last executing test programs: 2.741110474s ago: executing program 1 (id=4412): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x40800) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x2, "c972"}, &(0x7f00000000c0)=0xa) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={r1, @in={{0x2, 0x4e22, @multicast1}}, 0x80, 0x7}, &(0x7f00000001c0)=0x90) (async, rerun: 64) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000400)={r2, 0xa0, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0xfc0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e22, 0x5, @local, 0x1}, @in6={0xa, 0x4e22, 0xa, @loopback, 0x9}, @in6={0xa, 0x4e22, 0x8, @private1, 0x8}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000480)=r5, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) (async) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000540)={0xffffffffffffffff}) ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r6, 0x11, 0x1, &(0x7f00000005c0)=""/73, &(0x7f0000000640)=0x49) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000680)={'TPROXY\x00'}, &(0x7f00000006c0)=0x1e) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r6) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r7, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xf0, 0x19}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000880), &(0x7f00000008c0)=0x4) getgid() (async) connect$qrtr(r6, &(0x7f0000000900)={0x2a, 0xffffffffffffffff, 0x2}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x44860) (async) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ac0), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r10, 0x300, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c80)={r6, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x5, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9e2}, [@map_fd={0x18, 0xb}]}, &(0x7f0000000c00)='GPL\x00', 0x10001, 0x0, 0x0, 0x41000, 0x8, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000cc0)=[r6, r6, r11, r6, r6], &(0x7f0000000d00)=[{0x0, 0x5, 0x6, 0xc}, {0x2, 0x5, 0x4, 0x7}, {0x1, 0x1, 0x4, 0x9}, {0x1, 0x4, 0xd, 0x2}, {0x2, 0x1, 0xb, 0x3}, {0x0, 0x2, 0x8, 0x2}], 0x10, 0x8}, 0x94) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000e40)={r5, 0x3}, &(0x7f0000000e80)=0x8) bind$alg(r6, &(0x7f0000000ec0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x20, 0x3, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40091) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000001040)={0x5, 0x3, 0x0, 0xe, 0x3, [0x3, 0x0, 0x10000, 0x806]}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000001080)) (async, rerun: 64) getsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000010c0), 0x10) (rerun: 64) 2.704328814s ago: executing program 3 (id=4415): bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000010c0)={@map, 0xffffffffffffffff, 0x2c}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r9 = socket(0x1e, 0x1, 0x0) write$nci(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r6, @ANYRES16=r9], 0x14) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, 0x0, 0x78) close(r4) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newqdisc={0x364, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0x3}, {0x6, 0xb}, {0x9, 0xf}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x334, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x2, 0x95, 0x19, 0xe, 0x20, 0x3}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x3}, @TCA_CHOKE_STAB={0x104, 0x2, "b3afc5ab8c42a08fabbbdfd35bf8dbbacf620c53662ff8902d9ee7674f8ebd22f6eb11940d4a08c9221c08136339276ff631be8186d6629ab514e5bc3697f602f397642a5d859b9748417ca0972126fa2b99609aeee45af483c60168a0670c8fec0713aa8fdaa6cdb245d2c89bd9a3c50614e3f76d7ba3cfa3ceda9bf922331f6b5e939c626d9d51d2a8c91291948711327beaafda8dbf46c88193e6eb959494e71e413125ff7280145edeb5e06875710f4a8103bd01bf653732dbe0872c94f5546f594d1030a31ad54a256c5dd09b92c94eb3191bd78b653e8ab2e99e9b48639f731f74df8d6de0a049e884dd6a88bf54df842d3f0e3d084dec739f1306b920"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x3}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x364}}, 0x4010) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r6) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r13, 0x400, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x4000080) socket$inet6(0xa, 0x6, 0xfc) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.443606714s ago: executing program 1 (id=4420): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x84, 0x30, 0xb, 0x5, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7ff, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040001901feffffff00000000017c0000040042800c00018006000600800a0000100002800900148004"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2.379353008s ago: executing program 0 (id=4422): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000880)={'syztnl0\x00', 0x0, 0x1, 0x1, 0x8001, 0xa, {{0x2f, 0x4, 0x3, 0x0, 0xbc, 0x65, 0x0, 0x0, 0x4, 0x0, @loopback, @local, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0xbe, [@local, @multicast1]}, @ssrr={0x89, 0x23, 0xe9, [@multicast1, @multicast2, @broadcast, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x30}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x13, 0x53, [@local, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x56, 0x3, [{0x5, 0xd, "4742c27b6708ee4983451f"}, {0x1, 0xf, "096458c3cf89978cd14a9a51ff"}, {0x1, 0x3, "e4"}, {0x6, 0x9, "96ab80660c4019"}, {0x0, 0xd, "c0ac09b0ed9f930d56465d"}, {0x7, 0xd, "522e7c365f50c234ec3b5c"}, {0x0, 0xe, "61f9558ded41cd72beb08d02"}]}, @rr={0x7, 0xb, 0xbc, [@broadcast, @multicast2]}, @noop, @end]}}}}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000011c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'vlan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000c80000000080000000000000a5601ad22b000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000140)=r5, 0x4) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) r6 = socket(0x400000000010, 0x3, 0x0) sendto$x25(r6, &(0x7f0000000980)="9a72d3054729d572e62510680daab98c66a8a0c2143ab7fae501f926877aae9b554edc9892962fcbac0571027c774144eb11677402ff47d4ce6a85c5ce469747f586281b721db0569575048befab1671cdd17445e135ef8e434d64af9252ffefe5ad36cc57425d04badd6c0d5bad9a3f1d4df9c247d329b2c41adf1f5e6efaf985629cd72c8357bc4e66f719baf91d76d326081e521a47f6e92c35bf5a8d6fd81c3b03", 0xa3, 0xc001, &(0x7f0000000a40), 0x12) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newtfilter={0xa0, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x74, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x10, 0x7de, 0x74, 0xe, 0xdc, [{0x2, 0x1b74, 0x5, 0x6}, {0x2, 0x7, 0xaad, 0x4}, {0x8, 0xa8f1, 0x8, 0x4}, {0x1, 0x9, 0x3, 0x1}, {0x3, 0xfff, 0x6, 0xfffffffc}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_POLICE={0x4}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) setsockopt$inet_mreqsrc(r6, 