_datagram_release_cb+0xa2/0xbe0 [ 237.669638][T10487] ? do_raw_spin_lock+0x12b/0x2f0 [ 237.669664][T10487] ? dst_release+0x72/0x1b0 [ 237.669691][T10487] __ip4_datagram_connect+0x89a/0x1220 [ 237.669733][T10487] udp_connect+0x32/0x1e0 [ 237.669757][T10487] kernel_connect+0x141/0x1c0 [ 237.669779][T10487] ? udp_init_sock+0x2f3/0x3b0 [ 237.669801][T10487] ? __pfx_kernel_connect+0x10/0x10 [ 237.669850][T10487] udp_sock_create4+0x256/0x480 [ 237.669880][T10487] ? __pfx_udp_sock_create4+0x10/0x10 [ 237.669910][T10487] ? __pfx___nla_validate_parse+0x10/0x10 [ 237.669937][T10487] fou_nl_add_doit+0x1a0/0xaf0 [ 237.669963][T10487] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 237.669982][T10487] ? trace_kmalloc+0x2a/0xf0 [ 237.670020][T10487] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 237.670048][T10487] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 237.670085][T10487] genl_family_rcv_msg_doit+0x233/0x340 [ 237.670120][T10487] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 237.670163][T10487] ? bpf_lsm_capable+0x9/0x20 [ 237.670182][T10487] ? security_capable+0x7e/0x2c0 [ 237.670215][T10487] genl_rcv_msg+0x614/0x7a0 [ 237.670250][T10487] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.670276][T10487] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 237.670311][T10487] netlink_rcv_skb+0x226/0x4a0 [ 237.670335][T10487] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.670364][T10487] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.670409][T10487] ? down_read+0x2be/0x330 [ 237.670438][T10487] genl_rcv+0x28/0x40 [ 237.670463][T10487] netlink_unicast+0x8ef/0xa80 [ 237.670504][T10487] netlink_sendmsg+0x813/0xb40 [ 237.670538][T10487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.670568][T10487] ? apparmor_socket_sendmsg+0x98/0x360 [ 237.670594][T10487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.670615][T10487] sock_sendmsg_nosec+0x13a/0x180 [ 237.670642][T10487] ____sys_sendmsg+0x54e/0x850 [ 237.670668][T10487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.670698][T10487] ? import_iovec+0x73/0xa0 [ 237.670730][T10487] ___sys_sendmsg+0x2a5/0x360 [ 237.670749][T10487] ? __lock_acquire+0x747/0x2de0 [ 237.670774][T10487] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.670833][T10487] ? __fget_files+0x2a/0x420 [ 237.670848][T10487] ? __fget_files+0x3a2/0x420 [ 237.670874][T10487] __x64_sys_sendmsg+0x1b1/0x290 [ 237.670895][T10487] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.670939][T10487] do_syscall_64+0x166/0x520 [ 237.670960][T10487] ? trace_irq_disable+0x3b/0x140 [ 237.670979][T10487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.670998][T10487] ? clear_bhb_loop+0x70/0xc0 [ 237.671021][T10487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.671039][T10487] RIP: 0033:0x7f713bd9f559 [ 237.671057][T10487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.671071][T10487] RSP: 002b:00007f713ccd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.671091][T10487] RAX: ffffffffffffffda RBX: 00007f713c025fa0 RCX: 00007f713bd9f559 [ 237.671104][T10487] RDX: 0000000000048804 RSI: 0000200000000540 RDI: 0000000000000003 [ 237.671115][T10487] RBP: 00007f713ccd8090 R08: 0000000000000000 R09: 0000000000000000 [ 237.671126][T10487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 237.671136][T10487] R13: 00007f713c026038 R14: 00007f713c025fa0 R15: 00007ffd583bbfb8 [ 237.671167][T10487] [ 238.297382][T10521] xt_hashlimit: size too large, truncated to 1048576 [ 238.358513][T10509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.358538][T10509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.373477][T10509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.373502][T10509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.547235][T10659] netlink: 'syz.0.1396': attribute type 1 has an invalid length. [ 240.548431][T10656] bond4: entered allmulticast mode [ 240.577631][T10659] 8021q: adding VLAN 0 to HW filter on device bond3 [ 240.611600][T10659] bond3: (slave gretap3): making interface the new active one [ 240.620463][T10659] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 240.639974][T10664] netlink: 'syz.0.1396': attribute type 1 has an invalid length. [ 240.758034][T10672] __nla_validate_parse: 29 callbacks suppressed [ 240.758048][T10672] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1400'. [ 240.758056][T10672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1400'. [ 240.758062][T10672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1400'. [ 241.127922][T10692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1406'. [ 241.185318][T10694] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 241.249430][T10696] ip_tables: iptables: counters copy to user failed while replacing table [ 241.362479][T10704] openvswitch: netlink: Duplicate key (type 3). [ 241.411589][T10708] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1412'. [ 241.411612][T10708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1412'. [ 241.411623][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1412'. [ 241.851671][T10727] netlink: 'syz.0.1420': attribute type 3 has an invalid length. [ 242.018565][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1417'. [ 242.100786][T10745] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1424'. [ 242.100812][T10745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1424'. [ 242.231920][T10748] xt_hashlimit: size too large, truncated to 1048576 [ 242.268329][T10749] FAULT_INJECTION: forcing a failure. [ 242.268329][T10749] name failslab, interval 1, probability 0, space 0, times 0 [ 242.268359][T10749] CPU: 0 UID: 0 PID: 10749 Comm: syz.1.1425 Not tainted syzkaller #0 PREEMPT(full) [ 242.268378][T10749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 242.268389][T10749] Call Trace: [ 242.268396][T10749] [ 242.268404][T10749] dump_stack_lvl+0xe8/0x150 [ 242.268445][T10749] should_fail_ex+0x410/0x560 [ 242.268478][T10749] should_failslab+0xa8/0x100 [ 242.268502][T10749] ? dst_alloc+0x105/0x170 [ 242.268524][T10749] kmem_cache_alloc_noprof+0xa1/0x600 [ 242.268544][T10749] ? lock_acquire+0x115/0x350 [ 242.268564][T10749] ? dst_alloc+0x105/0x170 [ 242.268594][T10749] dst_alloc+0x105/0x170 [ 242.268622][T10749] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 242.268648][T10749] ? ip_route_output_key_hash_rcu+0x1da1/0x2720 [ 242.268682][T10749] ? ip_route_output_key_hash+0xd8/0x2a0 [ 242.268710][T10749] ip_route_output_key_hash+0x18d/0x2a0 [ 242.268739][T10749] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 242.268772][T10749] ? call_rcu+0x64d/0x8b0 [ 242.268796][T10749] ? lockdep_hardirqs_on+0x7b/0x110 [ 242.268826][T10749] ip_route_output_flow+0x2a/0x150 [ 242.268849][T10749] ? security_sk_classify_flow+0x6d/0x150 [ 242.268875][T10749] __ip4_datagram_connect+0x940/0x1220 [ 242.268917][T10749] udp_connect+0x32/0x1e0 [ 242.268939][T10749] kernel_connect+0x141/0x1c0 [ 242.268959][T10749] ? udp_init_sock+0x2f3/0x3b0 [ 242.268978][T10749] ? __pfx_kernel_connect+0x10/0x10 [ 242.269025][T10749] udp_sock_create4+0x256/0x480 [ 242.269056][T10749] ? __pfx_udp_sock_create4+0x10/0x10 [ 242.269085][T10749] ? __pfx___nla_validate_parse+0x10/0x10 [ 242.269112][T10749] fou_nl_add_doit+0x1a0/0xaf0 [ 242.269139][T10749] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 242.269157][T10749] ? trace_kmalloc+0x2a/0xf0 [ 242.269192][T10749] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 242.269218][T10749] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 242.269253][T10749] genl_family_rcv_msg_doit+0x233/0x340 [ 242.269292][T10749] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 242.269333][T10749] ? bpf_lsm_capable+0x9/0x20 [ 242.269352][T10749] ? security_capable+0x7e/0x2c0 [ 242.269386][T10749] genl_rcv_msg+0x614/0x7a0 [ 242.269417][T10749] ? __pfx_genl_rcv_msg+0x10/0x10 [ 242.269449][T10749] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 242.269483][T10749] netlink_rcv_skb+0x226/0x4a0 [ 242.269507][T10749] ? __pfx_genl_rcv_msg+0x10/0x10 [ 242.269533][T10749] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 242.269570][T10749] ? down_read+0x2be/0x330 [ 242.269598][T10749] genl_rcv+0x28/0x40 [ 242.269622][T10749] netlink_unicast+0x8ef/0xa80 [ 242.269660][T10749] netlink_sendmsg+0x813/0xb40 [ 242.269693][T10749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.269724][T10749] ? apparmor_socket_sendmsg+0x98/0x360 [ 242.269751][T10749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.269772][T10749] sock_sendmsg_nosec+0x13a/0x180 [ 242.269800][T10749] ____sys_sendmsg+0x54e/0x850 [ 242.269826][T10749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.269857][T10749] ? import_iovec+0x73/0xa0 [ 242.269888][T10749] ___sys_sendmsg+0x2a5/0x360 [ 242.269906][T10749] ? __lock_acquire+0x747/0x2de0 [ 242.269930][T10749] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.269989][T10749] ? __fget_files+0x2a/0x420 [ 242.270007][T10749] ? __fget_files+0x3a2/0x420 [ 242.270035][T10749] __x64_sys_sendmsg+0x1b1/0x290 [ 242.270057][T10749] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 242.270096][T10749] do_syscall_64+0x166/0x520 [ 242.270117][T10749] ? trace_irq_disable+0x3b/0x140 [ 242.270137][T10749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.270155][T10749] ? clear_bhb_loop+0x70/0xc0 [ 242.270180][T10749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.270198][T10749] RIP: 0033:0x7fa49d39f559 [ 242.270216][T10749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.270231][T10749] RSP: 002b:00007fa49e245028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.270250][T10749] RAX: ffffffffffffffda RBX: 00007fa49d625fa0 RCX: 00007fa49d39f559 [ 242.270263][T10749] RDX: 0000000000048804 RSI: 0000200000000540 RDI: 0000000000000003 [ 242.270275][T10749] RBP: 00007fa49e245090 R08: 0000000000000000 R09: 0000000000000000 [ 242.270285][T10749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 242.270295][T10749] R13: 00007fa49d626038 R14: 00007fa49d625fa0 R15: 00007ffe29d66908 [ 242.270325][T10749] [ 242.848246][T10769] netlink: 'syz.1.1432': attribute type 10 has an invalid length. [ 242.866198][T10769] team0: Device veth0_macvtap failed to register rx_handler [ 242.891927][T10769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.891952][T10769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.910614][T10769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.910639][T10769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.928718][T10769] batman_adv: batadv0: Interface deactivated: syz_tun [ 242.928750][T10769] batman_adv: batadv0: Removing interface: syz_tun [ 243.249617][T10784] bond0: (slave ip6tnl0): refused to change device type [ 243.430537][T10800] xt_hashlimit: size too large, truncated to 1048576 [ 243.905989][T10828] tipc: Enabled bearer , priority 9 [ 244.193093][T10845] syzkaller1: entered promiscuous mode [ 244.193115][T10845] syzkaller1: entered allmulticast mode [ 244.224478][T10845] syzkaller0: entered promiscuous mode [ 244.224501][T10845] syzkaller0: entered allmulticast mode [ 244.297780][T10853] xt_hashlimit: size too large, truncated to 1048576 [ 244.573164][T10871] netlink: 'syz.1.1468': attribute type 21 has an invalid length. [ 244.573227][T10871] netlink: 'syz.1.1468': attribute type 6 has an invalid length. [ 244.815383][T10886] netlink: 'syz.4.1473': attribute type 10 has an invalid length. [ 244.865150][T10886] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 244.900767][T10886] team0: Port device wlan0 added [ 248.028442][T10906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.233111][T10942] netlink: 'syz.1.1485': attribute type 2 has an invalid length. [ 248.392937][T10951] bond5: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 248.413521][T10951] bond5 (unregistering): Released all slaves [ 248.489934][T10952] bond5: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 248.510065][T10952] bond5 (unregistering): Released all slaves [ 248.546210][T10958] __nla_validate_parse: 25 callbacks suppressed [ 248.546231][T10958] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1492'. [ 248.572811][T10958] netlink: 'syz.1.1492': attribute type 1 has an invalid length. [ 248.640428][T10958] veth3: entered allmulticast mode [ 248.688003][T10968] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 248.706380][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1492'. [ 248.719618][T10967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1492'. [ 248.857526][T10989] SET target dimension over the limit! [ 248.870946][T10990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1499'. [ 249.323405][T11023] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1507'. [ 249.551034][T11032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1512'. [ 249.551353][T11032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1512'. [ 250.116792][T11068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1525'. [ 250.191042][T11071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1526'. [ 250.191375][T11071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1526'. [ 250.392761][T11086] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.619135][T11100] dvmrp0: entered allmulticast mode [ 251.693976][T11161] Bluetooth: hci0: load_link_keys: too big key_count value 5120 [ 251.746113][T11174] netlink: 'syz.4.1561': attribute type 30 has an invalid length. [ 251.859895][T11181] xt_hashlimit: size too large, truncated to 1048576 [ 252.501768][T11220] IPv6: addrconf: prefix option has invalid lifetime [ 252.761753][T11237] gtp3: