last executing test programs: 7.922127395s ago: executing program 3 (id=2815): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0xfc, "3e2920d01b827625af9e7889fc3ac10d3e64e5fe7ed1167529906fe52a0c67dc3b09a21055fde39685ab003ee7ef3dee499488c0bf9cbdabf7462518f660ff6b2f87a966dcf158873a9d3dc03a5e3a1f602ae3e103deac024c47748a8aa2f94baf0f4af59fcbffdce9479ef301c3e37425b08d4bd562b322ff5cfbf0a1fd00ee29e09777dc394091c7c1dc657fcb7d0d9998a51e28b3b94436b73a87f80329cd5fd5ae245a23570f918efac58b7858243b6215f2188ac41ff70f9469d189af01a95071f8aaeb08c91487a36cad63b1ad4e660c6664abc65f4f30b6fbfa0b09ef2cf26964dfae814b2804b11549b400102bf008250c23de13dbee3824"}, &(0x7f0000000000)=0x104) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r1, 0xfffffff8}, 0x8) ppoll(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 7.886020831s ago: executing program 3 (id=2818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003800c00008008000340bc"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x5}, 0x6e) (async, rerun: 32) connect$unix(r1, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) (rerun: 32) 7.669571724s ago: executing program 3 (id=2823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x88}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "9d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deedc95f5d10a12027128db2e9bdf6", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) 7.52583059s ago: executing program 3 (id=2828): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x1000042, 0xa, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x5}}, 0x10) close(0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9fb030781000000000000000000", 0x0, 0x800fe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x60}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r3}, 0x18) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x1}, 0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r5}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001280)=@generic={&(0x7f0000001240)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000012c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001440)={{0x1}, &(0x7f00000013c0), &(0x7f0000001400)='%-5lx \x00'}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r9}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f00000014c0)=@generic={&(0x7f0000001480)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001580)={{}, &(0x7f0000001500), &(0x7f0000001540)=r2}, 0x20) 7.437274933s ago: executing program 3 (id=2831): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0x0, 0x0, 0x0, {0xa}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x24, 0x2c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\xd8'}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @union={0x0, 0x0, 0x0, 0xa, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x20) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c000280060001009b"], 0x24}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ba000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000019000100000000000000000023"], 0x24}}, 0x0) 7.337196658s ago: executing program 3 (id=2833): r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f00000000c0)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000600)=0x1b, 0x54) recvmmsg(r3, &(0x7f000000e280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r2) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) sendto$inet(r3, &(0x7f00000000c0)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) (async) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000600)=0x1b, 0x54) (async) recvmmsg(r3, &(0x7f000000e280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x14}}, 0x0) (async) 2.064775075s ago: executing program 1 (id=2907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}]}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffa}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10a}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x20050800) 1.897300001s ago: executing program 0 (id=2908): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000000005001a0004"], 0x24}}, 0x0) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1.844870764s ago: executing program 1 (id=2909): unshare(0x8000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000100)=0x3, 0x12) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_eeprom={0x7, 0x8, 0x7}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x88ca, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0700000004000000800100000400000028"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r7}, 0x18) r8 = socket(0x10, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000040)=0x304320, 0x4) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x25dfdbff, {0x2}, [@NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) sendmsg$nl_route_sched_retired(r9, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x581c, 0x2c, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x3, 0x9}, {0xf, 0xb}, {0x0, 0xc}}, [@f_tcindex={{0xc}, {0x177c, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0x100}, @TCA_TCINDEX_ACT={0x1758, 0x7, [@m_skbmod={0x1078, 0x17, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x10001, 0x4, 0x7ff4, 0x9}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_csum={0x120, 0x16, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7f, 0x8000, 0x8, 0x69b37964, 0xfffffffb}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffe, 0xc, 0x2, 0x3, 0x5}, 0x76}}]}, {0xbb, 0x6, "fc0130b890963da1b3f4422f714543e8651084f66eb1fad28239c0d5a9a9dbb468b0ddb151b74b5abbf74778aeb707d35530dfa833fec65f7a5b8b3283c5a62c5d0e0e0aea9bfb02149dc464f42fb8ee32ca60358b7a3ecfe145ec4b791c76f29bfc4f7c1aba3e81d7cf9828c921e8674e952c6fce0a909ea949846e6e99b4efaabc45f6d04bb1e42f8d1016935fdb68af3b624ae6e71b384cf863d7f309af7c5b62651df91906251d188aa53f0128d5aeed94f5336365"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x13c, 0x15, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x86}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x9, 0xffffffffffffffff, 0x6, 0x81}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x85, 0x7, 0x2, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0xae, 0x6, "f0a05a2301965c6580ccad9e2c7bab6ada5cadfd14d4b458af30f85fb527c2de576e91c2746e00ae832e5e5a284e98ba2b1b9580efa1d10e34be31eb9f1505a919b72d148f111914fe5ef5fa84a31a372abc4417c1ee8b21026797992de41374abe132ab2ae29b3763d235716d39575c06f0200eee2e2e25228de523286181e000f369581bb2a9cf02da47ee195617e7262f47f867b6d3828819999670eabbdb3a0b807ccdb40993a56d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x8c, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffff8, 0x1, 0x5, 0x6a, 0xb5e8}, 0x1}}]}, {0x47, 0x6, "19b68c502330969499eed961e69e0c66a7e05bee7ea770afb56b40840689b17d84910a01e843b9711f0a5606269995ca9fe057b72d25baa3aa24ecafe13cac4cafe019"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x3f4, 0x2, 0x0, 0x0, {{0x7}, {0x34c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x120, 0x6, {0x6, 'raw\x00', 0x89, 0x6, "945344c1caee0c1ae8c26326654f7bbf1939f674c319389f82339fbc8e034580790da8527ca29e88d8d1000b2ce61d5ce19578174fab5f9257c0cf4bde3910e156a917887a5e0044b28d6533f31859ce30d282e37c86c48b0dc6db753eb197f08f81e31ca0bc27d67bc98c5a3e9528beecac571c8b5a49761891b153b1191c164659549cfde2f842e10431254b0ee7cac61fec32402d168191e889a72406fc7933b8cee8547302349bf04e7ddc4e6112059c830214b3498d5265c9dab356b448fe9e2854321f6f6d0c143bd1995fa36a6932e87d5e285c46f62805af75cfc36330a0ed90bdb59a0a957bd6fddee30b1a2f3777891328"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TARG={0xdd, 0x6, {0x8001, 'filter\x00', 0x78, 0xd, "25388aedb40670be4a3e396288ed0d7cf084a74575ceec787be831cdbe3a044aafc4ca324a60db8ca0a6bc4bdb3f8915283a39b6ff0fde25a337c6301aeca3700c4f98263362957131127fee2bae1aac0a77283de328e74cff774867969631a4a32fd2e93f01220b4bf063fe9f99771dae05df035808bbd74e9d7bbc33343321d210b03087728be6464e8766d4a39360382e0224e05369f744e35e8192bd0af2be446b6ee8acbf913caad06a88380551073e4f"}}, @TCA_IPT_TARG={0x11d, 0x6, {0xbd, 'raw\x00', 0x7, 0x3, "d935481ce83a1141c8cc4128f380b3232b47aabdcebe5dd99ca1c626b0c13e8d7acc2c61d81016300aaba5335429764443adadef47201c11c03a57cfda8138c10c3767377aa0242ace38b202b65b394e835b56bc3e53629751ee1d92ba91c1c51083401f5fb4ce578f708fb93f64499eefc70b0bc69b58c20b9dfd52ef9f9112c55fc5ca769a66b0195fcb3ac4bc3a66723c3e660b8790b02421c7d49c7680a81b4a55827778ecdabc2caa31ea84b4af717fe47c576ec9499f928266c7e31581b3c4dc2d5423c4b404efb16d575ded5473a08d1d8e938f40b755b95d6d576bfaa89894779da80363475b414d672a8dc3c362f5"}}]}, {0x82, 0x6, "7d3bc015334d45bdba605a43ff38a3a6de17835b8c415611967dfb40aec4cae1f47280d219ed05fb007216bcfc02f1d3e6951dce52c94b668b0443794818880acd909b1f9f49f2227cb2ab51bcfe50f80c6ae516b3980a154a4395cf5ba1584bdafeac62c6559704276b36b35710c7bec6b1eedea03dbd914128a8d9773a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x9}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x4a61}]}}, @f_tcindex={{0xc}, {0x3e7c, 0x2, [@TCA_TCINDEX_ACT={0x3e78, 0x7, [@m_police={0x2a18, 0xe, 0x0, 0x0, {{0xb}, {0x29a8, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x4, 0x9, 0x7fff, 0x9, 0x7fffffff, 0x3, 0x7fffffff, 0xb, 0x10, 0x8, 0x81, 0xb, 0x8, 0x8001, 0x8, 0x2, 0x6, 0x0, 0x5, 0x7fffffff, 0xfff, 0x6, 0x5, 0x7, 0x3, 0x0, 0x5c, 0x3, 0x1, 0x6, 0xf8da, 0x7, 0x2, 0x2dee8cdf, 0x1, 0x1, 0x57760a84, 0x6, 0xf3, 0x6, 0x9, 0x7, 0x1, 0x7, 0x0, 0x91, 0x6, 0x9e5e, 0x4, 0xff, 0x72, 0x1, 0xfffffff7, 0x5, 0x0, 0xe, 0x3, 0x6, 0x3438, 0x2, 0x10000, 0x3, 0xd, 0xb, 0xfffffffe, 0x5, 0xffff, 0x8, 0x1, 0x2, 0x9, 0x9, 0x2, 0x3, 0x0, 0x8001, 0x1, 0x4, 0xa, 0x8, 0x6, 0x1, 0x800, 0x0, 0x9, 0x4, 0x8, 0x6, 0x2, 0xc, 0xc8c3, 0x1000, 0x7ff, 0xbbd3, 0x80000000, 0x0, 0x8001, 0x9, 0xb5, 0x1, 0xfffffffa, 0x2000, 0x5, 0x90, 0x7, 0x800, 0x7, 0xa, 0x401, 0xfffffffa, 0x5, 0x1a3, 0x0, 0x1, 0x10, 0x7, 0xccc, 0xfffffff8, 0x1, 0xe, 0x1, 0x3, 0x4, 0x1, 0x4, 0x1, 0x2, 0x2, 0x2, 0x7, 0x3d8, 0x0, 0x4, 0x2, 0x7fffffff, 0x251, 0x3, 0x8, 0x90, 0x8, 0xc5, 0x2, 0xc, 0xd29, 0xbf, 0x5, 0x882f, 0x5720, 0x3, 0x7ff, 0x8811, 0x9, 0x8, 0x27, 0xfffffff7, 0x72da6387, 0x8, 0xfffffffe, 0x4, 0x9, 0xe, 0x9, 0x7, 0x80, 0x38, 0x6, 0x4, 0x8000, 0x4, 0x5, 0xb, 0x500000, 0x401, 0x6, 0x9da2, 0x8, 0x1ad0, 0x30b2, 0xd4, 0x0, 0x13627d0a, 0x5, 0x10000, 0x567, 0x7, 0x5, 0x1, 0x7, 0x2, 0xffffffff, 0x0, 0x9, 0x3, 0x1, 0x1, 0x2399, 0x8, 0x5, 0x200, 0xffff8000, 0x0, 0x8, 0x44f8, 0x101, 0x1ff, 0x6e93, 0x7f, 0xffff, 0x7fff, 0x0, 0x7ff, 0xaccf, 0x1, 0x7, 0x0, 0x182, 0x7, 0x6, 0x2a4a, 0x800, 0x400, 0x7, 0x6, 0xdc7, 0x8, 0x2, 0x6, 0x81, 0x100, 0x7f1, 0x8, 0xffffff80, 0x3, 0x6, 0x5da7, 0x3, 0xffff0000, 0x5, 0xffffffff, 0xd6, 0x6, 0x9, 0x9, 0x6, 0x9, 0x2, 0x88be, 0x0, 0x6d, 0xe7, 0x4, 0xffffffff, 0x7fffffff, 0x6, 0xe128]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xb3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x64d}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x1, 0x5, 0x8, 0x4, 0x5, 0x0, 0xff, 0x5, 0x1e7e77b0, 0x2cb4, 0x4, 0x101, 0x800, 0x47, 0x276, 0x1, 0x2, 0x0, 0x5, 0x0, 0x7, 0xffff, 0x0, 0x42000000, 0x5, 0x0, 0x5, 0x1, 0xfffff801, 0x6, 0xb, 0x5, 0x10000, 0x3, 0x3, 0x0, 0xe5c, 0xa, 0x1, 0x401, 0x7fff, 0x6, 0x2, 0xfce, 0x2, 0x5, 0x5c7, 0x0, 0x0, 0x5, 0x5, 0x0, 0x2, 0x7, 0x7, 0x8, 0x324e, 0x8, 0xb9, 0x5, 0x0, 0x10de, 0x200, 0x3, 0x2, 0x9, 0x7cc306ca, 0x69, 0x2, 0xfffffdb2, 0x5, 0x3, 0x6, 0x6, 0x7, 0x401, 0xfffffffe, 0x4, 0x80000001, 0x800, 0xeb37, 0x4, 0xb, 0x9, 0x2, 0xd81, 0x6, 0x6, 0xcc2, 0x40, 0x7, 0x5, 0x8, 0x9, 0x3, 0x7, 0x1, 0x0, 0xf392, 0x0, 0x9, 0x6, 0x9, 0x2, 0x9, 0xfff, 0x3, 0x5, 0x794, 0x12dc, 0xe, 0x800, 0x3, 0x2, 0x80, 0x1, 0xff, 0x0, 0x10000, 0x80000001, 0x1, 0x101, 0x9674, 0x5, 0xc1d, 0x40, 0x8, 0x4, 0xc, 0x9, 0x1, 0xfff, 0x4, 0x1ff, 0x5, 0xfffffffb, 0x1, 0x7, 0xa, 0x6, 0x0, 0x10000, 0x5, 0x1, 0x2, 0x2b, 0x9, 0x6, 0xfffffffb, 0x4, 0x0, 0x8, 0x0, 0x80, 0x0, 0x80000001, 0x2, 0xa, 0x7f5c, 0x2, 0x9, 0x7182, 0x5, 0x1d7e82e0, 0x6, 0x4, 0xfffffffe, 0x3ff, 0x1, 0x0, 0x400, 0xf77, 0xffffffff, 0x8, 0xabf, 0x7, 0x6, 0xc, 0x7f, 0x7, 0x653b, 0x5a9, 0xfffffff6, 0x1, 0xfffffffa, 0x4, 0x8, 0x6, 0x0, 0x9, 0x1, 0x8e0, 0x40, 0x0, 0x40000000, 0x3f92, 0xb352, 0x80000000, 0x10, 0xa, 0x9, 0xffffd6cc, 0x1, 0x9, 0xf, 0x6, 0xff, 0x1, 0x471, 0x6, 0x9, 0x3, 0x6, 0x3, 0x7ff, 0x10, 0x6, 0xbed2, 0xa07, 0x6, 0x5, 0x4, 0x477d3acc, 0x56, 0x10001, 0x0, 0x10, 0x8, 0x6, 0x9, 0x9, 0x81, 0x7, 0x4, 0xfffffff8, 0x10001, 0x0, 0x0, 0x2, 0x4, 0x0, 0x1, 0x73ab, 0x9, 0x7, 0xf, 0x9, 0x0, 0x2, 0x3, 0x400, 0x401, 0x3, 0x5, 0xa]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x8, 0x3, 0x2, 0x0, 0xc, 0x8000, 0x5, 0x800, 0x0, 0x9, 0x5, 0x43, 0x10000, 0x400, 0x0, 0xfffffffa, 0x4, 0x249, 0x0, 0x3, 0x1af4, 0x9, 0x4, 0x9, 0x0, 0x5, 0x3, 0xd, 0x9a, 0xb, 0x1000, 0x401, 0x2, 0x80000000, 0x80000, 0xc, 0x7, 0x6, 0x1c, 0x6, 0x80000001, 0x2, 0xffff, 0x3, 0x273, 0xfffffffe, 0x7f, 0x0, 0x4, 0xf3d, 0x9, 0x80000000, 0x8, 0xfffffff9, 0x4, 0x4, 0xfffffffb, 0xfff, 0x0, 0x7, 0x3, 0xfa, 0x200, 0x0, 0x8000, 0x175, 0x0, 0x3, 0x9, 0x5, 0x8, 0xe1ff, 0xe5d, 0xf, 0x2, 0x9, 0x4, 0x6, 0x1, 0x8, 0xffffffff, 0x2, 0x4, 0x40, 0x10001, 0x101, 0x401, 0x6c63, 0x7ff, 0xfff, 0xfffffffd, 0xfc25, 0x40, 0x7fffffff, 0x6, 0x5, 0x2, 0x1, 0x7, 0x8, 0xff, 0x2, 0x4, 0x8, 0x6, 0x7, 0x7, 0x8001, 0xd5e8, 0x0, 0x2, 0x15, 0x5, 0x0, 0xd, 0x5, 0x2f, 0x0, 0x4, 0xfffffffa, 0x8000, 0x8, 0xffffff81, 0x3ff, 0x7, 0x9, 0x2, 0x5, 0x6, 0xe, 0x3ad, 0x1, 0x100, 0x7fff, 0x3, 0x7ff, 0x10000, 0x7fffffff, 0x80, 0x6, 0x0, 0x81, 0x5, 0x5, 0x7, 0xc, 0x3, 0x2, 0xbfb4, 0xffffffff, 0xcc, 0x1, 0xfff, 0x7d, 0x83, 0x6, 0x4, 0x2, 0x0, 0x10001, 0xff, 0x800, 0xb, 0x5bd, 0x2, 0x2, 0x5, 0x5, 0x7, 0x2, 0x9, 0x26, 0x400, 0x3, 0x3c, 0x6, 0x1d332759, 0x5, 0x1, 0x8, 0xfffffff9, 0x7, 0x2, 0x1, 0x2, 0xf, 0x0, 0xfffffffa, 0xc00, 0x0, 0x1d, 0x8, 0x1, 0x9, 0xfb, 0x5, 0xf, 0x2, 0x7, 0x7, 0x6, 0xe, 0x1, 0x4, 0x10000, 0x80, 0xff, 0x7fffffff, 0x2d2c, 0x0, 0xcd, 0x2, 0x1, 0x3, 0x5, 0x4, 0xfffffffd, 0xffff, 0x2, 0x0, 0x9, 0xb, 0x300000, 0x0, 0xf, 0x6, 0x81, 0x9, 0x7, 0x2, 0x2, 0x64, 0x101, 0x3, 0x3, 0xd, 0x1, 0xa5, 0xff, 0x7f, 0x10, 0x10, 0x1, 0x6c, 0x4, 0x8, 0x42, 0x401, 0x9, 0x0, 0x100, 0x3, 0xbefb, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7ff, 0x400, 0x0, 0x0, 0x5, 0x40, 0x62d, 0xffff, 0x8, 0x0, 0x1, 0x3, 0x200, 0x9, 0x8, 0xc7, 0x5, 0x1b8, 0x528, 0x200, 0x5, 0x9, 0xffffff01, 0x6, 0x5, 0x100, 0x7, 0x10, 0x80000001, 0x0, 0x3, 0x8d, 0x3, 0xb01, 0xf, 0x4, 0x9, 0x4, 0x7174, 0x1, 0x7, 0x3, 0x101, 0x1, 0x43bb, 0x7, 0x9, 0x369, 0x3, 0x9, 0xf, 0x2, 0xfb, 0x14, 0x2, 0xfffffff8, 0x3, 0x2, 0x1, 0x6, 0x2, 0x3, 0x7, 0x1, 0x6, 0x8000, 0x3, 0x3ff, 0x3b23, 0x7, 0x2, 0xc31c, 0x5, 0x9961b5e, 0x10, 0x5, 0x4, 0x80, 0x2, 0x1, 0x80000001, 0x3, 0x81, 0x1, 0xffffffff, 0xfffffff8, 0xfffff000, 0x8, 0x9, 0x5, 0x1, 0xd, 0x400, 0xffffffff, 0x7, 0x8, 0x7, 0x10000, 0x7d, 0x4, 0x4, 0xffffffff, 0x5, 0x200, 0x1, 0x3, 0x9, 0xfffffffc, 0x4, 0x2, 0x6e, 0x1, 0x81, 0x3, 0x3, 0xe, 0x0, 0x2, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0x7, 0x0, 0x0, 0x1, 0x3, 0x81, 0x8, 0x4, 0x7, 0x7, 0x1, 0x8, 0xffffffff, 0x80000000, 0x101, 0x10000, 0x3ff, 0x4, 0x12, 0x713, 0x400, 0xfff, 0x12, 0x1, 0x67a, 0x8f62, 0x7, 0x678f, 0xfffffffe, 0x1, 0xf, 0x3, 0x80000001, 0x9, 0x2, 0x5, 0x3, 0x143, 0x7fffffff, 0x0, 0x5, 0x64362ad4, 0x0, 0xf6e, 0x8, 0x3, 0xfd, 0x4, 0x2, 0x2, 0x40, 0x7eb9, 0x43, 0xb5d7, 0x4d, 0x7, 0x7, 0x8, 0xce0, 0x7fffffff, 0x1ff, 0x5, 0x401, 0x2, 0x8, 0x401, 0x8, 0x9, 0x9, 0x2, 0x3ff, 0xf, 0x0, 0x0, 0xf6, 0x9, 0x9, 0xfffffffe, 0x5, 0x2, 0x5563, 0xa9, 0x0, 0xfffffffd, 0xb, 0xfcb5, 0x635, 0x1, 0x1, 0x7, 0x40b, 0x8000, 0x5, 0x4, 0x0, 0x3, 0x6, 0x1c6a, 0x6, 0x80000001, 0x10, 0x9, 0x6, 0x2, 0x1, 0x1000, 0x1, 0x8, 0x1, 0x7000000, 0x37, 0x8a, 0x2, 0x6, 0xf, 0x4, 0xfff, 0x40000000, 0x0, 0x1, 0x5, 0x20a, 0x9, 0xa45, 0x4395, 0x3, 0x1, 0x5b, 0x10000, 0x5, 0xfffffff9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x9, 0x1, 0x80000, 0x6, 0x9, 0xad, 0xd8d2, 0x2, 0x4, 0x9, 0x6, 0x6, 0x8, 0x4, 0x7f, 0x7, 0xc, 0x8001, 0x7ff, 0x1, 0x8, 0x1, 0x5, 0xff, 0x3, 0x2, 0x100, 0x6, 0x2, 0x5, 0x9, 0x5, 0x6, 0x8, 0x2a, 0x773, 0x7f, 0xfece, 0x6, 0x1, 0x8, 0x8eb, 0xfffffffc, 0x9, 0x2, 0xd, 0x7, 0x77fb, 0x9, 0x6, 0x8, 0x3, 0x8, 0x4, 0x9, 0xffff, 0xffff, 0xffffffff, 0xf7, 0x6, 0x4, 0x3, 0xfffffffe, 0x6a, 0x9e7, 0x7, 0xffff0000, 0x96, 0x0, 0x7, 0x1, 0xfffffffb, 0x0, 0x2, 0xd39b, 0x4, 0xf, 0x1, 0x101, 0x6, 0x80000001, 0x35cd800, 0x2, 0x476, 0x10001, 0x1, 0x0, 0x56a5, 0xc, 0x1, 0xe, 0xd, 0x6, 0xe9, 0x71, 0x0, 0xb, 0x8000, 0x5, 0xfff, 0x4a35, 0x9, 0x7c, 0xc, 0x80, 0xfffffffb, 0x9, 0xff, 0x4, 0x8001, 0x7, 0x101, 0x5, 0xac3, 0x2, 0x1, 0x0, 0xa78b, 0x9, 0x4, 0xfffffffa, 0x8, 0x7, 0x2, 0x101, 0x88, 0x0, 0x6, 0x0, 0x4, 0x10001, 0xffff, 0x9, 0xdc, 0xff, 0x2, 0x7, 0x7, 0x7, 0x29, 0x1, 0x8, 0x0, 0xd, 0x2, 0x6, 0x3, 0x1, 0xee7, 0x3, 0xfffffff7, 0x9, 0x2, 0xc02, 0x3, 0xb, 0x2, 0x5, 0x0, 0x942, 0x10, 0x3, 0x5, 0x6, 0x9, 0x8, 0x9, 0x1, 0x18, 0x1, 0xff, 0x8001, 0xd, 0xeeec, 0xffffffff, 0x8, 0x8, 0xc, 0x7ff, 0x7, 0x8, 0x81, 0x8, 0x2, 0xf, 0x0, 0x8, 0x2, 0x5, 0x6, 0x0, 0x4, 0xa54b, 0x8, 0x4, 0x8, 0x2, 0x71, 0xdf, 0x9, 0xa2cb, 0x0, 0x9, 0x3, 0x2, 0x800, 0x2b, 0xfffff800, 0x0, 0x8, 0x2, 0x1, 0x0, 0xf7, 0x6, 0x400, 0xffff, 0x5, 0x6, 0xbe3, 0x2, 0x2, 0x3, 0x2, 0x100, 0x4, 0x8, 0x800, 0x0, 0x6, 0x3, 0xfffffff8, 0x1, 0x7f, 0x1, 0x2, 0x9, 0xc00, 0x2c, 0x2, 0x0, 0x0, 0xf, 0x7, 0x8, 0x6, 0x0, 0x25, 0x0, 0x9, 0x7, 0x8, 0x2, 0xfff, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x7, 0x1000, 0x4, 0x1, {0x4, 0x0, 0x4, 0x8, 0x9, 0x5}, {0x0, 0x1, 0x3, 0xbf4a, 0x8, 0x40}, 0xffffffeb, 0x8, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0x5, 0x4, 0x4, {0x81, 0x1, 0x7, 0x7ff, 0x0, 0x5}, {0x5, 0x0, 0xd, 0x401, 0xfff8, 0x8}, 0x1, 0x1, 0x10}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2e, 0x8, 0x2, 0x3, 0x80000000, 0xd4b, 0x3, 0x80000000, 0x850, 0x9, 0x5, 0x5, 0x2, 0x7, 0x1, 0x6, 0x4edf, 0xb, 0x1, 0x1, 0x5, 0x7, 0x8, 0x401, 0x2, 0x3, 0x0, 0x5, 0x4, 0x1, 0x5, 0x0, 0xfffffffa, 0x3, 0x9, 0x5e4, 0xef, 0x9e2, 0xa, 0x8, 0x1000, 0x61a6, 0x3, 0xff, 0x1e, 0x8, 0x101, 0x51, 0x7, 0x5, 0x3, 0x8, 0x80000001, 0x0, 0xb, 0x1, 0x48e0, 0x5, 0x10, 0x1ff, 0x3, 0x4352, 0xb91e, 0x5, 0x5, 0xb, 0x9, 0x7, 0x7ff, 0xd, 0x4, 0x1, 0xffffffc0, 0x7fff, 0x3, 0x2, 0x10001, 0x1000, 0x9, 0x673d7c08, 0x1, 0xffffffff, 0x7, 0x7, 0xb, 0xffffff67, 0x8, 0x2, 0x3, 0x1, 0x2, 0x7, 0x100, 0x8, 0x5, 0xfffffffb, 0x3ff, 0x60e, 0x2, 0x59, 0x3, 0x0, 0x80000000, 0x80000000, 0x7, 0x3, 0x0, 0xfffffff7, 0x5, 0xa, 0x3, 0xd4, 0x27, 0x4, 0x7fffffff, 0x7, 0xffff411d, 0x5, 0x3, 0x41b5, 0x7ff, 0x8, 0xffffffff, 0x5, 0xbe3, 0x6, 0x8d5, 0x3, 0x7, 0xb, 0x5, 0xfff, 0x6, 0x8, 0x0, 0x1, 0x4, 0x2, 0x101, 0x7, 0x2, 0x7, 0x9, 0x40, 0x2, 0x10000, 0x84eb, 0x9, 0x6, 0xcbf8, 0x100, 0xa, 0x2, 0x3, 0xd8d, 0xe4b, 0x5, 0x7fffffff, 0x4e8f, 0x3, 0x9, 0x5, 0xfffffffc, 0x5c0, 0x8, 0x4, 0x0, 0x0, 0x8, 0x5, 0xd9b, 0x2, 0x1, 0x0, 0x80, 0x0, 0x0, 0x5, 0x800, 0x0, 0xfffffffa, 0x8, 0xf, 0x5, 0x8, 0x6, 0x5, 0x8, 0x9a34, 0x3b6, 0x9, 0x6, 0x84, 0x3, 0x3, 0x4, 0xfffffff8, 0x80000000, 0x6, 0x286945cd, 0x2, 0x5, 0x1, 0x2b7, 0x4, 0xf41, 0x9, 0x4, 0x3, 0x40, 0x4, 0x3, 0x2, 0x2, 0xffff8000, 0x9, 0x80, 0x5, 0x1, 0x2, 0xfffffffe, 0xed56, 0x9, 0xc, 0xfffffffb, 0x0, 0x8, 0x817, 0xfffffffc, 0x7, 0x8, 0xf2bf, 0x10001, 0xc, 0xf25, 0x7, 0x4, 0x8, 0xe, 0x7, 0x8, 0x8, 0x6, 0x8001, 0x7, 0xfffffffe, 0x2, 0xc7, 0x6, 0x4, 0x47f, 0x401, 0x4, 0x0, 0x6, 0x100]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3f4, 0x7, 0xe, 0xd, 0x2, 0xb00, 0x8, 0x9, 0x101, 0x0, 0x1, 0xc, 0xa456, 0x9, 0x7, 0x5e8e, 0x1, 0xc, 0x800, 0x0, 0x8001, 0x6fd, 0x6, 0x10000, 0x1, 0xfffffffd, 0x0, 0x7ff, 0x3, 0xffffffff, 0xd5f, 0x6, 0x3, 0x8a, 0x10001, 0x7, 0x9, 0x7fff, 0x2, 0x22d3, 0x1000, 0x421, 0x0, 0xffff, 0x9966, 0x7123, 0x5, 0x5, 0xe, 0x4, 0x6, 0x4, 0x800, 0x81, 0xb, 0x2, 0x2, 0x2, 0x1ff, 0x6, 0x7ff, 0x7, 0x401, 0x10000, 0xb66, 0x9, 0xe, 0x0, 0xb, 0x9, 0x7, 0x80bb, 0x80000000, 0x7, 0xb, 0x6, 0x8, 0x6, 0x2, 0xafe, 0x200, 0xd3, 0x8, 0x1, 0x7, 0x800, 0x10, 0x5, 0x5, 0x8, 0x1, 0x7f, 0x9, 0xd8e, 0x2, 0x40, 0x1, 0x2846, 0x1, 0x8, 0xa, 0x8, 0x9, 0xfffffff8, 0x0, 0x1ff, 0x2, 0x954, 0x671, 0x9, 0x6e28, 0x0, 0x1000, 0x9, 0x3, 0x7, 0x0, 0xffffffff, 0x5, 0x6, 0x9, 0x0, 0x4, 0x6, 0x6, 0x6, 0x42e, 0x6, 0x3ff, 0x7, 0x7, 0xc000, 0x2, 0x8000, 0x7f, 0x0, 0x8000, 0x400, 0x3, 0x5, 0x200, 0x7ff, 0x720, 0x10000, 0x1, 0x5, 0xf735, 0x5, 0x8001, 0x6, 0x4, 0xf, 0x6, 0x0, 0x7, 0x0, 0x9, 0x81, 0x5, 0x1, 0xfffffffb, 0x6, 0x9, 0x7, 0x7, 0x0, 0x200, 0x9, 0x0, 0x4, 0x6, 0x5, 0x0, 0xa5, 0xa, 0x80000000, 0x4, 0x4, 0xf8, 0x2, 0x2, 0x5, 0x36b73c1f, 0x0, 0x1, 0x98a, 0x8001, 0x4d28, 0xaaf, 0x3, 0x3, 0x7, 0x9, 0x467b, 0x0, 0x0, 0x6, 0x100, 0x8001, 0x7ff, 0x7d, 0x100, 0x7ffb, 0x7, 0x4, 0x5, 0x9, 0x1, 0xa8be, 0x2, 0x1, 0x1, 0x2, 0x7, 0x2, 0x5, 0x2, 0x80001, 0xd7, 0x0, 0xa, 0x7, 0x610, 0x61, 0x4, 0x5, 0xd, 0x1dc3d2d6, 0x3, 0xfffffff7, 0x200, 0x7, 0x5, 0x3, 0x6, 0x5, 0x9, 0x5, 0x9, 0x3, 0x3, 0x1, 0x100, 0x0, 0x2, 0xa, 0x4, 0x200, 0x1, 0x7f, 0xffff, 0x7fffffff, 0x8, 0xafa, 0x9, 0x7ff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x81, 0xa, 0x1, {0x81, 0x0, 0xcf2, 0x0, 0x7f9, 0x6}, {0x3, 0x0, 0x7, 0xff5a, 0xfff9, 0x5}, 0x5, 0x2, 0x8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x9, 0x2, 0x5, {0x4, 0x2, 0x8001, 0x7, 0xfff9, 0xd2}, {0x4, 0x1, 0xfff, 0x8, 0x2, 0x9}, 0x0, 0x80000000, 0x421bedeb}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x999b, 0x1, 0xd381, 0x800, 0x9, 0x7, 0x6, 0x10000, 0x2, 0x7, 0x0, 0x5, 0x8, 0x0, 0x1, 0xffffffff, 0xe, 0x3, 0x7ff, 0x9, 0x9, 0xfff, 0xb8e, 0x400, 0x2, 0x5eb, 0x1ff, 0xffffffff, 0x6, 0x8, 0xd, 0x28000, 0xfffffffd, 0xa, 0x5, 0x1000, 0x3, 0x5, 0xfffffff0, 0x1d7d, 0x10001, 0x2, 0x2, 0x8, 0xe8, 0x1, 0x9, 0x6, 0xcfd4, 0x40000000, 0x5, 0xc, 0xf172, 0xfffffff8, 0x5, 0x0, 0x5, 0x6, 0x7a, 0x6, 0x1000, 0x8, 0x37d, 0x7, 0xfffffffe, 0xf04, 0x5, 0x7, 0x1, 0xce06, 0x1, 0x7, 0xfffffff8, 0x3a, 0x4, 0xc42, 0xabc5, 0x0, 0x5, 0x5, 0x0, 0x80, 0xffffff7f, 0x4, 0x7, 0x9, 0x3, 0x9, 0x10001, 0x6, 0x5, 0x4a16da4c, 0x0, 0xffff, 0x7, 0xfffffff9, 0x6, 0x76, 0x6, 0x9d7, 0x4, 0x3, 0x7, 0x0, 0x40, 0x8001, 0xffff, 0x3, 0x4, 0xc, 0x4, 0xfffffffb, 0xa, 0x400, 0x0, 0x6, 0x7, 0x8, 0xd, 0x80, 0x93a6, 0x0, 0x2, 0xd, 0x0, 0xfffffffd, 0x1000, 0x8a, 0xf, 0x7, 0x0, 0x6f1d, 0x1, 0xc344465, 0xd, 0x1, 0xffffffff, 0x101, 0x6, 0x4, 0x7c, 0x9, 0x10000, 0x6, 0xf605, 0x4, 0x0, 0x9, 0x6, 0x6000000, 0x8, 0x5, 0x609, 0x9, 0x4, 0x1, 0x800, 0x6, 0x1ff, 0x2, 0x8b2b5103, 0x3, 0xffffff18, 0x8dd, 0x9, 0x401, 0x8, 0xf9, 0xfff, 0x3, 0x2, 0x0, 0x9f1, 0x4, 0x0, 0x7, 0x5, 0xc, 0xf, 0x2, 0x80000000, 0x1, 0x5, 0x9, 0x2, 0x5, 0x5, 0x5, 0xb, 0x6, 0x0, 0x16660000, 0xfffffffd, 0x0, 0x561, 0x4000000, 0x6, 0x1ff, 0x5, 0x80, 0x6, 0x3, 0x4, 0x8, 0x8001, 0x0, 0x9, 0x6, 0x6, 0x2, 0x1, 0x2, 0x7fff, 0xdf30, 0x20000000, 0x2, 0x10, 0x6, 0x0, 0x7, 0x2, 0x2, 0x3, 0x3, 0x6, 0x1, 0x4a11, 0x1, 0xffffffff, 0x1, 0x1, 0x8, 0x8, 0x4, 0x10000, 0x2, 0x6, 0x9, 0x615a, 0x8001, 0xc17, 0x6, 0x4, 0x4, 0x0, 0xfffffff9, 0x9, 0xd751, 0x401, 0x2940, 0x9, 0x7, 0xd01, 0x6, 0x10000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x4, 0x7, 0x4d3e, 0x98, 0xe24, 0x9, 0x5, 0x8, 0x9bb, 0x4, 0x8, 0x80, 0x8000, 0x4, 0x7, 0x6, 0xffffffff, 0x3, 0x6, 0x4, 0xf, 0x3, 0x3, 0x0, 0x800, 0x2, 0x1, 0x7, 0x3d0, 0x3, 0x80000001, 0x8, 0xd81b, 0x5, 0x5, 0x40, 0x8000, 0x2, 0x7, 0xd310, 0x6, 0x58046586, 0x80, 0x6, 0x1, 0x6, 0x4, 0x7, 0x5, 0x8, 0x2, 0x7, 0x1, 0x5, 0x4, 0x6, 0x4, 0x4, 0x5, 0x8, 0x4, 0x3, 0x1, 0x0, 0x1, 0x0, 0xfff, 0xa, 0xd, 0x9, 0x10000, 0x7, 0x0, 0x6, 0x8, 0x9, 0x1, 0x385, 0xfffffe9a, 0x6, 0x4, 0x7, 0x7, 0x2, 0x2, 0x3800, 0x0, 0x53a, 0x2, 0x312, 0x3, 0x6, 0x101, 0xffffffff, 0x10001, 0x0, 0x0, 0x9, 0x80000000, 0x742, 0x2, 0xa6a2, 0x8001, 0x3ff, 0x7, 0x76, 0x9, 0x9, 0x8, 0x1, 0x9, 0x9, 0x2, 0x16e7, 0x3, 0xe, 0x6, 0x7, 0x8, 0x8000, 0x7, 0x80000001, 0xc, 0x6, 0x4, 0x4, 0x2, 0x101, 0x1, 0x1, 0x8, 0x38, 0xc, 0x10000, 0x5e1, 0x652, 0x3, 0x1, 0xec82, 0x6, 0x800, 0x4, 0x8, 0x7, 0x55, 0xfff, 0x8, 0x2, 0xfbc, 0x8, 0x2, 0x8, 0x5, 0xffffffff, 0xcc, 0x7, 0x4, 0xb, 0x10000, 0x0, 0x6308, 0x4, 0x6, 0x1, 0x2, 0x0, 0x5, 0x7, 0xe, 0xffff, 0x9, 0x8, 0xc4, 0x1, 0x1, 0x7fff, 0xffffffa9, 0x420, 0x7, 0x9, 0xfffffd2d, 0x6, 0x71, 0x1, 0xa, 0x401, 0x401, 0xb, 0xe3f, 0x3, 0x8c, 0x80000001, 0x85, 0xffffffff, 0x8, 0x7, 0xffffffff, 0x3d51, 0x8, 0x33d132d2, 0x4, 0x6, 0x746, 0x34, 0xfffffff7, 0x800, 0x7fffffff, 0xffff7fff, 0xc, 0x8, 0x6, 0x2, 0x3, 0x8, 0xf, 0x4, 0x8, 0xf, 0xb4, 0x9, 0x9, 0x7, 0x6, 0x7a388f97, 0x81, 0xfffffe00, 0xfffffffa, 0x4, 0x5, 0x4, 0xfffffffb, 0x100, 0x6b000000, 0x3ff, 0x2, 0x9, 0x1, 0x9, 0x8, 0xfffffffa, 0xfffffff8, 0xfffffff8, 0x4, 0x5, 0x4, 0x2, 0x4800410a, 0x400, 0x8, 0x2, 0x100, 0x7fff, 0x3, 0x6, 0x8ae7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x2, 0x631d, 0x7, 0x7fff, 0xfffffff8, 0x100, 0x23c, 0x9, 0x52bb, 0x40, 0x1, 0x775f, 0x5a4, 0x9f3b, 0x1, 0x2, 0x9, 0xe28, 0xffffff80, 0xe906, 0x7, 0x6, 0x7f25, 0x3, 0xe3, 0xffff, 0xfffffff3, 0x8, 0x3, 0x7, 0x627, 0xff, 0x517b, 0x1, 0x1, 0x4, 0x401, 0x8, 0x71f, 0x2, 0x9, 0x3, 0x100, 0x2, 0x7fffffff, 0x2, 0x4, 0xf6e, 0x3, 0x9, 0x400, 0x2, 0x9, 0x80, 0xe, 0x7, 0x7, 0x2, 0xffff, 0x9, 0x8, 0x3, 0x0, 0xebe0, 0xff, 0xff, 0x5, 0xefdc0000, 0x7, 0x8, 0x7ff, 0x80000000, 0x1ff, 0x6, 0xb7, 0x8, 0x7, 0x8, 0x7, 