0x0, 0x28, &(0x7f0000000080)={@remote, @loopback, @loopback}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x200010, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x1003, r10}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r10}, 0x20) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200003000128008000100687372002400028008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) 2.247485566s ago: executing program 1 (id=4424): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x84, 0x30, 0xb, 0x5, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7ff, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900148004"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (fail_nth: 9) 2.125038121s ago: executing program 4 (id=4426): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@getnexthop={0x1c, 0x6a, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x8000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01072bbd7000ffdbdf25010000000c000600030000000300000008000300", @ANYRESDEC], 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r7, @ANYBLOB="6000308000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x110010}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x803}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x4}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xa5}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x80) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x84, 0x30, 0xb, 0x5, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7ff, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x40) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@initdev, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r8, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf9}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x40) 1.730806564s ago: executing program 1 (id=4428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x80000000, 0x8, 0x0, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r3, 0x6, 0x4, 0x0, &(0x7f0000000000)=0x3) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x1c, 0x18, {0x7, @bearer=@l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}}}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x2c, 0x2c, 0x107, 0x70bd2b, 0x0, {0x9, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x9, 0x2, 0x0, 0x1, [@typed={0x4, 0x71, 0x0, 0x0, @binary}, @generic="8c"]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 1.662407019s ago: executing program 4 (id=4429): r0 = socket$alg(0x26, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) socket(0x11, 0x3, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) socket$packet(0x11, 0x2, 0x300) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4}, 0x94) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r4, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r3], 0x44}}, 0x8000) 1.577400741s ago: executing program 0 (id=4430): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01004bbd1300ffdbdf250f00000008000301", @ANYRES32=r2, @ANYBLOB="08003b0004000000080031000c000000"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4804) r3 = socket(0x1e, 0x4, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x94) socket(0x10, 0x803, 0x8) (async) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xffffffffffffffba, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r7, 0x25, 0x0, @val=@perf_event={0x9}}, 0x18) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r7, 0x25, 0x0, @val=@perf_event={0x9}}, 0x18) r8 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r8, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000080)) (async) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000080)) r11 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) (async) r12 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32, @ANYBLOB="28001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0040000040060100080020000402000094a2d10b94a8a74b05559f633efff8e21f7a9afb254f9adb6431692117e40cf1d97e917c7dd1bd217dade3c2240c6ddea12eef591cdb37267c5c"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x2, {0x0, 0x0, 0x0, r7, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x2, {0x0, 0x0, 0x0, r7, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req={0x0, 0x547a1c94, 0x40, 0x9}, 0x10) recvmmsg$unix(r3, &(0x7f0000006140)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000002500)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000002600)=@abs, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000003100)=""/4080, 0xff0}], 0x1}}, {{&(0x7f0000002d00), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002d80)=""/136, 0x88}, {0x0}], 0x2}}], 0x3, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.5284346s ago: executing program 3 (id=4431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x7}, @nested={0x4, 0x8}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x130, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x3a, 0x6, "73aea7c695cfaa57f8f5df1e2a8d2d047bae6e50bc130522b55bcdcc685972aed65a50c08abffb6bdeb77d479df1037994227643e222"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x9b, 0x6, "7e81b4b38fe3db93622237b0e199c7633f00f9f963d04a07368cdfff21c47cbb09d76b757f9be74c91c190838c424bb5003c5d509aabd524c5e1e0a5e9d955141d1c57f479c77e19ae43f083ac8e6651699a0fd1013e0d96834e5df2480a4289bd4f7f08c5323368e351472b211c9e606e20864be36e0a4ab49c0fcba75d0a4aa5cff0ff0b5e1d5dabc26dbff0b9770824dc70e3c588a6"}]}], {0x14}}, 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000040)=0x8) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x10, {{@in6=@mcast1, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x3d04c9a7, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x0, 0x2, 0x0, 0x3}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075d, 0x1004}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) (async) sendmmsg$sock(r4, &(0x7f0000003180)=[{{&(0x7f0000000180)=@hci={0x1f, 0x1, 0x2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000480)="024468f75872dcc35c4a865167ce141180f86d6d2d2b667592a3c33936463143e7bb6e42171be6f3bb2c71676866c351e658a3e643566881df0577a462feffaafa974e3e86995e3ae7dbd8b6bc88af335ebe083ced9a2b1f3b847103b7af298aabf2f341cf7c9d27d81972b94be151e7a3c9487c087f8a25000000000000", 0x7e}, {&(0x7f0000000bc0)="da653e6368ca3086947a7cd9f675fec207fa0522eb427678a26306d4d58e3174157055bad9d94baf2b8a476ed0798d84173e4d6a8c03e3ad87f36f69e2d254f2fc17dc5260b177829e93e8de0efe7be1837255949efb5d662b4b", 0x5a}], 0x2}}], 0x1, 0x20040840) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r5, 0xffffffffffffffff, 0xa, 0x0, @void}, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$l2tp(0x2, 0x2, 0x73) (async) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) socket$netlink(0x10, 0x3, 0xb) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r7, 