entered promiscuous mode [ 252.761777][T11237] gtp3: entered allmulticast mode [ 253.245520][T11274] IPv6: addrconf: prefix option has invalid lifetime [ 253.656080][T11304] __nla_validate_parse: 5 callbacks suppressed [ 253.656101][T11304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1607'. [ 253.797664][T11314] IPv6: addrconf: prefix option has invalid lifetime [ 254.027433][T11334] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1614'. [ 254.269091][T11352] IPv6: addrconf: prefix option has invalid lifetime [ 254.512677][T11374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1633'. [ 254.515407][T11374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1633'. [ 254.612545][T11380] Bluetooth: MGMT ver 1.23 [ 254.739217][T11391] IPv6: addrconf: prefix option has invalid lifetime [ 255.211680][T11420] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.1652'. [ 255.497690][T11436] bond4: Removing last arp target with arp_interval on [ 255.688925][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.825454][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1665'. [ 256.652831][ T5632] Bluetooth: hci4: command 0x0406 tx timeout [ 256.931707][T11325] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 256.949711][T11429] netlink: 'syz.2.1655': attribute type 11 has an invalid length. [ 256.949732][T11429] netlink: 'syz.2.1655': attribute type 4 has an invalid length. [ 256.949744][T11429] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1655'. [ 257.108544][T11483] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1674'. [ 257.256583][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1679'. [ 257.256938][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1679'. [ 257.687275][T11526] netlink: 'syz.4.1695': attribute type 6 has an invalid length. [ 257.698826][T11523] 8021q: VLANs not supported on ip_vti0 [ 258.014142][T11546] SET target dimension over the limit! [ 258.448872][T11580] ip_tables: iptables: counters copy to user failed while replacing table [ 258.483468][T11580] xt_limit: Overflow, try lower: 536871034/0 [ 258.485121][T11584] SET target dimension over the limit! [ 258.709127][T11597] __nla_validate_parse: 21 callbacks suppressed [ 258.709146][T11597] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1729'. [ 258.709160][T11597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1729'. [ 258.709179][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1729'. [ 258.720699][T11601] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1730'. [ 259.013208][T11620] SET target dimension over the limit! [ 259.232945][T11632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1738'. [ 259.251868][T11632] ip_tables: iptables: counters copy to user failed while replacing table [ 259.317553][T11634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1740'. [ 259.338668][T11634] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 259.445257][T11641] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1742'. [ 259.445802][ T5623] Bluetooth: hci2: unexpected cc 0x2035 length: 2 > 1 [ 259.445828][ T5623] Bluetooth: hci2: unexpected event for opcode 0x2035 [ 259.580723][T11647] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1743'. [ 259.580749][T11647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1743'. [ 259.580761][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1743'. [ 259.673978][T11654] IPv6: addrconf: prefix option has invalid lifetime [ 259.850719][T11665] SET target dimension over the limit! [ 260.116252][T11681] xt_hashlimit: size too large, truncated to 1048576 [ 260.263686][T11677] bond5: invalid ARP target 0.0.0.0 specified for addition [ 260.263739][T11677] bond5: option arp_ip_target: invalid value (0) [ 260.271747][T11677] bond5 (unregistering): Released all slaves [ 260.657089][T11709] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 260.987155][T11731] xt_hashlimit: size too large, truncated to 1048576 [ 261.226610][T11748] SET target dimension over the limit! [ 261.441387][T11760] syzkaller1: entered promiscuous mode [ 261.441424][T11760] syzkaller1: entered allmulticast mode [ 261.483455][T11766] netlink: 'syz.2.1786': attribute type 1 has an invalid length. [ 261.483477][T11766] netlink: 'syz.2.1786': attribute type 2 has an invalid length. [ 261.493978][T11767] IPv6: addrconf: prefix option has invalid lifetime [ 261.765976][T11784] SET target dimension over the limit! [ 261.858745][T11789] netlink: 'syz.0.1796': attribute type 1 has an invalid length. [ 262.075577][T11805] netlink: 'syz.3.1801': attribute type 1 has an invalid length. [ 262.075601][T11805] netlink: 'syz.3.1801': attribute type 4 has an invalid length. [ 262.081357][T11805] netlink: 'syz.3.1801': attribute type 1 has an invalid length. [ 262.081377][T11805] netlink: 'syz.3.1801': attribute type 4 has an invalid length. [ 262.152700][T11789] bond5: (slave bridge4): making interface the new active one [ 262.153656][T11789] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 262.228831][T11810] bridge0: port 4(veth0) entered blocking state [ 262.228953][T11810] bridge0: port 4(veth0) entered forwarding state [ 262.229248][T11810] bridge0: port 3(bond0) entered blocking state [ 262.229360][T11810] bridge0: port 3(bond0) entered forwarding state [ 262.229602][T11810] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.229755][T11810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.230017][T11810] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.230152][T11810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.259545][T11810] bridge0: entered promiscuous mode [ 262.327673][T11816] SET target dimension over the limit! [ 262.786130][T11850] xt_hashlimit: size too large, truncated to 1048576 [ 263.111831][T11874] Cannot find del_set index 65532 as target [ 263.355169][T11884] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.663228][T11911] netlink: 'syz.4.1836': attribute type 1 has an invalid length. [ 263.717145][T11917] netlink: 'syz.3.1839': attribute type 1 has an invalid length. [ 263.720648][T11911] bond5: entered promiscuous mode [ 263.721087][T11911] 8021q: adding VLAN 0 to HW filter on device bond5 [ 263.721689][T11912] __nla_validate_parse: 24 callbacks suppressed [ 263.721705][T11912] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1838'. [ 263.772578][T11922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1839'. [ 263.805454][T11917] 8021q: adding VLAN 0 to HW filter on device bond5 [ 263.825116][T11918] vlan3: entered allmulticast mode [ 263.825138][T11918] bond5: entered allmulticast mode [ 263.929749][T11917] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1839'. [ 264.078495][T11939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1847'. [ 264.106217][T11939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1847'. [ 264.215674][T11948] SET target dimension over the limit! [ 264.303854][T11956] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1853'. [ 264.340509][T11960] IPv6: addrconf: prefix option has invalid lifetime [ 264.573764][T11974] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1862'. [ 264.573787][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1862'. [ 264.573800][T11974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1862'. [ 264.641924][T11980] SET target dimension over the limit! [ 264.738772][T11987] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1867'. [ 264.860883][ C0] vcan0: j1939_tp_rxtimer: 0xffff888076ecc800: rx timeout, send abort [ 264.861265][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888076ecc800: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 265.101320][T12009] netlink: 'syz.0.1874': attribute type 1 has an invalid length. [ 265.109755][T12009] syzkaller0: entered promiscuous mode [ 265.109776][T12009] syzkaller0: entered allmulticast mode [ 265.562937][T12045] IPv6: addrconf: prefix option has invalid lifetime [ 265.853237][T12064] bridge0: port 4(veth0) entered blocking state [ 265.854148][T12064] bridge0: port 4(veth0) entered disabled state [ 265.854336][T12064] veth0: entered allmulticast mode [ 265.858279][T12064] veth0: entered promiscuous mode [ 265.860496][T12064] bridge0: port 4(veth0) entered blocking state [ 265.860603][T12064] bridge0: port 4(veth0) entered forwarding state [ 266.038150][T12070] netlink: 'syz.4.1901': attribute type 2 has an invalid length. [ 266.180035][T12075] syzkaller0: entered promiscuous mode [ 266.180057][T12075] syzkaller0: entered allmulticast mode [ 266.474428][T12083] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 266.531252][T12098] SET target dimension over the limit! [ 266.841846][T12119] syzkaller0: entered promiscuous mode [ 266.841868][T12119] syzkaller0: entered allmulticast mode [ 267.095002][T12135] SET target dimension over the limit! [ 267.367831][T12149] syzkaller0: entered promiscuous mode [ 267.367858][T12149] syzkaller0: entered allmulticast mode [ 267.675477][T12173] SET target dimension over the limit! [ 268.028341][T12192] syzkaller0: entered promiscuous mode [ 268.028363][T12192] syzkaller0: entered allmulticast mode [ 268.136633][T12207] SET target dimension over the limit! [ 268.628914][T12243] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 268.628940][T12243] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 268.682196][T12245] bridge0: port 3(gretap0) entered disabled state [ 268.682427][T12245] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.739702][T12245] bridge0: port 3(gretap0) entered blocking state [ 268.739811][T12245] bridge0: port 3(gretap0) entered forwarding state [ 268.740087][T12245] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.740209][T12245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.740803][T12245] bridge0: entered promiscuous mode [ 268.740821][T12245] bridge0: entered allmulticast mode [ 268.827159][T12248] SET target dimension over the limit! [ 268.924798][T12256] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 268.931126][T12256] netlink: ct_mark mask cannot be 0 [ 268.931155][T12256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.028240][T12266] __nla_validate_parse: 23 callbacks suppressed [ 269.028262][T12266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1982'. [ 269.028589][T12266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1982'. [ 269.121019][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1979'. [ 269.222905][T12276] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1984'. [ 269.274621][T12280] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1986'. [ 269.411610][T12284] syzkaller0: entered promiscuous mode [ 269.411633][T12284] syzkaller0: entered allmulticast mode [ 269.435787][T12290] netlink: 'syz.3.1990': attribute type 62 has an invalid length. [ 269.438228][T12290] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 269.494531][T12294] SET target dimension over the limit! [ 269.698298][T12305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1996'. [ 269.698627][T12305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1996'. [ 269.700731][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1999'. [ 269.778852][T12311] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2000'. [ 269.953810][T12323] netlink: 'syz.4.2004': attribute type 1 has an invalid length. [ 269.988848][T12321] syzkaller0: entered promiscuous mode [ 269.988868][T12321] syzkaller0: entered allmulticast mode [ 270.121658][T12325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2005'. [ 270.138591][T12336] SET target dimension over the limit! [ 270.748601][T12380] SET target dimension over the limit! [ 270.751637][T12377] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 270.751664][T12377] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 271.219041][T12413] netlink: 'syz.2.2036': attribute type 6 has an invalid length. [ 271.361595][T12427] xt_hashlimit: size too large, truncated to 1048576 [ 271.372965][T12425] syzkaller0: left promiscuous mode [ 271.372989][T12425] syzkaller0: left allmulticast mode [ 271.808696][T12454] netlink: 'syz.4.2046': attribute type 8 has an invalid length. [ 271.962946][T12460] netlink: 'syz.1.2052': attribute type 11 has an invalid length. [ 271.962971][T12460] netlink: 'syz.1.2052': attribute type 11 has an invalid length. [ 272.036000][T12464] SET target dimension over the limit! [ 272.196015][T12473] xt_hashlimit: size too large, truncated to 1048576 [ 272.544276][T12496] IPv6: addrconf: prefix option has invalid lifetime [ 272.690442][T12508] SET target dimension over the limit! [ 273.029811][T12531] xt_hashlimit: size too large, truncated to 1048576 [ 273.082711][T12537] IPv6: addrconf: prefix option has invalid lifetime [ 273.214339][T12538] 8021q: adding VLAN 0 to HW filter on device team1 [ 273.220871][T12542] netlink: 'syz.0.2084': attribute type 1 has an invalid length. [ 273.358226][T12548] nbd0: detected capacity change from 0 to 63 [ 273.360786][T12549] block nbd0: NBD_DISCONNECT [ 273.367494][T12549] block nbd0: Disconnected due to user request. [ 273.369792][T12549] block nbd0: shutting down sockets [ 273.387377][T12553] SET target dimension over the limit! [ 273.567944][T12562] netlink: 'syz.2.2091': attribute type 1 has an invalid length. [ 273.865935][T12585] xt_hashlimit: size too large, truncated to 1048576 [ 273.971870][T12591] ip_tables: iptables: counters copy to user failed while replacing table [ 274.036924][T12593] SET target dimension over the limit! [ 274.112257][T12595] __nla_validate_parse: 33 callbacks suppressed [ 