0x94c, 0x7fffffff, 0xfffffff7, 0x2000, 0xfe, 0x8, 0x1dff, 0x2, 0x4, 0x6, 0x9, 0x7f, 0x4, 0x9, 0x9, 0x9, 0xdd20, 0x2, 0x2, 0xfff000, 0xfffffff9, 0xff, 0x6, 0x3, 0x6, 0x3, 0x7fffffff, 0x3, 0x3, 0x65f, 0x4, 0x0, 0x2, 0x9c, 0x5, 0x8, 0x2, 0x800, 0xb05, 0x50, 0x6, 0xb, 0x12e, 0x0, 0xd, 0x6, 0x180, 0x9, 0x8, 0x6, 0x5, 0xfff, 0xff2b, 0x401, 0x3, 0x2, 0x2900, 0xffffff91, 0xfc31, 0x0, 0x85fa, 0x9e5, 0x9, 0xffffffff, 0x6, 0xc, 0x6, 0x7, 0x17, 0x1ff, 0x1, 0x5, 0x10, 0x4, 0x7f, 0x0, 0x8, 0x0, 0xfffffff8, 0x1, 0x0, 0x8, 0x5, 0x6, 0x7, 0xffffffff, 0x4, 0x4, 0x0, 0x100, 0x80000000, 0x2, 0x5, 0x7fff, 0xc, 0x6, 0x9, 0x1, 0x7, 0x2, 0x5, 0x5, 0x6, 0x6, 0x4, 0x2, 0x80000001, 0xb6, 0x6, 0x4, 0x10, 0x1, 0x8, 0x7fff, 0x12, 0x7, 0x6, 0x2b, 0x401, 0x1b, 0x9, 0x2, 0x1, 0x10001, 0x8, 0x9d25, 0xfffffffc, 0x9, 0x3, 0xb9, 0x6, 0x9, 0x80000001, 0x4, 0x2, 0x100, 0x2, 0x0, 0x7, 0x7, 0x2400, 0x48382bb0, 0x3ff, 0x6, 0x7d1d, 0x1, 0x7ff, 0xacab, 0x6, 0x9, 0x0, 0x6, 0x8b5, 0x1, 0x0, 0x34, 0x7, 0xa99, 0x1, 0x2, 0x54, 0xffffffff, 0x1, 0xfffffff2, 0x101, 0x0, 0xd, 0x0, 0x4, 0xf, 0x800, 0x80, 0xfffffff7, 0xa2a, 0x8, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]]}, {0x48, 0x6, "e02c3bffe4aa85f5fa50b44fdd0582493e95d084362c08c2bbb3731e47b5a5b6168de87917a4fca05d65bd1f84eaa4f1b884f98fbd97f14ebbc7a34eec8bdf417183f76c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x144, 0x5, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x200, 0x8, 0x80000001, 0x4}, 0xb}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0xce, 0x6, "185038dd07df2d8868efdb34e177b9edb2170e5e07f0d12a4e14ddd0717a7d971c545258add4c624aac30e6c35ad1f9e587303865c7ae75f2a67bd4ba0bcdd4341ae3adfbb21b615760478f43eea7d1b1942a202df1c65de700e5f566d3b64fd232ba8b91cdae07018f103417e80592d03606abdb923741f2659fdd4b38165738e56f8c2ec82de584740a2b3b38581cc2fc3ea745a24521d821fd23aff7f524e04dd9b9766f57a11447b1b5eccda694b1f0a3760d4b364a29c3966248a2215d2c33c644f7d8adf8eb215"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_csum={0x110, 0x20, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x7fffffff, 0x3, 0xfff, 0x3c}, 0x69}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x8, 0x3}, 0x55}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff8000, 0x6, 0x2, 0xd, 0x1ff}, 0x68}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x9, 0x20000000, 0x0, 0x200}, 0x49}}]}, {0x73, 0x6, "c2da1197e2d287cc1c512571a50f520537d46cb222b8448cc6ac5bfee95904aa4717d3d4211704029c8d9aad20ce92fe3dcdf7ee3aa681802061acf2b17878af050002f685a874c7068b4735f40c147b2e497ab96fa959a0daead99159631c8f01344fdfdd2056fb68b2f4d61294fb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x15c, 0x17, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x59f, 0x0, 0x1, 0x18000, 0x401}, @loopback, @broadcast, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0x3ff, 0x5, 0x80, 0xffff}, @rand_addr=0x64010100, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xdb, 0x0, 0x20000000, 0x2, 0x1}, @empty, @multicast1, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x2, 0x10000000, 0x9, 0x40}, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x800, 0xfffffff7, 0x2, 0xa6, 0x4}, @loopback, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x8, 0x5, 0x4, 0x2}, @multicast1, @private=0xa010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xe25, 0xffffffffffffffff, 0xff, 0x5}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xffffffff}}]}, {0x1b, 0x6, "c948dce1ec7fdcf4283e2707d60ec56b53d9a65befecf1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0xf0, 0x8, 0x0, 0x0, {{0xb}, {0xa8, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x5, 0x5, 0x5, 0x6}, 0x3}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x8, 0x20000000, 0x0, 0x3}, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x41, 0x4, 0x3, 0x5, 0x7fff}, 0xb}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0x1e, 0x6, "9eb57be1c3f4c541940d9ea549c51178c060f4b4d43233bfceb7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6f78e45cbdfd0570, 0x1}}}}, @m_tunnel_key={0x90, 0x19, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x81, 0x7, 0x8, 0x2, 0x4affb3}, 0x2}}]}, {0x27, 0x6, "114b9eff9130fb8626542b991db33499cc6cf52cc22d64337a31f7ddda0a452e7f59fb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x1d0, 0x13, 0x0, 0x0, {{0x7}, {0xd4, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TARG={0x36, 0x6, {0xa, 'mangle\x00', 0x8, 0x7e, "c7b6d79d4fe94ca87d772e2d"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x36, 0x6, {0x6, 'raw\x00', 0x0, 0xb, "517ee4ab84a205b79ee0fd6d"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0xd7, 0x6, "2bb716a0b762f09a63126f60809ada686a9b816559965476c567e6031c9bdf662ad2592b2c4781f50cb7b2094f136ad21115b1d29197497409c57f353cb4b6f9197fb133dad96f0e98da7876e213873147fdb7a78eeb83fb010262ae159b56a66ea41816c24f35fa856cb96a9b27ee0ac8b951ed02f7c7d1d50f09fb1343a7628d0c75764882c97a8559a31c3ae4594e8dda237bd46ba72b5ca5df8da58cc322a4d55991dba80a45a446958232afbac721554e871cc56c500975989288420c1aae68588f2213e9672569572b159e42493cd0a7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0xd5c, 0x19, 0x0, 0x0, {{0xb}, {0xd00, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x100}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x475dc809, 0x3, 0xf, 0x1, 0x6, 0x2, 0x80, 0x2, 0x1, 0xfffffff8, 0x0, 0xec, 0x81, 0x200, 0x1, 0x6, 0x400, 0xfff, 0xa, 0x7, 0xfffffffc, 0x7fff, 0x9, 0xf, 0x2, 0x1, 0x5, 0x3, 0x1000, 0x7fff, 0x40, 0x4163, 0xa, 0x2, 0x6, 0x6, 0x80, 0x6, 0x1, 0xf, 0x2, 0x3, 0xdb9, 0x7, 0x1, 0x791f, 0x7fff, 0x3, 0x1, 0x498, 0x0, 0x7f, 0x4dc, 0xffff, 0xffff, 0x5, 0x2, 0x62, 0x7f, 0xb9b, 0x30, 0x401, 0x4, 0x4, 0xf, 0x4, 0x1, 0xa77, 0x1, 0x100, 0xf57, 0x4, 0x3ff, 0x0, 0x9, 0x5, 0x4, 0x1ff, 0x8, 0x5, 0xa4, 0x4, 0x4, 0x0, 0x2, 0x3, 0x9, 0x2, 0xfffffffb, 0x1, 0xffffbda2, 0x391defee, 0x2, 0x8, 0x10001, 0x101, 0x2, 0x7, 0x3, 0x9, 0x1, 0x2, 0x4, 0xfffffff8, 0x6, 0x0, 0x2, 0x9, 0x1, 0x7, 0xe, 0x33de, 0x4, 0xec93, 0x5, 0x49a, 0x5, 0x9, 0xbc, 0x40, 0x9, 0x1ff, 0x8, 0x8, 0x81, 0xffff, 0x2, 0x5, 0xc0, 0x4bc, 0x6, 0xffff0000, 0x4, 0x9, 0x5, 0x2, 0x9, 0x9, 0x8, 0x3d, 0x3, 0x10001, 0x8, 0x7fff, 0x3, 0xfffffff6, 0x7, 0x8e23, 0xb, 0x1000, 0x3, 0x6, 0x0, 0x9, 0x8, 0x8, 0x0, 0x8001, 0x4, 0x1500, 0xfffffffa, 0x8, 0x9, 0x7, 0x9, 0x10, 0x5, 0x9, 0x8, 0xff, 0x4, 0xb, 0x7, 0x2e0, 0xd7, 0x6, 0xa209, 0x0, 0x2, 0x3, 0x1, 0x0, 0xfff, 0x4, 0x800, 0x2, 0x9, 0x2b5, 0xb, 0x0, 0x5, 0x2c9a000, 0xee6, 0x8, 0xec, 0x1ff, 0x5, 0xfff, 0x2, 0x5, 0x3, 0xa, 0xffffffff, 0x0, 0x489, 0x9ceb, 0x3, 0x80, 0x9, 0x7dc, 0x0, 0x8, 0x8, 0xfffffffe, 0x10000, 0x7, 0xfff, 0x8, 0x5, 0x2, 0x3, 0x1, 0x5, 0xfffffffe, 0xea69, 0x6, 0xab86, 0x9, 0xfffffffd, 0x6, 0x71e, 0x87b5, 0x140, 0x9, 0x1, 0x9, 0x583, 0x2, 0x80, 0x5, 0x5, 0xd1ce8268, 0x9, 0x2, 0x4, 0x9, 0x6, 0x6, 0x7, 0x5, 0xc, 0x5, 0x4, 0xa34e, 0xffffff01]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x400, 0x200, 0xb, 0x2, 0x8001, 0x4, 0x5, 0xad, 0x3, 0xffffff85, 0x3d, 0x1, 0x2, 0x2, 0x6, 0x10000, 0xd, 0x5, 0x0, 0x1, 0x7, 0xa, 0x60, 0x100, 0xa, 0x76aa, 0x0, 0x4, 0x4, 0x5, 0x0, 0x2, 0xdd, 0x3, 0x0, 0x0, 0xe, 0x2, 0x3, 0xef, 0x8, 0xffffffff, 0x1, 0xfffff937, 0x4, 0x3fc6bfbb, 0xd, 0x10000, 0x18c1, 0x5, 0x6, 0x6, 0x7fffffff, 0x1, 0x44c58ec6, 0x6, 0x7, 0x0, 0x6, 0x9, 0x8, 0x3, 0x6, 0x9, 0x0, 0x3, 0x399, 0x961b, 0x8, 0x800, 0x1, 0x3, 0x4, 0xfffffff3, 0x8, 0x4, 0x4458, 0x2, 0xffffffff, 0x10, 0x5, 0x1, 0x0, 0x6, 0x80000001, 0x2, 0x7, 0x6, 0x3, 0x7, 0x5, 0x0, 0x2, 0x9, 0x80, 0x8001, 0x8, 0xfff, 0x6, 0x4, 0x8, 0x2bff2bba, 0x1, 0x7, 0x4, 0x5, 0xa9, 0x7, 0x5, 0x7, 0x4, 0x7, 0x1, 0x800, 0x4, 0x8, 0x2, 0x7, 0xffffffff, 0x7, 0x1964, 0x0, 0x8, 0x2, 0x1, 0x8001, 0x80, 0x6, 0x7, 0x8, 0xe4, 0xfffffffc, 0x80000001, 0x3, 0x27, 0x3, 0x9, 0x9, 0xd8a10000, 0x7, 0x1, 0x2bd6, 0x9, 0xa, 0x5, 0x7, 0x4, 0x25, 0x10000, 0x6, 0x9, 0x6, 0x9, 0xffffffff, 0x8000, 0x0, 0x7, 0x10, 0x9, 0x800, 0x3, 0x5, 0x7ff, 0x6, 0xff, 0x6, 0x7, 0x2, 0xffff, 0x65, 0xf, 0x65d9247d, 0x3, 0xd3, 0x4, 0x7f, 0x400, 0x5, 0x5, 0x7, 0xc713, 0x6, 0x6, 0x0, 0x7, 0x6, 0x5, 0x1632d545, 0x4b79c6ad, 0x5, 0x9, 0x29d2, 0x7fffffff, 0x6e8, 0x8d8c, 0x2, 0xab, 0x27c8, 0x6, 0x1, 0xa6dc, 0x6, 0x7, 0x5, 0x800, 0x4c, 0x0, 0x6, 0x3, 0x80000000, 0x1, 0xfffffff8, 0x4, 0xe, 0x10001, 0xeb, 0x18, 0xb, 0x7f, 0x10000, 0xffffffff, 0x588, 0xf, 0x8, 0x7, 0x855, 0x3a6efe99, 0x7fff, 0x2f4d, 0x8, 0x7f, 0xe2, 0xf, 0x7ff, 0x800, 0xf, 0x1, 0x200, 0x7, 0x4, 0x0, 0x0, 0x1000, 0x9, 0x80, 0xb53, 0x10001, 0x6, 0x7, 0xae, 0x1, 0x2, 0xfffff638, 0x1, 0x80]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x10001, 0x3, 0xbe9e, 0x9, 0xe, 0x3, 0x4, 0x8, 0x0, 0x7fff, 0x97, 0x7fff, 0x1, 0x90, 0x8, 0x969, 0x0, 0x2, 0x2, 0xa, 0x9, 0x7ff, 0x6, 0x59, 0x6, 0x572, 0x5, 0x1000, 0x9, 0x6, 0x8, 0x3, 0x8, 0x3, 0x1, 0x0, 0x3, 0x4, 0x8, 0x80000001, 0x8, 0x7fff, 0xa0000, 0x3710, 0x400, 0x6, 0x4, 0x1, 0x112d, 0x7, 0x80, 0x6, 0x3, 0x5, 0x3, 0xe3, 0xff, 0x5, 0xd, 0x8e1, 0x1, 0x31, 0x9, 0x309, 0x0, 0xc610, 0x8, 0x8, 0x800, 0x634, 0x9, 0x3, 0x6, 0x1, 0x4, 0xfffffff9, 0xfffffffd, 0x2, 0x7, 0xbb11, 0x1, 0xfffffffc, 0x2, 0x3, 0x8, 0x9, 0x3, 0x1, 0x8, 0x0, 0x10, 0x1ea, 0x2, 0xd1, 0x1, 0x4cc, 0x3, 0xcc, 0x5, 0x5, 0x7, 0xb9, 0x7, 0x4, 0xfffffe00, 0x8, 0xa21, 0xff, 0x7, 0x18, 0x5d2, 0x8, 0x8, 0x8, 0x1, 0x81, 0x4, 0x1, 0xf36, 0x180, 0x3, 0x7b, 0x0, 0x9, 0x3, 0x400, 0x8, 0xf5b2, 0x7fffffff, 0x2, 0x7, 0x0, 0x8, 0x1, 0x40, 0x4, 0x0, 0x7fffffff, 0x6, 0x19, 0x9, 0x3, 0x3, 0x9, 0x4, 0x10000000, 0xa, 0x1a8000, 0x80000000, 0x4, 0x3, 0x200, 0x4, 0x0, 0xf5c, 0x81, 0x9, 0x6, 0x3ff, 0x9, 0x9f, 0x7fffffff, 0x7, 0xa8, 0xc0000000, 0x800, 0x1, 0xd49, 0x9, 0x0, 0x6, 0x7, 0x1, 0x100003, 0x4, 0x1000, 0x3, 0x4, 0x8, 0x446c9fbc, 0x1, 0x1, 0x80, 0x0, 0x200, 0x7fffffff, 0x9, 0x1000, 0x7, 0x0, 0x1, 0xd147, 0x472, 0x5, 0x604df561, 0x718127b9, 0xe1bf, 0x2, 0xfffff6e7, 0x1, 0xee8, 0xff, 0x6, 0x3, 0x1000, 0x59729bbe, 0x8, 0x9, 0x1ff, 0x7f, 0x5, 0x1ff, 0x8, 0x44d8, 0x0, 0x7, 0x8, 0x0, 0x3, 0x8, 0x5, 0xa2, 0x1, 0xb, 0x8, 0x401, 0x3, 0x7, 0x5, 0x0, 0xfffffc00, 0x4, 0xbe, 0x9, 0x4, 0x8, 0xd6, 0x1, 0x599c, 0x19e7, 0x3, 0x401, 0xffffffff, 0x8000, 0x0, 0x800, 0x400, 0x4, 0x8, 0x6, 0xc43, 0x1, 0x7, 0x9, 0xfffff800]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffa}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0x5, 0xe, 0x3, {0x3, 0x2, 0x3, 0x1, 0x101, 0xbe}, {0x10, 0x0, 0x101, 0x400, 0x4, 0xff}, 0xfffffffd, 0x8, 0x30000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8829}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8d05}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xd9c, 0x2, 0x7, 0xfffffffb, 0xe1, {0x1, 0x2, 0x7, 0x27e, 0x4, 0xca000000}, {0x9a, 0x1, 0x0, 0x101, 0x2, 0x9}, 0xd99, 0x7f, 0x4}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xe}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]]}, {0x32, 0x6, "05722f5464002ef408aa9e4e0f6373c3f5ca66fa7f91527ae338f6d4b16c1581147a839c75b87389e560d3a523f4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @f_rsvp6={{0xa}, {0x4}}, @f_rsvp6={{0xa}, {0x30, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0xfff2}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x3, 0xffeb}}, @TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xffff, 0xd}}]}}, @f_rsvp6={{0xa}, {0x190, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @loopback}, @TCA_RSVP_ACT={0x178, 0x6, [@m_csum={0x174, 0x1c, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x1, 0x8}, 0x15}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x8, 0x8, 0xfffffff7}, 0x5b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x10000000, 0x714eccca, 0x5}, 0x35}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x400000, 0x20000000, 0x9818, 0x5}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x80000000, 0x2, 0xfffffffd, 0x410}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x5, 0x7ff, 0x1}, 0x6b}}]}, {0x9d, 0x6, "e93c3fe1cffa093707c9a68342bea953173e0e4dc615fe6e2e47d3fe7b5043983dcd9e6f9534f463d5d4cf13fdf83d4cb1d5efdd472b3acca500785e569898c8efa7d6f839541b808fe3a2ccabe9872c2a6119530f5d847e837fae3a8bc0e3d123085d933749ece135fc8b79bcea93f52910b43cde607c145be995c7bc1912192902420c2bdefedff736e92f93eee7763bb17943940fb68b59"}, {0xb, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x581c}, 0x1, 0x0, 0x0, 0x4001}, 0x44001) 1.7874382s ago: executing program 0 (id=2911): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0x158, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x144, 0x1, [@m_skbedit={0x140, 0x14, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8000000}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0x8}}]}, {0xf9, 0x6, "14510cdf2f2f2cd263baeaaf4f3f77aa930fd3ffe12788a114d44cf091a1eca0ea567455f65d2d22ece8cb0782d373b161a60e432837e521e6d4dd35f7b601d95311805d06de41e4a3fae0bd2df4c4871aa4e66986f68830d78963847c6fa933035298c7be512189116688c2c3e21da82a6400f42dae04bd076555f52183afd9425f7a5b6e97f2fd9e29313747f8e45d1567c2e3a99120bb08d383254fcd0f5ed4eb372e33ef2ffbddd76ebfeb377c80fbdc81525ea4a0930c65cc4fd7e7057b581f788ab460d31bcc108759be59ecf3168e823199b2d7fbc1ea09589556cc56a391be7f15aa8e30426d99ba492dd6744fc5a0ecef"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x158}}, 0x0) 1.615783494s ago: executing program 0 (id=2912): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xad0000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x10}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) (async, rerun: 32) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async, rerun: 32) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYRES16, @ANYBLOB="887f318e60836ab46228bf4c74dc42e3f6c1197d03a6812a8a134fba001a30cae6c50d7a195bbfba06aac5bf0ddeee36c110183fe1"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000003}, 0x4000) 1.445224048s ago: executing program 1 (id=2914): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) syz_emit_ethernet(0xa6, &(0x7f00000000c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x70, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @loopback, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts={0x0, 0x6, '\x00', [@ra, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x22, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc433137593009290"}]}]}}}}}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66bb0280000988fb", 0x15}], 0x1}, 0x1) r1 = socket(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r1, 0x200000000114, 0xa, &(0x7f0000000180)=""/15, &(0x7f0000000000)=0xf) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x4, @private2, 0x58}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="998165", 0x3}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) setsockopt(r2, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x64, 0x6, [0x100, 0x6, 0x101, 0x0, 0x2, 0x8001]}, &(0x7f0000000140)=0x14) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x9}, 0x19, 0x3, 'sh\x00', 0x29, 0x10000, 0x10800008}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x9, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0xfc56}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1f}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x0, 0x9, 0x5, 0x4, 0x3]}, &(0x7f0000000080)=0x78) 1.416052719s ago: executing program 0 (id=2915): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) (async) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmmsg$inet(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289", 0x1f}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) recvmmsg(r4, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000005c0)=""/199, 0xc7}], 0x1}, 0xdac}], 0x1, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001600), 0x4) socket$netlink(0x10, 0x3, 0x8000000004) (async) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) (async) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x3, &(0x7f0000000140)=""/241, &(0x7f0000000000)=0xf1) (async) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x3, &(0x7f0000000140)=""/241, &(0x7f0000000000)=0xf1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="c99c0e0ced4000000010003b0c00"/25, @ANYRES32=r8, @ANYBLOB="0000000000000000200012800b00010065727370616e000010000280040012000500130001000000"], 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r9, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r10, 0x22, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x4040800) 1.261023783s ago: executing program 1 (id=2918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711234000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000040)='\x00!', 0x2}, {&(0x7f0000000140)="abffa99a7d6ed2dcacc958fd3a5c773e03b4a54890c6ba34d4a318f17925141e844a5882851431385aa863defbc0d479f945bbd8eb945276a091970bbeccd52a559731b33c20fd6eb7d6adb5ba81c0eccf6ee0dfd3f702812d39c7853360046b50ad6a4436d4247a5e920c58f140a138faa35246b17306e25f6e34b456ccefe6c20a544cb784ec517071b8f1563bb232c4019084d9003f1a2832609a0e8eb141c1ded373dd38c0e827721ecab5570c9b"}, {&(0x7f0000000240)="43e51f1bce2ede7abb6a4b66c403f7e047ecee20f0c2fcb0e9a0fa457ecafec104711845155c12d3083c2643fa79d4831d46244b8543a725fd5366f46c47f28a49d9cd9504e8fcb98c7295b91fddb7740713db6271cd2cabd133fcda03c5c0f034350170b69e304f501b3d0b0adab4ab55293a945272119c6ce79f8290df879fff628d42f94b5057e51e8a86a1879350d393acc57a51418944c4ebd0bc038ee67565694f4a4a655c4c280a6c171c3d9f3526cd4edb361a"}, {&(0x7f0000000300)="f2671cb24621eed7e7a51d5659a146245add4a2f90cb80f9129d9a161de443485cc5ee75345f3572a222faec0745c7d800937747222bbd7f4dc9514a4799640f8255dc6a4743dab90efdb54b411a188a4e021ae5b392d4de7029e547a196c8990184ef06499677b80d5e21e063b3e263e1b2d2df8b2200a968be53e544fc"}], 0x1000000000000215, 0x5, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310500000008000a40fffffffc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c0000800800034000000002140000009100010000000000000000000100000a"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) sendmsg$inet(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000580)="2bc5c646fcc13b704fa2e93c920bf0065822ca181355ee6a551395ff229e1a5e86fdb93a79a08b5d0f3b7754f29a4bbb353cbd933e352e5e0d", 0x39}], 0x1, &(0x7f0000000600)=[@ip_tos_u8={{0x11}}], 0x18}, 0x20000000) (async) sendmsg$inet(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000580)="2bc5c646fcc13b704fa2e93c920bf0065822ca181355ee6a551395ff229e1a5e86fdb93a79a08b5d0f3b7754f29a4bbb353cbd933e352e5e0d", 0x39}], 0x1, &(0x7f0000000600)=[@ip_tos_u8={{0x11}}], 0x18}, 0x20000000) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x0, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000580)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000580)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x34, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x34}}, 0x20000010) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f00000007c0)={0x6c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24048080}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) (async) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r11, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010004200000000000000b0000000c000580040001"], 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000700)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000ac0)={0x18c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8c8, @mcast1, 0x1bb40ad9}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x687a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x110}, 0x24000004) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x2000001d}, 0x40400) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x2000001d}, 0x40400) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0) 850.164549ms ago: executing program 2 (id=2921): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 849.814104ms ago: executing program 4 (id=2922): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r2, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x10c, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0xf8, 0x1, [@m_csum={0xf4, 0x1, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x6}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x10c}}, 0x0) 794.137444ms ago: executing program 1 (id=2923): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000206010100000200000000000000ffff05000100070000000900020073797a3000000000050005000a000000050004000000000016000300686173683a6e65742c706f72742c6e65740000001400078008000840000000000500150002"], 0x64}}, 0x0) (async) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000200be040205fe056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0xa00000000000000) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x1c8, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x68c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "33beace5203e455e76b84af7b4a2a1c276cf34bb76a0"}}, @TIPC_NLA_NODE_ID={0x32, 0x3, "698141841db5424a951db9fdbc89a5ce06dea4150a93c0325431a6e69f89a8e9d496ded5211a7128c6757e8273fd"}]}, @TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "348018333f6365ffe3f0f093274aef4c12b4e256c7aee42b5227"}}, @TIPC_NLA_NODE_ID={0x99, 0x3, "64e50edd7cb4eea6fa24d9f35872aeb8538cbe105000383cc7f74c0e5fd7bf365c37008a3dce731ff983e7bf1011e9c7a7e7db31b61b5cb0837a27d7152ff498361aa6be6fde90be7c2aa6125cc34fa6901e97d2b2cf25700836fa5dfd6f6f9f2ee6bbb4fc6105f1df83eb3fabe6258444b06d4541c0a6e60f1f03df8df316870566d50aae7bfb946b5bee7684c5fb2297787057a6"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x34000850}, 0x20000005) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) close(0x4) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async, rerun: 32) unshare(0x6a040000) (async, rerun: 32) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x1}]}, 0x10) (async) syz_emit_ethernet(0x32, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xc0, 0x100}}}}}}}, 0x0) 736.681039ms ago: executing program 2 (id=2924): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}}, 0x45, 0xba91}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000480)={r3, 0x40, 0x7f, 0xc}, &(0x7f00000004c0)=0x10) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="5400000010001ffffcddffff0000000000000000dd59218ab0d3d1783d2e16a36c51c5acdf91fff9fe464b655b41c93813c7aea183326aa06c11ea1ae51cc08ae0b7", @ANYRES32=0x0, @ANYBLOB="00000000804003002c0012800b00010067726574617000001c00028006000e000200000006000f000700000008000700ac14142808000a00", @ANYRES32=r4, @ANYBLOB], 0x54}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000107010108a138d1000000800700000044000780080001400000007f080002400000000508000140000000a508000140000000080800014000000009f0ff0040000008dc08000240120000000800024000000004"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) 627.091031ms ago: executing program 4 (id=2925): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000e3b72b8900006dfaf57d54b7a29aa6fc08000300ae619424fd0e58d42354035d5909eb59140dab", @ANYRES32=r2, @ANYBLOB="08002600a3090000080022010e030000"], 0x2c}, 0x1, 0x0, 0x0, 0xd37697ff28093c0e}, 0x10) 534.038448ms ago: executing program 4 (id=2926): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map=r0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xd0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000044000900000092000000000305000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 525.838896ms ago: executing program 2 (id=2927): syz_emit_ethernet(0x37, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "5678c1", 0x1, 0x84, 0x0, @empty, @local, {[], "bd"}}}}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0xffff) sendto$inet6(r0, &(0x7f0000000080)="990659ad0696d35651cd8cbcf0e706383c24b173a528320313fdab174589a8c4a6a4f7446c891747818a1f5fc402eb68ec57115139dc0ae87c9373f3af473310b750c435e2edc01c34e12da06bed69aae7c2e30c4d0164739100589b1d2b08e25985b598469c387e9a56fa79b3fc9707dcaec2f8921aebc19a7733f257f897863c01836f8a4298492346c2c8ebd8b6bae0e3cf2b81b68c0aa2527d1ea244f664e372b723922caed80df6460a6dd035b8eeadff66a51e6bcaacdc2d255446c50fa6efba26f4652fe708775b", 0xcb, 0x4004000, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0xb}, 0xb7}, 0x1c) 429.565078ms ago: executing program 4 (id=2928): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x180000) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x1, 'batadv0\x00', {}, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, r3, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9f}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9b5a}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa09}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffff81}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x4008081) (async) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@multicast1, @in=@private}}, {{@in6}, 0x0, @in6=@private1}}, &(0x7f00000003c0)=0xe8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x6, 0x9}, 0x90) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f00000005c0)=0xe8) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000600)={0x3, @null, r6}) (async) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000640)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000680)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000006c0)=0x10) r8 = socket(0x1a, 0x2, 0x8) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000b40)={&(0x7f0000000700), 