0x4048587b, &(0x7f0000000a40)={{r0, &(0x7f0000000440)='\x00', 0x4, &(0x7f0000000580)={@_ha_fsid={[0x8, 0x6]}, {0x9, 0xab, 0x8, 0x7f}}, 0x5, &(0x7f0000000600), &(0x7f00000008c0)=0x9}, 0x1, &(0x7f0000000a00)=[{0x1, 0x592a8000, &(0x7f0000000980)='\\::@!,]\x00', &(0x7f00000009c0)="b5d5c28b", 0x4, 0x20}]}) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x8000000, 0x2, 0x3, 0x4, 0x8, 0x5}, 0x20) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r11 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000540)={0xb0000010}) (async) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x1f, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001}, [@exit, @tail_call, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x5f4}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x8, 0x31, &(0x7f0000000380)=""/49, 0x40f00, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0x10, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000500)=[{0x3, 0x7, 0xa, 0x1}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000640)="c4d80fec6b82a4fe7ee04e3811f5", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) sendmmsg$inet(r6, &(0x7f0000001880)=[{{0x0, 0x4, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1, 0x0, 0x0, 0x60ff}, 0x406}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x400000000000192, 0x0) 1.526943225s ago: executing program 4 (id=4432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x6, 0x1, 0x1, 0xf9}, 0x1f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x4) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00033c000c00000000ff840000000200000003125ce882cbf490d908f1523f000005032d9c2740e260a09c6911cda856d5141bffc6", 0x3e}], 0x1}, 0x8bb3a321ef809a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x84, 0x30, 0xb, 0x5, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7ff, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900148004"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.311736614s ago: executing program 2 (id=4433): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x80000000, 0x0, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$XFS_IOC_FSGEOMETRY(0xffffffffffffffff, 0x8100587e, &(0x7f0000001500)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r4, 0x29, 0xb, 0x0, &(0x7f0000000100)) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4401, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xcebc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r12, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4082, 0xff2}], 0x1}, 0x10100) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e0114"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.139526154s ago: executing program 1 (id=4434): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4, 0x4}}}}]}, 0x34}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast2}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 945.87968ms ago: executing program 3 (id=4435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x6002, 0x4, 0x410, 0x218, 0x218, 0x110, 0x328, 0x218, 0x328, 0x4, 0x0, {[{{@arp={@remote, @dev={0xac, 0x14, 0x14, 0xa}, 0xffffff00, 0x0, 0x0, 0xf, {@mac=@remote, {[0x0, 0xff, 0x0, 0x181, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x18, 0x3ff, 0x1, 0x4, 0x1, 0x8, 'syzkaller1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x37c}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f06cc6001e11", @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb4, 'syz1\x00', {0x93bf}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@random="1b00be002004", @local, @local, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x460) r2 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'vcan0\x00', {0x2, 0x4e21, @loopback}}) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000005840)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000006c0)="bb", 0x1}], 0x1}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000600)=ANY=[], 0x10448) (async) write$cgroup_subtree(r4, &(0x7f0000000600)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) connect$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e24, @private=0xa010100}}) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e24, @private=0xa010100}}) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00\x00\x00\x00', 0x4}], 0x1}, 0x0) close(r2) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="7d8756521ee48af4887ec9366ccc3d82b8aebf56242488d1a7f5f98fdc87eefe18bef0dbc16dcd31a245a4c6f18b50db852a4452ebaa149c8b9e499100"/76, @ANYRESHEX=r1], 0x10c}}, 0x0) 881.295999ms ago: executing program 1 (id=4436): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @empty}, &(0x7f0000000080)=0x80) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@empty, @loopback, 0x0}, &(0x7f0000000180)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x700, 0x80, 0x4, 0x1, {{0x32, 0x4, 0x0, 0x0, 0xc8, 0x65, 0x0, 0x7, 0x29, 0x0, @broadcast, @local, {[@cipso={0x86, 0x25, 0x1, [{0x7, 0xc, "dbc94b136341acbf62ef"}, {0x0, 0xd, "7e1d1cf188bb20c91f25ed"}, {0x2, 0x6, "1471aabc"}]}, @ssrr={0x89, 0x7, 0xa2, [@multicast1]}, @timestamp_prespec={0x44, 0x24, 0x26, 0x3, 0x4, [{@remote, 0x5}, {@local, 0x3}, {@multicast1, 0x800}, {@private=0xa010101, 0x7}]}, @timestamp_addr={0x44, 0x14, 0x65, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@broadcast, 0xdd6}]}, @generic={0x44, 0xf, "23541b1063c7ebae86414b0a7c"}, @rr={0x7, 0x13, 0xc2, [@loopback, @remote, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1e}]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x6, "a214ae6f"}, @lsrr={0x83, 0x23, 0xd0, [@empty, @multicast2, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast2, @rand_addr=0x64010100, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x7, 0x700, 0xfffffffd, 0x5, {{0xa, 0x4, 0x2, 0x7, 0x28, 0x65, 0x0, 0xe, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, {[@noop, @rr={0x7, 0xf, 0xe3, [@private=0xa010101, @rand_addr=0x64010101, @multicast1]}, @noop]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0xf0, &(0x7f0000000480)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x25, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x6, 0x6, 0x8, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x7800, 0x8, 0xfffffffb}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000780)={0x0, @multicast1, @dev}, &(0x7f00000007c0)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000800)={@initdev, @initdev, 0x0}, &(0x7f0000000840)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'erspan0\x00', &(0x7f00000008c0)={'erspan0\x00', 0x0, 0x8, 0x8000, 0x239, 0x2, {{0xc, 0x4, 0x1, 0x7, 0x30, 0x68, 0x0, 0x4, 0x2f, 0x0, @multicast1, @local, {[@noop, @cipso={0x86, 0x18, 0x0, [{0x0, 0x2}, {0x6, 0x10, "2e9e189e0c195bce8829f2dd8ebc"}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={0x1, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a80)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000ac0)={@private0, 