274.112278][T12595] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2105'. [ 274.355348][T12614] IPv6: addrconf: prefix option has invalid lifetime [ 274.380814][T12616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2111'. [ 274.429203][T12616] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2111'. [ 274.429727][T12616] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2111'. [ 274.641135][T12628] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2116'. [ 274.641158][T12628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2116'. [ 274.641172][T12628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2116'. [ 274.717023][T12632] xt_hashlimit: size too large, truncated to 1048576 [ 274.849652][T12645] netlink: 'syz.2.2118': attribute type 23 has an invalid length. [ 276.505711][T12639] netlink: 'syz.2.2118': attribute type 3 has an invalid length. [ 276.510770][T12648] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2119'. [ 276.845448][T12664] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 276.845933][T12664] gretap1: entered promiscuous mode [ 276.845949][T12664] gretap1: entered allmulticast mode [ 276.851995][T12664] tipc: Started in network mode [ 276.852022][T12664] tipc: Node identity ac1414aa, cluster identity 4711 [ 276.852068][T12664] tipc: Enabling of bearer rejected, failed to enable media [ 277.135621][T12684] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2133'. [ 277.190993][T12686] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2134'. [ 277.249148][T12690] IPv6: addrconf: prefix option has invalid lifetime [ 277.351184][T12698] sit0: entered promiscuous mode [ 277.362455][T12698] netlink: 'syz.4.2139': attribute type 1 has an invalid length. [ 277.682103][T12656] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 277.757946][T12728] IPv6: addrconf: prefix option has invalid lifetime [ 278.807030][ T5623] Bluetooth: hci0: command 0x080f tx timeout [ 279.729636][T12750] FAULT_INJECTION: forcing a failure. [ 279.729636][T12750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.729669][T12750] CPU: 0 UID: 0 PID: 12750 Comm: syz.3.2155 Not tainted syzkaller #0 PREEMPT(full) [ 279.729690][T12750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 279.729701][T12750] Call Trace: [ 279.729708][T12750] [ 279.729716][T12750] dump_stack_lvl+0xe8/0x150 [ 279.729746][T12750] should_fail_ex+0x410/0x560 [ 279.729776][T12750] _copy_from_user+0x2d/0xb0 [ 279.729804][T12750] ___sys_sendmsg+0x1c6/0x360 [ 279.729833][T12750] ? __lock_acquire+0x747/0x2de0 [ 279.729859][T12750] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.729913][T12750] ? __fget_files+0x2a/0x420 [ 279.729931][T12750] ? __fget_files+0x3a2/0x420 [ 279.729958][T12750] __x64_sys_sendmsg+0x1b1/0x290 [ 279.729980][T12750] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 279.730018][T12750] do_syscall_64+0x166/0x520 [ 279.730040][T12750] ? trace_irq_disable+0x3b/0x140 [ 279.730059][T12750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.730079][T12750] ? clear_bhb_loop+0x70/0xc0 [ 279.730100][T12750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.730119][T12750] RIP: 0033:0x7ff10399f559 [ 279.730136][T12750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.730152][T12750] RSP: 002b:00007ff10493a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.730171][T12750] RAX: ffffffffffffffda RBX: 00007ff103c25fa0 RCX: 00007ff10399f559 [ 279.730184][T12750] RDX: 0000000000008040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 279.730194][T12750] RBP: 00007ff10493a090 R08: 0000000000000000 R09: 0000000000000000 [ 279.730205][T12750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.730215][T12750] R13: 00007ff103c26038 R14: 00007ff103c25fa0 R15: 00007fff138bbea8 [ 279.730243][T12750] [ 280.036771][T12764] __nla_validate_parse: 6 callbacks suppressed [ 280.036806][T12764] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2160'. [ 280.109499][T12762] xt_hashlimit: size too large, truncated to 1048576 [ 280.118869][T12768] IPv6: addrconf: prefix option has invalid lifetime [ 280.206274][T12769] netlink: 'syz.3.2162': attribute type 1 has an invalid length. [ 280.365162][T12752] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2154'. [ 280.600711][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2164'. [ 280.600742][T12780] netlink: 'syz.3.2164': attribute type 5 has an invalid length. [ 280.600756][T12780] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2164'. [ 280.642368][T12780] geneve3: entered promiscuous mode [ 280.645626][T12780] geneve3: entered allmulticast mode [ 280.662495][ T43] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 280.662540][ T43] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 280.662570][ T43] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 280.662599][ T43] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 280.958558][T12800] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2169'. [ 281.127746][T12816] IPv6: addrconf: prefix option has invalid lifetime [ 281.285807][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2177'. [ 281.286261][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2177'. [ 281.587550][T12845] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2184'. [ 281.812327][T12861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2191'. [ 281.812384][T12861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2191'. [ 282.034756][T12873] syzkaller0: entered promiscuous mode [ 282.034778][T12873] syzkaller0: entered allmulticast mode [ 284.595902][T12925] SET target dimension over the limit! [ 284.858068][T12945] netlink: 'syz.0.2220': attribute type 4 has an invalid length. [ 284.940957][T12952] IPv6: addrconf: prefix option has invalid lifetime [ 285.140021][T12968] SET target dimension over the limit! [ 285.198996][T12973] __nla_validate_parse: 134 callbacks suppressed [ 285.199017][T12973] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2233'. [ 285.342248][T12985] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2238'. [ 285.600335][T13002] SET target dimension over the limit! [ 285.659103][T13004] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2244'. [ 285.661008][T13004] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2244'. [ 285.661048][T13004] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2244'. [ 285.708338][T13012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2246'. [ 285.754471][T13012] ipvlan2: entered allmulticast mode [ 285.754494][T13012] virt_wifi0: entered allmulticast mode [ 285.779842][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2246'. [ 286.170566][T13041] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2255'. [ 286.436501][T13055] SET target dimension over the limit! [ 286.979527][T13083] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2271'. [ 287.112796][T13092] SET target dimension over the limit! [ 287.351603][T13104] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2280'. [ 287.554690][T13116] netlink: 'syz.0.2285': attribute type 1 has an invalid length. [ 287.642029][T13121] IPv6: addrconf: prefix option has invalid lifetime [ 288.157450][T13163] IPv6: addrconf: prefix option has invalid lifetime [ 288.305209][T13174] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:24 [ 288.305489][T13174] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:21 [ 288.924659][T13214] netlink: 'syz.4.2324': attribute type 1 has an invalid length. [ 288.986866][T13214] 8021q: adding VLAN 0 to HW filter on device bond6 [ 289.208648][T13230] syzkaller0: left promiscuous mode [ 289.208671][T13230] syzkaller0: left allmulticast mode [ 290.429694][T13293] __nla_validate_parse: 11 callbacks suppressed [ 290.429717][T13293] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2347'. [ 292.198600][T13299] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2350'. [ 292.395638][T13319] FAULT_INJECTION: forcing a failure. [ 292.395638][T13319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.395671][T13319] CPU: 1 UID: 0 PID: 13319 Comm: syz.1.2357 Not tainted syzkaller #0 PREEMPT(full) [ 292.395692][T13319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 292.395704][T13319] Call Trace: [ 292.395711][T13319] [ 292.395719][T13319] dump_stack_lvl+0xe8/0x150 [ 292.395751][T13319] should_fail_ex+0x410/0x560 [ 292.395782][T13319] _copy_to_user+0x31/0xb0 [ 292.395803][T13319] simple_read_from_buffer+0xe1/0x170 [ 292.395837][T13319] proc_fail_nth_read+0x1bb/0x230 [ 292.395858][T13319] ? common_file_perm+0x20e/0x2b0 [ 292.395887][T13319] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 292.395913][T13319] ? rw_verify_area+0x24a/0x4c0 [ 292.395934][T13319] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 292.395955][T13319] vfs_read+0x213/0xa80 [ 292.395980][T13319] ? __pfx___mutex_lock+0x10/0x10 [ 292.396003][T13319] ? __pfx_vfs_read+0x10/0x10 [ 292.396023][T13319] ? __fget_files+0x2a/0x420 [ 292.396046][T13319] ? __fget_files+0x3a2/0x420 [ 292.396062][T13319] ? __fget_files+0x2a/0x420 [ 292.396088][T13319] ksys_read+0x150/0x270 [ 292.396116][T13319] ? __pfx_ksys_read+0x10/0x10 [ 292.396148][T13319] do_syscall_64+0x166/0x520 [ 292.396173][T13319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.396192][T13319] ? clear_bhb_loop+0x70/0xc0 [ 292.396216][T13319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.396235][T13319] RIP: 0033:0x7fa49d35fd8e [ 292.396253][T13319] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 292.396269][T13319] RSP: 002b:00007fa49e244fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 292.396289][T13319] RAX: ffffffffffffffda RBX: 00007fa49e2456c0 RCX: 00007fa49d35fd8e [ 292.396303][T13319] RDX: 000000000000000f RSI: 00007fa49e2450a0 RDI: 0000000000000006 [ 292.396314][T13319] RBP: 00007fa49e245090 R08: 0000000000000000 R09: 0000000000000000 [ 292.396326][T13319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.396337][T13319] R13: 00007fa49d626038 R14: 00007fa49d625fa0 R15: 00007ffe29d66908 [ 292.396369][T13319] [ 292.582737][T13324] SET target dimension over the limit! [ 292.664115][T13323] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 292.876190][T13338] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2366'. [ 292.999640][T13348] SET target dimension over the limit! [ 293.243281][T13363] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2376'. [ 293.356938][T13377] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2383'. [ 293.487769][T13384] SET target dimension over the limit! [ 293.546586][T13388] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2388'. [ 293.771843][T13379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2384'. [ 293.842864][T13401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2384'. [ 293.842897][T13401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2384'. [ 295.631962][T13401] bridge4: entered promiscuous mode [ 295.631985][T13401] bridge4: entered allmulticast mode [ 296.639943][T13394] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 296.842779][T13437] SET target dimension over the limit! [ 296.934986][T13441] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2401'. [ 297.147884][T13459] IPv6: addrconf: prefix option has invalid lifetime [ 299.818028][T13469] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2414'. [ 300.004604][T13489] bridge0: port 1(bond0) entered blocking state [ 300.004711][T13489] bridge0: port 1(bond0) entered disabled state [ 300.004888][T13489] bond0: entered allmulticast mode [ 300.004904][T13489] bond_slave_0: entered allmulticast mode [ 300.004919][T13489] bond_slave_1: entered allmulticast mode [ 300.007645][T13489] bond0: left allmulticast mode [ 300.007665][T13489] bond_slave_0: left allmulticast mode [ 300.007681][T13489] bond_slave_1: left allmulticast mode [ 300.198553][T13500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2426'. [ 300.200445][T13500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2426'. [ 300.258339][T13503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2427'. [ 300.327948][T13508] SET target dimension over the limit! [ 300.504370][T13510] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2430'. [ 301.159168][T13524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2434'. [ 301.184957][T13524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2434'. [ 301.296596][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2438'. [ 301.296632][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2438'. [ 301.783042][T13565] SET target dimension over the limit! [ 301.802341][T13567] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 302.864727][T13606] SET target dimension over the limit! [ 304.450675][T13613] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 304.738973][T13630] veth1_to_bond: entered allmulticast mode [ 304.739119][T13630] veth1_to_bond: left allmulticast mode [ 304.849436][T13643] SET target dimension over the limit! [ 304.880915][T13641] IPv6: addrconf: prefix option has invalid lifetime [ 304.971362][T13648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2476'. [ 304.987923][T13649] netlink: 'syz.2.2477': attribute type 1 has an invalid length. [ 304.987945][T13649] netlink: 'syz.2.2477': attribute type 1 has an invalid length. [ 304.987956][T13649] netlink: 'syz.2.2477': attribute type 1 has an invalid length. [ 304.987967][T13649] netlink: 'syz.2.2477': attribute type 1 has an invalid length. [ 304.987979][T13649] netlink: 'syz.2.2477': attribute type 1 has an invalid length. [ 305.032818][T13654] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2476'. [ 305.054895][T13648] 8021q: adding VLAN 0 to HW filter on device bond7 [ 305.211906][T13660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2484'. [ 305.291030][T13660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2484'. [ 307.766646][T13729] IPv6: addrconf: prefix option has invalid lifetime [ 307.772387][T13730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2505'. [ 307.790397][T13732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2505'. [ 307.842629][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2507'. [ 307.925569][T13740] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2509'. [ 307.990371][T13745] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2510'. [ 309.977676][T13759] netlink: 'syz.4.2515': attribute type 29 has an invalid length. [ 310.098290][T13768] IPv6: addrconf: prefix option has invalid lifetime [ 310.176898][ T5623] Bluetooth: hci1: ISO packet too small [ 310.221213][T13777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2522'. [ 310.221538][T13777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2522'. [ 310.661772][T13806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2532'. [ 310.704140][ T5623] block nbd0: Receive control failed (result -107) [ 310.771622][T13809] Bluetooth: ISO socket layer initialized [ 310.863541][T13813] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.2531'. [ 312.531919][T13813] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 312.545641][T13813] 0ªX¹¦Dö»: entered allmulticast mode [ 312.599555][T13837] xt_hashlimit: size too large, truncated to 1048576 [ 312.745514][T13841] ip_tables: iptables: counters copy to user failed while replacing table [ 312.773610][T13841] ip_tables: iptables: counters copy to user failed while replacing table [ 312.776726][T13845] IPv6: addrconf: prefix option has invalid lifetime [ 312.969010][T13859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2549'. [ 312.975904][T13859] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 314.127864][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2561'. [ 314.127893][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2561'. [ 314.127956][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2561'. [ 314.308392][T13895] netlink: 'syz.0.2563': attribute type 2 has an invalid length. [ 314.858919][T13917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2569'. [ 314.858981][T13917] IPv6: NLM_F_CREATE should be specified when creating new route [ 314.859070][T13917] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 314.859079][T13917] IPv6: NLM_F_CREATE should be set when creating new route [ 314.859104][T13917] IPv6: NLM_F_CREATE should be set when creating new route [ 314.859431][T13908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2569'. [ 314.859509][T13908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.393834][T13882] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2557'. [ 315.619749][T13929] SET target dimension over the limit! [ 315.792089][T13945] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2579'. [ 315.796777][T13943] xt_hashlimit: size too large, truncated to 1048576 [ 316.242214][T13969] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 316.243610][T13972] SET target dimension over the limit! [ 316.306593][T13975] openvswitch: netlink: Message has 8 unknown bytes. [ 316.354854][T13978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2587'. [ 316.354891][T13978] netlink: 'syz.2.2587': attribute type 7 has an invalid length. [ 316.354904][T13978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2587'. [ 316.618979][T13982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2591'. [ 317.129915][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.119025][T13994] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 318.120630][T13994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2594'. [ 318.200000][T13999] IPv6: addrconf: prefix option has invalid lifetime [ 318.372024][T14010] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2597'. [ 318.501213][T14018] xt_hashlimit: size too large, truncated to 1048576 [ 318.727193][T14032] netlink: 'syz.2.2603': attribute type 2 has an invalid length. [ 319.118287][T14048] IPv6: addrconf: prefix option has invalid lifetime [ 319.181115][T14051] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2610'. [ 319.200015][T14052] netlink: 'syz.2.2611': attribute type 10 has an invalid length. [ 319.218276][T14052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2611'. [ 319.530618][T14071] xt_hashlimit: size too large, truncated to 1048576 [ 319.660357][T14078] netlink: 872 bytes leftover after parsing attributes in process `syz.3.2622'. [ 319.988293][T14097] tipc: Failed to remove unknown binding: 66,1,1/0:1072228449/1072228451 [ 320.009453][T14097] netlink: 'syz.4.2629': attribute type 1 has an invalid length. [ 320.098091][T14097] bond8: entered promiscuous mode [ 320.098493][T14097] 8021q: adding VLAN 0 to HW filter on device bond8 [ 320.408860][T14124] __nla_validate_parse: 1 callbacks suppressed [ 320.408880][T14124] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2639'. [ 320.585786][ T5632] block nbd1: Receive control failed (result -32) [ 320.587315][ T5623] block nbd1: Receive control failed (result -32) [ 320.611616][T14139] netlink: 524 bytes leftover after parsing attributes in process `syz.0.2646'. [ 320.620655][T14139] netlink: 'syz.0.2646': attribute type 10 has an invalid length. [ 320.620677][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2646'. [ 320.764446][T14145] IPv6: addrconf: prefix option has invalid lifetime [ 320.944726][T14161] SET target dimension over the limit! [ 321.087071][T14172] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2660'. [ 321.119646][T14178] IPv6: addrconf: prefix option has invalid lifetime [ 321.237411][T14182] xt_ecn: cannot match TCP bits for non-tcp packets [ 321.239307][T14182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2664'. [ 321.269263][T14128] FAULT_INJECTION: forcing a failure. [ 321.269263][T14128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.269316][T14128] CPU: 1 UID: 0 PID: 14128 Comm: syz.2.2642 Not tainted syzkaller #0 PREEMPT(full) [ 321.269337][T14128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 321.269352][T14128] Call Trace: [ 321.269362][T14128] [ 321.269371][T14128] dump_stack_lvl+0xe8/0x150 [ 321.269402][T14128] should_fail_ex+0x410/0x560 [ 321.269431][T14128] core_sys_select+0x8be/0xb40 [ 321.269456][T14128] ? get_pid_task+0x20/0x1f0 [ 321.269499][T14128] ? __pfx_core_sys_select+0x10/0x10 [ 321.269549][T14128] ? __pfx_set_user_sigmask+0x10/0x10 [ 321.269575][T14128] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 321.269606][T14128] __se_sys_pselect6+0x267/0x320 [ 321.269636][T14128] ? __pfx___se_sys_pselect6+0x10/0x10 [ 321.269661][T14128] ? __pfx_ksys_write+0x10/0x10 [ 321.269687][T14128] ? __x64_sys_pselect6+0x21/0xf0 [ 321.269715][T14128] do_syscall_64+0x166/0x520 [ 321.269736][T14128] ? trace_irq_disable+0x3b/0x140 [ 321.269755][T14128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.269774][T14128] ? clear_bhb_loop+0x70/0xc0 [ 321.269797][T14128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.269815][T14128] RIP: 0033:0x7f713bd9f559 [ 321.269833][T14128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.269848][T14128] RSP: 002b:00007f713ccd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 321.269868][T14128] RAX: ffffffffffffffda RBX: 00007f713c025fa0 RCX: 00007f713bd9f559 [ 321.269884][T14128] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000040 [ 321.269896][T14128] RBP: 00007f713ccd8090 R08: 0000000000000000 R09: 0000000000000000 [ 321.269907][T14128] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 321.269919][T14128] R13: 00007f713c026038 R14: 00007f713c025fa0 R15: 00007ffd583bbfb8 [ 321.269956][T14128] [ 321.324308][T14187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2665'. [ 321.430452][T14193] netlink: 'syz.1.2664': attribute type 58 has an invalid length. [ 321.430474][T14193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2664'. [ 321.506938][T14182] bond6: entered promiscuous mode [ 321.506962][T14182] bond6: entered allmulticast mode [ 321.639400][T14199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2670'. [ 321.690670][T14203] SET target dimension over the limit! [ 321.793661][T14209] xt_hashlimit: overflow, try lower: 3/0 [ 321.812311][T14211] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2675'. [ 322.038964][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 322.052077][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 322.060501][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 322.065096][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 322.066291][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 322.565404][ T5614] tipc: Resetting bearer [ 322.690973][ T5614] tipc: Disabling bearer [ 322.707291][T14242] SET target dimension over the limit! [ 322.961087][ T8780] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.961121][ T8780] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.135665][ T8780] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.135707][ T8780] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.304072][T14268] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2693'. [ 323.308637][T14216] rxe_eth0 speed is unknown, defaulting to 1000 [ 323.426768][ T8780] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.426803][ T8780] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.635913][ T8780] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.635945][ T8780] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.684461][T14281] SET target dimension over the limit! [ 324.049666][T14292] netlink: 'syz.3.2700': attribute type 2 has an invalid length. [ 324.078623][ T8780] veth0: left allmulticast mode [ 324.078670][ T8780] veth0: left promiscuous mode [ 324.080296][ T8780] bridge0: port 4(veth0) entered disabled state [ 324.083829][ T5623] Bluetooth: hci5: command tx timeout [ 324.133786][ T8780] bond0: left allmulticast mode [ 324.133809][ T8780] bond_slave_0: left allmulticast mode [ 324.133824][ T8780] bond_slave_1: left allmulticast mode [ 324.136720][ T8780] bond0: left promiscuous mode [ 324.136739][ T8780] bond_slave_0: left promiscuous mode [ 324.136983][ T8780] bond_slave_1: left promiscuous mode [ 324.138339][ T8780] bridge0: port 3(bond0) entered disabled state [ 324.166469][ T8780] bridge_slave_1: left allmulticast mode [ 324.166493][ T8780] bridge_slave_1: left promiscuous mode [ 324.166958][ T8780] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.181683][ T8780] bridge_slave_0: left allmulticast mode [ 324.185566][ T8780] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.220604][ T8780] dvmrp0: left allmulticast mode [ 324.465214][ T8780] bond3 (unregistering): (slave gretap3): Releasing active interface [ 324.588266][ T8780] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 324.620075][ T8780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.631650][ T8780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.636968][ T8780] bond0 (unregistering): Released all slaves [ 324.646358][ T8780] bond1 (unregistering): Released all slaves [ 324.661995][ T8780] bond2 (unregistering): Released all slaves [ 324.679458][ T8780] bond3 (unregistering): Released all slaves [ 324.696911][ T8780] bond4 (unregistering): Released all slaves [ 324.716507][ T8780] bond5 (unregistering): Released all slaves [ 324.944063][ T8780] tipc: Left network mode [ 325.069159][T14317] x_tables: duplicate underflow at hook 2 [ 325.360167][T14333] SET target dimension over the limit! [ 325.474685][T14216] ip6gretap0 speed is unknown, defaulting to 1000 [ 325.600483][T14340] __nla_validate_parse: 5 callbacks suppressed [ 325.600501][T14340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2716'. [ 325.602763][T14340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2716'. [ 325.605018][T14340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2716'. [ 325.653578][T14340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2716'. [ 325.686247][T14344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2716'. [ 325.691685][T14345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2716'. [ 325.705792][T14349] netlink: 'syz.3.2718': attribute type 11 has an invalid length. [ 325.819240][T14349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2718'. [ 325.819563][T14349] 8021q: VLANs not supported on ip6tnl0 [ 325.827175][T14351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2718'. [ 325.827470][T14351] 8021q: VLANs not supported on ip6tnl0 [ 325.893946][T14357] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2721'. [ 326.053654][T14366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.168307][ T5623] Bluetooth: hci5: command tx timeout [ 326.770707][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 327.725140][ T5623] Bluetooth: hci2: unexpected event for opcode 0x0c12 [ 327.728801][T14452] netlink: 'syz.2.2744': attribute type 1 has an invalid length. [ 328.166431][T14452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.243538][ T5623] Bluetooth: hci5: command tx timeout [ 328.560539][T14479] vlan1: entered allmulticast mode [ 328.560559][T14479] veth1_macvtap: entered allmulticast mode [ 328.661179][T14489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2752'. [ 328.661199][T14489] tipc: Invalid UDP bearer configuration [ 328.661235][T14489] tipc: Enabling of bearer rejected, failed to enable media [ 