0xc, &(0x7f0000000b00)={&(0x7f0000000780)={0x36c, r2, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x401, 0x44}}}}, [@NL80211_ATTR_TX_RATES={0x64, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4669, 0x1, 0xfff9, 0x6, 0x81, 0x8, 0x5, 0xc0e6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0x9, 0xc, 0x24, 0x30, 0x48, 0x5d, 0x30, 0xc, 0x48, 0x48, 0x48, 0x6, 0xc, 0x60, 0xc, 0x1b, 0x48, 0x1, 0x2, 0x2, 0x12, 0x16, 0x4, 0x9, 0x6]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xb, 0x36, 0x9, 0x60, 0x76177a4c3ba91508, 0x18, 0xc, 0x1, 0xc, 0x16, 0x1b, 0x12, 0x36, 0x36, 0x3, 0x30, 0x0]}]}]}, @NL80211_ATTR_TX_RATES={0x34, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x8, 0x9, 0x200, 0x3ff, 0xfffe, 0x8]}}]}, @NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x4, 0x5, 0x1, 0x5, 0xb]}]}]}, @NL80211_ATTR_TX_RATES={0x2ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x5, 0x6}, {}, {0x1, 0x1}, {0x6, 0x2}, {0x0, 0x7}, {0x3, 0x5}, {0x6, 0x8}, {0x2, 0x2}, {0x7, 0x8}, {0x0, 0xa}, {0x5, 0x5}, {0x6, 0x4}, {0x4, 0x4}, {0x1, 0x3}, {0x6, 0x5}, {0x5, 0xa}, {0x1, 0x4}, {0x7, 0x3}, {0x6, 0x4}, {0x4, 0xa}, {0x7, 0x1}, {0x7, 0x2}, {0x0, 0xa}, {0x0, 0x1}, {0x3, 0x9}, {0x2, 0x2}, {0x4, 0x9}, {0x3, 0x3}, {0x0, 0x5}, {0x5, 0xa}, {0x4, 0x7}, {0x4, 0x1}, {0x5, 0x4}, {0x5, 0x2}, {0x3, 0x2}, {0x0, 0x3}, {0x6, 0x1}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x9}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x5, 0x2}, {0x4, 0x7}, {0x2, 0x2}, {0x5, 0x3}, {0x6, 0x4}, {0x1, 0x4}, {0x7, 0x9}, {0x3, 0x1}, {0x1, 0xa}, {0x7, 0xa}, {0x3, 0x7}, {0x2, 0x6}, {0x1, 0x5}, {0x4, 0x3}, {0x7}, {0x4, 0x7}, {0x0, 0x6}, {0x7, 0x5}, {0x3, 0x8}, {0x1, 0x2}, {0x2, 0x7}, {0x1, 0x8}, {0x3, 0x1}, {0x7, 0x4}, {0x7, 0x9}, {0x2, 0x4}, {0x3, 0x5}, {0x7}, {0x3, 0x3}, {0x1, 0x9}, {0x7, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x6, 0xc, 0x40, 0xff0a, 0x8, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x3ff, 0x9, 0x9, 0x5, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6c, 0x60, 0x12, 0x36, 0x24, 0x1, 0x18, 0x60, 0x36, 0x24, 0xc, 0x4, 0x6, 0x6, 0xb, 0x36, 0x6c, 0x2, 0x30, 0x4, 0x4, 0x0, 0x9, 0x71, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2c90, 0x3, 0x1ff, 0xf801, 0xff, 0x8, 0x7f, 0x3]}}]}, @NL80211_BAND_2GHZ={0xec, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xb, 0x2, 0x60, 0x18, 0x6c, 0x16, 0x30, 0x18, 0x48, 0x5, 0x36, 0x69, 0x36, 0x24, 0xb, 0x1, 0x24, 0x1d, 0xc, 0x18, 0x48, 0x12, 0x2, 0x12, 0x16]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x4, 0x6}, {0x2, 0x8}, {0x5, 0x4}, {0x6, 0x4}, {0x3, 0x3}, {0x5, 0xa}, {0x3, 0x3}, {0x6, 0x9}, {0x4, 0x5}, {0x0, 0x5}, {0x6, 0x7}, {0x1, 0x7}, {0x3, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x7}, {0x4, 0x9}, {0x7}, {0x3, 0x9}, {0x6, 0x1}, {0x6}, {0x1, 0x1}, {0x1, 0x8}, {0x6, 0x2}, {0x6, 0x3}, {0x4, 0x4}, {0x7, 0x4}, {0x4, 0x8}, {0x6, 0x8}, {}, {0x3, 0x2}, {0x3, 0x3}, {0x1, 0x7}, {0x1, 0x2}, {0x2, 0x7}, {0x4, 0xa}, {0x0, 0x5}, {0x2, 0x9}, {0x6, 0x8}, {0x1, 0x9}, {0x2, 0x6}, {0x7, 0x8}, {}, {0x3, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x8}, {0x2, 0x6}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x3}, {0x5, 0x9}, {0x4, 0xa}, {0x3, 0xa}, {0x1, 0x3}, {0x6, 0x9}, {0x2, 0x6}, {0x4, 0x3}, {0x6, 0x1}, {0x0, 0x2}, {0x0, 0x5}, {0x6}, {0x5, 0x6}, {0x7, 0x1}, {0x6, 0x4}, {0x7, 0x8}, {0x5}, {0x0, 0x5}, {0x3, 0x6}, {0x4, 0x3}, {0x7, 0x7}, {0x1, 0x5}, {0x5, 0x7}, {0x0, 0xa}, {0x2, 0x9}]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0xa}, {0x6, 0x7}, {0x7, 0x1}, {0x2, 0x6}, {0x4, 0x5}, {0x5, 0x8}, {0x0, 0x7}, {0x4, 0xa}, {0x2, 0x7}, {0x1, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x7, 0x4}, {0x5, 0x5}, {0x5, 0x5}, {0x1, 0x2}, {0x7, 0x5}, {0x4, 0x2}, {0x1}, {0x4, 0x6}, {0x0, 0x4}, {0x7, 0xa}, {0x3, 0x3}, {0x3, 0x8}, {0x4, 0x8}, {0x3, 0x4}, {0x6, 0x6}, {0x3, 0x4}, {0x6, 0x3}, {0x3, 0x7}, {0x6, 0x6}, {0x1, 0x7}, {0x4, 0x2}, {0x7, 0x1}, {0x7, 0x4}, {0x3, 0x9}, {0x1, 0x4}, {0x5, 0xa}, {0x3, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x3, 0x81, 0xc00, 0x1, 0x5, 0xcf22, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0xfff, 0x101, 0x8, 0x6, 0x82, 0x200, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x6, 0x8001, 0x800, 0x89c, 0x40, 0x3, 0x470]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x8000, 0x16, 0x1, 0x3, 0x81, 0x3, 0xe]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x36, 0x15, 0x3, 0x5, 0x7, 0x40, 0x1]}}]}, @NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x2, 0x7}, {0x6, 0x5}, {0x0, 0x3}, {0x4}, {0x0, 0x7}, {0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x3, 0x7}, {0x7, 0x8}, {0x6}, {0x6}, {0x6, 0x1}, {}, {0x0, 0x3}, {0x6, 0x1}, {0x5, 0xa}, {0x1, 0x3}, {0x0, 0xa}, {0x6, 0x6}, {0x4, 0x7}, {0x5, 0x5}, {0x1, 0x3}, {0x7, 0x5}, {0x4, 0x7}, {0x3, 0x7}, {0x4}, {0x1, 0xa}, {0x0, 0x8}, {0x6, 0x9}, {0x6, 0x2}, {0x2, 0xa}, {0x0, 0x1}, {0x5, 0x3}, {0x2, 0x2}, {0x0, 0x3}, {0x5, 0x4}, {0x3, 0x4}, {0x0, 0x1}, {}, {0x0, 0x3}, {0x3, 0x7}, {0x0, 0xa}, {0x7, 0x2}, {0x4, 0xa}, {0x0, 0x7}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0xa}, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x3}, {0x1, 0x9}, {0x0, 0x3}, {0x6, 0x6}, {0x2, 0x1}, {0x1, 0x5}, {0x5, 0x7}, {0x0, 0xa}, {0x2, 0x8}, {0x5, 0x7}, {0x6, 0x8}, {0x0, 0x5}, {0x6, 0x2}, {0x6, 0x1}, {0x1, 0x2}, {0x4, 0x1}, {0x3, 0x4}, {0x2, 0x9}, {0x2, 0x7}, {0x7, 0x2}, {0x0, 0x6}, {0x2, 0x5}, {0x1, 0xa}, {0x7, 0x1}, {0x5, 0x3}, {0x6, 0x9}, {0x3, 0x4}, {0x1, 0x1}, {0x2, 0x4}, {0x4, 0x3}, {0x4, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x64f4, 0x2, 0x40, 0xfffd, 0x4, 0x4, 0x5, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0x8, 0x5, 0xfff, 0x7ff, 0x2, 0xc25]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x5, 0x4, 0x5, 0xc, 0x3, 0x18, 0x9, 0x6]}]}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0x8000000}, 0x24000010) (async) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) ioctl$SIOCAX25GETUID(r8, 0x89e0, &(0x7f0000000c00)={0x3, @default, r10}) (async) setsockopt$sock_int(r8, 0x1, 0x1a, &(0x7f0000000c40)=0x6, 0x4) (async) getsockname$packet(r8, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000cc0)=0x14) (async) r11 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000d40)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000000e00)={{r11}, r12, 0x0, @inherit={0x50, &(0x7f0000000d80)={0x1, 0x1, 0x8, 0x2, {0x3, 0xc, 0x1, 0x9, 0x6}, [0x3]}}, @subvolid=0x5}) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000001e00)={{r7}, r12, 0x2, @unused=[0xa8, 0x2, 0x0, 0x8], @subvolid}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r13, 0x11a, 0x1, &(0x7f0000002e00)=@gcm_256={{0x304}, "05a1d3ce9b4e2542", "529ff795008cc8a47ce95b6f98204009a175008da55aef7ea683c89ead8ffb38", "febad5d0", "5a10f423de7f61e1"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000002e40)=0xffffffffffffffff, 0x4) 428.409113ms ago: executing program 0 (id=2929): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x40000000015, 0x5, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x85dc}], 0x1, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r6], 0x68}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async, rerun: 32) r10 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) (async) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000100), 0x4) 349.919166ms ago: executing program 2 (id=2930): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESHEX, @ANYBLOB="01000000fc9a53dc495eecff33ffffff2000040000000000000000000c001f00"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESHEX, @ANYBLOB="01000000fc9a53dc495eecff33ffffff2000040000000000000000000c001f00"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 255.896218ms ago: executing program 2 (id=2931): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000080)=0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x38}}, 0x4000) (async) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x52018021}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x1bc, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcd4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xebce}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc28}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc9}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3328}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x318}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4d6e}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9e18}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe4e3}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0xd3b830484c0b89b4}, 0x80) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) (async) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000600)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000480)=0xe8) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r6}, 0x94) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@ipv4_delroute={0x68, 0x19, 0x20, 0x70bd29, 0x25dfdbfb, {0x2, 0x20, 0x20, 0x7, 0x3, 0x3, 0x0, 0x370f45d9c4837683, 0x1a00}, [@RTA_UID={0x8, 0x19, r3}, @RTA_METRICS={0x9, 0x8, 0x0, 0x1, "690fd18149"}, @RTA_UID={0x8, 0x19, r4}, @RTA_MULTIPATH={0xc, 0x9, {0xffff, 0x1, 0xe4, r6}}, @RTA_UID={0x8, 0x19, r7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6}}, @RTA_MARK={0x8, 0x10, 0xe0e}, @RTA_DPORT={0x6, 0x1d, 0x4e20}]}, 0x68}}, 0x0) 186.187604ms ago: executing program 4 (id=2932): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c0035742bbd7000fedbdf2502000000", @ANYRES32=r1, @ANYBLOB="1e002606080001"], 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000004) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r4) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000640)={@cgroup=r4, r4, 0x7, 0xce2d3afaee448c72, 0x4}, 0x20) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000240)=""/4089, 0x1000}, {&(0x7f0000000100)=""/92, 0x5c}, {&(0x7f0000001580)=""/225, 0xd3}, {&(0x7f00000014c0)=""/130, 0xffffffffffffff62}, {&(0x7f00000001c0)=""/21, 0x19}, {&(0x7f0000001400)=""/63, 0x3f}], 0x6, 0x1, 0x5) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='T'], 0x8) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c0035742bbd7000fedbdf2502000000", @ANYRES32=r1, @ANYBLOB='!'], 0x24}, 0x1, 0x0, 0x0, 0x8803}, 0x0) 85.250471ms ago: executing program 0 (id=2933): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x64, 0x64, 0xf31, 0xfffffdfb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_SCTP_DST={0x6, 0x2a, 0x4}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0xac0}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x1}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0x658}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x5}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 54.66502ms ago: executing program 4 (id=2934): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x32}, @in6=@loopback, {}, {}, {0x0, 0x4}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(ccm-aes-ce)\x00'}, 0x0, 0x180}}, @algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x184}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3b}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2.140961ms ago: executing program 2 (id=2935): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) r1 = epoll_create1(0x80000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = epoll_create1(0x80000) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000500)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x40000000}) close(r3) close(r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="18005e800800060000000000040009"], 0x34}}, 0x0) 0s ago: executing program 1 (id=2936): getpid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6], 0x5c}, 0x1, 0x0, 0x0, 0x240004c1}, 0x24040014) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) pipe(&(0x7f0000000600)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x8, 0x7, 0xfffff2b8, 0x8, {{0xb, 0x4, 0x1, 0xf, 0x2c, 0x66, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast, {[@noop, @lsrr={0x83, 0x17, 0x75, [@remote, @multicast1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}]}}}}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r10, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}]}, 0x30}}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r11 = accept(r0, 0x0, 0x0) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r11) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r11, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="020025bd7000fbdbdf2507000008080034000000008008ec3b000c000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES32], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4811}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r13) kernel console output (not intermixed with test programs): yzkaller0: entered allmulticast mode [ 125.570289][ T8037] tipc: Resetting bearer [ 125.644452][ T8024] tipc: Resetting bearer [ 125.699280][ T8024] tipc: Disabling bearer [ 125.740123][ T8050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.579'. [ 126.560664][ T8116] netlink: 20 bytes leftover after parsing attributes in process `syz.4.596'. [ 126.614495][ T8118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.597'. [ 126.812419][ T8132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'. [ 126.826349][ T8128] bond2: Unable to set down delay as MII monitoring is disabled [ 126.840614][ T8128] bond2 (unregistering): Released all slaves [ 126.905510][ T8135] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.602'. [ 127.207161][ T8161] syzkaller0: entered promiscuous mode [ 127.212706][ T8161] syzkaller0: entered allmulticast mode [ 127.222342][ T8163] netlink: 240 bytes leftover after parsing attributes in process `syz.0.604'. [ 127.531944][ T8183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.613'. [ 127.554969][ T8183] syzkaller0: entered allmulticast mode [ 127.786367][ T8203] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.875766][ T8210] netlink: 64 bytes leftover after parsing attributes in process `syz.3.622'. [ 128.089789][ T8222] tipc: Enabled bearer , priority 13 [ 128.186400][ T8230] batadv_slave_1: entered promiscuous mode [ 128.217672][ T8227] batadv_slave_1: left promiscuous mode [ 128.265129][ T8236] syzkaller0: entered promiscuous mode [ 128.272467][ T8236] syzkaller0: entered allmulticast mode [ 128.352097][ T8243] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 128.433024][ T8248] netlink: 'syz.1.636': attribute type 11 has an invalid length. [ 128.441308][ T8248] netlink: 'syz.1.636': attribute type 11 has an invalid length. [ 128.677893][ T8262] blkio.reset_stats is deprecated [ 129.093933][ T8293] openvswitch: netlink: nsh attribute has 996 unknown bytes. [ 129.123939][ T8293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.305496][ T8297] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 129.885902][ T8354] x_tables: duplicate underflow at hook 3 [ 129.943844][ T8360] netlink: 'syz.0.670': attribute type 10 has an invalid length. [ 129.959521][ T8360] batman_adv: batadv0: Adding interface: v [ 129.966525][ T8360] batman_adv: batadv0: The MTU of interface v is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.996559][ T8360] batman_adv: batadv0: Not using interface v (retrying later): interface not active [ 130.032523][ T6911] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x1 [ 130.042786][ T8367] Bluetooth: MGMT ver 1.23 [ 130.050308][ T8367] netlink: 'syz.2.673': attribute type 1 has an invalid length. [ 130.081349][ T6911] hid-generic 0005:0C49:1012.0001: ignoring exceeding usage max [ 130.098869][ T6911] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x4 [ 130.107403][ T6911] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x5 [ 130.115164][ T6911] hid-generic 0005:0C49:1012.0001: reserved main item tag 0xd [ 130.123230][ T6911] hid-generic 0005:0C49:1012.0001: item fetching failed at offset 31/106 [ 130.132492][ T6911] hid-generic 0005:0C49:1012.0001: probe with driver hid-generic failed with error -22 [ 130.156287][ T8374] bond2: (slave ip6gretap1): making interface the new active one [ 130.167793][ T8374] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 130.243622][ T8381] Cannot find del_set index 49151 as target [ 130.251397][ T8381] __nla_validate_parse: 3 callbacks suppressed [ 130.251413][ T8381] netlink: 64 bytes leftover after parsing attributes in process `syz.4.676'. [ 130.390570][ T8387] Unsupported ieee802154 address type: 0 [ 130.423938][ T8320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.525242][ T8394] netlink: 56 bytes leftover after parsing attributes in process `syz.3.679'. [ 130.562715][ T8394] bond2 (unregistering): Released all slaves [ 130.661257][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'. [ 130.683013][ T8359] netlink: 'syz.2.673': attribute type 1 has an invalid length. [ 130.692245][ T8359] netlink: 224 bytes leftover after parsing attributes in process `syz.2.673'. [ 130.810841][ T8402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.682'. [ 130.939666][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.682'. [ 131.105917][ T8424] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 131.184956][ T8431] netlink: 80 bytes leftover after parsing attributes in process `syz.2.689'. [ 131.362663][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 131.627818][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.701'. [ 131.654163][ T8469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.701'. [ 131.974093][ T8491] netlink: 'syz.3.709': attribute type 62 has an invalid length. [ 132.000708][ T8491] veth0: entered promiscuous mode [ 132.007819][ T8488] veth0: left promiscuous mode [ 132.059508][ T8486] "syz.4.708" (8486) uses obsolete ecb(arc4) skcipher [ 132.067155][ T5829] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 132.074706][ T5829] Bluetooth: hci2: command 0x0401 tx timeout [ 132.221530][ T8507] netlink: 'syz.2.714': attribute type 33 has an invalid length. [ 132.322517][ T8509] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 132.473640][ T8520] netlink: 'syz.3.717': attribute type 21 has an invalid length. [ 132.873973][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.821488][ T8541] netem: change failed [ 133.966289][ T8566] erspan0: entered promiscuous mode [ 134.372270][ T8589] netlink: 'syz.1.735': attribute type 2 has an invalid length. [ 134.418655][ T6227] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.477739][ T6227] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.486668][ T6227] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.553491][ T8604] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 134.594466][ T6227] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.625129][ T8614] nbd: must specify a size in bytes for the device [ 135.094876][ T8650] netlink: 'syz.2.757': attribute type 4 has an invalid length. [ 135.158886][ T8653] macvlan0: entered promiscuous mode [ 135.325879][ T8663] bond3: entered promiscuous mode [ 135.530919][ T8679] __nla_validate_parse: 4 callbacks suppressed [ 135.530936][ T8679] netlink: 20 bytes leftover after parsing attributes in process `syz.0.766'. [ 135.567134][ T8679] netlink: 'syz.0.766': attribute type 13 has an invalid length. [ 135.615879][ T5957] IPVS: starting estimator thread 0... [ 135.646559][ T8679] gretap0: refused to change device tx_queue_len [ 135.661744][ T8679] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 135.719743][ T8685] IPVS: using max 31 ests per chain, 74400 per kthread [ 135.829563][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'. [ 135.838543][ T8710] openvswitch: netlink: Flow actions attr not present in new flow. [ 135.857491][ T8713] netlink: 104 bytes leftover after parsing attributes in process `syz.3.774'. [ 135.866711][ T8714] netlink: 104 bytes leftover after parsing attributes in process `syz.3.774'. [ 135.867428][ T8708] netlink: 32 bytes leftover after parsing attributes in process `syz.1.773'. [ 135.920233][ T8708] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 135.935770][ T8708] bond5 (unregistering): Released all slaves [ 136.277799][ T8736] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 136.704107][ T8749] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.782'. [ 137.151247][ T8772] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.790'. [ 137.161259][ T8773] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.790'. [ 137.614238][ T8789] netlink: 'syz.4.797': attribute type 3 has an invalid length. [ 137.683674][ T8794] syz_tun: entered allmulticast mode [ 137.711417][ T8786] syz_tun: left allmulticast mode [ 137.839434][ T8805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.860675][ T8808] netlink: 84 bytes leftover after parsing attributes in process `syz.2.803'. [ 137.930478][ T8818] IPv6: NLM_F_CREATE should be specified when creating new route [ 137.962502][ T8818] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.970130][ T8818] IPv6: NLM_F_CREATE should be set when creating new route [ 137.980368][ T8823] netlink: 32 bytes leftover after parsing attributes in process `syz.4.807'. [ 138.088869][ T8833] vlan2: entered allmulticast mode [ 138.094026][ T8833] hsr0: entered allmulticast mode [ 138.099636][ T8833] hsr_slave_0: entered allmulticast mode [ 138.105289][ T8833] hsr_slave_1: entered allmulticast mode [ 138.288830][ T8843] netlink: 'syz.1.812': attribute type 1 has an invalid length. [ 138.425195][ T8851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.432956][ T8851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.443498][ T8851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.451132][ T8851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.477391][ T8853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.488264][ T8853] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 138.583313][ T8861] xt_hashlimit: size too large, truncated to 1048576 [ 138.893166][ T8875] sctp: [Deprecated]: syz.1.822 (pid 8875) Use of int in maxseg socket option. [ 138.893166][ T8875] Use struct sctp_assoc_value instead [ 138.958782][ T8880] syzkaller1: entered promiscuous mode [ 138.964293][ T8880] syzkaller1: entered allmulticast mode [ 139.172987][ T8893] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 139.231430][ T8893] netlink: 'syz.0.826': attribute type 2 has an invalid length. [ 139.627811][ T8919] nftables ruleset with unbound chain [ 140.330433][ T8948] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 140.351799][ T8948] bond2 (unregistering): Released all slaves [ 140.714168][ T8968] netlink: 'syz.2.849': attribute type 10 has an invalid length. [ 140.723952][ T8968] netlink: 'syz.2.849': attribute type 1 has an invalid length. [ 140.738688][ T8968] __nla_validate_parse: 7 callbacks suppressed [ 140.738704][ T8968] netlink: 224 bytes leftover after parsing attributes in process `syz.2.849'. [ 140.802924][ T8970] netlink: 2 bytes leftover after parsing attributes in process `syz.4.850'. [ 140.815089][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 140.836790][ T8970] netlink: 'syz.4.850': attribute type 30 has an invalid length. [ 140.868315][ T8979] Bluetooth: MGMT ver 1.23 [ 140.869813][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.850'. [ 141.013832][ T8984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.855'. [ 141.050381][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'. [ 141.074609][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.855'. [ 141.092103][ T8988] netlink: 128 bytes leftover after parsing attributes in process `syz.1.856'. [ 141.171321][ T8991] Cannot find add_set index 2 as target [ 141.356744][ T9006] FAULT_INJECTION: forcing a failure. [ 141.356744][ T9006] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 141.372051][ T9006] CPU: 0 UID: 0 PID: 9006 Comm: syz.3.862 Not tainted syzkaller #0 PREEMPT(full) [ 141.372073][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 141.372083][ T9006] Call Trace: [ 141.372090][ T9006] [ 141.372098][ T9006] dump_stack_lvl+0x189/0x250 [ 141.372126][ T9006] ? __pfx____ratelimit+0x10/0x10 [ 141.372149][ T9006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.372170][ T9006] ? __pfx__printk+0x10/0x10 [ 141.372196][ T9006] should_fail_ex+0x414/0x560 [ 141.372225][ T9006] _copy_to_user+0x31/0xb0 [ 141.372248][ T9006] simple_read_from_buffer+0xe1/0x170 [ 141.372278][ T9006] proc_fail_nth_read+0x1b3/0x220 [ 141.372302][ T9006] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.372326][ T9006] ? rw_verify_area+0x2a6/0x4d0 [ 141.372348][ T9006] ? __lock_acquire+0xab9/0xd20 [ 141.372363][ T9006] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.372383][ T9006] vfs_read+0x200/0xa30 [ 141.372403][ T9006] ? fdget_pos+0x247/0x320 [ 141.372422][ T9006] ? __pfx___mutex_lock+0x10/0x10 [ 141.372438][ T9006] ? __pfx_vfs_read+0x10/0x10 [ 141.372460][ T9006] ? __fget_files+0x2a/0x420 [ 141.372480][ T9006] ? __fget_files+0x3a0/0x420 [ 141.372494][ T9006] ? __fget_files+0x2a/0x420 [ 141.372524][ T9006] ksys_read+0x145/0x250 [ 141.372549][ T9006] ? __pfx_ksys_read+0x10/0x10 [ 141.372573][ T9006] ? do_syscall_64+0xbe/0xfa0 [ 141.372600][ T9006] do_syscall_64+0xfa/0xfa0 [ 141.372622][ T9006] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.372643][ T9006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.372660][ T9006] ? clear_bhb_loop+0x60/0xb0 [ 141.372679][ T9006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.372694][ T9006] RIP: 0033:0x7f2f5578e15c [ 141.372711][ T9006] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 141.372724][ T9006] RSP: 002b:00007f2f56583030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.372742][ T9006] RAX: ffffffffffffffda RBX: 00007f2f559e5fa0 RCX: 00007f2f5578e15c [ 141.372754][ T9006] RDX: 000000000000000f RSI: 00007f2f565830a0 RDI: 0000000000000004 [ 141.372765][ T9006] RBP: 00007f2f56583090 R08: 0000000000000000 R09: 0000000000000000 [ 141.372775][ T9006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.372785][ T9006] R13: 00007f2f559e6038 R14: 00007f2f559e5fa0 R15: 00007ffc0edf9908 [ 141.372816][ T9006] [ 141.403421][ T9007] netlink: 'syz.2.861': attribute type 39 has an invalid length. [ 141.469338][ T9013] netlink: 144 bytes leftover after parsing attributes in process `syz.2.861'. [ 141.497401][ T9015] netlink: 32 bytes leftover after parsing attributes in process `syz.0.864'. [ 141.574792][ T9019] x_tables: unsorted entry at hook 1 [ 141.710540][ T9019] gtp0: entered promiscuous mode [ 141.715673][ T9019] gtp0: entered allmulticast mode [ 141.735936][ T9024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.747778][ T9022] netlink: 'syz.1.868': attribute type 1 has an invalid length. [ 141.762216][ T9022] netlink: 'syz.1.868': attribute type 2 has an invalid length. [ 142.081009][ T9043] vlan2: entered promiscuous mode [ 142.091722][ T9043] bond0: entered promiscuous mode [ 142.101829][ T9043] bond_slave_0: entered promiscuous mode [ 142.115170][ T9043] bond_slave_1: entered promiscuous mode [ 142.296010][ T9051] netlink: 'syz.4.877': attribute type 10 has an invalid length. [ 142.464425][ T9055] netlink: 'syz.3.878': attribute type 3 has an invalid length. [ 142.650426][ T9026] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 142.727863][ T9075] netlink: 'syz.3.885': attribute type 18 has an invalid length. [ 142.793439][ T9071] team0: Port device team_slave_0 removed [ 142.810240][ T9083] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 142.871544][ T3453] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.880779][ T9084] lo speed is unknown, defaulting to 1000 [ 142.899204][ T3453] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.919278][ T3453] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.937281][ T9084] lo speed is unknown, defaulting to 1000 [ 142.955082][ T9084] lo speed is unknown, defaulting to 1000 [ 142.961627][ T3453] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.020944][ T9084] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 143.096349][ T9084] lo speed is unknown, defaulting to 1000 [ 143.133385][ T9084] lo speed is unknown, defaulting to 1000 [ 143.188805][ T9084] lo speed is unknown, defaulting to 1000 [ 143.213835][ T9084] lo speed is unknown, defaulting to 1000 [ 143.238932][ T9084] lo speed is unknown, defaulting to 1000 [ 143.582587][ T9116] veth0_to_team: entered promiscuous mode [ 143.827466][ T5829] Bluetooth: hci1: command 0x0401 tx timeout [ 144.099864][ T9158] netlink: 'syz.0.907': attribute type 2 has an invalid length. [ 144.106528][ T9177] x_tables: duplicate underflow at hook 1 [ 144.128172][ T9168] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 144.153166][ T9168] bond1 (unregistering): Released all slaves [ 144.183673][ T9175] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 144.282069][ T9180] bond2: (slave ip6gretap1): making interface the new active one [ 144.308754][ T9191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.330355][ T9180] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 144.792123][ T9223] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 144.808944][ T9223] bond1 (unregistering): Released all slaves [ 145.144381][ T9248] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 145.166536][ T9248] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 145.378671][ T9272] gre1: entered promiscuous mode [ 145.383714][ T9272] gre1: entered allmulticast mode [ 145.878767][ T9311] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20001 [ 146.022667][ T9317] validate_nla: 3 callbacks suppressed [ 146.022686][ T9317] netlink: 'syz.0.958': attribute type 1 has an invalid length. [ 146.068801][ T9315] sctp: [Deprecated]: syz.3.957 (pid 9315) Use of int in maxseg socket option. [ 146.068801][ T9315] Use struct sctp_assoc_value instead [ 146.088283][ T9317] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 146.100436][ T9317] __nla_validate_parse: 20 callbacks suppressed [ 146.100455][ T9317] netlink: 198672 bytes leftover after parsing attributes in process `syz.0.958'. [ 146.129621][ T9324] netlink: 36 bytes leftover after parsing attributes in process `syz.4.960'. [ 146.148838][ T9317] veth3: entered promiscuous mode [ 146.158707][ T9317] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 146.223755][ T9327] gretap1: entered promiscuous mode [ 146.234224][ T9329] netlink: 'syz.0.962': attribute type 10 has an invalid length. [ 146.244417][ T9329] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.254675][ T9329] bond0: (slave team0): Enslaving as an active interface with an up link [ 146.272137][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.961'. [ 146.332216][ T9336] netlink: 'syz.0.965': attribute type 16 has an invalid length. [ 146.340436][ T9336] netlink: 'syz.0.965': attribute type 17 has an invalid length. [ 146.426610][ T9336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.454159][ T9336] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.458091][ T9346] netlink: 'syz.0.965': attribute type 1 has an invalid length. [ 146.491304][ T9338] tipc: Enabled bearer , priority 0 [ 146.598284][ T9338] syzkaller0: entered promiscuous mode [ 146.603958][ T9338] syzkaller0: entered allmulticast mode [ 146.720644][ T9338] tipc: Resetting bearer [ 146.744563][ T9359] netlink: 52 bytes leftover after parsing attributes in process `syz.3.970'. [ 146.908500][ T9369] netlink: 'syz.4.973': attribute type 1 has an invalid length. [ 146.916181][ T9369] nbd: error processing sock list [ 146.928639][ T9369] block nbd0: shutting down sockets [ 147.470745][ T9397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.980'. [ 147.508983][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 148.264192][ T9337] tipc: Resetting bearer [ 148.284615][ T9337] tipc: Disabling bearer [ 148.368096][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.982'. [ 148.437590][ T9407] sctp: [Deprecated]: syz.0.982 (pid 9407) Use of int in maxseg socket option. [ 148.437590][ T9407] Use struct sctp_assoc_value instead [ 148.468790][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.983'. [ 148.499226][ T9403] sctp: [Deprecated]: syz.0.982 (pid 9403) Use of int in maxseg socket option. [ 148.499226][ T9403] Use struct sctp_assoc_value instead [ 148.631445][ T9422] sctp: [Deprecated]: syz.1.988 (pid 9422) Use of int in max_burst socket option deprecated. [ 148.631445][ T9422] Use struct sctp_assoc_value instead [ 148.815961][ T9437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.992'. [ 148.991781][ T9454] nftables ruleset with unbound set [ 149.001649][ T9456] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1000'. [ 149.062749][ T9462] netlink: 'syz.1.999': attribute type 33 has an invalid length. [ 149.165131][ T9462] syz.1.999 (9462) used greatest stack depth: 17832 bytes left [ 149.243623][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'. [ 149.413368][ T9481] delete_channel: no stack [ 149.558342][ T9494] netlink: 'syz.0.1009': attribute type 13 has an invalid length. [ 149.566578][ T9494] macvtap0: entered allmulticast mode [ 149.583521][ T9494] macvtap0: refused to change device tx_queue_len [ 150.693628][ T9557] can: request_module (can-proto-0) failed. [ 150.709229][ T9557] netlink: 'syz.1.1025': attribute type 1 has an invalid length. [ 150.724922][ T9561] x_tables: unsorted entry at hook 1 [ 150.915619][ T9573] netlink: 'syz.1.1031': attribute type 13 has an invalid length. [ 150.926850][ T9573] veth0_macvtap: left promiscuous mode [ 150.965619][ T9573] macvtap0: entered allmulticast mode [ 151.003746][ T9573] macvtap0: refused to change device tx_queue_len [ 151.130542][ T9594] netlink: 'syz.0.1035': attribute type 8 has an invalid length. [ 151.185491][ T9599] __nla_validate_parse: 6 callbacks suppressed [ 151.185505][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1038'. [ 151.253709][ T9601] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 152.080236][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1049'. [ 152.090164][ T9632] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1048'. [ 152.217385][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1050'. [ 152.251342][ T9640] xt_l2tp: invalid flags combination: 0 [ 152.258809][ T9638] team1: entered promiscuous mode [ 152.264066][ T9638] team1: entered allmulticast mode [ 152.279726][ T9640] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1051'. [ 152.332479][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1050'. [ 152.454485][ T9653] netlink: 'syz.0.1054': attribute type 5 has an invalid length. [ 152.465870][ T9653] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1054'. [ 153.039238][ T9668] netlink: 'syz.4.1059': attribute type 1 has an invalid length. [ 153.079916][ T9675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1060'. [ 153.128624][ T9668] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.140790][ T9675] vxcan2: entered allmulticast mode [ 153.155687][ T9661] bond0: Error: Cannot enslave bond to itself. [ 153.165096][ T9670] netlink: 'syz.2.1057': attribute type 8 has an invalid length. [ 153.178573][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1055'. [ 153.190803][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1055'. [ 153.308567][ T9687] netlink: 'syz.1.1063': attribute type 5 has an invalid length. [ 153.333653][ T9687] bond1: option mode: unable to set because the bond device has slaves [ 153.359231][ T9687] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 153.524733][ T9699] netlink: 'syz.1.1068': attribute type 9 has an invalid length. [ 153.564074][ T9702] netlink: 'syz.0.1069': attribute type 1 has an invalid length. [ 153.598842][ T9702] bond5: entered promiscuous mode [ 153.605968][ T9702] bond5: entered allmulticast mode [ 153.612855][ T9702] 8021q: adding VLAN 0 to HW filter on device bond5 [ 153.664723][ T9702] macvlan4: entered promiscuous mode [ 153.670463][ T9702] macvlan4: entered allmulticast mode [ 153.681184][ T9702] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 154.038605][ T9739] IPv6: NLM_F_CREATE should be specified when creating new route [ 154.089713][ T9743] : renamed from bridge_slave_0 [ 154.140084][ T9748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.160822][ T9748] openvswitch: netlink: Flow actions attr not present in new flow. [ 156.247039][ T9822] __nla_validate_parse: 11 callbacks suppressed [ 156.247058][ T9822] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1104'. [ 156.398157][ T9827] netlink: 'syz.4.1108': attribute type 1 has an invalid length. [ 156.449919][ T9827] bond2: (slave ip6gretap1): making interface the new active one [ 156.458969][ T9827] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 156.473282][ T9827] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 156.484507][ T9827] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 156.486726][ T9835] netlink: 'syz.0.1109': attribute type 10 has an invalid length. [ 156.528791][ T9838] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 156.580128][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1110'. [ 156.589764][ T9835] bridge_slave_1: left allmulticast mode [ 156.599597][ T9835] bridge_slave_1: left promiscuous mode [ 156.607227][ T9835] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.629981][ T9835] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 156.661030][ T9849] xt_hashlimit: invalid interval [ 156.673234][ T9846] netlink: 'syz.2.1113': attribute type 1 has an invalid length. [ 156.693024][ T9853] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1115'. [ 156.805139][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1113'. [ 156.835766][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1117'. [ 156.845199][ T9864] bridge_slave_1: left allmulticast mode [ 156.854752][ T9864] bridge_slave_1: left promiscuous mode [ 156.862393][ T9864] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.872650][ T9861] sctp: [Deprecated]: syz.1.1119 (pid 9861) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.872650][ T9861] Use struct sctp_sack_info instead [ 156.896556][ T9864] bridge_slave_0: left allmulticast mode [ 156.909290][ T9864] bridge_slave_0: left promiscuous mode [ 156.923923][ T9864] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.931800][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1118'. [ 156.976078][ T9873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1118'. [ 157.016601][ T9872] bridge_slave_1: entered promiscuous mode [ 157.176632][ T9881] netlink: 'syz.2.1124': attribute type 1 has an invalid length. [ 157.191349][ T9882] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1125'. [ 157.198306][ T9884] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1126'. [ 157.254834][ T9886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1127'. [ 157.391767][ T9881] netlink: 'syz.2.1124': attribute type 1 has an invalid length. [ 157.775524][ T9918] netlink: 'syz.3.1135': attribute type 1 has an invalid length. [ 157.780950][ T9921] vlan1: entered allmulticast mode [ 157.788958][ T9921] veth0_vlan: entered allmulticast mode [ 157.797529][ T9922] netlink: 'syz.4.1138': attribute type 1 has an invalid length. [ 157.813533][ T9918] bond3: entered promiscuous mode [ 157.819194][ T9918] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.851440][ T9927] openvswitch: netlink: Key type 105 is out of range max 32 [ 157.899365][ T9918] bond3: (slave bridge0): making interface the new active one [ 157.922042][ T9918] bridge0: entered promiscuous mode [ 157.930308][ T9918] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 158.589904][ T9964] syzkaller0: refused to change device tx_queue_len [ 158.740618][ T9969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.262726][T10001] netlink: 'syz.1.1161': attribute type 1 has an invalid length. [ 159.384893][T10008] tipc: Started in network mode [ 159.384954][T10013] netlink: 'syz.3.1162': attribute type 30 has an invalid length. [ 159.390308][T10008] tipc: Node identity 0eb9618e8e83, cluster identity 4711 [ 159.408060][T10008] tipc: Enabled bearer , priority 0 [ 159.414884][T10013] netlink: 'syz.3.1162': attribute type 30 has an invalid length. [ 159.493130][T10008] syzkaller0: entered promiscuous mode [ 159.501678][T10008] syzkaller0: entered allmulticast mode [ 159.529208][T10008] tipc: Resetting bearer [ 159.535331][T10018] netem: change failed [ 159.687966][ T50] tipc: Resetting bearer [ 159.712318][T10026] gre0: entered promiscuous mode [ 159.733978][T10026] gre0: entered allmulticast mode [ 159.893240][T10033] geneve2: entered promiscuous mode [ 159.949584][ T9441] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 159.979492][ T9441] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 160.052459][T10007] tipc: Resetting bearer [ 160.168063][T10046] sctp: [Deprecated]: syz.3.1173 (pid 10046) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.168063][T10046] Use struct sctp_sack_info instead [ 161.308661][T10007] tipc: Disabling bearer [ 161.317374][ T9441] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 161.326294][ T9441] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 161.335275][T10030] __nla_validate_parse: 23 callbacks suppressed [ 161.335289][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'. [ 161.386994][ T6904] tipc: Node number set to 2151309710 [ 161.958689][T10093] tun0: tun_chr_ioctl cmd 1074025675 [ 161.967485][T10093] tun0: persist disabled [ 161.978529][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1182'. [ 162.205419][T10119] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1189'. [ 162.539644][T10153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.624674][T10149] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 162.654896][T10149] bond6: option packets_per_slave: allowed values 0 - 65535 [ 162.685927][T10149] bond6 (unregistering): Released all slaves [ 162.849880][T10166] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1203'. [ 162.910952][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'. [ 162.921990][T10169] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1205'. [ 162.933085][T10169] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1205'. [ 162.952274][T10172] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 163.142529][T10187] nft_compat: unsupported protocol 0 [ 163.365286][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1215'. [ 163.378712][T10202] tipc: Enabled bearer , priority 0 [ 163.442325][T10205] syzkaller0: entered promiscuous mode [ 163.460332][T10205] syzkaller0: entered allmulticast mode [ 163.488289][T10202] tipc: Resetting bearer [ 163.496733][T10201] tipc: Resetting bearer [ 163.787728][T10201] tipc: Disabling bearer [ 164.016908][T10214] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1219'. [ 164.369574][T10245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.446663][T10249] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1227'. [ 164.900612][T10279] netlink: 'syz.0.1238': attribute type 29 has an invalid length. [ 164.931036][T10279] netlink: 'syz.0.1238': attribute type 29 has an invalid length. [ 165.068534][T10290] GUP no longer grows the stack in syz.3.1243 (10290): 200000003000-20000000a000 (200000001000) [ 165.087460][T10290] CPU: 0 UID: 0 PID: 10290 Comm: syz.3.1243 Not tainted syzkaller #0 PREEMPT(full) [ 165.087486][T10290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.087498][T10290] Call Trace: [ 165.087505][T10290] [ 165.087514][T10290] dump_stack_lvl+0x189/0x250 [ 165.087546][T10290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.087570][T10290] ? __pfx__printk+0x10/0x10 [ 165.087586][T10290] ? find_vma+0xe7/0x160 [ 165.087622][T10290] __get_user_pages+0x2470/0x2a00 [ 165.087649][T10290] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 165.087694][T10290] ? rcu_is_watching+0x15/0xb0 [ 165.087720][T10290] __gup_longterm_locked+0xde4/0x1660 [ 165.087756][T10290] ? try_grab_folio_fast+0x1bf/0x6a0 [ 165.087790][T10290] ? gup_fast_fallback+0x1b86/0x22d0 [ 165.087817][T10290] gup_fast_fallback+0x1d65/0x22d0 [ 165.087877][T10290] ? __pfx_gup_fast_fallback+0x10/0x10 [ 165.087896][T10290] ? __mutex_lock+0x335/0x1350 [ 165.087922][T10290] ? is_valid_gup_args+0x11f/0x200 [ 165.087946][T10290] ? get_user_pages_fast+0x4d/0xb0 [ 165.087969][T10290] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 165.087999][T10290] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 165.088017][T10290] ? wait_for_space+0x248/0x2d0 [ 165.088037][T10290] iov_iter_get_pages2+0x5e/0xa0 [ 165.088063][T10290] __se_sys_vmsplice+0x548/0x10d0 [ 165.088102][T10290] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 165.088125][T10290] ? __pfx_futex_wake+0x10/0x10 [ 165.088207][T10290] ? do_syscall_64+0xbe/0xfa0 [ 165.088235][T10290] do_syscall_64+0xfa/0xfa0 [ 165.088257][T10290] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.088280][T10290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.088297][T10290] ? clear_bhb_loop+0x60/0xb0 [ 165.088319][T10290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.088335][T10290] RIP: 0033:0x7f2f5578f749 [ 165.088352][T10290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.088367][T10290] RSP: 002b:00007f2f56583038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 165.088387][T10290] RAX: ffffffffffffffda RBX: 00007f2f559e5fa0 RCX: 00007f2f5578f749 [ 165.088399][T10290] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000c [ 165.088411][T10290] RBP: 00007f2f55813f91 R08: 0000000000000000 R09: 0000000000000000 [ 165.088422][T10290] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 165.088432][T10290] R13: 00007f2f559e6038 R14: 00007f2f559e5fa0 R15: 00007ffc0edf9908 [ 165.088465][T10290] [ 165.616001][T10315] bond4: (slave erspan0): Device is not bonding slave [ 165.631908][T10315] bond4: option active_slave: invalid value (erspan0) [ 165.643607][T10315] bond4 (unregistering): Released all slaves [ 165.714028][T10321] netlink: 'syz.0.1255': attribute type 1 has an invalid length. [ 166.066302][T10350] netlink: 'syz.4.1258': attribute type 1 has an invalid length. [ 166.114105][T10356] IPv6: sit1: Disabled Multicast RS [ 166.172174][T10350] bond4: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 166.194613][T10361] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.230701][T10098] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 166.231901][T10367] 8021q: adding VLAN 0 to HW filter on device bond4 [ 166.367261][T10098] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 166.436420][T10370] __nla_validate_parse: 4 callbacks suppressed [ 166.436437][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1254'. [ 166.513329][T10384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.519572][T10385] netlink: 'syz.3.1266': attribute type 1 has an invalid length. [ 166.522962][T10370] netlink: 'syz.1.1254': attribute type 11 has an invalid length. [ 166.564238][T10323] lec:lec_atm_close: lec0: Shut down! [ 166.599373][T10386] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1267'. [ 166.940920][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1273'. [ 167.343846][T10427] Bluetooth: MGMT ver 1.23 [ 167.731576][T10459] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1295'. [ 169.589864][T10519] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 169.610856][T10519] bond5: option packets_per_slave: allowed values 0 - 65535 [ 169.623844][T10519] bond5 (unregistering): Released all slaves [ 169.669549][T10529] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.678935][T10528] bond4: option mode: unable to set because the bond device is up [ 169.875026][T10553] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1319'. [ 169.906472][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1320'. [ 169.925997][T10553] netlink: 'syz.3.1319': attribute type 10 has an invalid length. [ 169.936409][T10553] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1319'. [ 169.952043][T10558] netlink: 'syz.3.1319': attribute type 10 has an invalid length. [ 169.958766][T10564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1322'. [ 169.960417][T10558] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1319'. [ 170.004286][T10555] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1320'. [ 170.052412][T10569] bridge0: port 2(ipvlan2) entered blocking state [ 170.066552][T10569] bridge0: port 2(ipvlan2) entered disabled state [ 170.073362][T10569] ipvlan2: entered allmulticast mode [ 170.082843][T10569] bridge0: entered allmulticast mode [ 170.092078][T10569] ipvlan2: left allmulticast mode [ 170.097948][T10569] bridge0: left allmulticast mode [ 170.236310][T10581] sock: sock_timestamping_bind_phc: sock not bind to device [ 170.465452][ T6889] IPVS: starting estimator thread 0... [ 170.556963][T10600] IPVS: using max 31 ests per chain, 74400 per kthread [ 170.665442][T10618] tipc: Enabled bearer , priority 0 [ 170.673419][T10618] syzkaller0: entered promiscuous mode [ 170.684284][T10622] netlink: 'syz.4.1341': attribute type 23 has an invalid length. [ 170.687404][T10618] syzkaller0: entered allmulticast mode [ 170.715285][T10618] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 170.742498][T10617] tipc: Resetting bearer [ 170.839838][T10617] tipc: Disabling bearer [ 170.890889][T10633] netlink: 'syz.0.1345': attribute type 5 has an invalid length. [ 171.769760][T10688] __nla_validate_parse: 3 callbacks suppressed [ 171.769777][T10688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1363'. [ 171.793084][T10690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1366'. [ 172.222523][T10716] netlink: 'syz.3.1374': attribute type 8 has an invalid length. [ 172.426311][T10739] sctp: [Deprecated]: syz.2.1380 (pid 10739) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.426311][T10739] Use struct sctp_sack_info instead [ 172.492359][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1382'. [ 172.504219][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1382'. [ 172.530729][T10744] bond0: entered promiscuous mode [ 172.536410][T10744] bond_slave_0: entered promiscuous mode [ 172.545059][T10744] bond_slave_1: entered promiscuous mode [ 172.552207][T10744] team0: entered promiscuous mode [ 172.557572][T10744] team_slave_0: entered promiscuous mode [ 172.563468][T10744] team_slave_1: entered promiscuous mode [ 172.573849][T10744] batadv0: entered promiscuous mode [ 172.582035][T10744] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 172.593543][T10744] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 172.594502][T10753] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 172.844635][T10764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1387'. [ 172.868606][T10770] netlink: 'syz.2.1390': attribute type 10 has an invalid length. [ 172.882936][T10772] netlink: 'syz.2.1390': attribute type 10 has an invalid length. [ 172.969785][T10777] syz_tun: entered allmulticast mode [ 173.001633][T10777] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 173.014866][T10777] bond6 (unregistering): Released all slaves [ 173.094003][T10787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1395'. [ 173.101566][T10788] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1394'. [ 173.108144][T10787] FAULT_INJECTION: forcing a failure. [ 173.108144][T10787] name failslab, interval 1, probability 0, space 0, times 1 [ 173.119242][T10776] syz_tun: left allmulticast mode [ 173.136765][T10787] CPU: 0 UID: 0 PID: 10787 Comm: syz.1.1395 Not tainted syzkaller #0 PREEMPT(full) [ 173.136788][T10787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.136802][T10787] Call Trace: [ 173.136808][T10787] [ 173.136815][T10787] dump_stack_lvl+0x189/0x250 [ 173.136842][T10787] ? __pfx____ratelimit+0x10/0x10 [ 173.136864][T10787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.136891][T10787] ? __pfx__printk+0x10/0x10 [ 173.136913][T10787] ? __pfx___might_resched+0x10/0x10 [ 173.136930][T10787] ? fs_reclaim_acquire+0x7d/0x100 [ 173.136951][T10787] should_fail_ex+0x414/0x560 [ 173.136980][T10787] should_failslab+0xa8/0x100 [ 173.136999][T10787] kmem_cache_alloc_node_noprof+0x77/0x710 [ 173.137021][T10787] ? __alloc_skb+0x112/0x2d0 [ 173.137041][T10787] __alloc_skb+0x112/0x2d0 [ 173.137062][T10787] netlink_sendmsg+0x5c6/0xb30 [ 173.137090][T10787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.137109][T10787] ? aa_sock_msg_perm+0xf1/0x1d0 [ 173.137133][T10787] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 173.137149][T10787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.137168][T10787] __sock_sendmsg+0x21c/0x270 [ 173.137194][T10787] ____sys_sendmsg+0x505/0x830 [ 173.137219][T10787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.137246][T10787] ? import_iovec+0x74/0xa0 [ 173.137269][T10787] ___sys_sendmsg+0x21f/0x2a0 [ 173.137290][T10787] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.137338][T10787] ? __fget_files+0x2a/0x420 [ 173.137353][T10787] ? __fget_files+0x3a0/0x420 [ 173.137377][T10787] __x64_sys_sendmsg+0x19b/0x260 [ 173.137398][T10787] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.137427][T10787] ? __pfx_ksys_write+0x10/0x10 [ 173.137453][T10787] ? do_syscall_64+0xbe/0xfa0 [ 173.137480][T10787] do_syscall_64+0xfa/0xfa0 [ 173.137501][T10787] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.137523][T10787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.137540][T10787] ? clear_bhb_loop+0x60/0xb0 [ 173.137559][T10787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.137575][T10787] RIP: 0033:0x7fe8ac18f749 [ 173.137591][T10787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.137605][T10787] RSP: 002b:00007fe8aa3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.137624][T10787] RAX: ffffffffffffffda RBX: 00007fe8ac3e5fa0 RCX: 00007fe8ac18f749 [ 173.137636][T10787] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 173.137647][T10787] RBP: 00007fe8aa3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 173.137658][T10787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.137668][T10787] R13: 00007fe8ac3e6038 R14: 00007fe8ac3e5fa0 R15: 00007ffe2627a758 [ 173.137699][T10787] [ 173.936131][T10822] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1406'. [ 173.951391][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1408'. [ 173.979184][T10827] netlink: 'syz.3.1407': attribute type 3 has an invalid length. [ 173.987075][T10827] netlink: 'syz.3.1407': attribute type 1 has an invalid length. [ 174.031191][T10829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1409'. [ 174.132460][T10833] team0: Device xfrm2 is of different type [ 174.344587][T10849] FAULT_INJECTION: forcing a failure. [ 174.344587][T10849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.365888][T10852] netlink: 'syz.4.1418': attribute type 5 has an invalid length. [ 174.374120][T10849] CPU: 0 UID: 0 PID: 10849 Comm: syz.0.1420 Not tainted syzkaller #0 PREEMPT(full) [ 174.374144][T10849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.374153][T10849] Call Trace: [ 174.374161][T10849] [ 174.374168][T10849] dump_stack_lvl+0x189/0x250 [ 174.374197][T10849] ? __pfx____ratelimit+0x10/0x10 [ 174.374220][T10849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.374241][T10849] ? __pfx__printk+0x10/0x10 [ 174.374258][T10849] ? __might_fault+0xb0/0x130 [ 174.374290][T10849] should_fail_ex+0x414/0x560 [ 174.374320][T10849] _copy_from_iter+0x1de/0x1790 [ 174.374345][T10849] ? rcu_is_watching+0x15/0xb0 [ 174.374367][T10849] ? kmalloc_reserve+0xbd/0x290 [ 174.374385][T10849] ? __pfx__copy_from_iter+0x10/0x10 [ 174.374403][T10849] ? __build_skb_around+0x262/0x3f0 [ 174.374422][T10849] ? netlink_sendmsg+0x642/0xb30 [ 174.374438][T10849] ? skb_put+0x11b/0x210 [ 174.374457][T10849] netlink_sendmsg+0x6b2/0xb30 [ 174.374481][T10849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.374502][T10849] ? aa_sock_msg_perm+0xf1/0x1d0 [ 174.374527][T10849] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.374543][T10849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.374561][T10849] __sock_sendmsg+0x21c/0x270 [ 174.374586][T10849] ____sys_sendmsg+0x505/0x830 [ 174.374610][T10849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.374638][T10849] ? import_iovec+0x74/0xa0 [ 174.374672][T10849] ___sys_sendmsg+0x21f/0x2a0 [ 174.374694][T10849] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.374749][T10849] ? __fget_files+0x2a/0x420 [ 174.374765][T10849] ? __fget_files+0x3a0/0x420 [ 174.374792][T10849] __x64_sys_sendmsg+0x19b/0x260 [ 174.374815][T10849] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.374843][T10849] ? __pfx_ksys_write+0x10/0x10 [ 174.374871][T10849] ? do_syscall_64+0xbe/0xfa0 [ 174.374898][T10849] do_syscall_64+0xfa/0xfa0 [ 174.374919][T10849] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.374943][T10849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.374960][T10849] ? clear_bhb_loop+0x60/0xb0 [ 174.374979][T10849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.374995][T10849] RIP: 0033:0x7f666918f749 [ 174.375010][T10849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.375024][T10849] RSP: 002b:00007f6669ff0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.375042][T10849] RAX: ffffffffffffffda RBX: 00007f66693e5fa0 RCX: 00007f666918f749 [ 174.375054][T10849] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 174.375064][T10849] RBP: 00007f6669ff0090 R08: 0000000000000000 R09: 0000000000000000 [ 174.375073][T10849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.375082][T10849] R13: 00007f66693e6038 R14: 00007f66693e5fa0 R15: 00007ffcd97f45a8 [ 174.375110][T10849] [ 174.883395][T10870] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 175.057953][T10886] syz.3.1430: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 175.073495][T10886] CPU: 1 UID: 0 PID: 10886 Comm: syz.3.1430 Not tainted syzkaller #0 PREEMPT(full) [ 175.073519][T10886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.073530][T10886] Call Trace: [ 175.073537][T10886] [ 175.073545][T10886] dump_stack_lvl+0x189/0x250 [ 175.073578][T10886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.073599][T10886] ? __pfx__printk+0x10/0x10 [ 175.073620][T10886] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 175.073644][T10886] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 175.073669][T10886] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 175.073695][T10886] warn_alloc+0x214/0x310 [ 175.073720][T10886] ? stack_depot_save_flags+0x40/0x860 [ 175.073750][T10886] ? __pfx_warn_alloc+0x10/0x10 [ 175.073773][T10886] ? kasan_save_track+0x3e/0x80 [ 175.073791][T10886] ? __kasan_kmalloc+0x93/0xb0 [ 175.073813][T10886] ? xsk_setsockopt+0x4dc/0x8d0 [ 175.073846][T10886] ? do_sock_setsockopt+0x17c/0x1b0 [ 175.073863][T10886] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 175.073880][T10886] ? do_syscall_64+0xfa/0xfa0 [ 175.073901][T10886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.073927][T10886] __vmalloc_node_range_noprof+0x125/0x12d0 [ 175.073981][T10886] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 175.074006][T10886] ? __kasan_kmalloc+0x93/0xb0 [ 175.074033][T10886] vmalloc_user_noprof+0xad/0xf0 [ 175.074053][T10886] ? xskq_create+0xbf/0x170 [ 175.074073][T10886] xskq_create+0xbf/0x170 [ 175.074095][T10886] xsk_init_queue+0xb0/0x110 [ 175.074118][T10886] xsk_setsockopt+0x4dc/0x8d0 [ 175.074140][T10886] ? __pfx_xsk_setsockopt+0x10/0x10 [ 175.074162][T10886] ? __pfx_aa_sk_perm+0x10/0x10 [ 175.074186][T10886] ? aa_sock_opt_perm+0xff/0x1b0 [ 175.074213][T10886] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 175.074230][T10886] ? __pfx_xsk_setsockopt+0x10/0x10 [ 175.074252][T10886] do_sock_setsockopt+0x17c/0x1b0 [ 175.074284][T10886] __x64_sys_setsockopt+0x13f/0x1b0 [ 175.074308][T10886] do_syscall_64+0xfa/0xfa0 [ 175.074331][T10886] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.074355][T10886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.074372][T10886] ? clear_bhb_loop+0x60/0xb0 [ 175.074392][T10886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.074409][T10886] RIP: 0033:0x7f2f5578f749 [ 175.074426][T10886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.074444][T10886] RSP: 002b:00007f2f56583038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 175.074463][T10886] RAX: ffffffffffffffda RBX: 00007f2f559e5fa0 RCX: 00007f2f5578f749 [ 175.074474][T10886] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 175.074485][T10886] RBP: 00007f2f55813f91 R08: 0000000000000004 R09: 0000000000000000 [ 175.074496][T10886] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.074508][T10886] R13: 00007f2f559e6038 R14: 00007f2f559e5fa0 R15: 00007ffc0edf9908 [ 175.074536][T10886] [ 175.074683][T10886] Mem-Info: [ 175.212001][T10886] active_anon:4719 inactive_anon:0 isolated_anon:0 [ 175.212001][T10886] active_file:3405 inactive_file:39922 isolated_file:0 [ 175.212001][T10886] unevictable:768 dirty:50 writeback:0 [ 175.212001][T10886] slab_reclaimable:11468 slab_unreclaimable:124172 [ 175.212001][T10886] mapped:30166 shmem:1355 pagetables:1061 [ 175.212001][T10886] sec_pagetables:0 bounce:0 [ 175.212001][T10886] kernel_misc_reclaimable:0 [ 175.212001][T10886] free:1302749 free_pcp:12529 free_cma:0 [ 175.424824][T10886] Node 0 active_anon:18976kB inactive_anon:0kB active_file:13620kB inactive_file:159484kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120664kB dirty:196kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13972kB pagetables:4388kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 175.458206][T10886] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 175.501688][T10886] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 175.539185][T10886] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 175.545138][T10886] Node 0 DMA32 free:1308156kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19076kB inactive_anon:0kB active_file:13620kB inactive_file:159484kB unevictable:1536kB writepending:196kB zspages:0kB present:3129332kB managed:2565140kB mlocked:0kB bounce:0kB free_pcp:30172kB local_pcp:7908kB free_cma:0kB [ 175.581730][T10886] lowmem_reserve[]: 0 0 0 0 0 [ 175.586608][T10886] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 175.634619][T10886] lowmem_reserve[]: 0 0 0 0 0 [ 175.645797][T10886] Node 1 Normal free:3887480kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19808kB local_pcp:8512kB free_cma:0kB [ 175.706911][T10886] lowmem_reserve[]: 0 0 0 0 0 [ 175.717267][T10886] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 175.778977][T10886] Node 0 DMA32: 482*4kB (UME) 588*8kB (UM) 466*16kB (UM) 1088*32kB (UM) 340*64kB (UM) 56*128kB (UME) 13*256kB (UM) 3*512kB (UE) 2*1024kB (ME) 1*2048kB (M) 298*4096kB (UM) = 1307400kB [ 175.834697][T10886] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 175.862550][T10886] Node 1 Normal: 216*4kB (UME) 45*8kB (UME) 51*16kB (UME) 94*32kB (UME) 35*64kB (UME) 8*128kB (UME) 3*256kB (ME) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3887480kB [ 175.883104][T10886] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.908633][T10886] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 175.940824][T10886] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.991899][T10886] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 176.008625][T10886] 45678 total pagecache pages [ 176.014427][T10886] 0 pages in swap cache [ 176.018798][T10886] Free swap = 124996kB [ 176.022963][T10886] Total swap = 124996kB [ 176.028566][T10886] 2097051 pages RAM [ 176.033448][T10886] 0 pages HighMem/MovableOnly [ 176.042647][T10886] 424124 pages reserved [ 176.049383][T10886] 0 pages cma reserved [ 176.238206][T10932] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 176.249857][T10932] bond6 (unregistering): Released all slaves [ 176.300048][T10930] validate_nla: 1 callbacks suppressed [ 176.300064][T10930] netlink: 'syz.3.1443': attribute type 10 has an invalid length. [ 176.326178][T10937] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 176.361652][T10930] team0: Port device dummy0 removed [ 176.383522][T10930] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 176.676223][T10952] team_slave_0: entered promiscuous mode [ 176.682184][T10952] team_slave_1: entered promiscuous mode [ 176.698803][T10952] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 176.706513][T10952] team0: Device macvtap0 is already an upper device of the team interface [ 176.721149][T10952] team_slave_0: left promiscuous mode [ 176.726645][T10952] team_slave_1: left promiscuous mode [ 177.052097][T10979] __nla_validate_parse: 10 callbacks suppressed [ 177.052114][T10979] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1459'. [ 177.062953][T10985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1456'. [ 177.080320][T10980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.156516][T10989] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1461'. [ 177.382528][T11000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1464'. [ 177.455853][T11000] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 177.563930][T11011] openvswitch: netlink: IP tunnel dst address not specified [ 177.579264][T11011] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1468'. [ 177.602345][T11009] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1469'. [ 177.732877][T11020] netlink: 'syz.1.1470': attribute type 11 has an invalid length. [ 177.847368][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1475'. [ 177.924312][T11034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1475'. [ 178.120221][T11045] openvswitch: netlink: IP tunnel dst address not specified [ 178.153956][T11050] openvswitch: netlink: IP tunnel dst address not specified [ 178.160592][T11049] netlink: 114 bytes leftover after parsing attributes in process `syz.3.1482'. [ 178.251652][T11055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1483'. [ 178.348668][T11062] netlink: 'syz.4.1484': attribute type 83 has an invalid length. [ 178.406018][T11062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.381489][T11129] sctp: [Deprecated]: syz.2.1503 (pid 11129) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.381489][T11129] Use struct sctp_sack_info instead [ 179.617009][T11151] sctp: [Deprecated]: syz.1.1508 (pid 11151) Use of int in maxseg socket option. [ 179.617009][T11151] Use struct sctp_assoc_value instead [ 180.333933][T11192] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 180.616515][T11204] sctp: [Deprecated]: syz.3.1529 (pid 11204) Use of int in maxseg socket option. [ 180.616515][T11204] Use struct sctp_assoc_value instead [ 180.830253][T11211] IPVS: length: 8 != 1152 [ 180.857284][T11211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.866260][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.286638][T11238] syzkaller1: entered promiscuous mode [ 181.302620][T11238] syzkaller1: entered allmulticast mode [ 181.344357][T11240] syzkaller1: entered promiscuous mode [ 181.350479][T11240] syzkaller1: entered allmulticast mode [ 181.636002][T10099] nci: nci_rx_work: unknown MT 0x7 [ 181.643850][T11250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.823566][T11275] netlink: 'syz.3.1549': attribute type 1 has an invalid length. [ 181.835719][T11275] netlink: 'syz.3.1549': attribute type 1 has an invalid length. [ 181.948667][T11291] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000 [ 182.116116][T11303] block nbd0: Unsupported socket: should be TCP or UNIX. [ 182.126728][T11304] __nla_validate_parse: 80 callbacks suppressed [ 182.126744][T11304] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1556'. [ 182.208829][T11318] netlink: 'syz.4.1560': attribute type 21 has an invalid length. [ 182.327333][T11328] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 182.371612][T11328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1564'. [ 182.385697][T11332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1566'. [ 182.400395][T11332] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1566'. [ 182.425635][T11328] 8021q: adding VLAN 0 to HW filter on device bond5 [ 182.453347][T11332] gretap1: entered promiscuous mode [ 182.459160][T11332] gretap1: entered allmulticast mode [ 182.464588][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1567'. [ 182.486313][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1567'. [ 182.510921][T10098] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 182.636555][T11328] bond5 (unregistering): Released all slaves [ 182.835255][T11354] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 183.323319][T11368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1575'. [ 183.422318][T11374] tipc: Enabled bearer , priority 0 [ 183.439152][T11374] syzkaller0: entered promiscuous mode [ 183.469573][T11374] syzkaller0: entered allmulticast mode [ 183.497831][T11382] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1578'. [ 183.593278][T11386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1581'. [ 183.611288][T11373] tipc: Resetting bearer [ 183.644751][T11373] tipc: Disabling bearer [ 183.781744][T11402] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .qMs%#\\cӡp[ [ 183.817756][T11401] netlink: 'syz.1.1585': attribute type 12 has an invalid length. [ 184.008085][T11425] syzkaller0: entered promiscuous mode [ 184.013789][T11425] syzkaller0: entered allmulticast mode [ 184.112471][T11436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1595'. [ 184.425338][T11457] syz.1.1602 (11457) used greatest stack depth: 17752 bytes left [ 184.568718][T11461] sctp: [Deprecated]: syz.3.1603 (pid 11461) Use of struct sctp_assoc_value in delayed_ack socket option. [ 184.568718][T11461] Use struct sctp_sack_info instead [ 184.698828][T11476] netlink: 'syz.4.1608': attribute type 21 has an invalid length. [ 184.885432][T11496] veth0: entered promiscuous mode [ 184.919947][T11492] veth0: left promiscuous mode [ 185.010497][T11502] netlink: 'syz.0.1613': attribute type 21 has an invalid length. [ 185.743530][T11552] : entered promiscuous mode [ 185.947995][T11575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.501793][T11620] __nla_validate_parse: 5 callbacks suppressed [ 187.501810][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1646'. [ 187.524609][T11622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1647'. [ 187.642740][T10099] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 187.697910][T11631] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1648'. [ 187.828080][T11642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.843133][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1651'. [ 188.384864][T11662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1657'. [ 188.724624][T11690] netlink: 'syz.1.1664': attribute type 9 has an invalid length. [ 188.980855][T11706] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1669'. [ 188.998166][T11708] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1670'. [ 189.089769][T11713] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 189.115016][T11713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.145961][T11721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1677'. [ 189.195268][T11717] netlink: 'syz.1.1675': attribute type 21 has an invalid length. [ 189.220841][T11721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.229863][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.265690][T11717] netlink: 'syz.1.1675': attribute type 22 has an invalid length. [ 189.302658][T11717] netlink: 'syz.1.1675': attribute type 23 has an invalid length. [ 189.319346][T11717] netlink: 'syz.1.1675': attribute type 25 has an invalid length. [ 189.339050][T11717] netlink: 'syz.1.1675': attribute type 26 has an invalid length. [ 189.347327][T11717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1675'. [ 189.468356][T11734] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1679'. [ 189.733187][T11752] xt_l2tp: v2 sid > 0xffff: 1114112 [ 189.830519][ T6889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.144684][T11762] syzkaller0: entered promiscuous mode [ 190.151179][T11762] syzkaller0: entered allmulticast mode [ 190.159849][T11761] erspan0: entered allmulticast mode [ 190.408690][T11770] netlink: 'syz.4.1695': attribute type 13 has an invalid length. [ 191.363876][T11791] netlink: 'syz.2.1700': attribute type 10 has an invalid length. [ 191.678243][ T6904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.686745][ T6904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.737349][T10099] bond4: (slave ip6gretap2): link status up again after 0 ms [ 191.762283][T10099] bond4: (slave ip6gretap2): link status up again after 0 ms [ 191.772856][T11791] team0: Port device geneve0 added [ 191.806219][T11802] gtp1: entered promiscuous mode [ 191.834293][T11802] gtp1: entered allmulticast mode [ 191.888482][T11804] bond6 (unregistering): Released all slaves [ 191.921471][T11813] netlink: 'syz.3.1708': attribute type 4 has an invalid length. [ 191.944000][T11809] tipc: Failed to remove unknown binding: 66,1,1/1833656083:2608042034/2608042036 [ 192.029190][T11809] netlink: 'syz.0.1707': attribute type 9 has an invalid length. [ 192.094003][T11823] sctp: [Deprecated]: syz.2.1711 (pid 11823) Use of int in max_burst socket option deprecated. [ 192.094003][T11823] Use struct sctp_assoc_value instead [ 192.178607][T11827] xt_hashlimit: invalid interval [ 192.184128][T11827] tipc: Enabling of bearer rejected, failed to enable media [ 192.513078][T11853] pim6reg: entered allmulticast mode [ 192.597904][T11858] vlan4: entered promiscuous mode [ 192.652164][T11858] __nla_validate_parse: 11 callbacks suppressed [ 192.652184][T11858] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1723'. [ 192.809489][T11872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1728'. [ 192.847503][T10099] net_ratelimit: 15 callbacks suppressed [ 192.847522][T10099] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 193.019622][T11876] bond6: Removing last arp target with arp_interval on [ 193.063351][T10074] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 193.175423][T11899] xfrm2: entered allmulticast mode [ 193.207704][T10078] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 193.372667][T10078] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 193.436680][T11918] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.1739'. [ 193.507064][T10099] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 193.671594][T11931] 8021q: adding VLAN 0 to HW filter on device bond7 [ 193.679678][T11933] bond7: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 193.720074][T11933] bond7: entered allmulticast mode [ 193.757173][T10078] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 193.872072][T10099] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 193.987443][T10098] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 194.107041][T10099] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 194.174995][T11959] validate_nla: 