0x0}, &(0x7f0000000b00)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000e00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b40)={0x25c, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x800) unshare(0x4040000) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, 0xc, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4880}, 0x20000084) syz_genetlink_get_family_id$batadv(&(0x7f0000000f40), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f80)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r16, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x20, r17, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2b}}}}, ["", "", ""]}, 0x20}}, 0x0) r18 = syz_genetlink_get_family_id$gtp(&(0x7f0000001140), r16) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40800}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x48, r18, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FLOW={0x6, 0x6, 0xff}, @GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0x23}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) r19 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendfile(r19, r14, &(0x7f0000001280)=0x1, 0x0) r20 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r20, 0x660c) recvmmsg(r15, &(0x7f0000002a40)=[{{&(0x7f0000001300)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/131, 0x83}, {&(0x7f0000002440)=""/251, 0xfb}, {&(0x7f0000002540)=""/131, 0x83}, {&(0x7f0000002600)=""/151, 0x97}, {&(0x7f00000026c0)=""/233, 0xe9}, {&(0x7f00000027c0)=""/129, 0x81}, {&(0x7f0000002880)=""/27, 0x1b}], 0x8, &(0x7f0000002940)=""/240, 0xf0}, 0xffffffff}], 0x1, 0x10000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000002a80), 0xffffffffffffffff) 762.472317ms ago: executing program 4 (id=4437): syz_emit_ethernet(0x3e, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffffff0800450000300000fe000067907800000000ffffffff21009078e6f734d1aacd3f380000000000000000e0000002e000000000000800"], 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="ec000000110009050000000000000000c000670005d7b8d6aeb2d9c349d02966cfda89913f2dd9a8d43bc958472bc9e8cc099fbba24047c31303123d76781acec7f22a2eba286dde70761bf60bbeb56024e84a3a31af03716ff6dddf9f3fd24dcee0d00fea16ba9fc26d5084415bc549140a0368e7246aac1e1fcd650280eef9c9c4f81aa6e0d4a04dd7e76f951dc5f756"], 0xec}], 0x1}, 0x40040) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xe, 0x11, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x81020000}, {0x65, 0x0, 0x0, 0xfaffff7f}}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5406d938b9200c49, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newsa={0x158, 0x10, 0x413, 0x0, 0x25dfdbfa, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x6}, {@in=@loopback, 0x4d4, 0x32}, @in6=@empty, {0x0, 0x2, 0x5, 0x80000000000000, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0xffffffffffffffff, 0x4}, {0xf6, 0x0, 0x7}, 0x70bd26, 0x0, 0xa, 0x1, 0x9, 0x110}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x60, "ee975d40df06ba7860e09d464fffd622034fe232f7d36eb86a0843"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000300)={&(0x7f0000000200)=""/189, 0xbd, 0x0, &(0x7f00000002c0)=""/8, 0x8}}, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x800452d2, &(0x7f0000000100)) recvfrom$unix(r5, &(0x7f0000000880)=""/4096, 0x1000, 0x12001, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000003c0)={0x0, 0x3c, "e1c170d0fc986ab7e3125e1e00978a62d1f759b98978aec36a86457612c6f56ec2f9a5cafcbec4169ee6e74234312cc2529eeeda0c76ea029fafdc34"}, &(0x7f0000000440)=0x44) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000480)={r10, @in6={{0xa, 0x4e21, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}, 0x9, 0x6, 0x1934, 0x10000, 0xc, 0x1, 0x7}, 0x9c) 719.734073ms ago: executing program 4 (id=4438): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x92fc}}, 0x40010) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, 0x5, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4008804) recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000f00)=""/231, 0xe7}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000001840)=""/4104, 0x1008}, {&(0x7f0000000240)=""/62, 0x3e}], 0x6}, 0x70001}, {{0x0, 0x0, 0x0}, 0xfffffffc}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x77}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0xb}, {{0x0, 0x0, 0x0}, 0x81}], 0x400000000000015, 0x102, 0x0) 674.211803ms ago: executing program 0 (id=4439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket(0x21, 0x800, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c000000ea11c05619e8f4a3ba230e1093aeeaf5e6ce3a1682d1d4b2961f1758a5f01f97caab050eea91e62bb6d0bb7d5064ed76ce911c7035c88eb818b5febe802bd3eee1497165b68065928f45e653fd7bda37f40d68125c1c0767b0444462d6cf89b3f04e296264e0dbe950e2a747972f9e42c460fd7dd839ebf740b8666f5a74373a8527d3e33410bcf687c088ed277ace435b538432a743", @ANYRES16=r2, @ANYBLOB="20002bbd7000fbdbdf2512000000440006803e00040067636d286165732900000000000000000000000000000000000000000000000016000000b100e39f543bb668950f3be2746918b770f186c3e4df00001400038008000200040000000800030046790000"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4011) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000002c00)={&(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}, 0x40) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r4, 0x50) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6, 0x1}]}, 0x10) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r5, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r6, @ANYRES64, @ANYRESDEC=r8], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 627.472727ms ago: executing program 3 (id=4440): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}, @IFLA_VFINFO_LIST={0x4}, @IFLA_LINKMODE={0x5, 0x11, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4600}, 0x24044810) r3 = socket(0x10, 0x803, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 611.154982ms ago: executing program 4 (id=4441): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd2c, 0x24dfcbfb, {0xa, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3000}, [@RTA_PRIORITY={0x8, 0x1e, 0x40006}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4091, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000180)='|Z', 0x2, 0x4010, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000140)="87", 0x1, 0x20004000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000240), 0x8) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x1) 605.876005ms ago: executing program 2 (id=4442): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) socket$kcm(0x10, 0x2, 