328.668510][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 328.749037][ T8780] hsr_slave_0: left promiscuous mode [ 328.750909][ T8780] hsr_slave_1: left promiscuous mode [ 328.811213][ T8780] veth0_macvtap: left promiscuous mode [ 328.811347][ T8780] veth1_vlan: left promiscuous mode [ 328.811441][ T8780] veth0_vlan: left promiscuous mode [ 328.977572][T14511] SET target dimension over the limit! [ 329.187880][ T8780] team0 (unregistering): Port device team_slave_1 removed [ 329.230607][ T8780] team0 (unregistering): Port device team_slave_0 removed [ 329.408324][T14501] tipc: Invalid UDP bearer configuration [ 329.408365][T14501] tipc: Enabling of bearer rejected, failed to enable media [ 329.491949][T14216] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.492035][T14216] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.518959][T14216] bridge_slave_0: entered allmulticast mode [ 329.529168][T14216] bridge_slave_0: entered promiscuous mode [ 329.543888][T14216] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.543987][T14216] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.544121][T14216] bridge_slave_1: entered allmulticast mode [ 329.545675][T14216] bridge_slave_1: entered promiscuous mode [ 329.659620][T14216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.676135][T14216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.750198][T14216] team0: Port device team_slave_0 added [ 329.758993][T14216] team0: Port device team_slave_1 added [ 329.811709][T14216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.811726][T14216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.811747][T14216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.866434][T14216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.866450][T14216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.866470][T14216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.967723][T14216] hsr_slave_0: entered promiscuous mode [ 329.968693][T14216] hsr_slave_1: entered promiscuous mode [ 329.969448][T14216] debugfs: 'hsr0' already exists in 'hsr' [ 329.969466][T14216] Cannot create hsr debugfs directory [ 330.199879][T14541] sock: sock_timestamping_bind_phc: sock not bind to device [ 330.214167][T14541] IPv6: NLM_F_REPLACE set, but no existing node found! [ 330.242562][ T8780] IPVS: stop unused estimator thread 0... [ 330.288456][T14545] SET target dimension over the limit! [ 330.324829][ T5623] Bluetooth: hci5: command tx timeout [ 330.489621][T14551] FAULT_INJECTION: forcing a failure. [ 330.489621][T14551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.489653][T14551] CPU: 1 UID: 0 PID: 14551 Comm: syz.1.2769 Not tainted syzkaller #0 PREEMPT(full) [ 330.489674][T14551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 330.489684][T14551] Call Trace: [ 330.489692][T14551] [ 330.489700][T14551] dump_stack_lvl+0xe8/0x150 [ 330.489731][T14551] should_fail_ex+0x410/0x560 [ 330.489761][T14551] _copy_from_user+0x2d/0xb0 [ 330.489791][T14551] __sys_bpf+0x2e7/0xd90 [ 330.489822][T14551] ? __pfx___sys_bpf+0x10/0x10 [ 330.489855][T14551] ? __fget_files+0x2a/0x420 [ 330.489889][T14551] ? ksys_write+0x242/0x270 [ 330.489911][T14551] ? __pfx_ksys_write+0x10/0x10 [ 330.489935][T14551] __x64_sys_bpf+0xba/0xd0 [ 330.489959][T14551] do_syscall_64+0x166/0x520 [ 330.489980][T14551] ? trace_irq_disable+0x3b/0x140 [ 330.489999][T14551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.490018][T14551] ? clear_bhb_loop+0x70/0xc0 [ 330.490041][T14551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.490059][T14551] RIP: 0033:0x7fa49d39f559 [ 330.490083][T14551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.490098][T14551] RSP: 002b:00007fa49e245028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 330.490118][T14551] RAX: ffffffffffffffda RBX: 00007fa49d625fa0 RCX: 00007fa49d39f559 [ 330.490131][T14551] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 330.490143][T14551] RBP: 00007fa49e245090 R08: 0000000000000000 R09: 0000000000000000 [ 330.490154][T14551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.490165][T14551] R13: 00007fa49d626038 R14: 00007fa49d625fa0 R15: 00007ffe29d66908 [ 330.490195][T14551] [ 330.659884][T14556] __nla_validate_parse: 4 callbacks suppressed [ 330.659901][T14556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2770'. [ 330.678822][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2771'. [ 330.791694][T14556] veth0: entered promiscuous mode [ 330.796952][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2771'. [ 330.968959][T14552] veth0: left promiscuous mode [ 331.377483][T14594] SET target dimension over the limit! [ 331.461706][T14216] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 331.493811][T14216] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 331.500875][T14216] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 331.523558][T14216] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 331.524773][T14216] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 331.564264][T14216] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 331.565072][T14216] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 331.590386][T14216] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 331.601069][T14605] FAULT_INJECTION: forcing a failure. [ 331.601069][T14605] name failslab, interval 1, probability 0, space 0, times 0 [ 331.601098][T14605] CPU: 0 UID: 0 PID: 14605 Comm: syz.3.2782 Not tainted syzkaller #0 PREEMPT(full) [ 331.601118][T14605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 331.601129][T14605] Call Trace: [ 331.601136][T14605] [ 331.601143][T14605] dump_stack_lvl+0xe8/0x150 [ 331.601178][T14605] should_fail_ex+0x410/0x560 [ 331.601207][T14605] should_failslab+0xa8/0x100 [ 331.601232][T14605] __kmalloc_noprof+0xfe/0x720 [ 331.601252][T14605] ? bpf_test_init+0x9f/0x150 [ 331.601272][T14605] ? bpf_test_init+0x9f/0x150 [ 331.601297][T14605] bpf_test_init+0x9f/0x150 [ 331.601322][T14605] bpf_prog_test_run_skb+0x31e/0x2230 [ 331.601343][T14605] ? lock_acquire+0x115/0x350 [ 331.601376][T14605] ? __fget_files+0x3a2/0x420 [ 331.601392][T14605] ? __fget_files+0x2a/0x420 [ 331.601412][T14605] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 331.601435][T14605] bpf_prog_test_run+0x2c5/0x340 [ 331.601468][T14605] __sys_bpf+0xa22/0xd90 [ 331.601497][T14605] ? __pfx___sys_bpf+0x10/0x10 [ 331.601530][T14605] ? __fget_files+0x2a/0x420 [ 331.601562][T14605] ? ksys_write+0x242/0x270 [ 331.601582][T14605] ? __pfx_ksys_write+0x10/0x10 [ 331.601607][T14605] __x64_sys_bpf+0xba/0xd0 [ 331.601630][T14605] do_syscall_64+0x166/0x520 [ 331.601649][T14605] ? trace_irq_disable+0x3b/0x140 [ 331.601669][T14605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.601685][T14605] ? clear_bhb_loop+0x70/0xc0 [ 331.601708][T14605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.601726][T14605] RIP: 0033:0x7ff10399f559 [ 331.601743][T14605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.601758][T14605] RSP: 002b:00007ff10493a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 331.601778][T14605] RAX: ffffffffffffffda RBX: 00007ff103c25fa0 RCX: 00007ff10399f559 [ 331.601791][T14605] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 331.601803][T14605] RBP: 00007ff10493a090 R08: 0000000000000000 R09: 0000000000000000 [ 331.601814][T14605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.601825][T14605] R13: 00007ff103c26038 R14: 00007ff103c25fa0 R15: 00007fff138bbea8 [ 331.601855][T14605] [ 332.057958][T14216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.100568][T14216] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.121339][ T8776] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.121424][ T8776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.151041][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.151222][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.291394][T14633] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 332.320931][T14633] bond7 (unregistering): Released all slaves [ 332.396213][T14649] SET target dimension over the limit! [ 332.586794][T14657] FAULT_INJECTION: forcing a failure. [ 332.586794][T14657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.586826][T14657] CPU: 0 UID: 0 PID: 14657 Comm: syz.2.2795 Not tainted syzkaller #0 PREEMPT(full) [ 332.586846][T14657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 332.586857][T14657] Call Trace: [ 332.586864][T14657] [ 332.586871][T14657] dump_stack_lvl+0xe8/0x150 [ 332.586904][T14657] should_fail_ex+0x410/0x560 [ 332.586934][T14657] _copy_from_user+0x2d/0xb0 [ 332.586962][T14657] bpf_test_init+0xd8/0x150 [ 332.586988][T14657] bpf_prog_test_run_skb+0x31e/0x2230 [ 332.587009][T14657] ? lock_acquire+0x115/0x350 [ 332.587042][T14657] ? __fget_files+0x3a2/0x420 [ 332.587056][T14657] ? __fget_files+0x2a/0x420 [ 332.587077][T14657] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 332.587099][T14657] bpf_prog_test_run+0x2c5/0x340 [ 332.587126][T14657] __sys_bpf+0xa22/0xd90 [ 332.587153][T14657] ? __pfx___sys_bpf+0x10/0x10 [ 332.587213][T14657] ? rcu_is_watching+0x16/0xb0 [ 332.587244][T14657] __x64_sys_bpf+0xba/0xd0 [ 332.587265][T14657] do_syscall_64+0x166/0x520 [ 332.587286][T14657] ? trace_irq_disable+0x3b/0x140 [ 332.587305][T14657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.587322][T14657] ? clear_bhb_loop+0x70/0xc0 [ 332.587351][T14657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.587366][T14657] RIP: 0033:0x7f713bd9f559 [ 332.587382][T14657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.587397][T14657] RSP: 002b:00007f713ccd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 332.587416][T14657] RAX: ffffffffffffffda RBX: 00007f713c025fa0 RCX: 00007f713bd9f559 [ 332.587433][T14657] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 332.587445][T14657] RBP: 00007f713ccd8090 R08: 0000000000000000 R09: 0000000000000000 [ 332.587455][T14657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.587466][T14657] R13: 00007f713c026038 R14: 00007f713c025fa0 R15: 00007ffd583bbfb8 [ 332.587494][T14657] [ 332.841739][T14661] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2796'. [ 332.904235][T14666] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2796'. [ 333.009310][T14678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2799'. [ 333.463293][T14702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2803'. [ 333.482613][T14709] SET target dimension over the limit! [ 333.735058][T14719] FAULT_INJECTION: forcing a failure. [ 333.735058][T14719] name failslab, interval 1, probability 0, space 0, times 0 [ 333.735090][T14719] CPU: 0 UID: 0 PID: 14719 Comm: syz.4.2807 Not tainted syzkaller #0 PREEMPT(full) [ 333.735111][T14719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 333.735122][T14719] Call Trace: [ 333.735129][T14719] [ 333.735138][T14719] dump_stack_lvl+0xe8/0x150 [ 333.735170][T14719] should_fail_ex+0x410/0x560 [ 333.735200][T14719] should_failslab+0xa8/0x100 [ 333.735227][T14719] __kmalloc_noprof+0xfe/0x720 [ 333.735248][T14719] ? sk_prot_alloc+0xe7/0x210 [ 333.735265][T14719] ? sk_prot_alloc+0xe7/0x210 [ 333.735289][T14719] sk_prot_alloc+0xe7/0x210 [ 333.735306][T14719] ? sk_alloc+0x27/0x390 [ 333.735325][T14719] sk_alloc+0x3a/0x390 [ 333.735345][T14719] bpf_prog_test_run_skb+0x3a6/0x2230 [ 333.735368][T14719] ? lock_acquire+0x115/0x350 [ 333.735404][T14719] ? __fget_files+0x3a2/0x420 [ 333.735419][T14719] ? __fget_files+0x2a/0x420 [ 333.735440][T14719] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 333.735462][T14719] bpf_prog_test_run+0x2c5/0x340 [ 333.735490][T14719] __sys_bpf+0xa22/0xd90 [ 333.735519][T14719] ? __pfx___sys_bpf+0x10/0x10 [ 333.735550][T14719] ? __fget_files+0x2a/0x420 [ 333.735583][T14719] ? ksys_write+0x242/0x270 [ 333.735604][T14719] ? __pfx_ksys_write+0x10/0x10 [ 333.735628][T14719] __x64_sys_bpf+0xba/0xd0 [ 333.735658][T14719] do_syscall_64+0x166/0x520 [ 333.735678][T14719] ? trace_irq_disable+0x3b/0x140 [ 333.735696][T14719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.735714][T14719] ? clear_bhb_loop+0x70/0xc0 [ 333.735735][T14719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.735753][T14719] RIP: 0033:0x7f2f71f9f559 [ 333.735769][T14719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.735784][T14719] RSP: 002b:00007f2f72db7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 333.735804][T14719] RAX: ffffffffffffffda RBX: 00007f2f72225fa0 RCX: 00007f2f71f9f559 [ 333.735817][T14719] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 333.735829][T14719] RBP: 00007f2f72db7090 R08: 0000000000000000 R09: 0000000000000000 [ 333.735840][T14719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.735851][T14719] R13: 00007f2f72226038 R14: 00007f2f72225fa0 R15: 00007ffe3b379a38 [ 333.735881][T14719] [ 334.137488][T14216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.288806][T14741] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2813'. [ 334.291377][T14735] smc: net device lo applied user defined pnetid SYZ0 [ 334.429219][T14216] veth0_vlan: entered promiscuous mode [ 334.499983][T14216] veth1_vlan: entered promiscuous mode [ 334.698193][T14216] veth0_macvtap: entered promiscuous mode [ 334.798099][T14216] veth1_macvtap: entered promiscuous mode [ 334.840718][T14216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.845682][T14764] SET target dimension over the limit! [ 334.866654][T14216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.936372][ T8781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.936416][ T8781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.936446][ T8781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.936477][ T8781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.061697][T14770] FAULT_INJECTION: forcing a failure. [ 335.061697][T14770] name failslab, interval 1, probability 0, space 0, times 0 [ 335.061728][T14770] CPU: 1 UID: 0 PID: 14770 Comm: syz.2.2819 Not tainted syzkaller #0 PREEMPT(full) [ 335.061748][T14770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 335.061759][T14770] Call Trace: [ 335.061767][T14770] [ 335.061775][T14770] dump_stack_lvl+0xe8/0x150 [ 335.061806][T14770] should_fail_ex+0x410/0x560 [ 335.061837][T14770] should_failslab+0xa8/0x100 [ 335.061865][T14770] __kmalloc_noprof+0xfe/0x720 [ 335.061887][T14770] ? security_sk_alloc+0x52/0x360 [ 335.061907][T14770] ? security_sk_alloc+0x52/0x360 [ 335.061934][T14770] security_sk_alloc+0x52/0x360 [ 335.061956][T14770] sk_prot_alloc+0x101/0x210 [ 335.061973][T14770] ? sk_alloc+0x27/0x390 [ 335.061991][T14770] sk_alloc+0x3a/0x390 [ 335.062011][T14770] bpf_prog_test_run_skb+0x3a6/0x2230 [ 335.062047][T14770] ? lock_acquire+0x115/0x350 [ 335.062084][T14770] ? __fget_files+0x3a2/0x420 [ 335.062101][T14770] ? __fget_files+0x2a/0x420 [ 335.062122][T14770] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 335.062147][T14770] bpf_prog_test_run+0x2c5/0x340 [ 335.062174][T14770] __sys_bpf+0xa22/0xd90 [ 335.062205][T14770] ? __pfx___sys_bpf+0x10/0x10 [ 335.062238][T14770] ? __fget_files+0x2a/0x420 [ 335.062272][T14770] ? ksys_write+0x242/0x270 [ 335.062295][T14770] ? __pfx_ksys_write+0x10/0x10 [ 335.062320][T14770] __x64_sys_bpf+0xba/0xd0 [ 335.062343][T14770] do_syscall_64+0x166/0x520 [ 335.062365][T14770] ? trace_irq_disable+0x3b/0x140 [ 335.062385][T14770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.062404][T14770] ? clear_bhb_loop+0x70/0xc0 [ 335.062426][T14770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.062444][T14770] RIP: 0033:0x7f713bd9f559 [ 335.062462][T14770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.062477][T14770] RSP: 002b:00007f713ccd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 335.062497][T14770] RAX: ffffffffffffffda RBX: 00007f713c025fa0 RCX: 00007f713bd9f559 [ 335.062510][T14770] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 335.062522][T14770] RBP: 00007f713ccd8090 R08: 0000000000000000 R09: 0000000000000000 [ 335.062533][T14770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.062544][T14770] R13: 00007f713c026038 R14: 00007f713c025fa0 R15: 00007ffd583bbfb8 [ 335.062575][T14770] [ 335.067395][T14768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2821'. [ 335.067700][T14768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2821'. [ 335.275920][T14772] erspan0: entered promiscuous mode [ 335.381199][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.381220][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.431162][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.431182][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.521585][T14785] IPv6: addrconf: prefix option has invalid lifetime [ 335.875619][T14801] __nla_validate_parse: 3 callbacks suppressed [ 335.875643][T14801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2831'. [ 335.971741][T14801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2831'. [ 336.256303][T14826] ip_tables: iptables: counters copy to user failed while replacing table [ 336.328385][T14830] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 336.344215][T14832] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 336.421026][T14838] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 336.546900][T14843] SET target dimension over the limit! [ 336.884810][ T5623] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 336.884886][ T5623] Bluetooth: hci4: Injecting HCI hardware error event [ 336.887269][ T5632] Bluetooth: hci4: hardware error 0x00 [ 336.994167][T14874] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2848'. [ 337.235145][T14884] tipc: Enabling of bearer rejected, failed to enable media [ 337.252617][T14887] tipc: Enabling of bearer rejected, failed to enable media [ 337.449236][T14901] x_tables: duplicate underflow at hook 2 [ 337.509244][T14905] SET target dimension over the limit! [ 338.399449][T14941] bridge5: entered promiscuous mode [ 338.615587][T14968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2869'. [ 338.690780][T14975] bridge0: port 1(bond0) entered blocking state [ 338.690885][T14975] bridge0: port 1(bond0) entered disabled state [ 338.691040][T14975] bond0: entered allmulticast mode [ 338.702645][T14975] bond0: entered promiscuous mode [ 339.044305][ T5632] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 362.903810][T14991] ip_tables: iptables: counters copy to user failed while replacing table [ 362.915081][T14993] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 362.915105][T14993] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 363.041865][T15006] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 363.409565][T15026] bridge0: port 3(bond0) entered blocking state [ 363.409732][T15026] bridge0: port 3(bond0) entered disabled state [ 363.409896][T15026] bond0: entered allmulticast mode [ 363.409912][T15026] bond_slave_0: entered allmulticast mode [ 363.409929][T15026] bond_slave_1: entered allmulticast mode [ 363.453717][T15026] bond0: entered promiscuous mode [ 363.453739][T15026] bond_slave_0: entered promiscuous mode [ 363.455108][T15026] bond_slave_1: entered promiscuous mode [ 363.457858][T15026] bridge0: port 3(bond0) entered blocking state [ 363.457965][T15026] bridge0: port 3(bond0) entered forwarding state [ 363.531971][T15032] ip6t_srh: unknown srh invflags 4000 [ 363.539957][T15032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2887'. [ 363.648515][T15033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2888'. [ 363.903265][T15055] xt_hashlimit: size too large, truncated to 1048576 [ 363.973258][T15061] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2897'. [ 363.984727][T15064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2894'. [ 364.103131][T15066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2894'. [ 364.153638][T15071] : renamed from bond0 (while UP) [ 364.520290][ T31] audit: type=1107 audit(1792572360.169:2): pid=15087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='À ' [ 364.981535][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.990738][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.999584][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.012690][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.016268][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.207953][T15111] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2909'. [ 365.343409][T15116] xt_hashlimit: size too large, truncated to 1048576 [ 365.418703][T15119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2911'. [ 365.458001][T15119] vlan2: entered allmulticast mode [ 365.852755][T15137] FAULT_INJECTION: forcing a failure. [ 365.852755][T15137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.852787][T15137] CPU: 0 UID: 0 PID: 15137 Comm: syz.1.2913 Not tainted syzkaller #0 PREEMPT(full) [ 365.852808][T15137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 365.852833][T15137] Call Trace: [ 365.852841][T15137] [ 365.852849][T15137] dump_stack_lvl+0xe8/0x150 [ 365.852881][T15137] should_fail_ex+0x410/0x560 [ 365.852911][T15137] _copy_to_user+0x31/0xb0 [ 365.852931][T15137] simple_read_from_buffer+0xe1/0x170 [ 365.852963][T15137] proc_fail_nth_read+0x1bb/0x230 [ 365.852984][T15137] ? common_file_perm+0x20e/0x2b0 [ 365.853012][T15137] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 365.853037][T15137] ? rw_verify_area+0x24a/0x4c0 [ 365.853057][T15137] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 365.853077][T15137] vfs_read+0x213/0xa80 [ 365.853097][T15137] ? __pfx___mutex_lock+0x10/0x10 [ 365.853121][T15137] ? __pfx_vfs_read+0x10/0x10 [ 365.853141][T15137] ? __fget_files+0x2a/0x420 [ 365.853163][T15137] ? __fget_files+0x3a2/0x420 [ 365.853179][T15137] ? __fget_files+0x2a/0x420 [ 365.853205][T15137] ksys_read+0x150/0x270 [ 365.853227][T15137] ? __pfx_ksys_read+0x10/0x10 [ 365.853259][T15137] do_syscall_64+0x166/0x520 [ 365.853288][T15137] ? trace_irq_disable+0x3b/0x140 [ 365.853308][T15137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.853328][T15137] ? clear_bhb_loop+0x70/0xc0 [ 365.853352][T15137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.853373][T15137] RIP: 0033:0x7fa49d35fd8e [ 365.853390][T15137] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 365.853406][T15137] RSP: 002b:00007fa49e244fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 365.853426][T15137] RAX: ffffffffffffffda RBX: 00007fa49e2456c0 RCX: 00007fa49d35fd8e [ 365.853439][T15137] RDX: 000000000000000f RSI: 00007fa49e2450a0 RDI: 0000000000000005 [ 365.853451][T15137] RBP: 00007fa49e245090 R08: 0000000000000000 R09: 0000000000000000 [ 365.853462][T15137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.853473][T15137] R13: 00007fa49d626038 R14: 00007fa49d625fa0 R15: 00007ffe29d66908 [ 365.853505][T15137] [ 365.916357][T15104] rxe_eth0 speed is unknown, defaulting to 1000 [ 366.338767][T15144] SET target dimension over the limit! [ 366.383884][T15155] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2917'. [ 366.385850][T15155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2917'. [ 366.385870][T15155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2917'. [ 366.498648][T15162] netlink: 'syz.4.2916': attribute type 1 has an invalid length. [ 366.515368][T15161] pim6reg: entered allmulticast mode [ 366.529217][T15161] pim6reg: left allmulticast mode [ 367.123195][ T5623] Bluetooth: hci0: command tx timeout [ 367.181308][ T5623] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 367.181806][T15104] ip6gretap0 speed is unknown, defaulting to 1000 [ 367.790058][T15229] xt_hashlimit: size too large, truncated to 1048576 [ 368.132973][T15245] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20002 [ 368.154640][T15242] bond0: entered allmulticast mode [ 368.155128][T15242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.201298][T15248] syzkaller0: entered promiscuous mode [ 368.201319][T15248] syzkaller0: entered allmulticast mode [ 368.247171][T15104] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.247335][T15104] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.247742][T15104] bridge_slave_0: entered allmulticast mode [ 368.253287][T15104] bridge_slave_0: entered promiscuous mode [ 368.258324][T15104] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.259993][T15104] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.260387][T15104] bridge_slave_1: entered allmulticast mode [ 368.264232][T15104] bridge_slave_1: entered promiscuous mode [ 368.347608][T15104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.351438][T15104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.390057][T15104] team0: Port device team_slave_0 added [ 368.394797][T15104] team0: Port device team_slave_1 added [ 368.454981][T15104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.454998][T15104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.455017][T15104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.459172][T15104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.459187][T15104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.459209][T15104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.606828][T15269] ip_tables: iptables: counters copy to user failed while replacing table [ 368.609600][T15269] __nla_validate_parse: 10 callbacks suppressed [ 368.609617][T15269] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2945'. [ 368.616557][T15104] hsr_slave_0: entered promiscuous mode [ 368.625604][T15104] hsr_slave_1: entered promiscuous mode [ 368.627385][T15104] debugfs: 'hsr0' already exists in 'hsr' [ 368.627407][T15104] Cannot create hsr debugfs directory [ 368.676061][T15269] netlink: 'syz.0.2945': attribute type 1 has an invalid length. [ 368.676083][T15269] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2945'. [ 368.899300][T15280] bond3: (slave team0): Releasing backup interface [ 368.913606][T15280] team0 (unregistering): Port device team_slave_0 removed [ 368.917900][T15280] team0 (unregistering): Port device team_slave_1 removed [ 368.955046][T15283] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2947'. [ 369.000528][T15278] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2947'. [ 369.096566][T15296] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2950'. [ 369.147663][T15104] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 369.147699][T15104] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.189339][T15300] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2951'. [ 369.189362][T15300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2951'. [ 369.189374][T15300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2951'. [ 369.191257][T15301] SET target dimension over the limit! [ 369.215860][ T5623] Bluetooth: hci0: command tx timeout [ 369.267832][T15303] netlink: 'syz.1.2953': attribute type 1 has an invalid length. [ 369.380596][T15104] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 369.380630][T15104] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.417121][T15307] tipc: Enabling of bearer rejected, failed to enable media [ 369.517574][T15104] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 