2 callbacks suppressed [ 194.175012][T11959] netlink: 'syz.2.1754': attribute type 1 has an invalid length. [ 194.191101][T11963] veth0: entered promiscuous mode [ 194.202150][T11963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1755'. [ 194.215103][T11959] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1754'. [ 194.240597][T11964] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1754'. [ 194.333573][T11964] bond6 (unregistering): Released all slaves [ 194.351732][T11972] netlink: 'syz.4.1758': attribute type 1 has an invalid length. [ 194.418600][T10098] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 194.428039][T11960] veth0: left promiscuous mode [ 194.441380][T11975] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 194.442723][T11972] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 194.579241][T11991] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1765'. [ 194.768825][T12007] netlink: 304 bytes leftover after parsing attributes in process `syz.4.1766'. [ 194.786369][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1766'. [ 194.871562][T12010] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1769'. [ 194.932461][T12015] netlink: 'syz.3.1770': attribute type 16 has an invalid length. [ 194.940795][T12015] netlink: 'syz.3.1770': attribute type 17 has an invalid length. [ 194.985804][T12015] erspan0: left allmulticast mode [ 195.018279][T12015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.028462][T12015] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.155507][T12030] netlink: 'syz.3.1776': attribute type 1 has an invalid length. [ 195.522202][T10098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.532263][T10098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.765241][T12063] pimreg: entered allmulticast mode [ 195.848500][T12072] siw: device registration error -23 [ 195.858354][T12071] tipc: Enabled bearer , priority 0 [ 195.974968][T12078] syzkaller0: entered promiscuous mode [ 195.999145][T12078] syzkaller0: entered allmulticast mode [ 196.008150][T12080] netlink: 'syz.4.1789': attribute type 4 has an invalid length. [ 196.022178][T12061] pimreg: left allmulticast mode [ 196.029091][T12080] netlink: 'syz.4.1789': attribute type 4 has an invalid length. [ 196.146389][T12080] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.154177][T12080] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.284388][T12080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.302511][T12080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.388943][ T52] Bluetooth: hci2: command 0x0401 tx timeout [ 196.395638][ T5835] Bluetooth: hci1: command 0x0401 tx timeout [ 196.402799][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 196.520459][T10078] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.547258][T10078] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.556197][T10078] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.563675][T12096] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 196.598264][T12093] netlink: 'syz.0.1791': attribute type 29 has an invalid length. [ 196.607138][T12094] netlink: 'syz.0.1791': attribute type 29 has an invalid length. [ 196.688601][T12099] bond6 (unregistering): Released all slaves [ 196.752241][T10078] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.773969][T12070] tipc: Resetting bearer [ 196.853148][T12070] tipc: Disabling bearer [ 198.531438][T12160] __nla_validate_parse: 7 callbacks suppressed [ 198.531454][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1808'. [ 198.558332][T12160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1808'. [ 198.590956][T12160] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1808'. [ 198.789963][T12188] net_ratelimit: 16 callbacks suppressed [ 198.789983][T12188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.932090][T12206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1819'. [ 198.958154][T12206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1819'. [ 199.085241][T12219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1821'. [ 199.116929][T12219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1821'. [ 199.145493][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1824'. [ 199.407899][T12246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1826'. [ 199.457422][T12247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1829'. [ 199.484370][T12250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.673862][T12260] netlink: 'syz.4.1833': attribute type 1 has an invalid length. [ 200.142046][T12290] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 200.171206][T12291] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 200.724223][T12339] netlink: 'syz.4.1853': attribute type 12 has an invalid length. [ 200.736068][T12339] netlink: 'syz.4.1853': attribute type 11 has an invalid length. [ 200.986056][T12356] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 201.545777][T12404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.674446][T12416] atomic_op ffff888070cb9198 conn xmit_atomic 0000000000000000 [ 201.701907][T12416] lo: entered promiscuous mode [ 201.707029][T12416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.794443][T12503] tipc: MTU too low for tipc bearer [ 203.017426][T12516] syzkaller0: tun_chr_ioctl cmd 35092 [ 203.116518][T12520] syz_tun: entered allmulticast mode [ 203.129239][T12517] syz_tun: left allmulticast mode [ 203.538451][T12556] netlink: 'syz.0.1914': attribute type 10 has an invalid length. [ 203.585195][T12563] __nla_validate_parse: 21 callbacks suppressed [ 203.585213][T12563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1917'. [ 204.080748][T12596] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1924'. [ 204.447163][T12615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1932'. [ 204.567659][T12624] Cannot find del_set index 4 as target [ 204.874551][T12645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1942'. [ 204.920318][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1941'. [ 204.930610][T12643] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1941'. [ 205.083868][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1944'. [ 205.521380][T12678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.688996][T12688] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 205.709009][T12691] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 205.739656][T12694] unsupported nlmsg_type 40 [ 205.794202][T12688] "syz.1.1953" (12688) uses obsolete ecb(arc4) skcipher [ 205.925090][T12709] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1960'. [ 205.936424][T12709] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1960'. [ 206.014247][T12715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1963'. [ 206.053396][T12718] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 206.283737][T12737] openvswitch: netlink: Flow key attr not present in new flow. [ 206.312498][T12739] syzkaller0: entered promiscuous mode [ 206.318960][T12739] syzkaller0: entered allmulticast mode [ 206.494438][T12756] veth1_to_bridge: entered promiscuous mode [ 206.529311][T12758] bond7: invalid ARP target 0.0.0.0 specified for addition [ 206.537150][T12758] bond7: option arp_ip_target: invalid value (0) [ 206.547151][T12758] bond7 (unregistering): Released all slaves [ 207.181029][T12786] openvswitch: netlink: Flow key attr not present in new flow. [ 207.235682][T12788] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 207.246064][T12788] bond5: option packets_per_slave: allowed values 0 - 65535 [ 207.254821][T12788] bond5 (unregistering): Released all slaves [ 207.313829][T12755] veth1_to_bridge: left promiscuous mode [ 207.608901][T12807] netlink: 'syz.0.1989': attribute type 2 has an invalid length. [ 207.869069][T12824] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.876865][T12824] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.155347][T12843] syzkaller1: entered promiscuous mode [ 208.161350][T12843] syzkaller1: entered allmulticast mode [ 208.262583][T12852] netlink: 'syz.2.2003': attribute type 1 has an invalid length. [ 209.625677][T12844] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 209.886197][T12873] __nla_validate_parse: 8 callbacks suppressed [ 209.886215][T12873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2007'. [ 209.943706][T12873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2007'. [ 209.960196][T12891] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2011'. [ 210.010009][T12891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2011'. [ 210.169901][T12904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2017'. [ 210.186212][T12904] netlink: 'syz.2.2017': attribute type 64 has an invalid length. [ 210.194250][T12904] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2017'. [ 210.219090][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2018'. [ 210.236579][T12904] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 210.298590][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2019'. [ 210.431532][T12924] netlink: 'syz.0.2023': attribute type 8 has an invalid length. [ 210.534774][T12931] syzkaller1: entered promiscuous mode [ 210.566585][T12931] syzkaller1: entered allmulticast mode [ 210.759192][T12954] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2031'. [ 210.875080][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2034'. [ 211.375980][T12997] syzkaller0: entered promiscuous mode [ 211.396368][T12997] syzkaller0: entered allmulticast mode [ 211.586079][T13009] lo speed is unknown, defaulting to 1000 [ 211.985313][T13044] bridge_slave_0: invalid flags given to default FDB implementation [ 212.090050][T13047] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 212.117423][T13048] netlink: 'syz.0.2056': attribute type 1 has an invalid length. [ 212.173703][T13048] bond8 (unregistering): Released all slaves [ 212.177555][T13053] netlink: 'syz.4.2059': attribute type 1 has an invalid length. [ 212.229843][T13055] netlink: 'syz.2.2058': attribute type 12 has an invalid length. [ 212.488238][T13071] netlink: 'syz.4.2061': attribute type 5 has an invalid length. [ 212.570402][T13077] netlink: 'syz.1.2065': attribute type 14 has an invalid length. [ 212.589237][T13077] netlink: 'syz.1.2065': attribute type 11 has an invalid length. [ 212.715165][T13077] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 212.731652][T13077] bond6 (unregistering): Released all slaves [ 212.822245][T13089] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 213.029008][T13112] set match dimension is over the limit! [ 213.281248][T13128] bridge0: port 3(batadv0) entered disabled state [ 213.316262][T13128] bridge_slave_0: left allmulticast mode [ 213.316597][T13134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.331063][T13128] bridge_slave_0: left promiscuous mode [ 213.351133][T13128] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.385141][T13128] bridge_slave_1: left allmulticast mode [ 213.395527][T13128] bridge_slave_1: left promiscuous mode [ 213.406637][T13128] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.440296][T13128] bond0: (slave bond_slave_0): Releasing backup interface [ 213.457432][T13128] bond_slave_0: left promiscuous mode [ 213.474903][T13128] bond0: (slave bond_slave_1): Releasing backup interface [ 213.488808][T13128] bond_slave_1: left promiscuous mode [ 213.513017][T13128] team0: Port device team_slave_1 removed [ 213.523894][T13128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.548061][T13153] xt_ecn: cannot match TCP bits for non-tcp packets [ 213.563033][T13128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.588051][T13128] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 213.605005][T13156] netlink: 'syz.1.2090': attribute type 39 has an invalid length. [ 213.623965][T13136] ip6gretap2: entered allmulticast mode [ 213.706522][T13160] erspan0: entered allmulticast mode [ 213.755280][T13162] team0: No ports can be present during mode change [ 214.322708][T13206] netlink: 'syz.0.2107': attribute type 33 has an invalid length. [ 214.348124][T13206] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 214.367110][T13206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.463560][T13221] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 214.621295][T13231] tipc: Enabled bearer , priority 0 [ 214.632895][T13231] syzkaller0: entered promiscuous mode [ 214.638787][T13231] syzkaller0: entered allmulticast mode [ 214.650180][T13235] netlink: 'syz.1.2115': attribute type 1 has an invalid length. [ 214.650180][T13233] netlink: 'syz.1.2115': attribute type 1 has an invalid length. [ 214.650217][T13235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.661148][T13231] tipc: Resetting bearer [ 214.684672][T13233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.694309][T13230] tipc: Resetting bearer [ 214.728450][T13230] tipc: Disabling bearer [ 214.777668][T13240] netlink: 'syz.0.2118': attribute type 1 has an invalid length. [ 214.971115][T13261] __nla_validate_parse: 17 callbacks suppressed [ 214.971132][T13261] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2121'. [ 214.985536][T13258] netlink: 'syz.3.2122': attribute type 1 has an invalid length. [ 215.041864][T13265] tipc: Enabled bearer , priority 0 [ 215.051775][T13265] syzkaller0: entered promiscuous mode [ 215.058185][T13265] syzkaller0: entered allmulticast mode [ 215.067889][T13265] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 215.095255][T13265] tipc: Resetting bearer [ 215.116210][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2124'. [ 215.129267][T13268] tipc: Resetting bearer [ 215.153170][T13268] tipc: Disabling bearer [ 215.200847][T13273] netlink: 'syz.2.2125': attribute type 1 has an invalid length. [ 215.260820][T13273] bond7: (slave geneve4): making interface the new active one [ 215.270907][T13273] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 215.279760][T10082] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 215.306240][T10082] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 215.315923][T10082] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 215.325014][T10082] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 215.354346][T13284] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2127'. [ 215.365884][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2127'. [ 215.466611][T13289] netlink: 'syz.4.2130': attribute type 5 has an invalid length. [ 215.574049][T13297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2133'. [ 215.585556][T13297] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 215.628044][T13297] team2: entered promiscuous mode [ 215.633222][T13297] team2: entered allmulticast mode [ 215.694588][T13305] netlink: 'syz.3.2135': attribute type 6 has an invalid length. [ 216.011016][T13335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2140'. [ 216.048544][T13339] netlink: 'syz.0.2142': attribute type 1 has an invalid length. [ 216.069700][T13333] lo: entered promiscuous mode [ 216.081844][T13333] tunl0: entered promiscuous mode [ 216.089253][T13339] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2142'. [ 216.108048][T13333] gre0: entered promiscuous mode [ 216.116318][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2144'. [ 216.125823][T13333] gretap0: entered promiscuous mode [ 216.134316][T13333] erspan0: left allmulticast mode [ 216.144655][T13333] ip_vti0: entered promiscuous mode [ 216.159742][T13333] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 216.306205][T13354] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2148'. [ 216.346036][T13352] bond5: entered promiscuous mode [ 216.351740][T13352] 8021q: adding VLAN 0 to HW filter on device bond5 [ 216.406275][T13352] bond5: (slave bridge3): making interface the new active one [ 216.414668][T13352] bridge3: entered promiscuous mode [ 216.422483][T13352] bridge3: left promiscuous mode [ 216.459576][T13363] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2150'. [ 218.136284][T13470] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 218.210418][T13477] block nbd0: Unsupported socket: should be TCP or UNIX. [ 219.810565][T13556] vlan1: entered allmulticast mode [ 219.815798][T13556] veth0_vlan: entered allmulticast mode [ 219.997431][T13571] __nla_validate_parse: 15 callbacks suppressed [ 219.997452][T13571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2210'. [ 220.106456][T13586] validate_nla: 3 callbacks suppressed [ 220.106475][T13586] netlink: 'syz.4.2213': attribute type 10 has an invalid length. [ 220.130107][T13586] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2213'. [ 220.295227][T13571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.325406][T13571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.342534][T13571] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 220.358030][T13571] bond0 (unregistering): Released all slaves [ 220.393934][T13586] team0: entered promiscuous mode [ 220.397640][T13606] netlink: 'syz.2.2217': attribute type 1 has an invalid length. [ 220.401415][T13586] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.407631][T13606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.424446][T13586] bridge0: port 1(team0) entered blocking state [ 220.451544][T13586] bridge0: port 1(team0) entered disabled state [ 220.469756][T13586] team0: entered allmulticast mode [ 220.481902][T13595] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.2210'. [ 220.492006][T13595] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.2210'. [ 220.536565][T13611] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2219'. [ 221.242900][T13670] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 1, id = 0 [ 221.363386][T13684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2243'. [ 221.380561][T13678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2238'. [ 221.390168][T13678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2238'. [ 221.399281][T13678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2238'. [ 221.513318][T13695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2248'. [ 222.594947][T13772] team0: left promiscuous mode [ 222.600822][T13772] batadv0: left promiscuous mode [ 222.609939][T13772] gretap1: left promiscuous mode [ 223.078454][T13808] bridge1: entered promiscuous mode [ 223.083777][T13808] bridge1: entered allmulticast mode [ 223.465397][T13831] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 223.684280][T13845] netlink: 'syz.0.2287': attribute type 5 has an invalid length. [ 224.013193][T13869] syzkaller0: entered promiscuous mode [ 224.027273][T13869] syzkaller0: entered allmulticast mode [ 224.194882][T13877] xt_hashlimit: size too large, truncated to 1048576 [ 224.215341][T13875] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 224.534892][T13890] sctp: [Deprecated]: syz.4.2301 (pid 13890) Use of int in max_burst socket option deprecated. [ 224.534892][T13890] Use struct sctp_assoc_value instead [ 224.555286][T13892] SET target dimension over the limit! [ 224.620053][T13893] netlink: 'syz.2.2302': attribute type 23 has an invalid length. [ 224.668345][T13899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.693340][T13892] netlink: 'syz.2.2302': attribute type 23 has an invalid length. [ 225.322674][T13943] netlink: 'syz.1.2318': attribute type 1 has an invalid length. [ 225.422629][T13955] tipc: Enabling of bearer rejected, failed to enable media [ 225.791521][T13983] __nla_validate_parse: 38 callbacks suppressed [ 225.791549][T13983] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2327'. [ 225.868206][T13987] netlink: 'syz.0.2329': attribute type 1 has an invalid length. [ 225.876097][T13987] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2329'. [ 226.087717][T14003] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2335'. [ 226.097734][T14003] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2335'. [ 226.110705][T14003] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2335'. [ 226.120141][T14003] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2335'. [ 226.180499][T13999] lo speed is unknown, defaulting to 1000 [ 226.534613][T14029] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 226.571294][T14029] netlink: 'syz.4.2341': attribute type 29 has an invalid length. [ 226.582886][T14029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2341'. [ 226.595441][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2340'. [ 226.616332][T14031] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2342'. [ 226.636589][T14031] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2342'. [ 227.086103][T14070] netlink: 'syz.1.2352': attribute type 1 has an invalid length. [ 227.705852][T14121] netlink: 'syz.2.2367': attribute type 1 has an invalid length. [ 227.844735][T14134] netlink: 'syz.0.2372': attribute type 4 has an invalid length. [ 227.877846][T14133] netlink: 'syz.0.2372': attribute type 4 has an invalid length. [ 227.918739][T14133] netlink: 'syz.0.2372': attribute type 4 has an invalid length. [ 227.924919][T14138] netlink: 'syz.3.2373': attribute type 3 has an invalid length. [ 227.944466][T14137] netlink: 'syz.3.2373': attribute type 3 has an invalid length. [ 227.985299][T14144] syzkaller0: entered promiscuous mode [ 228.017041][T14144] syzkaller0: entered allmulticast mode [ 228.085746][T14145] lo speed is unknown, defaulting to 1000 [ 228.444772][T14171] IPVS: persistence engine module ip_vs_pe_ not found [ 228.754833][T14187] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 228.767958][T14187] bond8 (unregistering): Released all slaves [ 228.786401][T14196] openvswitch: netlink: Missing key (keys=40, expected=80) [ 228.799461][T14196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.282500][T14234] tipc: Enabled bearer , priority 0 [ 229.294268][T14234] tipc: Resetting bearer [ 229.302491][T14233] tipc: Disabling bearer [ 229.584489][T14249] Set syz1 is full, maxelem 14 reached [ 229.612977][T14246] bond8: option xmit_hash_policy: invalid value (64) [ 229.625584][T14246] bond8 (unregistering): Released all slaves [ 229.721254][T14262] pim6reg1: entered promiscuous mode [ 229.726980][T14262] pim6reg1: entered allmulticast mode [ 229.770331][T14263] macvlan1: mtu less than device minimum [ 230.096360][T14277] lo speed is unknown, defaulting to 1000 [ 230.116689][T14278] lo speed is unknown, defaulting to 1000 [ 230.858523][T14334] __nla_validate_parse: 24 callbacks suppressed [ 230.858542][T14334] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2430'. [ 230.921536][T14342] validate_nla: 3 callbacks suppressed [ 230.921554][T14342] netlink: 'syz.2.2429': attribute type 21 has an invalid length. [ 230.922121][T14344] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 230.962982][T14342] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2429'. [ 231.043663][T14350] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2433'. [ 231.105743][T14357] netlink: 'syz.0.2435': attribute type 21 has an invalid length. [ 231.121753][T14357] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2435'. [ 231.291309][T14369] openvswitch: netlink: IP tunnel dst address not specified [ 231.729979][T14397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2446'. [ 232.013321][T14411] lo speed is unknown, defaulting to 1000 [ 277.809974][T14424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2455'. [ 277.851855][T14432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2454'. [ 277.861453][T14431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2456'. [ 277.886260][T14431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2456'. [ 277.905703][T14431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2456'. [ 277.950240][T14431] ip6gre2: entered promiscuous mode [ 277.956996][T14431] ip6gre2: entered allmulticast mode [ 277.963942][T10098] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 277.978130][T10098] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 277.987152][ T5901] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 278.112720][T14452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2461'. [ 278.182959][T14449] netlink: 'syz.0.2462': attribute type 16 has an invalid length. [ 278.198083][T14449] netlink: 'syz.0.2462': attribute type 17 has an invalid length. [ 278.218745][T14449] gre0: left promiscuous mode [ 278.230223][T14449] gre0: left allmulticast mode [ 278.251992][T14449] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.260696][T14449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.352808][T14466] bond8: entered promiscuous mode [ 278.358034][T14466] bond8: entered allmulticast mode [ 278.363691][T14466] 8021q: adding VLAN 0 to HW filter on device bond8 [ 278.419652][T14465] syzkaller1: entered promiscuous mode [ 278.439697][T14465] syzkaller1: entered allmulticast mode [ 278.533534][T14476] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2468'. [ 