0x10) (async) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003", @ANYRES32=r0, @ANYRESHEX=r0, @ANYBLOB="97c9f27c1650e7ae398b580c603420846feb148e8d8e713eed5f780ae44ab91aab6202e42d36b41f2b611f71d5244cfa3813824a35cb6e6fdf60bfc461d6bc0287878d375b95efad01d3b2fb4f096ba362e48b0550d8b69abe098a5d0e82ff5d65d3cab16708045d97715822cc93d7f9db560581c7a84a545827d20444bfb9bf15c67cd2c27f525d579fb9bbf7af28b9f78aae560339b3c626d3c72848043300641fab6ef16894336ff55c572c6b55cbb407830ad24a8b44c53178f4e139da6ab85457d549ababd8e0acbb84ae27455d27394c20937bafe81e1ccc1ea7a886d5", @ANYRESDEC=r0], 0xe4}}, 0x20050840) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003", @ANYRES32=r0, @ANYRESHEX=r0, @ANYBLOB="97c9f27c1650e7ae398b580c603420846feb148e8d8e713eed5f780ae44ab91aab6202e42d36b41f2b611f71d5244cfa3813824a35cb6e6fdf60bfc461d6bc0287878d375b95efad01d3b2fb4f096ba362e48b0550d8b69abe098a5d0e82ff5d65d3cab16708045d97715822cc93d7f9db560581c7a84a545827d20444bfb9bf15c67cd2c27f525d579fb9bbf7af28b9f78aae560339b3c626d3c72848043300641fab6ef16894336ff55c572c6b55cbb407830ad24a8b44c53178f4e139da6ab85457d549ababd8e0acbb84ae27455d27394c20937bafe81e1ccc1ea7a886d5", @ANYRESDEC=r0], 0xe4}}, 0x20050840) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0xc5}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x4d2, 0x2b}, 0x0, @in=@empty}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0xc5}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x4d2, 0x2b}, 0x0, @in=@empty}}, 0xe8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000140081044e81f782db46b904021d000025000000040000a118000200ff02000100000e1208000f0100810401a80316ea1f000b40032a5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc000000000000f0660080bb9ad809d5e1cace81b34113b0e3cd4032ecedb12d1d2eb0c0ed0bffa29954e5413f017f", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000140081044e81f782db46b904021d000025000000040000a118000200ff02000100000e1208000f0100810401a80316ea1f000b40032a5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc000000000000f0660080bb9ad809d5e1cace81b34113b0e3cd4032ecedb12d1d2eb0c0ed0bffa29954e5413f017f", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x1d, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000340)={r9, 0x8, 0x25, 0xffffffffffffff11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000340)={r9, 0x8, 0x25, 0xffffffffffffff11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x40) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 470.855802ms ago: executing program 3 (id=4443): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) close(0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) writev(r5, &(0x7f00000003c0)=[{&(0x7f00000000c0)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000040)='\x00\x00', 0x2}], 0x2) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r7, 0x300, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4004894) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xa888, r4, 0x19}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) close(0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000006000000020000002c0084802800018008000100666962001c0002800800024000000001080001400000000008000340000000110900010073797a3000000000090002"], 0x80}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000800000a140000001100010000000000000000000100000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r9, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24000000000b0102000000000000000005000000060001005d0000400800024000000004c404473620e3e6e4c10e14b64b175e2bf77beca88afb1f826f9716cd2eca0fc7f239de10472c70b9dd0ad358dd9385599260f670e67fe59deaf1682ff3b2db08c5ad119c757e1b810de882be27ab9758a51da8e9e992c27ca71cf0a041d7fc00a4a6fdce289000bd749223d0"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4004800) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000301000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) 469.226874ms ago: executing program 0 (id=4444): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0x10, 0xffffffffffffffff, 0x2fd15000) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001fc0)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x22}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0x0, @remote, 0x200}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2400000000000000290000003200000020010000000000000000000000000002d5"], 0x28}}], 0x2, 0x800) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10, 0x800) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f00000000c0)=0x100000000, 0x8) pselect6(0x40, &(0x7f0000000100)={0x90, 0xa5a, 0x100000000, 0x9, 0x5, 0x1, 0x6, 0x1}, &(0x7f0000000340)={0x4, 0x6, 0x40, 0x1, 0x6eedd19a, 0x3, 0x7e3, 0x3}, &(0x7f0000000380)={0x8000, 0x1ff, 0x27f500a4, 0x6, 0x7fffffffffffffff, 0xc, 0x3367, 0xb6}, &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x1]}, 0x8}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4000}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000010}, 0x2004c0d0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000400)={r6}, &(0x7f0000000300)=0x8) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ae9809732758c11270dc97ce7b815bd8c5ac469a56256230d5e14f94f73a14a8d7d50b1ffacf361b3ca30b0df3f4b68d9415df5df75667ea7211eedc1490ee2f1921271ab9ac0d011cfeb20ce5af46118a19b5a4ed3bce462c5e5307546fda52dcc9aae09c6fdaae184b232288b0512f364c19e0a211ee2efa346a01b7f574d9dd266e2f4f4db1faffe8c97783ebc8b8a0ae4af4cbe6951fa0e59925b97d6cd4fe240163d50d8edb6f146aacd61ddcc7c792836f24f8d43a4c07e13898bb7b20999ecaf19f9ef8151b43a02fe3ec467251de6d1c2061", 0xd6) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$MRT_FLUSH(r2, 0x0, 0x22, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x2710}, 0x10) 399.53239ms ago: executing program 2 (id=4445): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_open_procfs$namespace(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xe, 0xfff2}, {0xa, 0xffe1}, {0xfff2, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xb4}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}, @TCA_RATE={0x6, 0x5, {0x2, 0xc1}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x6, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0x638}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004c800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000540), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000580)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r5, &(0x7f0000000980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000006c0)={0x254, r6, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_LLC_SDP={0x190, 0x13, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [{0xb, 0x1, 'vxcan0\x00'}, {0x6, 0x1, '/('}, {0xa, 0x1, 'route\x00'}, {0x16, 0x1, './cgroup.net/syz0\x00'}, {0x5, 0x1, '\x00'}]}, {0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, '['}]}, {0x10, 0x0, 0x0, 0x1, [{0x6, 0x1, '-,'}, {0x4}]}, {0xc, 0x0, 0x0, 0x1, [{0x6, 0x1, '#.'}]}, {0x50, 0x0, 0x0, 0x1, [{0x7, 0x1, ',!-'}, {0x16, 0x1, './cgroup.net/syz0\x00'}, {0x7, 0x1, '-!