369.517613][T15104] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.674655][T15104] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 369.690122][T15104] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.768663][T15325] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2963'. [ 369.768688][T15325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2963'. [ 369.815951][T15327] SET target dimension over the limit! [ 370.025455][T15104] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 370.047041][T15104] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 370.048327][T15104] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 370.070523][T15104] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 370.071402][T15104] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 370.093335][T15104] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 370.095673][T15104] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 370.120942][T15104] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 370.265172][T15104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.288905][T15104] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.308101][ T8776] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.308207][ T8776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.337017][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.337157][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.944050][T15104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.019807][T15104] veth0_vlan: entered promiscuous mode [ 371.030472][T15104] veth1_vlan: entered promiscuous mode [ 371.075417][T15104] veth0_macvtap: entered promiscuous mode [ 371.081372][T15104] veth1_macvtap: entered promiscuous mode [ 371.116803][T15104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.129124][T15104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.182384][ T1079] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.183403][ T1079] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.183441][ T1079] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.229540][ T1079] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.283006][ T5623] Bluetooth: hci0: command tx timeout [ 373.151904][T15349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 373.319396][ T8781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.319417][ T8781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.323857][ T5623] Bluetooth: hci3: unexpected event 0x04 length: 17 > 10 [ 373.323882][ T5623] Bluetooth: unknown link type 128 [ 373.365360][ T5623] Bluetooth: hci0: command tx timeout [ 373.389376][ T8780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.389396][ T8780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.579245][T15398] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 373.587151][T15398] Bluetooth: MGMT ver 1.23 [ 373.597511][T15398] netlink: 'syz.2.2907': attribute type 11 has an invalid length. [ 374.043953][T15417] __nla_validate_parse: 3 callbacks suppressed [ 374.043973][T15417] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2983'. [ 374.051489][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.083592][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.102003][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.109256][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.110325][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.431402][T15440] xt_hashlimit: size too large, truncated to 1048576 [ 374.457110][T15439] netlink: 'syz.4.2986': attribute type 64 has an invalid length. [ 374.457134][T15439] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2986'. [ 374.895230][T15454] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2989'. [ 375.131348][T15414] rxe_eth0 speed is unknown, defaulting to 1000 [ 375.363554][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 375.501188][T15491] nbd4: detected capacity change from 0 to 63 [ 375.517297][T15491] block nbd4: NBD_DISCONNECT [ 375.517403][T15491] block nbd4: Disconnected due to user request. [ 375.517418][T15491] block nbd4: shutting down sockets [ 375.582504][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 375.582739][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 375.615511][ T5623] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 375.620796][ T5623] Bluetooth: hci0: command 0x0c3a tx timeout [ 375.687059][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 375.687139][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 375.687176][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 375.687236][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 375.687285][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 375.687557][ T2443] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 375.687582][ T2443] Buffer I/O error on dev nbd4, logical block 0, async page read [ 375.690431][ T2443] Buffer I/O error on dev nbd4, logical block 1, async page read [ 375.690454][ T2443] Buffer I/O error on dev nbd4, logical block 2, async page read [ 375.690467][ T2443] Buffer I/O error on dev nbd4, logical block 3, async page read [ 375.692037][ T2443] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 375.692065][ T2443] Buffer I/O error on dev nbd4, logical block 0, async page read [ 375.692081][ T2443] Buffer I/O error on dev nbd4, logical block 1, async page read [ 375.694957][ T2443] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 375.695092][ T2443] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 375.696981][ T2443] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 375.697978][ T2443] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 375.698382][ T2443] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 375.699210][T15110] ldm_validate_partition_table(): Disk read failed. [ 375.708144][T15110] Dev nbd4: unable to read RDB block 0 [ 375.711681][T15110] nbd4: unable to read partition table [ 375.787846][T15110] ldm_validate_partition_table(): Disk read failed. [ 375.792855][T15110] Dev nbd4: unable to read RDB block 0 [ 375.793528][T15110] nbd4: unable to read partition table [ 376.163528][ T5632] Bluetooth: hci2: command tx timeout [ 376.490779][T15531] xt_hashlimit: size too large, truncated to 1048576 [ 376.493224][T15414] ip6gretap0 speed is unknown, defaulting to 1000 [ 376.693303][T15537] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3001'. [ 376.696734][T15503] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 377.216965][T15560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3009'. [ 377.217262][T15560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3009'. [ 377.626470][T15580] xt_hashlimit: size too large, truncated to 1048576 [ 377.918857][T15587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3016'. [ 377.925518][T15590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3016'. [ 378.007166][ T5632] Bluetooth: hci0: command 0x0c3a tx timeout [ 378.245844][ T5632] Bluetooth: hci2: command tx timeout [ 378.410921][T15592] Cannot find add_set index 0 as target [ 378.579153][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.914698][T15611] xt_hashlimit: size too large, truncated to 1048576 [ 379.126805][T15615] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3026'. [ 379.126829][T15615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3026'. [ 379.126842][T15615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3026'. [ 379.933809][T15590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3016'. [ 380.109483][T15414] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.109660][T15414] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.109793][T15414] bridge_slave_0: entered allmulticast mode [ 380.111582][T15414] bridge_slave_0: entered promiscuous mode [ 380.143117][T15414] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.143277][T15414] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.143424][T15414] bridge_slave_1: entered allmulticast mode [ 380.145204][T15414] bridge_slave_1: entered promiscuous mode [ 380.209270][T15414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.224692][T15414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.274682][T15414] team0: Port device team_slave_0 added [ 380.277508][T15414] team0: Port device team_slave_1 added [ 380.321342][T15414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.321359][T15414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.321380][T15414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.323748][ T5632] Bluetooth: hci2: command tx timeout [ 380.379105][T15414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.379123][T15414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.379146][T15414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.398001][T15636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.406792][T15636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3032'. [ 380.463929][T15643] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3032'. [ 380.510801][T15649] netlink: 'syz.2.3035': attribute type 1 has an invalid length. [ 380.560678][T15648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3035'. [ 380.599926][T15414] hsr_slave_0: entered promiscuous mode [ 380.600904][T15414] hsr_slave_1: entered promiscuous mode [ 380.601607][T15414] debugfs: 'hsr0' already exists in 'hsr' [ 380.601626][T15414] Cannot create hsr debugfs directory [ 380.631513][T15659] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3038'. [ 380.631535][T15659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3038'. [ 380.631547][T15659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3038'. [ 380.885071][T15662] syzkaller0: left promiscuous mode [ 380.885092][T15662] syzkaller0: left allmulticast mode [ 381.027094][T15677] xt_hashlimit: size too large, truncated to 1048576 [ 381.060323][T15669] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.306187][T15414] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.307703][T15414] [ 381.320302][T15414] ====================================================== [ 381.327319][T15414] WARNING: possible circular locking dependency detected [ 381.334351][T15414] syzkaller #0 Not tainted [ 381.338768][T15414] ------------------------------------------------------ [ 381.345779][T15414] syz-executor/15414 is trying to acquire lock: [ 381.352019][T15414] ffff88801d2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 381.362295][T15414] [ 381.362295][T15414] but task is already holding lock: [ 381.369664][T15414] ffff88801d2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 381.380560][T15414] [ 381.380560][T15414] which lock already depends on the new lock. [ 381.380560][T15414] [ 381.390970][T15414] [ 381.390970][T15414] the existing dependency chain (in reverse order) is: [ 381.400022][T15414] [ 381.400022][T15414] -> #11 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 381.408718][T15414] down_read+0x4a/0x330 [ 381.413401][T15414] kernfs_remove_by_name_ns+0x3f/0x140 [ 381.419384][T15414] internal_create_group+0x58e/0x1180 [ 381.425275][T15414] sysfs_update_groups+0x60/0x130 [ 381.430854][T15414] pmu_dev_alloc+0x29b/0x300 [ 381.435964][T15414] perf_event_sysfs_init+0x76/0x100 [ 381.441678][T15414] do_one_initcall+0x250/0x870 [ 381.446981][T15414] do_initcall_level+0x10a/0x1a0 [ 381.452438][T15414] do_initcalls+0x59/0xa0 [ 381.457283][T15414] kernel_init_freeable+0x29d/0x3e0 [ 381.463002][T15414] kernel_init+0x22/0x1d0 [ 381.467850][T15414] ret_from_fork+0x514/0xb70 [ 381.472957][T15414] ret_from_fork_asm+0x1a/0x30 [ 381.478236][T15414] [ 381.478236][T15414] -> #10 (pmus_lock){+.+.}-{4:4}: [ 381.485456][T15414] __mutex_lock+0x19d/0x1550 [ 381.490560][T15414] perf_event_init_cpu+0x1d1/0x7a0 [ 381.496186][T15414] cpuhp_invoke_callback+0x434/0x810 [ 381.502004][T15414] cpuhp_thread_fun+0x362/0x780 [ 381.507410][T15414] smpboot_thread_fn+0x565/0xa70 [ 381.512870][T15414] kthread+0x38b/0x480 [ 381.517455][T15414] ret_from_fork+0x514/0xb70 [ 381.522556][T15414] ret_from_fork_asm+0x1a/0x30 [ 381.527828][T15414] [ 381.527828][T15414] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 381.535376][T15414] cpuhp_thread_fun+0x127/0x780 [ 381.540839][T15414] smpboot_thread_fn+0x565/0xa70 [ 381.546328][T15414] kthread+0x38b/0x480 [ 381.550908][T15414] ret_from_fork+0x514/0xb70 [ 381.556009][T15414] ret_from_fork_asm+0x1a/0x30 [ 381.561282][T15414] [ 381.561282][T15414] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 381.569007][T15414] cpus_read_lock+0x42/0x160 [ 381.574120][T15414] static_key_slow_inc+0x12/0x30 [ 381.579578][T15414] udp_lib_setsockopt+0x5b6/0x6b0 [ 381.585123][T15414] udp_setsockopt+0x67/0xb0 [ 381.590144][T15414] do_sock_setsockopt+0x17c/0x1b0 [ 381.595699][T15414] __x64_sys_setsockopt+0x13d/0x1b0 [ 381.601452][T15414] do_syscall_64+0x166/0x520 [ 381.606558][T15414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.612965][T15414] [ 381.612965][T15414] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 381.620623][T15414] lock_sock_nested+0x41/0x100 [ 381.625926][T15414] inet_shutdown+0x6a/0x390 [ 381.630949][T15414] nbd_mark_nsock_dead+0x2cb/0x550 [ 381.636575][T15414] recv_work+0x1cee/0x1e10 [ 381.641510][T15414] process_scheduled_works+0xc3d/0x1630 [ 381.647571][T15414] worker_thread+0xa47/0xfb0 [ 381.652677][T15414] kthread+0x38b/0x480 [ 381.657278][T15414] ret_from_fork+0x514/0xb70 [ 381.662380][T15414] ret_from_fork_asm+0x1a/0x30 [ 381.667666][T15414] [ 381.667666][T15414] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 381.675321][T15414] __mutex_lock+0x19d/0x1550 [ 381.680445][T15414] nbd_queue_rq+0x373/0xff0 [ 381.685471][T15414] blk_mq_dispatch_rq_list+0x499/0x1990 [ 381.691533][T15414] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 381.698387][T15414] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 381.704880][T15414] blk_mq_run_work_fn+0x16c/0x300 [ 381.710413][T15414] process_scheduled_works+0xc3d/0x1630 [ 381.716476][T15414] worker_thread+0xa47/0xfb0 [ 381.721586][T15414] kthread+0x38b/0x480 [ 381.726165][T15414] ret_from_fork+0x514/0xb70 [ 381.731261][T15414] ret_from_fork_asm+0x1a/0x30 [ 381.736530][T15414] [ 381.736530][T15414] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 381.743727][T15414] __mutex_lock+0x19d/0x1550 [ 381.748829][T15414] nbd_queue_rq+0xc1/0xff0 [ 381.753757][T15414] blk_mq_dispatch_rq_list+0x499/0x1990 [ 381.759823][T15414] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 381.766666][T15414] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 381.773170][T15414] blk_mq_run_work_fn+0x16c/0x300 [ 381.778702][T15414] process_scheduled_works+0xc3d/0x1630 [ 381.784765][T15414] worker_thread+0xa47/0xfb0 [ 381.789874][T15414] kthread+0x38b/0x480 [ 381.794453][T15414] ret_from_fork+0x514/0xb70 [ 381.799554][T15414] ret_from_fork_asm+0x1a/0x30 [ 381.804823][T15414] [ 381.804823][T15414] -> #4 (set->srcu){.