278.638837][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2470'. [ 278.679766][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2470'. [ 278.707113][ T5901] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 278.745465][T14489] netlink: 'syz.0.2472': attribute type 30 has an invalid length. [ 278.783702][T14489] bond8: option arp_missed_max: invalid value (0) [ 278.790843][T14489] bond8: option arp_missed_max: allowed values 1 - 255 [ 278.801432][T14489] bond8 (unregistering): Released all slaves [ 279.019365][T14508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.027432][ T6911] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 279.212340][T14519] netlink: 'syz.4.2479': attribute type 1 has an invalid length. [ 279.485048][T14536] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2484'. [ 280.047832][T14570] netlink: 'syz.1.2493': attribute type 11 has an invalid length. [ 280.153017][T14578] xt_CT: You must specify a L4 protocol and not use inversions on it [ 280.163570][T14579] netlink: 'syz.0.2495': attribute type 1 has an invalid length. [ 280.663075][T14612] netlink: 'syz.1.2508': attribute type 12 has an invalid length. [ 280.867197][T14625] netlink: 'syz.3.2511': attribute type 21 has an invalid length. [ 280.895161][T14631] netlink: 'syz.1.2514': attribute type 20 has an invalid length. [ 280.920016][T14632] netlink: 'syz.4.2515': attribute type 16 has an invalid length. [ 280.929444][T14636] unsupported nla_type 65535 [ 280.933052][T14632] netlink: 'syz.4.2515': attribute type 17 has an invalid length. [ 280.995198][T14632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.037347][T14632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.060947][T14633] syzkaller1: entered promiscuous mode [ 281.066604][T14633] syzkaller1: entered allmulticast mode [ 281.269620][T14662] bond6: (slave gre0): Device is not bonding slave [ 281.276245][T14662] bond6: option active_slave: invalid value (gre0) [ 281.307654][T14662] bond6 (unregistering): Released all slaves [ 281.712925][T14703] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 281.827020][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 282.201617][T14727] syzkaller1: entered promiscuous mode [ 282.223729][T14727] syzkaller1: entered allmulticast mode [ 282.288931][T14743] team0: Device veth1_macvtap failed to register rx_handler [ 282.431939][T14749] tipc: Enabled bearer , priority 0 [ 282.439777][T14749] syzkaller0: entered promiscuous mode [ 282.445398][T14749] syzkaller0: entered allmulticast mode [ 282.521907][T14749] tipc: Resetting bearer [ 282.542157][T14748] tipc: Resetting bearer [ 282.559145][T14759] x_tables: duplicate underflow at hook 3 [ 282.625723][T14748] tipc: Disabling bearer [ 283.031812][T14786] bond8: (slave geneve4): making interface the new active one [ 283.040035][T14786] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 283.060108][T10082] netdevsim netdevsim0 v: set [1, 1] type 2 family 0 port 20004 - 0 [ 283.071132][ T30] audit: type=1107 audit(1764319615.415:2): pid=14795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' ፎJ=}ES' [ 283.084248][T10082] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 283.126616][T10082] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 283.150590][T14791] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 283.150841][T10082] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 283.241680][T14807] __nla_validate_parse: 21 callbacks suppressed [ 283.241697][T14807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2567'. [ 283.399407][T14823] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 283.408059][T14823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.533208][T14831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.682712][T14850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2576'. [ 283.682873][T14846] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2575'. [ 283.713853][T14846] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2575'. [ 283.786550][T14853] !: renamed from bond_slave_0 [ 283.788922][T14850] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2576'. [ 283.931188][T14853] syzkaller0: entered allmulticast mode [ 284.062535][T14875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2584'. [ 284.116598][T14881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2584'. [ 286.012176][T14881] vxcan0: entered allmulticast mode [ 286.173675][T14896] validate_nla: 8 callbacks suppressed [ 286.173694][T14896] netlink: 'syz.0.2590': attribute type 15 has an invalid length. [ 286.189967][T14900] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2592'. [ 286.210376][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2592'. [ 286.228170][T14900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2592'. [ 286.388885][T14917] sch_tbf: peakrate 262144 is lower than or equals to rate 4294967293 ! [ 286.552966][T14928] netlink: 'syz.3.2600': attribute type 4 has an invalid length. [ 286.650366][T14935] xt_hashlimit: size too large, truncated to 1048576 [ 286.820219][T14946] nbd: device at index 64 is going down [ 287.279945][T14980] netlink: 'syz.2.2614': attribute type 2 has an invalid length. [ 287.309597][T14980] : entered promiscuous mode [ 287.359952][T14986] IPv6: addrconf: prefix option has invalid lifetime [ 287.673319][T15001] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 287.834279][T15020] syzkaller1: entered promiscuous mode [ 287.857805][T15020] syzkaller1: entered allmulticast mode [ 288.154164][T15043] netlink: 'syz.4.2632': attribute type 3 has an invalid length. [ 288.602968][T15055] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 288.611355][T15055] macvlan2: left promiscuous mode [ 288.624203][T15055] geneve2: left promiscuous mode [ 288.652541][T15055] gtp0: left promiscuous mode [ 288.664966][T15074] netlink: 'syz.3.2641': attribute type 1 has an invalid length. [ 288.666932][T15055] gtp0: left allmulticast mode [ 288.703039][T15055] veth3: left promiscuous mode [ 288.712136][T15055] bond5: left promiscuous mode [ 288.722009][T15055] bond5: left allmulticast mode [ 288.744193][T15055] xfrm2: left allmulticast mode [ 288.749831][T15055] bond7: left allmulticast mode [ 288.775258][ T36] netdevsim netdevsim0 v: unset [1, 0] type 2 family 0 port 20002 - 0 [ 288.798127][ T36] netdevsim netdevsim0 v: unset [1, 1] type 2 family 0 port 20004 - 0 [ 288.817757][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20002 - 0 [ 288.840987][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 288.854941][T15087] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:0 [ 288.899589][T15074] 8021q: adding VLAN 0 to HW filter on device bond27 [ 288.923419][T15081] veth9: entered promiscuous mode [ 288.934177][T15081] bond27: (slave veth9): Enslaving as an active interface with an up link [ 288.949765][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20002 - 0 [ 288.960976][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 288.971075][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20002 - 0 [ 288.980344][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 289.042450][T15100] netlink: 'syz.3.2647': attribute type 1 has an invalid length. [ 289.051924][T15100] __nla_validate_parse: 9 callbacks suppressed [ 289.051943][T15100] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2647'. [ 289.238776][T15112] ip6gre2: entered promiscuous mode [ 289.247506][T15112] ip6gre2: entered allmulticast mode [ 289.261085][T10078] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 289.273106][T10078] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 289.287038][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 289.436630][T15126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2653'. [ 289.570268][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2653'. [ 289.717603][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 289.734632][T15122] bond28: option packets_per_slave: invalid value (18446744073709551615) [ 289.744038][T15122] bond28: option packets_per_slave: allowed values 0 - 65535 [ 289.767548][T15122] bond28 (unregistering): Released all slaves [ 289.803840][T15137] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2657'. [ 289.820736][T15140] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2657'. [ 289.909909][T15148] netlink: 'syz.2.2659': attribute type 21 has an invalid length. [ 290.052866][T15158] sctp: [Deprecated]: syz.1.2660 (pid 15158) Use of int in maxseg socket option. [ 290.052866][T15158] Use struct sctp_assoc_value instead [ 290.178653][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 290.307048][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 291.047862][T15178] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2668'. [ 291.057071][T15178] block nbd0: not configured, cannot reconfigure [ 292.083112][T15148] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 292.084610][T15179] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2667'. [ 292.198877][T15200] netlink: 'syz.1.2672': attribute type 3 has an invalid length. [ 292.206654][T15200] netlink: 'syz.1.2672': attribute type 1 has an invalid length. [ 292.233144][T15200] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2672'. [ 292.243647][T15202] tipc: Enabling of bearer rejected, failed to enable media [ 292.258459][T15202] veth1_to_bond: entered allmulticast mode [ 292.267274][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2673'. [ 292.342445][T15202] bond0: (slave bond_slave_1): Releasing backup interface [ 292.393942][T15202] veth1_to_bond (unregistering): left allmulticast mode [ 292.422671][T15216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2677'. [ 292.480402][T15216] xt_ecn: cannot match TCP bits for non-tcp packets [ 292.947093][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 293.288062][T15266] netlink: 'syz.1.2688': attribute type 4 has an invalid length. [ 294.399327][T15318] __nla_validate_parse: 5 callbacks suppressed [ 294.399345][T15318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2703'. [ 295.029927][T15308] syzkaller0: entered promiscuous mode [ 295.035517][T15308] syzkaller0: entered allmulticast mode [ 295.042967][T15318] chnl_net:caif_netlink_parms(): no params data found [ 296.662675][T15334] tipc: Enabled bearer , priority 0 [ 296.670583][T15338] syzkaller0: entered promiscuous mode [ 296.676085][T15338] syzkaller0: entered allmulticast mode [ 296.805750][T15348] tipc: Resetting bearer [ 296.863052][T15348] tipc: Disabling bearer [ 297.100052][T15370] syzkaller1: entered promiscuous mode [ 297.126418][T15370] syzkaller1: entered allmulticast mode [ 297.146434][T15368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2710'. [ 297.204030][T15377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.364123][T15387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2717'. [ 297.392695][T15387] ip6t_srh: unknown srh match flags 5F28 [ 297.497259][T15392] sctp: [Deprecated]: syz.4.2720 (pid 15392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.497259][T15392] Use struct sctp_sack_info instead [ 297.628147][T15400] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2723'. [ 297.832572][T15422] syzkaller1: entered allmulticast mode [ 297.913574][T15424] tipc: Enabled bearer , priority 0 [ 297.945019][T15424] syzkaller0: entered promiscuous mode [ 297.957186][T15424] syzkaller0: entered allmulticast mode [ 297.978348][T15424] tipc: Resetting bearer [ 298.043229][T15423] tipc: Resetting bearer [ 298.074854][T15439] netlink: 'syz.1.2734': attribute type 1 has an invalid length. [ 298.093952][T15423] tipc: Disabling bearer [ 298.123189][T15435] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2732'. [ 298.137574][T15435] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2732'. [ 298.147181][T15436] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2732'. [ 298.163064][T15436] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2732'. [ 298.173118][T15433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2733'. [ 298.242391][T15439] bond6: entered promiscuous mode [ 298.252279][T15439] bond6: entered allmulticast mode [ 298.264170][T15439] 8021q: adding VLAN 0 to HW filter on device bond6 [ 298.305497][T15446] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2735'. [ 298.318297][T15442] macvlan2: entered promiscuous mode [ 298.323767][T15442] macvlan2: entered allmulticast mode [ 298.332011][T15442] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 298.405943][T15433] geneve2: entered promiscuous mode [ 298.418008][T15433] geneve2: entered allmulticast mode [ 298.464651][T15446] bond28: (slave gre0): Device is not bonding slave [ 298.472073][T15446] bond28: option active_slave: invalid value (gre0) [ 298.495356][T15446] bond28 (unregistering): Released all slaves [ 298.540286][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.560247][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.645811][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.716163][T15461] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 299.217929][T15506] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 299.243869][T15510] openvswitch: netlink: Missing key (keys=40, expected=80) [ 299.335731][T15519] netlink: 'syz.2.2758': attribute type 8 has an invalid length. [ 299.430607][T15519] netlink: 'syz.2.2758': attribute type 33 has an invalid length. [ 299.608117][T15529] vlan2: entered promiscuous mode [ 299.613328][T15529] bridge0: entered promiscuous mode [ 299.619476][T15525] __nla_validate_parse: 11 callbacks suppressed [ 299.619495][T15525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2761'. [ 299.696381][T15535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2764'. [ 299.819294][T15540] xt_l2tp: v2 sid > 0xffff: 1114112 [ 300.557076][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 301.643649][T15581] bond0: (slave rose0): Enslaving as an active interface with an up link [ 301.752756][T15588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2776'. [ 301.766859][T15588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2776'. [ 301.796848][T15588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2776'. [ 301.839619][T15591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2777'. [ 302.258190][T15632] tipc: Enabled bearer , priority 0 [ 302.265943][T15632] syzkaller0: entered promiscuous mode [ 302.274826][T15632] syzkaller0: entered allmulticast mode [ 302.332049][T15636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.353522][T15630] tipc: Resetting bearer [ 302.369162][T15641] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 302.389332][T15630] tipc: Disabling bearer [ 302.478575][T15649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2791'. [ 302.612530][T15659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2795'. [ 303.009909][T15691] lo: MTU too low for tipc bearer [ 303.035097][T15691] tipc: Enabling of bearer rejected, failed to enable media [ 303.149584][T15698] team_slave_0 (unregistering): left promiscuous mode [ 303.158601][T15698] team0: Port device team_slave_0 removed [ 303.169044][T15702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2807'. [ 303.173502][T15700] netlink: 'syz.4.2808': attribute type 1 has an invalid length. [ 303.202207][T15702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2807'. [ 303.285365][T15709] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 303.299219][T15709] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 303.301238][T15700] netlink: 'syz.4.2808': attribute type 1 has an invalid length. [ 303.310141][T15709] bond9: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 303.415537][T15700] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 303.447739][T15700] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 303.478150][T15722] x_tables: duplicate underflow at hook 1 [ 303.870591][T15747] IPVS: length: 259 != 24 [ 304.132232][T15775] netlink: 'syz.3.2831': attribute type 1 has an invalid length. [ 304.232660][T15781] netlink: 'syz.4.2832': attribute type 10 has an invalid length. [ 304.294702][T15781] dummy0: entered allmulticast mode [ 304.301722][T15781] dummy0: entered promiscuous mode [ 304.308965][T15781] team0: Port device dummy0 added [ 304.325607][T10099] bridge0: port 1(team0) entered blocking state [ 304.332130][T10099] bridge0: port 1(team0) entered forwarding state [ 304.361011][T15781] netlink: 'syz.4.2832': attribute type 10 has an invalid length. [ 304.418733][T10099] bridge0: port 1(team0) entered disabled state [ 304.425467][T15781] netlink: 'syz.4.2832': attribute type 10 has an invalid length. [ 304.450789][T15781] netlink: 'syz.4.2832': attribute type 10 has an invalid length. [ 304.498714][T15781] netlink: 'syz.4.2832': attribute type 10 has an invalid length. [ 304.507971][T15801] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 304.547323][T15781] netlink: 'syz.4.2832': attribute type 10 has an invalid length. [ 304.591102][T15781] netlink: 'syz.4.2832': attribute type 10 has an invalid length. [ 304.817582][T15816] __nla_validate_parse: 5 callbacks suppressed [ 304.817599][T15816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2843'. [ 304.860208][T15822] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2842'. [ 304.897560][T15822] 8021q: VLANs not supported on sit0 [ 305.173417][T15826] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2845'. [ 305.186088][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.198591][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.199485][T15826] syzkaller1: entered promiscuous mode [ 305.217196][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.224619][T15826] syzkaller1: entered allmulticast mode [ 305.233029][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.243136][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.361494][T15842] bond1: (slave lo): Releasing backup interface [ 305.373663][T15842] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 305.478524][T15842] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.513897][T15853] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2852'. [ 305.531009][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2852'. [ 305.565991][T15842] bridge_slave_0: left allmulticast mode [ 305.573407][T15842] bridge_slave_0: left promiscuous mode [ 305.580452][T15842] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.607067][T15842] team0: Port device team_slave_0 removed [ 305.620346][T15842] team0: Port device team_slave_1 removed [ 305.643175][T15842] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 305.666957][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 305.692678][ T6911] lo speed is unknown, defaulting to 1000 [ 305.693092][T15833] lo speed is unknown, defaulting to 1000 [ 305.710606][ T6911] syz2: Port: 1 Link DOWN [ 305.910364][T15868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2854'. [ 306.068869][T15880] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2860'. [ 306.123442][T15833] chnl_net:caif_netlink_parms(): no params data found [ 306.225650][T15890] bridge0: entered allmulticast mode [ 306.310649][T15833] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.325722][T15833] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.334675][T15900] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 306.345871][T15833] bridge_slave_0: entered allmulticast mode [ 306.354038][T15833] bridge_slave_0: entered promiscuous mode [ 306.362139][T15900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2866'. [ 306.385755][T15833] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.404433][T15833] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.419824][T15833] bridge_slave_1: entered allmulticast mode [ 306.436621][T15833] bridge_slave_1: entered promiscuous mode [ 306.518218][T15833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.539479][T15833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.677010][T15833] team0: Port device team_slave_0 added [ 306.678441][T15912] netlink: 187468 bytes leftover after parsing attributes in process `syz.4.2872'. [ 306.694836][T15833] team0: Port device team_slave_1 added [ 306.834344][T15833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.851720][T15833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.907704][T15833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.942324][T15833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.958910][T15833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.992234][T15833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.078902][T15929] bond10: option mode: invalid value (133) [ 307.088391][T15929] bond10 (unregistering): Released all slaves [ 307.275495][T15951] openvswitch: netlink: IP tunnel dst address not specified [ 307.297560][T15949] netlink: 'syz.2.2880': attribute type 11 has an invalid length. [ 307.305512][T15949] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2880'. [ 307.320163][T15952] ip6gretap0: entered allmulticast mode [ 307.366460][T15833] hsr_slave_0: entered promiscuous mode [ 307.373863][ T5829] Bluetooth: hci4: command tx timeout [ 307.394709][T15833] hsr_slave_1: entered promiscuous mode [ 307.403461][T15833] debugfs: 'hsr0' already exists in 'hsr' [ 307.409397][T15833] Cannot create hsr debugfs directory [ 308.673587][T15833] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.707971][T15833] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 308.813077][T16006] bond9: option all_slaves_active: invalid value (222) [ 308.845918][T16006] bond9 (unregistering): Released all slaves [ 309.006938][T15833] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.038424][T15833] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 309.199463][T15833] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.210149][T15833] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 309.320117][T15833] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.333981][T15833] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 309.429995][ T5829] Bluetooth: hci4: command tx timeout [ 309.457787][T16041] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 309.497293][T16041] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 309.504513][T16041] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 309.526684][T16041] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 309.534517][T16041] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 309.543121][T16041] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 309.548480][T15833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 309.558005][T16041] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 309.570845][T16041] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 309.579445][T15833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 309.588201][T16041] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 309.595504][T16041] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 309.610908][T15833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 309.646113][T15833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 309.790735][T16062] validate_nla: 62 callbacks suppressed [ 309.790752][T16062] netlink: 'syz.2.2910': attribute type 21 has an invalid length. [ 309.836214][T15833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.848937][T16062] __nla_validate_parse: 8 callbacks suppressed [ 309.848953][T16062] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2910'. [ 309.861433][T15833] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.913293][T10099] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.920538][T10099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.924705][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027b41c00: rx timeout, send abort [ 309.931257][T16069] netlink: 'syz.2.2910': attribute type 21 has an invalid length. [ 309.936061][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027b42c00: rx timeout, send abort [ 309.952565][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888027b41c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 309.968272][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888027b42c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 309.995773][T16069] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2910'. [ 310.062554][T10099] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.069754][T10099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.107900][T16062] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2910'. [ 310.141907][T16069] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2910'. [ 310.351865][T16099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2917'. [ 310.373148][T16097] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2918'. [ 310.396009][T16100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2918'. [ 310.429301][T16099] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2917'. [ 310.504689][T16106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2919'. [ 