@'}, {0x1c, 0x1, 'freezer.parent_freezing\x00'}, {0x8, 0x1, '[&[i'}]}, {0x14, 0x0, 0x0, 0x1, [{0xe, 0x1, 'syzkaller\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x9, 0x1, '\xc0]@$@'}, {0x1c, 0x1, 'freezer.parent_freezing\x00'}]}, {0x40, 0x0, 0x0, 0x1, [{0x9, 0x1, ',:*):'}, {0x4}, {0x4}, {0xe, 0x1, 'syzkaller\x00'}, {0x8, 0x1, '/)^$'}, {0xa, 0x1, 'route\x00'}, {0x4}]}, {0x38, 0x0, 0x0, 0x1, [{0x6, 0x1, '&:'}, {0x1c, 0x1, 'freezer.parent_freezing\x00'}, {0xe, 0x1, 'syzkaller\x00'}]}, {0x18, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0xa, 0x1, 'route\x00'}]}]}, @NFC_ATTR_LLC_SDP={0xa0, 0x13, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [{0xf, 0x1, ',\'$[\xa1-!/*#$'}, {0xe, 0x1, 'syzkaller\x00'}, {0x5, 0x1, '{'}]}, {0x70, 0x0, 0x0, 0x1, [{0xe, 0x1, 'syzkaller\x00'}, {0xd, 0x1, '^+&//@-^('}, {0x7, 0x1, '.!}'}, {0xa, 0x1, 'route\x00'}, {0xe, 0x1, 'syzkaller\x00'}, {0xb, 0x1, '^{*^)^*'}, {0xb, 0x1, 'vxcan0\x00'}, {0x6, 0x1, ',$'}, {0x6, 0x1, '*\xfe'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x254}, 0x1, 0x0, 0x0, 0x20008081}, 0x4800) r9 = openat$cgroup_ro(r0, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x0, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r10, 0x107, 0x12, 0x0, &(0x7f0000000240)) preadv(r9, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 357.197888ms ago: executing program 0 (id=4446): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x4000) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x4001, 0x8, @dev={0xfe, 0x80, '\x00', 0x44}, 0xb}, {0xa, 0x4e24, 0x1, @empty, 0x1}, 0x1, {[0x0, 0x0, 0x3, 0x7ff, 0x0, 0x80000000]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x4001, 0x8, @dev={0xfe, 0x80, '\x00', 0x44}, 0xb}, {0xa, 0x4e24, 0x1, @empty, 0x1}, 0x1, {[0x0, 0x0, 0x3, 0x7ff, 0x0, 0x80000000]}}, 0x5c) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=@newtfilter={0x22b4, 0x2c, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x0, 0xb}, {0xa, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0xffff8000}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}, @filter_kind_options=@f_matchall={{0xd}, {0x2270, 0x2, [@TCA_MATCHALL_ACT={0x224c, 0x2, [@m_police={0x21e8, 0x1d, 0x0, 0x0, {{0xb}, {0x2134, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x10001}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x450, 0x1, 0x100, 0x2, 0xe7, 0xbf0e, 0x1, 0x2, 0x3, 0xfff, 0x2, 0x8, 0x2, 0x8, 0x481, 0x4, 0x7, 0x4, 0xd, 0x2f, 0x8, 0x9, 0x1c000, 0x7, 0x7, 0x8, 0x8, 0x7, 0x8, 0x4, 0xf9, 0x5, 0xbc, 0x9e, 0x8001, 0x0, 0x5, 0xfffffff2, 0x3, 0x8001, 0x2, 0x5, 0xcec, 0x6, 0x2, 0x2, 0x81, 0x2, 0x1, 0x4, 0xffff, 0x4, 0x5, 0x60d8a757, 0x3ff, 0xc, 0x19e48623, 0x2, 0x9f63, 0x2035, 0xcd, 0x10000, 0x1, 0x86e, 0x2, 0x8, 0x9, 0x40, 0x7, 0x9, 0x1, 0x6, 0x30, 0x4, 0x6, 0xfa, 0xb3e, 0x4, 0x2, 0xfffffff7, 0x5, 0x8001, 0xff, 0x5, 0x1, 0x3afd, 0x9, 0xfffffff4, 0x9, 0x2, 0x3, 0x4, 0x8, 0x101, 0x1, 0x1ff, 0x1, 0x512a6f9, 0x2, 0x8, 0x0, 0x9, 0x80, 0x4, 0x3, 0x9, 0x864, 0x1, 0xaa12, 0x34, 0x80000001, 0x1, 0x6, 0x5d0, 0xe, 0x0, 0xfffffff7, 0x0, 0x9, 0x5, 0x6, 0x5, 0x1, 0x6, 0x49e6, 0x0, 0x6, 0xd6d, 0x2, 0x8000, 0xffffff00, 0x2, 0x200, 0xfffffffd, 0x9, 0x10000, 0x855b, 0x51, 0x9, 0x7, 0x10001, 0xd3, 0x9, 0xa, 0x1, 0x8, 0x0, 0x7, 0x5, 0x6, 0x2, 0xfffffff7, 0x9, 0x7fff, 0x9, 0x1, 0x7f, 0x6, 0x30, 0x9, 0x6, 0x968, 0x7, 0x2, 0xc7d0, 0x1ff, 0x800, 0x4, 0x9, 0xa71, 0x9, 0x6, 0x0, 0xdb, 0x8, 0x2, 0x7, 0x8, 0x7, 0xffff3483, 0x10, 0x8001, 0x3, 0xbe1, 0x7f, 0x9, 0x8, 0x1ed7, 0x3, 0x1, 0x0, 0x280000, 0xca4, 0xd830000, 0x7, 0x9, 0x8, 0x1, 0x96, 0x2, 0x2, 0xfff, 0x1, 0x80000000, 0x641, 0x7, 0x400, 0x9, 0x2, 0x1ff, 0x0, 0x3ff, 0x80000001, 0x7288b3e7, 0x2, 0x0, 0x8, 0x40, 0x6, 0xa2, 0x3, 0xd, 0x3a48, 0x9, 0x3, 0x1000, 0x4, 0xffffffff, 0x1, 0xc3, 0x7, 0x4, 0x9, 0x80, 0x3, 0x3, 0x70ad, 0x1, 0x4, 0x2, 0x8, 0x9, 0x2, 0x7, 0x2, 0x8, 0x80000001, 0x9, 0x8b, 0x8, 0xffffffff, 0xbe000000, 0x8, 0x2, 0x5c34, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x9, 0xfffffffb, 0x1499, 0x2, 0xff, 0x2, 0x5, 0x400, 0x5, 0x2, 0x3ff, 0x1850, 0x4, 0x0, 0x10, 0x4, 0x80, 0x7, 0x3, 0x1ff, 0x6ae0, 0x1, 0x81, 0x2, 0x8, 0xffffffff, 0x6, 0xc, 0x747, 0x2, 0x0, 0x7, 0x6, 0xd0, 0x4, 0x6abe828d, 0x10001, 0x9, 0x5, 0x0, 0x4, 0xa29f, 0xa, 0xd, 0x80000000, 0x4, 0x4, 0x17a, 0x80000001, 0x1, 0x8, 0x4, 0x7, 0x7, 0xa, 0x3ff, 0x1514, 0x0, 0x800, 0x5, 0x22b6, 0xdf, 0x4, 0x7, 0x9, 0x101, 0x9, 0xfffffffc, 0x8001, 0x8, 0x80000000, 0x4, 0x6, 0x9, 0xfff, 0x0, 0x8, 0x2, 0x800, 0x6, 0x400, 0x6, 0x6, 0xed, 0x8, 0x3, 0x5, 0x6, 0x2, 0x1, 0x80000000, 0x8001, 0x3, 0x1, 0x1000, 0x1, 0x1ff, 0x9, 0x6, 0x521a, 0x1ff, 0x2, 0x4, 0x401, 0xdfed, 0x6, 0x2, 0xfffffff9, 0xb, 0x4, 0x8, 0x200, 0x0, 0x40, 0x80, 0x4, 0x8, 0x3, 0x9, 0x6, 0x25d, 0x478, 0x4, 0x7e, 0x7, 0x315, 0x9, 0x7ff, 0xfffffc01, 0x6, 0x4, 0x7, 0x2, 0x7, 0x6, 0x8, 0x5ce, 0x4, 0x8, 0x407, 0x3, 0x2, 0x2, 0x6, 0x7539e518, 0x7, 0x7db85431, 0x8, 0xa6d, 0x91, 0x0, 0x0, 0x5, 0x3, 0x5, 0x0, 0x2, 0x9, 0x3, 0x7e, 0x4, 0x7fff, 0x7fffffff, 0xfff, 0x3, 0xf23, 0xc17c, 0x5, 0xcd, 0xffff, 0x7, 0x3, 0x81, 0x6, 0x0, 0x8, 0x1, 0x8, 0x29, 0x9, 0x100, 0x2, 0x4, 0x7fffffff, 0x1b, 0x800, 0x3, 0x9, 0xffffffff, 0x0, 0x7fffffff, 0x200, 0x9, 0x7, 0xc, 0x40, 0x7, 0x7ff, 0xc1f, 0x14c0, 0x5, 0xf, 0x0, 0xbc, 0x436, 0x10001, 0x8000, 0x4, 0xffffaa30, 0x80, 0x6, 0x40, 0x2, 0x4, 0x9, 0x100, 0x3, 0x80, 0x169, 0x0, 0x6, 0x4f, 0x5bb, 0x7, 0x80000000, 0xaa8, 0x822, 0x6, 0x1000, 0x3, 0xfffffff7, 0x7, 0xd4, 0x2, 0xffff, 0x8, 0xffffff9b, 0x6, 0xfff, 0x4, 0x400, 0x3e2, 0x3, 0x1d71, 0x1, 0x1, 0x4, 0x2, 0x3, 0x7, 0x8001, 0x9, 0x2, 0xfffffff7, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x3, 0x800, 0x1, 0x8, 0x3, 0x4000000, 0xffffffff, 0x7, 0x5, 0x5, 0x6, 0x1, 0xfffffff7, 0x0, 0x7, 0x8, 0x49, 0x6, 0x6, 0x8, 0x2, 0x5, 0xd, 0xb3f, 0xcb, 0x50, 0x3, 0x401, 0xbb, 0x0, 0x7fffffff, 0xffffff60, 0x2, 0xb, 0x9, 0x5, 0x4, 0x9, 0x2, 0x9, 0x8, 0x69, 0xe005, 0x7, 0x29, 0x0, 0x7, 0x8, 0x4, 0x3, 0x10, 0x4913, 0x15e, 0x93dc, 0x9, 0x100, 0x9, 0xcd, 0x6, 0x0, 0xb5d, 0x30, 0x9, 0x6, 0xfffffff2, 0x6, 0xfffffffa, 0x5, 0x3, 0x80000000, 0x5, 0x3c, 0x8c, 0x0, 0x508b6ba7, 0x3, 0xb, 0x5, 0x8, 0x9000, 0x7, 0x10001, 0x10, 0x4, 0x1, 0x9, 0x4792, 0x1d4, 0x7, 0x0, 0x2, 0x2, 0x4, 0x6, 0x3, 0xffff14e7, 0x6715f408, 0x81, 0x3, 0x2, 0x6, 0x0, 0x7, 0x40000000, 0x0, 0x3, 0xffffffff, 0x40, 0x34e, 0x8, 0xe, 0x7ff, 0x7fffffff, 0x8, 0x0, 0x1, 0x1, 0x1, 0x3a82, 0x101, 0x8, 0x2, 0x1, 0x4, 0x4, 0x1, 0x7, 0x7, 0x1000, 0x3, 0x6, 0x6, 0x80000000, 0x9, 0x4, 0x140, 0x9, 0xc6, 0x8062, 0x8, 0x4, 0x80000000, 0x7, 0x0, 0x0, 0x2, 0xfff, 0x3, 0x8, 0x9, 0x6, 0xb6, 0x0, 0x3, 0x4, 0x2, 0x0, 0x2, 0x3ff, 0x1, 0x7, 0x4, 0x76, 0x3, 0xfffffffe, 0x888, 0xffffff1a, 0x7, 0x1ff, 0x6be3, 0x0, 0xf2bf, 0x80000001, 0xe244, 0x2, 0x1, 0x5, 0x2, 0x6, 0xc89, 0xffffffff, 0x1, 0xbec, 0x9, 0x1, 0xe1d8, 0x0, 0x2, 0x52, 0x80, 0xd853, 0x8, 0x3, 0x804, 0x9, 0xb, 0x9, 0x5, 0x9, 0x8db, 0xc0a1182, 0x62, 0x80000001, 0x80, 0x0, 0x9, 0x92f2, 0x6, 0x4, 0xffff, 0x5, 0xd6f, 0x10, 