+.+}-{0:0}: [ 381.811933][T15414] __synchronize_srcu+0xc9/0x2f0 [ 381.817381][T15414] elevator_switch+0x1e8/0x7b0 [ 381.822658][T15414] elevator_change+0x2fa/0x480 [ 381.827933][T15414] elevator_set_default+0x375/0x440 [ 381.833645][T15414] blk_register_queue+0x3f3/0x4e0 [ 381.839185][T15414] __add_disk+0x6b8/0xdb0 [ 381.844025][T15414] add_disk_fwnode+0x100/0x3a0 [ 381.849294][T15414] nbd_dev_add+0x733/0xb60 [ 381.854229][T15414] nbd_init+0x168/0x1f0 [ 381.858899][T15414] do_one_initcall+0x250/0x870 [ 381.864176][T15414] do_initcall_level+0x10a/0x1a0 [ 381.869634][T15414] do_initcalls+0x59/0xa0 [ 381.874475][T15414] kernel_init_freeable+0x29d/0x3e0 [ 381.880185][T15414] kernel_init+0x22/0x1d0 [ 381.885028][T15414] ret_from_fork+0x514/0xb70 [ 381.890130][T15414] ret_from_fork_asm+0x1a/0x30 [ 381.895400][T15414] [ 381.895400][T15414] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 381.903202][T15414] __mutex_lock+0x19d/0x1550 [ 381.908303][T15414] elevator_change+0x1af/0x480 [ 381.913578][T15414] elevator_set_none+0xb5/0x140 [ 381.918946][T15414] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 381.925268][T15414] nbd_start_device+0x189/0xb30 [ 381.930633][T15414] nbd_genl_connect+0x167d/0x1cd0 [ 381.936170][T15414] genl_family_rcv_msg_doit+0x233/0x340 [ 381.942234][T15414] genl_rcv_msg+0x614/0x7a0 [ 381.947256][T15414] netlink_rcv_skb+0x226/0x4a0 [ 381.952526][T15414] genl_rcv+0x28/0x40 [ 381.957035][T15414] netlink_unicast+0x8ef/0xa80 [ 381.962309][T15414] netlink_sendmsg+0x813/0xb40 [ 381.967590][T15414] sock_sendmsg_nosec+0x13a/0x180 [ 381.973132][T15414] ____sys_sendmsg+0x54e/0x850 [ 381.978402][T15414] ___sys_sendmsg+0x2a5/0x360 [ 381.983621][T15414] __x64_sys_sendmsg+0x1b1/0x290 [ 381.989067][T15414] do_syscall_64+0x166/0x520 [ 381.994171][T15414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.000574][T15414] [ 382.000574][T15414] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 382.009172][T15414] blk_alloc_queue+0x544/0x690 [ 382.014454][T15414] __blk_mq_alloc_disk+0x194/0x390 [ 382.020079][T15414] nbd_dev_add+0x494/0xb60 [ 382.025006][T15414] nbd_init+0x168/0x1f0 [ 382.029674][T15414] do_one_initcall+0x250/0x870 [ 382.034952][T15414] do_initcall_level+0x10a/0x1a0 [ 382.040403][T15414] do_initcalls+0x59/0xa0 [ 382.045247][T15414] kernel_init_freeable+0x29d/0x3e0 [ 382.050967][T15414] kernel_init+0x22/0x1d0 [ 382.055826][T15414] ret_from_fork+0x514/0xb70 [ 382.060950][T15414] ret_from_fork_asm+0x1a/0x30 [ 382.066245][T15414] [ 382.066245][T15414] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 382.073460][T15414] fs_reclaim_acquire+0x71/0x100 [ 382.078921][T15414] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 382.085152][T15414] alloc_inode+0xb8/0x1b0 [ 382.090003][T15414] iget_locked+0x131/0x6a0 [ 382.094929][T15414] kernfs_get_inode+0x4f/0x770 [ 382.100207][T15414] kernfs_get_tree+0x5cd/0x980 [ 382.105474][T15414] vfs_get_tree+0x92/0x2a0 [ 382.110398][T15414] do_new_mount+0x325/0xb00 [ 382.115415][T15414] __se_sys_mount+0x31d/0x420 [ 382.120613][T15414] do_syscall_64+0x166/0x520 [ 382.125727][T15414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.132131][T15414] [ 382.132131][T15414] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 382.140109][T15414] __lock_acquire+0x164c/0x2de0 [ 382.145468][T15414] lock_acquire+0x115/0x350 [ 382.150487][T15414] down_write+0x96/0x200 [ 382.155248][T15414] kernfs_remove_by_name_ns+0x4e/0x140 [ 382.161223][T15414] sysfs_remove_group+0x101/0x2e0 [ 382.166759][T15414] sysfs_remove_groups+0x54/0xb0 [ 382.172220][T15414] net_rx_queue_update_kobjects+0x6b7/0x780 [ 382.178626][T15414] netdev_unregister_kobject+0xff/0x450 [ 382.184694][T15414] unregister_netdevice_many_notify+0x1be1/0x2140 [ 382.191621][T15414] unregister_netdevice_queue+0x2f5/0x340 [ 382.197856][T15414] nsim_destroy+0x275/0x800 [ 382.202873][T15414] __nsim_dev_port_del+0x14e/0x200 [ 382.208493][T15414] nsim_dev_reload_destroy+0x288/0x490 [ 382.214480][T15414] nsim_drv_remove+0x58/0x170 [ 382.219682][T15414] device_release_driver_internal+0x48b/0x880 [ 382.226284][T15414] bus_remove_device+0x444/0x560 [ 382.231741][T15414] device_del+0x524/0x8f0 [ 382.236587][T15414] device_unregister+0x21/0xf0 [ 382.241867][T15414] del_device_store+0x2b5/0x370 [ 382.247228][T15414] kernfs_fop_write_iter+0x3a4/0x540 [ 382.253027][T15414] vfs_write+0x612/0xba0 [ 382.257777][T15414] ksys_write+0x150/0x270 [ 382.262615][T15414] do_syscall_64+0x166/0x520 [ 382.267720][T15414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.274126][T15414] [ 382.274126][T15414] other info that might help us debug this: [ 382.274126][T15414] [ 382.284338][T15414] Chain exists of: [ 382.284338][T15414] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 382.284338][T15414] [ 382.298142][T15414] Possible unsafe locking scenario: [ 382.298142][T15414] [ 382.305580][T15414] CPU0 CPU1 [ 382.310933][T15414] ---- ---- [ 382.316284][T15414] rlock(&root->kernfs_supers_rwsem); [ 382.321734][T15414] lock(pmus_lock); [ 382.328134][T15414] lock(&root->kernfs_supers_rwsem); [ 382.336015][T15414] lock(&root->kernfs_rwsem); [ 382.340771][T15414] [ 382.340771][T15414] *** DEADLOCK *** [ 382.340771][T15414] [ 382.348900][T15414] locks held by syz-executor/15414: 8, last CPU#0: [ 382.355387][T15414] #0: ffff8880378e0460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 382.364256][T15414] #1: ffff88802b235880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 382.373995][T15414] #2: ffff88802ab38878 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 382.384006][T15414] #3: ffffffff90acd100 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 382.394282][T15414] #4: ffff888057f70128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 382.404803][T15414] #5: ffff888057f77258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 382.414641][T15414] #6: ffffffff91255d80 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 382.423602][T15414] #7: ffff88801d2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 382.434907][T15414] [ 382.434907][T15414] stack backtrace: [ 382.441047][T15414] CPU: 0 UID: 0 PID: 15414 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 382.450582][T15414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 382.460624][T15414] Call Trace: [ 382.463895][T15414] [ 382.466818][T15414] dump_stack_lvl+0xe8/0x150 [ 382.471406][T15414] print_circular_bug+0x2e2/0x300 [ 382.476436][T15414] check_noncircular+0x12f/0x150 [ 382.481455][T15414] __lock_acquire+0x164c/0x2de0 [ 382.486295][T15414] ? lockdep_unlock+0x5c/0xd0 [ 382.490970][T15414] lock_acquire+0x115/0x350 [ 382.495462][T15414] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 382.501095][T15414] down_write+0x96/0x200 [ 382.505338][T15414] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 382.510966][T15414] ? __pfx_down_write+0x10/0x10 [ 382.515812][T15414] ? down_read+0x2be/0x330 [ 382.520222][T15414] kernfs_remove_by_name_ns+0x4e/0x140 [ 382.525676][T15414] sysfs_remove_group+0x101/0x2e0 [ 382.530690][T15414] sysfs_remove_groups+0x54/0xb0 [ 382.535619][T15414] net_rx_queue_update_kobjects+0x6b7/0x780 [ 382.541515][T15414] netdev_unregister_kobject+0xff/0x450 [ 382.547064][T15414] unregister_netdevice_many_notify+0x1be1/0x2140 [ 382.553477][T15414] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 382.560234][T15414] ? __mutex_lock+0x30b/0x1550 [ 382.564998][T15414] ? __kfree_rcu_sheaf+0x21/0x690 [ 382.570028][T15414] ? __kfree_rcu_sheaf+0x21/0x690 [ 382.575062][T15414] ? __kfree_rcu_sheaf+0x21/0x690 [ 382.580077][T15414] unregister_netdevice_queue+0x2f5/0x340 [ 382.585792][T15414] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 382.592031][T15414] nsim_destroy+0x275/0x800 [ 382.596532][T15414] __nsim_dev_port_del+0x14e/0x200 [ 382.601640][T15414] nsim_dev_reload_destroy+0x288/0x490 [ 382.607101][T15414] nsim_drv_remove+0x58/0x170 [ 382.611779][T15414] ? __pfx_nsim_bus_remove+0x10/0x10 [ 382.617055][T15414] device_release_driver_internal+0x48b/0x880 [ 382.623121][T15414] bus_remove_device+0x444/0x560 [ 382.628054][T15414] ? __pfx_bus_remove_device+0x10/0x10 [ 382.633507][T15414] ? kernfs_remove_by_name_ns+0x101/0x140 [ 382.639222][T15414] device_del+0x524/0x8f0 [ 382.643549][T15414] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 382.649348][T15414] ? __pfx_device_del+0x10/0x10 [ 382.654194][T15414] ? lock_acquire+0x115/0x350 [ 382.658868][T15414] device_unregister+0x21/0xf0 [ 382.663629][T15414] del_device_store+0x2b5/0x370 [ 382.668476][T15414] ? __pfx_del_device_store+0x10/0x10 [ 382.673844][T15414] ? sysfs_file_kobj+0x1e4/0x230 [ 382.678770][T15414] ? sysfs_kf_write+0x166/0x260 [ 382.683608][T15414] ? __pfx_sysfs_kf_write+0x10/0x10 [ 382.688794][T15414] kernfs_fop_write_iter+0x3a4/0x540 [ 382.694076][T15414] vfs_write+0x612/0xba0 [ 382.698315][T15414] ? __pfx_vfs_write+0x10/0x10 [ 382.703074][T15414] ? do_sys_openat2+0x14e/0x200 [ 382.707921][T15414] ? kmem_cache_free+0x182/0x650 [ 382.712868][T15414] ksys_write+0x150/0x270 [ 382.717194][T15414] ? __pfx_ksys_write+0x10/0x10 [ 382.722043][T15414] do_syscall_64+0x166/0x520 [ 382.726625][T15414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.732683][T15414] ? clear_bhb_loop+0x70/0xc0 [ 382.737353][T15414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.743238][T15414] RIP: 0033:0x7f19f135fd8e [ 382.747646][T15414] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 382.767244][T15414] RSP: 002b:00007ffd478f7088 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 382.775679][T15414] RAX: ffffffffffffffda RBX: 0000555595201500 RCX: 00007f19f135fd8e [ 382.783642][T15414] RDX: 0000000000000001 RSI: 00007ffd478f7110 RDI: 0000000000000005 [ 382.791605][T15414] RBP: 00007f19f14373e4 R08: 0000000000000000 R09: 0000000000000000 [ 382.799651][T15414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.807612][T15414] R13: 00007ffd478f7110 R14: 00007ffd478f7950 R15: 0000000000000003 [ 382.815585][T15414] [ 382.827934][T15691] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 382.828148][ T5632] Bluetooth: hci2: command tx timeout [ 382.910994][T15414] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.968773][T15414] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.006451][T15414] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.067050][T15414] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 383.069120][T15414] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 383.069738][T15414] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 383.071107][T15414] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 383.071641][T15414] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 383.086906][T15414] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.087606][T15414] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 383.096780][T15414] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.144827][T15414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.151316][T15414] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.167708][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.167792][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.171587][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.171643][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.368519][T15414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.400931][T15414] veth0_vlan: entered promiscuous mode [ 383.409968][T15414] veth1_vlan: entered promiscuous mode [ 383.428767][T15414] veth0_macvtap: entered promiscuous mode [ 383.430812][T15414] veth1_macvtap: entered promiscuous mode [ 383.449984][T15414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.461709][T15414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.473682][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.496008][ T1079] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.496183][ T1079] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.497185][T15414] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 383.525217][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.525237][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.529087][T15414] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 383.551912][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.551931][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.553484][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0