310.670059][T15833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.732971][T15833] veth0_vlan: entered promiscuous mode [ 310.738665][T16121] xt_policy: too many policy elements [ 310.760001][T15833] veth1_vlan: entered promiscuous mode [ 310.815519][T16120] lo speed is unknown, defaulting to 1000 [ 310.852346][T16126] netlink: 'syz.2.2924': attribute type 1 has an invalid length. [ 310.861005][T15833] veth0_macvtap: entered promiscuous mode [ 310.872708][T15833] veth1_macvtap: entered promiscuous mode [ 310.878804][T16127] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2924'. [ 310.926115][T16126] 8021q: adding VLAN 0 to HW filter on device bond8 [ 310.950584][T15833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.964223][T15833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.090392][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.126017][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.196339][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.218633][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.418652][T10097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.453055][T10097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.509503][ T5829] Bluetooth: hci4: command tx timeout [ 311.581327][T16168] bridge0: entered promiscuous mode [ 311.586788][T16168] team0: entered promiscuous mode [ 311.591821][T16168] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:575 [ 311.601114][T16168] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 16168, name: syz.4.2934 [ 311.610247][T16168] preempt_count: 201, expected: 0 [ 311.615265][T16168] RCU nest depth: 0, expected: 0 [ 311.620266][T16168] 3 locks held by syz.4.2934/16168: [ 311.625500][T16168] #0: ffffffff8f7d3020 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 311.635190][T16168] #1: ffffffff8f2cc008 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 311.644353][T16168] #2: ffff88803257c368 (&dev_addr_list_lock_key#6/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 311.654576][T16168] Preemption disabled at: [ 311.654585][T16168] [] dev_uc_add+0x56/0x120 [ 311.664906][T16168] CPU: 0 UID: 0 PID: 16168 Comm: syz.4.2934 Not tainted syzkaller #0 PREEMPT(full) [ 311.664922][T16168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 311.664933][T16168] Call Trace: [ 311.664940][T16168] [ 311.664945][T16168] dump_stack_lvl+0x189/0x250 [ 311.664970][T16168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.664992][T16168] ? __pfx__printk+0x10/0x10 [ 311.665014][T16168] ? print_lock_name+0xde/0x100 [ 311.665031][T16168] ? dev_uc_add+0x56/0x120 [ 311.665046][T16168] __might_resched+0x495/0x610 [ 311.665059][T16168] ? dev_uc_add+0x56/0x120 [ 311.665069][T16168] ? __pfx___might_resched+0x10/0x10 [ 311.665080][T16168] ? __pfx_vprintk_emit+0x10/0x10 [ 311.665094][T16168] ? prb_read_valid+0x3c/0x60 [ 311.665128][T16168] __mutex_lock+0x109/0x1350 [ 311.665151][T16168] ? _printk+0xcf/0x120 [ 311.665175][T16168] ? dev_set_promiscuity+0x10e/0x260 [ 311.665198][T16168] ? __pfx___mutex_lock+0x10/0x10 [ 311.665212][T16168] ? netdev_info+0x10a/0x160 [ 311.665226][T16168] ? __pfx_netdev_info+0x10/0x10 [ 311.665237][T16168] dev_set_promiscuity+0x10e/0x260 [ 311.665251][T16168] team_change_rx_flags+0x134/0x250 [ 311.665267][T16168] ? __pfx_team_change_rx_flags+0x10/0x10 [ 311.665278][T16168] __dev_set_promiscuity+0x534/0x740 [ 311.665292][T16168] ? netdev_info+0x10a/0x160 [ 311.665303][T16168] netif_set_promiscuity+0x50/0xe0 [ 311.665315][T16168] dev_set_promiscuity+0x126/0x260 [ 311.665328][T16168] br_manage_promisc+0x180/0x560 [ 311.665345][T16168] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 311.665355][T16168] __dev_set_promiscuity+0x534/0x740 [ 311.665368][T16168] ? __hw_addr_add_ex+0x3c5/0x770 [ 311.665380][T16168] __dev_set_rx_mode+0x17c/0x260 [ 311.665392][T16168] dev_uc_add+0xc8/0x120 [ 311.665405][T16168] macsec_dev_open+0xd9/0x530 [ 311.665418][T16168] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 311.665428][T16168] ? __pfx_macsec_dev_open+0x10/0x10 [ 311.665439][T16168] ? ib_device_get_by_netdev+0x84/0x4d0 [ 311.665447][T16168] ? hsr_netdev_notify+0x29e/0xcf0 [ 311.665457][T16168] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 311.665468][T16168] ? udp_tunnel_nic_netdevice_event+0x1ac/0x1810 [ 311.665484][T16168] ? ip6_route_dev_notify+0x9a/0x5b0 [ 311.665499][T16168] ? notifier_call_chain+0x3bf/0x3e0 [ 311.665514][T16168] __dev_open+0x470/0x880 [ 311.665531][T16168] ? __pfx___dev_open+0x10/0x10 [ 311.665550][T16168] __dev_change_flags+0x1ea/0x6d0 [ 311.665562][T16168] ? validate_linkmsg+0x765/0x950 [ 311.665575][T16168] ? __pfx___dev_change_flags+0x10/0x10 [ 311.665591][T16168] rtnl_newlink_create+0x555/0xb00 [ 311.665609][T16168] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 311.665621][T16168] ? __pfx___mutex_lock+0x10/0x10 [ 311.665635][T16168] ? ns_capable+0x8a/0xf0 [ 311.665648][T16168] rtnl_newlink+0x16e4/0x1c80 [ 311.665658][T16168] ? netlink_deliver_tap+0x19c/0x1b0 [ 311.665674][T16168] ? __pfx_rtnl_newlink+0x10/0x10 [ 311.665696][T16168] ? kasan_quarantine_put+0xdd/0x220 [ 311.665710][T16168] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.665727][T16168] ? nlmon_xmit+0xb0/0x100 [ 311.665737][T16168] ? kmem_cache_free+0x19b/0x690 [ 311.665755][T16168] ? __local_bh_enable_ip+0x12d/0x1c0 [ 311.665767][T16168] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.665780][T16168] ? __local_bh_enable_ip+0x12d/0x1c0 [ 311.665790][T16168] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 311.665802][T16168] ? __dev_queue_xmit+0x27b/0x3b50 [ 311.665814][T16168] ? __dev_queue_xmit+0x27b/0x3b50 [ 311.665824][T16168] ? __dev_queue_xmit+0x27b/0x3b50 [ 311.665835][T16168] ? __dev_queue_xmit+0x1d79/0x3b50 [ 311.665846][T16168] ? kasan_save_track+0x3e/0x80 [ 311.665858][T16168] ? __kasan_slab_alloc+0x6c/0x80 [ 311.665873][T16168] ? __lock_acquire+0xab9/0xd20 [ 311.665896][T16168] ? __pfx_rtnl_newlink+0x10/0x10 [ 311.665905][T16168] rtnetlink_rcv_msg+0x7cf/0xb70 [ 311.665921][T16168] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 311.665934][T16168] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 311.665947][T16168] ? ref_tracker_free+0x63a/0x7d0 [ 311.665958][T16168] ? __asan_memcpy+0x40/0x70 [ 311.665969][T16168] ? __pfx_ref_tracker_free+0x10/0x10 [ 311.665984][T16168] netlink_rcv_skb+0x208/0x470 [ 311.665995][T16168] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 311.666010][T16168] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 311.666026][T16168] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.666040][T16168] netlink_unicast+0x82f/0x9e0 [ 311.666061][T16168] ? __pfx_netlink_unicast+0x10/0x10 [ 311.666110][T16168] ? netlink_sendmsg+0x642/0xb30 [ 311.666126][T16168] ? skb_put+0x11b/0x210 [ 311.666148][T16168] netlink_sendmsg+0x805/0xb30 [ 311.666170][T16168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.666182][T16168] ? aa_sock_msg_perm+0xf1/0x1d0 [ 311.666201][T16168] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 311.666218][T16168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.666237][T16168] __sock_sendmsg+0x21c/0x270 [ 311.666265][T16168] ____sys_sendmsg+0x505/0x830 [ 311.666291][T16168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.666316][T16168] ? import_iovec+0x74/0xa0 [ 311.666332][T16168] ___sys_sendmsg+0x21f/0x2a0 [ 311.666345][T16168] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.666378][T16168] ? __fget_files+0x2a/0x420 [ 311.666388][T16168] ? __fget_files+0x3a0/0x420 [ 311.666403][T16168] __x64_sys_sendmsg+0x19b/0x260 [ 311.666416][T16168] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.666436][T16168] ? do_syscall_64+0xbe/0xfa0 [ 311.666453][T16168] do_syscall_64+0xfa/0xfa0 [ 311.666466][T16168] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.666479][T16168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.666489][T16168] ? clear_bhb_loop+0x60/0xb0 [ 311.666500][T16168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.666511][T16168] RIP: 0033:0x7f68a358f749 [ 311.666522][T16168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.666531][T16168] RSP: 002b:00007f68a43c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.666542][T16168] RAX: ffffffffffffffda RBX: 00007f68a37e5fa0 RCX: 00007f68a358f749 [ 311.666549][T16168] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 311.666555][T16168] RBP: 00007f68a3613f91 R08: 0000000000000000 R09: 0000000000000000 [ 311.666561][T16168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.666567][T16168] R13: 00007f68a37e6038 R14: 00007f68a37e5fa0 R15: 00007ffd8bfb9308 [ 311.666584][T16168] [ 311.666598][T16168] [ 312.276451][T16168] ============================= [ 312.281281][T16168] [ BUG: Invalid wait context ] [ 312.286112][T16168] syzkaller #0 Tainted: G W [ 312.292106][T16168] ----------------------------- [ 312.296934][T16168] syz.4.2934/16168 is trying to lock: [ 312.302289][T16168] ffff8880573d6d38 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 312.312626][T16168] other info that might help us debug this: [ 312.318512][T16168] context-{5:5} [ 312.321948][T16168] 3 locks held by syz.4.2934/16168: [ 312.327128][T16168] #0: ffffffff8f7d3020 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 312.336598][T16168] #1: ffffffff8f2cc008 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 312.345629][T16168] #2: ffff88803257c368 (&dev_addr_list_lock_key#6/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 312.355810][T16168] stack backtrace: [ 312.359525][T16168] CPU: 0 UID: 0 PID: 16168 Comm: syz.4.2934 Tainted: G W syzkaller #0 PREEMPT(full) [ 312.359543][T16168] Tainted: [W]=WARN [ 312.359547][T16168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.359554][T16168] Call Trace: [ 312.359558][T16168] [ 312.359564][T16168] dump_stack_lvl+0x189/0x250 [ 312.359582][T16168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.359594][T16168] ? __pfx__printk+0x10/0x10 [ 312.359605][T16168] ? print_lock_name+0xde/0x100 [ 312.359615][T16168] __lock_acquire+0xbcb/0xd20 [ 312.359627][T16168] ? dev_set_promiscuity+0x10e/0x260 [ 312.359637][T16168] lock_acquire+0x120/0x360 [ 312.359646][T16168] ? dev_set_promiscuity+0x10e/0x260 [ 312.359662][T16168] ? prb_read_valid+0x3c/0x60 [ 312.359674][T16168] __mutex_lock+0x187/0x1350 [ 312.359684][T16168] ? dev_set_promiscuity+0x10e/0x260 [ 312.359694][T16168] ? _printk+0xcf/0x120 [ 312.359704][T16168] ? dev_set_promiscuity+0x10e/0x260 [ 312.359714][T16168] ? __pfx___mutex_lock+0x10/0x10 [ 312.359724][T16168] ? netdev_info+0x10a/0x160 [ 312.359735][T16168] ? __pfx_netdev_info+0x10/0x10 [ 312.359745][T16168] dev_set_promiscuity+0x10e/0x260 [ 312.359756][T16168] team_change_rx_flags+0x134/0x250 [ 312.359770][T16168] ? __pfx_team_change_rx_flags+0x10/0x10 [ 312.359781][T16168] __dev_set_promiscuity+0x534/0x740 [ 312.359792][T16168] ? netdev_info+0x10a/0x160 [ 312.359802][T16168] netif_set_promiscuity+0x50/0xe0 [ 312.359813][T16168] dev_set_promiscuity+0x126/0x260 [ 312.359823][T16168] br_manage_promisc+0x180/0x560 [ 312.359838][T16168] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 312.359847][T16168] __dev_set_promiscuity+0x534/0x740 [ 312.359857][T16168] ? __hw_addr_add_ex+0x3c5/0x770 [ 312.359867][T16168] __dev_set_rx_mode+0x17c/0x260 [ 312.359877][T16168] dev_uc_add+0xc8/0x120 [ 312.359888][T16168] macsec_dev_open+0xd9/0x530 [ 312.359900][T16168] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 312.359909][T16168] ? __pfx_macsec_dev_open+0x10/0x10 [ 312.359919][T16168] ? ib_device_get_by_netdev+0x84/0x4d0 [ 312.359928][T16168] ? hsr_netdev_notify+0x29e/0xcf0 [ 312.359939][T16168] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 312.359948][T16168] ? udp_tunnel_nic_netdevice_event+0x1ac/0x1810 [ 312.359962][T16168] ? ip6_route_dev_notify+0x9a/0x5b0 [ 312.359975][T16168] ? notifier_call_chain+0x3bf/0x3e0 [ 312.359988][T16168] __dev_open+0x470/0x880 [ 312.360003][T16168] ? __pfx___dev_open+0x10/0x10 [ 312.360018][T16168] __dev_change_flags+0x1ea/0x6d0 [ 312.360028][T16168] ? validate_linkmsg+0x765/0x950 [ 312.360045][T16168] ? __pfx___dev_change_flags+0x10/0x10 [ 312.360058][T16168] rtnl_newlink_create+0x555/0xb00 [ 312.360071][T16168] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 312.360082][T16168] ? __pfx___mutex_lock+0x10/0x10 [ 312.360093][T16168] ? ns_capable+0x8a/0xf0 [ 312.360104][T16168] rtnl_newlink+0x16e4/0x1c80 [ 312.360114][T16168] ? netlink_deliver_tap+0x19c/0x1b0 [ 312.360127][T16168] ? __pfx_rtnl_newlink+0x10/0x10 [ 312.360151][T16168] ? kasan_quarantine_put+0xdd/0x220 [ 312.360175][T16168] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.360200][T16168] ? nlmon_xmit+0xb0/0x100 [ 312.360219][T16168] ? kmem_cache_free+0x19b/0x690 [ 312.360245][T16168] ? __local_bh_enable_ip+0x12d/0x1c0 [ 312.360264][T16168] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.360280][T16168] ? __local_bh_enable_ip+0x12d/0x1c0 [ 312.360291][T16168] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 312.360303][T16168] ? __dev_queue_xmit+0x27b/0x3b50 [ 312.360314][T16168] ? __dev_queue_xmit+0x27b/0x3b50 [ 312.360331][T16168] ? __dev_queue_xmit+0x27b/0x3b50 [ 312.360342][T16168] ? __dev_queue_xmit+0x1d79/0x3b50 [ 312.360353][T16168] ? kasan_save_track+0x3e/0x80 [ 312.360366][T16168] ? __kasan_slab_alloc+0x6c/0x80 [ 312.360380][T16168] ? __lock_acquire+0xab9/0xd20 [ 312.360394][T16168] ? __pfx_rtnl_newlink+0x10/0x10 [ 312.360403][T16168] rtnetlink_rcv_msg+0x7cf/0xb70 [ 312.360418][T16168] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 312.360431][T16168] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 312.360444][T16168] ? ref_tracker_free+0x63a/0x7d0 [ 312.360454][T16168] ? __asan_memcpy+0x40/0x70 [ 312.360466][T16168] ? __pfx_ref_tracker_free+0x10/0x10 [ 312.360477][T16168] netlink_rcv_skb+0x208/0x470 [ 312.360487][T16168] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 312.360501][T16168] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 312.360513][T16168] ? netlink_deliver_tap+0x2e/0x1b0 [ 312.360524][T16168] netlink_unicast+0x82f/0x9e0 [ 312.360540][T16168] ? __pfx_netlink_unicast+0x10/0x10 [ 312.360553][T16168] ? netlink_sendmsg+0x642/0xb30 [ 312.360562][T16168] ? skb_put+0x11b/0x210 [ 312.360573][T16168] netlink_sendmsg+0x805/0xb30 [ 312.360585][T16168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.360595][T16168] ? aa_sock_msg_perm+0xf1/0x1d0 [ 312.360610][T16168] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.360620][T16168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.360630][T16168] __sock_sendmsg+0x21c/0x270 [ 312.360643][T16168] ____sys_sendmsg+0x505/0x830 [ 312.360656][T16168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.360668][T16168] ? import_iovec+0x74/0xa0 [ 312.360680][T16168] ___sys_sendmsg+0x21f/0x2a0 [ 312.360691][T16168] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.360710][T16168] ? __fget_files+0x2a/0x420 [ 312.360719][T16168] ? __fget_files+0x3a0/0x420 [ 312.360730][T16168] __x64_sys_sendmsg+0x19b/0x260 [ 312.360740][T16168] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.360755][T16168] ? do_syscall_64+0xbe/0xfa0 [ 312.360769][T16168] do_syscall_64+0xfa/0xfa0 [ 312.360782][T16168] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.360794][T16168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.360804][T16168] ? clear_bhb_loop+0x60/0xb0 [ 312.360819][T16168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.360828][T16168] RIP: 0033:0x7f68a358f749 [ 312.360838][T16168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.360848][T16168] RSP: 002b:00007f68a43c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.360859][T16168] RAX: ffffffffffffffda RBX: 00007f68a37e5fa0 RCX: 00007f68a358f749 [ 312.360867][T16168] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 312.360873][T16168] RBP: 00007f68a3613f91 R08: 0000000000000000 R09: 0000000000000000 [ 312.360880][T16168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.360885][T16168] R13: 00007f68a37e6038 R14: 00007f68a37e5fa0 R15: 00007ffd8bfb9308 [ 312.360897][T16168] [ 312.980657][T16168] macsec0: entered promiscuous mode [ 312.986399][T16168] macsec0: entered allmulticast mode [ 312.993164][T16168] bridge0: port 2(macsec0) entered blocking state [ 313.002664][T16168] bridge0: port 2(macsec0) entered disabled state [ 313.010893][T16168] bridge0: left promiscuous mode [ 313.015909][T16168] team0: left promiscuous mode [ 313.020684][T16168] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:575 [ 313.030063][T16168] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 16168, name: syz.4.2934 [ 313.039171][T16168] preempt_count: 201, expected: 0 [ 313.044176][T16168] RCU nest depth: 0, expected: 0 [ 313.049124][T16168] INFO: lockdep is turned off. [ 313.053885][T16168] Preemption disabled at: [ 313.053893][T16168] [] dev_uc_del+0x56/0x110 [ 313.064194][T16168] CPU: 0 UID: 0 PID: 16168 Comm: syz.4.2934 Tainted: G W syzkaller #0 PREEMPT(full) [ 313.064213][T16168] Tainted: [W]=WARN [ 313.064216][T16168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 313.064227][T16168] Call Trace: [ 313.064232][T16168] [ 313.064237][T16168] dump_stack_lvl+0x189/0x250 [ 313.064256][T16168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.064268][T16168] ? __pfx__printk+0x10/0x10 [ 313.064278][T16168] ? console_unlock+0x13a/0x190 [ 313.064290][T16168] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 313.064302][T16168] ? __pfx_console_unlock+0x10/0x10 [ 313.064313][T16168] ? dev_uc_del+0x56/0x110 [ 313.064324][T16168] __might_resched+0x495/0x610 [ 313.064336][T16168] ? dev_uc_del+0x56/0x110 [ 313.064346][T16168] ? __pfx___might_resched+0x10/0x10 [ 313.064356][T16168] ? __pfx_vprintk_emit+0x10/0x10 [ 313.064367][T16168] ? unregister_netdevice_many_notify+0xb29/0x2390 [ 313.064380][T16168] ? rtnl_newlink+0x16e4/0x1c80 [ 313.064388][T16168] ? rtnetlink_rcv_msg+0x7cf/0xb70 [ 313.064401][T16168] ? netlink_rcv_skb+0x208/0x470 [ 313.064410][T16168] ? netlink_unicast+0x82f/0x9e0 [ 313.064423][T16168] ? netlink_sendmsg+0x805/0xb30 [ 313.064432][T16168] ? __sock_sendmsg+0x21c/0x270 [ 313.064444][T16168] ? ____sys_sendmsg+0x505/0x830 [ 313.064456][T16168] __mutex_lock+0x109/0x1350 [ 313.064466][T16168] ? _printk+0xcf/0x120 [ 313.064476][T16168] ? dev_set_promiscuity+0x10e/0x260 [ 313.064486][T16168] ? __pfx___mutex_lock+0x10/0x10 [ 313.064496][T16168] ? netdev_info+0x10a/0x160 [ 313.064507][T16168] ? __pfx_netdev_info+0x10/0x10 [ 313.064517][T16168] dev_set_promiscuity+0x10e/0x260 [ 313.064528][T16168] team_change_rx_flags+0x134/0x250 [ 313.064542][T16168] ? __pfx_team_change_rx_flags+0x10/0x10 [ 313.064553][T16168] __dev_set_promiscuity+0x534/0x740 [ 313.064564][T16168] ? lock_release+0x4b/0x3e0 [ 313.064574][T16168] netif_set_promiscuity+0x50/0xe0 [ 313.064585][T16168] dev_set_promiscuity+0x126/0x260 [ 313.064595][T16168] br_manage_promisc+0x4db/0x560 [ 313.064609][T16168] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 313.064619][T16168] __dev_set_promiscuity+0x534/0x740 [ 313.064630][T16168] __dev_set_rx_mode+0x17c/0x260 [ 313.064641][T16168] dev_uc_del+0xc0/0x110 [ 313.064652][T16168] macsec_dev_stop+0x2b6/0x380 [ 313.064663][T16168] ? __pfx_macsec_dev_stop+0x10/0x10 [ 313.064673][T16168] ? dev_deactivate_many+0xb82/0xd40 [ 313.064683][T16168] ? __local_bh_enable_ip+0x12d/0x1c0 [ 313.064694][T16168] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 313.064705][T16168] ? do_raw_spin_unlock+0x122/0x240 [ 313.064717][T16168] ? dev_deactivate_many+0xb82/0xd40 [ 313.064727][T16168] ? dev_deactivate_many+0xd03/0xd40 [ 313.064737][T16168] ? dev_deactivate_many+0x258/0xd40 [ 313.064746][T16168] ? __pfx_macsec_dev_stop+0x10/0x10 [ 313.064757][T16168] __dev_close_many+0x364/0x6f0 [ 313.064770][T16168] ? stack_depot_save_flags+0x41b/0x860 [ 313.064786][T16168] ? __pfx___dev_close_many+0x10/0x10 [ 313.064799][T16168] ? kasan_save_track+0x3e/0x80 [ 313.064812][T16168] ? __kasan_save_free_info+0x46/0x50 [ 313.064823][T16168] ? kfree+0x19a/0x6d0 [ 313.064834][T16168] ? rtnl_newlink_create+0x7fa/0xb00 [ 313.064844][T16168] ? rtnl_newlink+0x16e4/0x1c80 [ 313.064852][T16168] ? rtnetlink_rcv_msg+0x7cf/0xb70 [ 313.064866][T16168] netif_close_many+0x225/0x410 [ 313.064879][T16168] ? do_syscall_64+0xfa/0xfa0 [ 313.064892][T16168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.064903][T16168] ? __pfx_netif_close_many+0x10/0x10 [ 313.064918][T16168] unregister_netdevice_many_notify+0xb29/0x2390 [ 313.064934][T16168] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 313.064947][T16168] ? rcu_is_watching+0x15/0xb0 [ 313.064960][T16168] ? kfree+0x19a/0x6d0 [ 313.064980][T16168] rtnl_newlink_create+0x802/0xb00 [ 313.064993][T16168] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 313.065004][T16168] ? __pfx___mutex_lock+0x10/0x10 [ 313.065015][T16168] ? ns_capable+0x8a/0xf0 [ 313.065026][T16168] rtnl_newlink+0x16e4/0x1c80 [ 313.065035][T16168] ? netlink_deliver_tap+0x19c/0x1b0 [ 313.065047][T16168] ? __pfx_rtnl_newlink+0x10/0x10 [ 313.065061][T16168] ? kasan_quarantine_put+0xdd/0x220 [ 313.065073][T16168] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.065088][T16168] ? nlmon_xmit+0xb0/0x100 [ 313.065099][T16168] ? kmem_cache_free+0x19b/0x690 [ 313.065114][T16168] ? __local_bh_enable_ip+0x12d/0x1c0 [ 313.065128][T16168] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.065150][T16168] ? __local_bh_enable_ip+0x12d/0x1c0 [ 313.065168][T16168] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 313.065187][T16168] ? __dev_queue_xmit+0x27b/0x3b50 [ 313.065201][T16168] ? __dev_queue_xmit+0x27b/0x3b50 [ 313.065212][T16168] ? __dev_queue_xmit+0x27b/0x3b50 [ 313.065228][T16168] ? __dev_queue_xmit+0x1d79/0x3b50 [ 313.065239][T16168] ? kasan_save_track+0x3e/0x80 [ 313.065251][T16168] ? __kasan_slab_alloc+0x6c/0x80 [ 313.065265][T16168] ? __lock_acquire+0xab9/0xd20 [ 313.065279][T16168] ? __pfx_rtnl_newlink+0x10/0x10 [ 313.065288][T16168] rtnetlink_rcv_msg+0x7cf/0xb70 [ 313.065303][T16168] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 313.065317][T16168] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 313.065330][T16168] ? ref_tracker_free+0x63a/0x7d0 [ 313.065340][T16168] ? __asan_memcpy+0x40/0x70 [ 313.065352][T16168] ? __pfx_ref_tracker_free+0x10/0x10 [ 313.065364][T16168] netlink_rcv_skb+0x208/0x470 [ 313.065374][T16168] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 313.065387][T16168] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 313.065399][T16168] ? netlink_deliver_tap+0x2e/0x1b0 [ 313.065410][T16168] netlink_unicast+0x82f/0x9e0 [ 313.065425][T16168] ? __pfx_netlink_unicast+0x10/0x10 [ 313.065438][T16168] ? netlink_sendmsg+0x642/0xb30 [ 313.065447][T16168] ? skb_put+0x11b/0x210 [ 313.065457][T16168] netlink_sendmsg+0x805/0xb30 [ 313.065469][T16168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.065480][T16168] ? aa_sock_msg_perm+0xf1/0x1d0 [ 313.065494][T16168] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 313.065504][T16168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.065514][T16168] __sock_sendmsg+0x21c/0x270 [ 313.065527][T16168] ____sys_sendmsg+0x505/0x830 [ 313.065538][T16168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.065550][T16168] ? import_iovec+0x74/0xa0 [ 313.065563][T16168] ___sys_sendmsg+0x21f/0x2a0 [ 313.065574][T16168] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.065591][T16168] ? __fget_files+0x2a/0x420 [ 313.065601][T16168] ? __fget_files+0x3a0/0x420 [ 313.065612][T16168] __x64_sys_sendmsg+0x19b/0x260 [ 313.065623][T16168] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 313.065637][T16168] ? do_syscall_64+0xbe/0xfa0 [ 313.065650][T16168] do_syscall_64+0xfa/0xfa0 [ 313.065663][T16168] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.065676][T16168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.065685][T16168] ? clear_bhb_loop+0x60/0xb0 [ 313.065696][T16168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.065706][T16168] RIP: 0033:0x7f68a358f749 [ 313.065716][T16168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.065725][T16168] RSP: 002b:00007f68a43c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.065737][T16168] RAX: ffffffffffffffda RBX: 00007f68a37e5fa0 RCX: 00007f68a358f749 [ 313.065745][T16168] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 313.065751][T16168] RBP: 00007f68a3613f91 R08: 0000000000000000 R09: 0000000000000000 [ 313.065758][T16168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.065764][T16168] R13: 00007f68a37e6038 R14: 00007f68a37e5fa0 R15: 00007ffd8bfb9308 [ 313.065775][T16168] [ 313.793622][ T5829] Bluetooth: hci4: command tx timeout [ 313.799273][T16170] netlink: 'syz.2.2935': attribute type 9 has an invalid length. [ 313.800674][T10077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.814850][T10077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.266955][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!