0xf4, 0x800000, 0x10000, 0x1, 0x401, 0xf, 0x9, 0x80000000, 0x9, 0x100, 0x80000001, 0x9b5f, 0x1, 0x6, 0x417e, 0x9, 0x400, 0x9, 0xa, 0xfff, 0x1, 0x1, 0x4, 0x6d, 0x88b0, 0x0, 0x0, 0x3, 0x5, 0x5, 0x5, 0xa06, 0x1ca7, 0xd, 0xb, 0x10000, 0x1, 0x9, 0x1, 0x1, 0xae, 0x8]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x1, 0xfffffff1, 0xff, 0x6, {0x8, 0x2, 0x9, 0xaa, 0x8, 0x2}, {0x9, 0x0, 0x2, 0x7, 0x0, 0x2}, 0x1, 0x8, 0x1}}, @TCA_POLICE_RATE={0x404, 0x2, [0x81, 0x5, 0xd80, 0xeeb, 0x4, 0x7, 0x9, 0x9, 0x6, 0x1, 0x9, 0x3, 0x10001, 0xe, 0x2, 0x4ae, 0xf, 0xa, 0x401, 0x7ff, 0x5, 0xe, 0x8, 0x60, 0x4, 0x4, 0x9, 0xfffffffc, 0xb, 0x7, 0x1, 0x9, 0x4c, 0x9b, 0x8, 0x6, 0xa, 0x200, 0x559, 0x9, 0x1, 0x8, 0x40, 0x0, 0x4, 0x8, 0x5, 0x7f, 0x2, 0xd8d2, 0x2ea3, 0x8c, 0x7ff, 0xffffc17a, 0x6, 0x2, 0x80000000, 0x8, 0xfff, 0x7, 0x9, 0x5, 0x4, 0x8, 0x2, 0x5, 0x0, 0x2, 0x4, 0x845, 0x4, 0x2, 0x2, 0x0, 0x800, 0x101, 0x77, 0x70fa, 0xfffffffb, 0x33c7, 0x0, 0x7, 0x1, 0x664, 0x2, 0xfffffff5, 0x48, 0x7, 0x2, 0x2, 0x8, 0x2, 0xfffffff9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x8, 0xb, 0x57b, 0xb, 0x3, 0x2, 0x5, 0xab5, 0x7, 0x3, 0x8, 0x52cc, 0x1ff, 0x4, 0x3bd, 0x5, 0x9, 0x9, 0x0, 0x28000, 0x2, 0x5, 0xffff, 0x4, 0x7f, 0xffff, 0x6, 0x2, 0x6, 0x7, 0x4, 0x7, 0x2, 0x7ff, 0x0, 0x4, 0x1e24aae6, 0x2d, 0x0, 0x7d44, 0x8, 0xe0b, 0x800, 0x7fff, 0x1, 0x3806, 0x4, 0x47, 0x7, 0x6, 0xfff, 0x9b, 0x5, 0x5, 0x7, 0x8, 0x400, 0x660, 0x8, 0xa0, 0x3ff, 0x8, 0x4, 0xffff, 0x0, 0x4, 0x5, 0x9, 0x1, 0xfffffff7, 0xd, 0x9, 0x4, 0xef, 0x7, 0xfffffffe, 0x9f0a0000, 0x4, 0x7, 0x0, 0x4, 0x9, 0x3, 0x0, 0xd, 0x1, 0x5, 0x7ff2, 0xd67, 0x5, 0x5, 0x3, 0x101, 0x0, 0x8, 0x7, 0x200, 0x1b, 0x80000000, 0x8, 0x5, 0x1, 0x0, 0x9, 0x5, 0x8, 0xd, 0x9, 0xffffffff, 0x40a, 0xbe1d, 0x521, 0xdd, 0x80, 0x3, 0xa352, 0x3, 0x5, 0x2, 0x1000, 0xfffffe00, 0x7, 0x6, 0x4, 0x4, 0x1, 0x6, 0x5, 0x73b8, 0x24d, 0xfffffffb, 0x7fffffff, 0xf, 0x9, 0xfc0, 0x2, 0x5, 0x5, 0x200, 0x3, 0x4, 0x1, 0x2, 0x7, 0x4, 0x0, 0x132b, 0x7, 0x2, 0x8, 0x8, 0x6, 0x5, 0xe, 0x5, 0x5, 0x8b]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xb4af, 0x0, 0x15, 0x6, 0x10001, {0x7, 0x1, 0xa, 0x0, 0x2, 0x7ff}, {0x7, 0x2, 0x7, 0x63fa, 0x55, 0x6}, 0x8, 0x4a61, 0x3}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x8, 0x81, 0x1f, 0x420f600, 0x3, 0x1, 0x0, 0x8, 0xf, 0x9, 0x6, 0x6, 0x5, 0x3, 0x200, 0x9, 0x6, 0xce, 0x8001, 0x9, 0x4, 0x80000000, 0x4, 0x3, 0x8e41, 0x1673, 0xff, 0x5, 0x169, 0xc04, 0x2, 0x101, 0xffffffff, 0xc, 0x3, 0xf, 0x1a, 0x1, 0x9, 0x4, 0x3d7c, 0xfffffff8, 0xf87, 0x4, 0x2, 0x8, 0xd, 0x80000001, 0x6, 0x9, 0x7, 0x3, 0x5, 0x4, 0x4, 0x53, 0x5, 0x400, 0x2, 0x76c, 0xa, 0x7, 0x4800, 0x1, 0x9, 0xf06a, 0x7, 0x7, 0x7, 0x1, 0x0, 0x1, 0x80000000, 0x3, 0x8000, 0xffffffff, 0xfdd, 0x80000000, 0x1f70, 0x314, 0x5, 0x55a6, 0x1, 0x6, 0x1664, 0x46c, 0x0, 0x9, 0x52d4, 0x80000000, 0xff, 0x8, 0xfffffffb, 0x101, 0x3, 0x4, 0xfff, 0x8, 0x8001, 0x2, 0x29, 0x6, 0x71f, 0x87, 0x8, 0x8, 0x4, 0x38404d02, 0xa751, 0x2, 0x7fff, 0x3, 0x9, 0x1a11f565, 0x6, 0x1, 0x5, 0x200, 0x1a9, 0x1, 0x5, 0x613, 0x90, 0x18000, 0xfff, 0x9, 0x100, 0x7, 0x925, 0x80000000, 0xd, 0x50, 0x400, 0x10000, 0xfffffffb, 0x9, 0x1c, 0x89290486, 0xfffffff8, 0x2, 0x2, 0x7, 0x1, 0x340, 0x9, 0x3, 0x9, 0x9, 0x200, 0x7, 0x10001, 0xcf, 0xfffffff8, 0x7f, 0x4, 0x9, 0x7, 0x9, 0x1e00, 0x4, 0x2, 0x1, 0x3, 0x10, 0x4eb058b1, 0x80000, 0x80000001, 0x8, 0x7, 0x0, 0xd71b, 0x6278, 0x0, 0x8, 0x1000, 0x5, 0x55, 0x1, 0xd4e, 0x2, 0xd, 0x4, 0x0, 0x7, 0x4, 0x97, 0x78678194, 0x1, 0x2, 0xcb1, 0x1, 0x2, 0x1, 0x9, 0x737, 0x40b, 0x100, 0x0, 0x7f, 0xfffffffe, 0x7fff, 0x18000000, 0x0, 0x200, 0x800, 0xf9b, 0x924e, 0x889, 0x7, 0x1, 0x838a, 0x3, 0x670b9614, 0x7, 0x2, 0x5, 0x3, 0x6, 0x4, 0x9332, 0x59bc4c82, 0x5, 0xffffff6f, 0x3c, 0x7fffffff, 0x3ee, 0x1, 0x0, 0x9, 0x3, 0xef, 0x10001, 0x10, 0x6, 0xcea, 0xd, 0x5, 0x1, 0x6, 0xd, 0x101, 0x81, 0x9, 0x22, 0x8, 0x8, 0x4, 0x9, 0x4, 0x0, 0x4, 0xffffff4e, 0x8, 0x80, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xcb6f, 0x80, 0x327c, 0x3, 0xc0ab, 0xfffffe01, 0x6, 0xf9ae, 0x30, 0x6, 0x5, 0x6, 0x800, 0x1, 0x200, 0x2, 0x10000, 0x5, 0x101, 0x7, 0x2, 0x9, 0xb78, 0x0, 0x80, 0x8001, 0x2, 0xf1a, 0x1000, 0x401, 0x8, 0x7, 0xa, 0x98, 0xfffffba0, 0x8, 0xffff, 0x3a3, 0x100, 0x7, 0x7fff, 0x8, 0x101, 0x3ed82d78, 0x7fff, 0xffffbf54, 0xf171, 0x1, 0x4, 0xfffff0c3, 0x8, 0x88000, 0x7, 0x80, 0x4, 0x6, 0x2, 0xe24, 0x60000000, 0xfffff2b8, 0xffffffff, 0x4, 0x4, 0xff, 0x6, 0xfffffffa, 0x9f, 0x8ddc, 0x8, 0x800, 0x9, 0x3, 0x9, 0x55e, 0x0, 0x0, 0xfffffffc, 0xe83, 0x401, 0x8, 0xff, 0x10003, 0x1, 0x9, 0x7, 0xfff, 0xfffffffb, 0x0, 0xe3b, 0x1, 0x7, 0xffffffff, 0x6, 0x40, 0x4b, 0x3, 0x9, 0x849a, 0x2, 0x0, 0x9, 0x80000000, 0x7, 0x4, 0xfffffffc, 0x401, 0x8, 0x800, 0x800, 0x0, 0x0, 0x1, 0xa, 0x2, 0x10000, 0x3ff, 0x2f1, 0x7ab5ae80, 0x9, 0x10001, 0x4, 0x98a, 0xb037affa, 0x652, 0x9, 0x8, 0x8, 0xfdbb, 0x0, 0x7f, 0x6, 0x3, 0x4, 0x5a28, 0x8, 0x0, 0x6cf, 0x7, 0x8, 0x7, 0x6, 0x3, 0x5, 0xabb, 0x101, 0x9, 0x4, 0x9, 0x4, 0x32, 0x4, 0x999f, 0x5, 0x6, 0xd1, 0xd81, 0x7, 0x3, 0x1, 0xc, 0x8, 0x7, 0x618, 0x8, 0x31e, 0xffffffff, 0x6, 0x9, 0xfffffffb, 0x0, 0xe, 0x3949, 0x400, 0x9, 0xb4, 0xfffffffd, 0x3, 0x2, 0x5, 0x2, 0x88, 0x6, 0x7fec, 0xffffffff, 0x401, 0x0, 0x1ff, 0x1000, 0x1, 0x0, 0x7fff, 0x1000, 0x6, 0xe25f, 0x5, 0x9, 0x5, 0xfffffffd, 0x7, 0x3, 0x0, 0x7, 0x1, 0x3, 0x3, 0x6, 0x685, 0x432, 0x6, 0x100, 0x0, 0x3fd0, 0xd, 0xffff, 0xffffffff, 0x5448, 0x10000000, 0xbe, 0xa49, 0x0, 0x6, 0x4, 0x7, 0x80000000, 0x7, 0xfffffff2, 0xb6, 0x5, 0x0, 0xf11, 0x0, 0x1, 0x4, 0x7, 0x56, 0x8, 0x1000, 0x4, 0x1, 0x7f, 0x2d1f, 0x9, 0x1, 0x80000000, 0x7, 0x5, 0x7, 0x9, 0x4, 0x5, 0xfaf, 0xd, 0xd4c, 0x9, 0x6]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0x0, 0x1, 0x1, 0x5, 0x5, 0x1, 0xcb7, 0x5, 0x2, 0xe, 0x1, 0x2, 0x200, 0xd6, 0xfffffffa, 0x401, 0x6, 0x3, 0x7, 0x0, 0x7bc, 0xee, 0xd, 0xe70c, 0x7, 0x3, 0x4, 0x7, 0x9, 0x76f9, 0x1, 0x1, 0x6, 0x4, 0x3, 0x1, 0x1, 0x5, 0x0, 0x7, 0xfa43, 0x7fff, 0xffffffff, 0x0, 0x4, 0x7, 0x4, 0x6, 0x4, 0x5, 0x5, 0x81, 0x4, 0x6, 0x0, 0x4, 0x9000, 0x2ff, 0x5, 0x2, 0x5, 0x1, 0x3, 0x8000, 0x2, 0xd, 0x700, 0x3c0, 0x3, 0x87, 0x8, 0xb, 0x2, 0x5, 0x4, 0xb1f0, 0x2, 0x3, 0x9, 0x100, 0x3, 0x2, 0x6, 0x1ff, 0x7, 0x9, 0x0, 0x7, 0xfffffff5, 0x77, 0x80000000, 0x4, 0xfffffff0, 0xd, 0x6, 0x8, 0xae7, 0x3892050, 0x3, 0x8, 0x0, 0x4, 0x0, 0x80, 0x50e9c556, 0x4, 0xd01, 0x6, 0x8, 0xfffffff9, 0x7, 0x3ff, 0x7, 0x6, 0x3, 0x0, 0x7, 0x7, 0x0, 0x1, 0x40, 0x5, 0x3, 0x2, 0x616, 0xe, 0x4, 0x9, 0x2, 0xffffffff, 0x2, 0x8, 0x4, 0x0, 0xc, 0x7, 0x1ff, 0x401, 0xc, 0x7f, 0x0, 0x3ff, 0x6, 0x47d4b20b, 0x6, 0x7fff, 0x7, 0x401, 0xc0000000, 0x9, 0x8001, 0x80000000, 0x800, 0xffff, 0x6, 0x8001, 0xffff, 0x8, 0x6, 0x0, 0x1, 0x10001, 0x6, 0x5, 0x4, 0xfff, 0x3, 0x7f, 0x5, 0x8, 0x70000, 0x4, 0x4d16445a, 0x10000, 0x7f, 0x6, 0x401, 0x0, 0x2, 0x0, 0x0, 0x327, 0x6, 0x7fff, 0x4, 0x4, 0x4, 0x0, 0xb6f, 0x9, 0x9, 0x1, 0x6, 0x4, 0x80000000, 0x2, 0x2, 0xa, 0x401, 0x9, 0x5, 0x1, 0x2, 0x7f, 0x80000000, 0x4, 0x692, 0x3, 0x2, 0x7, 0x9, 0xed63, 0xb5f8, 0x7, 0x80, 0x6, 0x80000000, 0x5, 0x2, 0x3, 0x80000000, 0x8, 0x2, 0x7, 0x2, 0x0, 0x7, 0x2020000, 0x7, 0x5, 0x8001, 0x0, 0x8, 0x3, 0x7, 0xff, 0xfff, 0x7, 0x7, 0x7, 0x2, 0x45, 0x8, 0x3, 0x3, 0x9a, 0x3, 0xf1f, 0x1, 0x1, 0x962, 0x9, 0xd1b, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0x7, 0x93, 0x1, 0x400, 0x7, 0xfffff001, 0x5cd2, 0x14, 0x2, 0x6, 0x7668, 0x9, 0x7, 0x67b5, 0x3, 0x9, 0x7fffffff, 0x0, 0x8548, 0x5, 0xe, 0x4, 0x5, 0xfff, 0x4d, 0x2bc49f5a, 0x9, 0x6, 0x9, 0x6, 0x4, 0xffffffff, 0xba, 0xa00, 0x7, 0x140, 0x6, 0xfff, 0x8001, 0x528d4541, 0x98, 0xfffffff7, 0x7, 0x7, 0x401, 0x9, 0x5, 0x5, 0x6, 0xef5, 0x1, 0x8, 0xffffffff, 0x1, 0x4, 0x5, 0x9, 0x77b7, 0x0, 0x7, 0x7, 0x200, 0xb, 0x800, 0xffffffff, 0x7fffffff, 0x7070, 0x200, 0x3, 0x3, 0x7, 0x3, 0x1a0b, 0x9, 0x74, 0x5885, 0x9, 0xdb5f, 0x4, 0x1d0d0003, 0x2, 0xa, 0x0, 0x3, 0xed, 0x4, 0x3, 0x0, 0x3, 0x6, 0x3, 0x3a4c, 0x2, 0x5, 0x2, 0x0, 0xc, 0x7, 0xea, 0x5, 0xae0, 0x4, 0x4, 0x40, 0x8, 0x10001, 0x58f5, 0x8, 0x5, 0x6, 0x7ff, 0x9, 0x8, 0x9, 0xc75a, 0x3, 0x427, 0x3, 0x0, 0x553, 0x8, 0x9, 0x1000, 0x800, 0x91e8, 0xc, 0xaadc, 0x7, 0xfffffffb, 0x7, 0x2008000, 0xd, 0xa05, 0x5, 0x1, 0x1, 0x7788, 0x7, 0x6, 0x3, 0x1, 0x1ff, 0x9, 0xfffffffc, 0x3, 0xd, 0x8, 0x101, 0x5, 0x924, 0x3ff, 0x2, 0xe, 0x118a, 0xa6, 0x9, 0x8001, 0xfe, 0x8, 0x3, 0x4, 0x6, 0x2, 0xe7c, 0x3, 0x5074, 0x5, 0x8000, 0x7, 0x7, 0x40, 0x0, 0x7fffffff, 0x0, 0x3, 0x7, 0x4, 0x5, 0xbe, 0x1ff, 0x3, 0x401, 0x3, 0xff, 0xd, 0xffff5b36, 0x10, 0xa, 0x2, 0x9fba, 0x4, 0xbe1f, 0x4, 0x20000007, 0xfffffffe, 0x8, 0x1, 0x9, 0x7, 0x757, 0x8, 0x1e81, 0x8, 0x1, 0xfffffffe, 0x1, 0xfffffffd, 0x1, 0x8, 0x100, 0x5, 0x8, 0x5, 0x15, 0x401, 0xa2, 0x6, 0x4, 0x7b, 0x9, 0x1, 0xf, 0x1ff, 0x1, 0x120, 0xff800, 0x10, 0xc, 0x2, 0x0, 0x8, 0x1, 0x0, 0x6, 0x6, 0x8001, 0x1, 0xf, 0x0, 0x5, 0x2, 0x0, 0x6, 0x80000000, 0x2, 0x3, 0x6, 0x3, 0x7fff, 0x5, 0x6, 0x80000000, 0x3, 0x4, 0x9]}]]}, {0x8b, 0x6, "ab1b8c155f75a1416d8e06055ce5bffa2ba72558e144a9b60a126deb04c0d5016aaef430c2391bbb83f3f7b677f611f49ce328d258fb4bae7c8a714082639b0e07f552547a57c16c10c4e60f43e27ec56df299b7d7ef557b7ec9bf2b0a6a56b1bd3910facbfcf26452ab50bf76f179b4ceda80b36dd372ad3dd2ef5acc88ca60b3447dc8b091b4"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x60, 0xa, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xa699b}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88f5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8917}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}]}, {0xa, 0x6, "aeb809e9e356"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x13, 0xfff2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xffe0}}]}}]}, 0x22b4}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=@newtfilter={0x22b4, 0x2c, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x0, 0xb}, {0xa, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0xffff8000}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}, @filter_kind_options=@f_matchall={{0xd}, {0x2270, 0x2, [@TCA_MATCHALL_ACT={0x224c, 0x2, [@m_police={0x21e8, 0x1d, 0x0, 0x0, {{0xb}, {0x2134, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x10001}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x450, 0x1, 0x100, 0x2, 0xe7, 0xbf0e, 0x1, 0x2, 0x3, 0xfff, 0x2, 0x8, 0x2, 0x8, 0x481, 0x4, 0x7, 0x4, 0xd, 0x2f, 0x8, 0x9, 0x1c000, 0x7, 0x7, 0x8, 0x8, 0x7, 0x8, 0x4, 0xf9, 0x5, 0xbc, 0x9e, 0x8001, 0x0, 0x5, 0xfffffff2, 0x3, 0x8001, 0x2, 0x5, 0xcec, 0x6, 0x2, 0x2, 0x81, 0x2, 0x1, 0x4, 0xffff, 0x4, 0x5, 0x60d8a757, 0x3ff, 0xc, 0x19e48623, 0x2, 0x9f63, 0x2035, 0xcd, 0x10000, 0x1, 0x86e, 0x2, 0x8, 0x9, 0x40, 0x7, 0x9, 0x1, 0x6, 0x30, 0x4, 0x6, 0xfa, 0xb3e, 0x4, 0x2, 0xfffffff7, 0x5, 0x8001, 0xff, 0x5, 0x1, 0x3afd, 0x9, 0xfffffff4, 0x9, 0x2, 0x3, 0x4, 0x8, 0x101, 0x1, 0x1ff, 0x1, 0x512a6f9, 0x2, 0x8, 0x0, 0x9, 0x80, 0x4, 0x3, 0x9, 0x864, 0x1, 0xaa12, 0x34, 0x80000001, 0x1, 0x6, 0x5d0, 0xe, 0x0, 0xfffffff7, 0x0, 0x9, 0x5, 0x6, 0x5, 0x1, 0x6, 0x49e6, 0x0, 0x6, 0xd6d, 0x2, 0x8000, 0xffffff00, 0x2, 0x200, 0xfffffffd, 0x9, 0x10000, 0x855b, 0x51, 0x9, 0x7, 0x10001, 0xd3, 0x9, 0xa, 0x1, 0x8, 0x0, 0x7, 0x5, 0x6, 0x2, 0xfffffff7, 0x9, 0x7fff, 0x9, 0x1, 0x7f, 0x6, 0x30, 0x9, 0x6, 0x968, 0x7, 0x2, 0xc7d0, 0x1ff, 0x800, 0x4, 0x9, 0xa71, 0x9, 0x6, 0x0, 0xdb, 0x8, 0x2, 0x7, 0x8, 0x7, 0xffff3483, 0x10, 0x8001, 0x3, 0xbe1, 0x7f, 0x9, 0x8, 0x1ed7, 0x3, 0x1, 0x0, 0x280000, 0xca4, 0xd830000, 0x7, 0x9, 0x8, 0x1, 0x96, 0x2, 0x2, 0xfff, 0x1, 0x80000000, 0x641, 0x7, 0x400, 0x9, 0x2, 0x1ff, 0x0, 0x3ff, 0x80000001, 0x7288b3e7, 0x2, 0x0, 0x8, 0x40, 0x6, 0xa2, 0x3, 0xd, 0x3a48, 0x9, 0x3, 0x1000, 0x4, 0xffffffff, 0x1, 0xc3, 0x7, 0x4, 0x9, 0x80, 0x3, 0x3, 0x70ad, 0x1, 0x4, 0x2, 0x8, 0x9, 0x2, 0x7, 0x2, 0x8, 0x80000001, 0x9, 0x8b, 0x8, 0xffffffff, 0xbe000000, 0x8, 0x2, 0x5c34, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x9, 0xfffffffb, 0x1499, 0x2, 0xff, 0x2, 0x5, 0x400, 0x5, 0x2, 0x3ff, 0x1850, 0x4, 0x0, 0x10, 0x4, 0x80, 0x7, 0x3, 0x1ff, 0x6ae0, 0x1, 0x81, 0x2, 0x8, 0xffffffff, 0x6, 0xc, 0x747, 0x2, 0x0, 0x7, 0x6, 0xd0, 0x4, 0x6abe828d, 0x10001, 0x9, 0x5, 0x0, 0x4, 0xa29f, 0xa, 0xd, 0x80000000, 0x4, 0x4, 0x17a, 0x80000001, 0x1, 0x8, 0x4, 0x7, 0x7, 0xa, 0x3ff, 0x1514, 0x0, 0x800, 0x5, 0x22b6, 0xdf, 0x4, 0x7, 0x9, 0x101, 0x9, 0xfffffffc, 0x8001, 0x8, 0x80000000, 0x4, 0x6, 0x9, 0xfff, 0x0, 0x8, 0x2, 0x800, 0x6, 0x400, 0x6, 0x6, 0xed, 0x8, 0x3, 0x5, 0x6, 0x2, 0x1, 0x80000000, 0x8001, 0x3, 0x1, 0x1000, 0x1, 0x1ff, 0x9, 0x6, 0x521a, 0x1ff, 0x2, 0x4, 0x401, 0xdfed, 0x6, 0x2, 0xfffffff9, 0xb, 0x4, 0x8, 0x200, 0x0, 0x40, 0x80, 0x4, 0x8, 0x3, 0x9, 0x6, 0x25d, 0x478, 0x4, 0x7e, 0x7, 0x315, 0x9, 0x7ff, 0xfffffc01, 0x6, 0x4, 0x7, 0x2, 0x7, 0x6, 0x8, 0x5ce, 0x4, 0x8, 0x407, 0x3, 0x2, 0x2, 0x6, 0x7539e518, 0x7, 0x7db85431, 0x8, 0xa6d, 0x91, 0x0, 0x0, 0x5, 0x3, 0x5, 0x0, 0x2, 0x9, 0x3, 0x7e, 0x4, 0x7fff, 0x7fffffff, 0xfff, 0x3, 0xf23, 0xc17c, 0x5, 0xcd, 0xffff, 0x7, 0x3, 0x81, 0x6, 0x0, 0x8, 0x1, 0x8, 0x29, 0x9, 0x100, 0x2, 0x4, 0x7fffffff, 0x1b, 0x800, 0x3, 0x9, 0xffffffff, 0x0, 0x7fffffff, 0x200, 0x9, 0x7, 0xc, 0x40, 0x7, 0x7ff, 0xc1f, 0x14c0, 0x5, 0xf, 0x0, 0xbc, 0x436, 0x10001, 0x8000, 0x4, 0xffffaa30, 0x80, 0x6, 0x40, 0x2, 0x4, 0x9, 0x100, 0x3, 0x80, 0x169, 0x0, 0x6, 0x4f, 0x5bb, 0x7, 0x80000000, 0xaa8, 0x822, 0x6, 0x1000, 0x3, 0xfffffff7, 0x7, 0xd4, 0x2, 0xffff, 0x8, 0xffffff9b, 0x6, 0xfff, 0x4, 0x400, 0x3e2, 0x3, 0x1d71, 0x1, 0x1, 0x4, 0x2, 0x3, 0x7, 0x8001, 0x9, 0x2, 0xfffffff7, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x3, 0x800, 0x1, 0x8, 0x3, 0x4000000, 0xffffffff, 0x7, 0x5, 0x5, 0x6, 0x1, 0xfffffff7, 0x0, 0x7, 0x8, 0x49, 0x6, 0x6, 0x8, 0x2, 0x5, 0xd, 0xb3f, 0xcb, 0x50, 0x3, 0x401, 0xbb, 0x0, 0x7fffffff, 0xffffff60, 0x2, 0xb, 0x9, 0x5, 0x4, 0x9, 0x2, 0x9, 0x8, 0x69, 0xe005, 0x7, 0x29, 0x0, 0x7, 0x8, 0x4, 0x3, 0x10, 0x4913, 0x15e, 0x93dc, 0x9, 0x100, 0x9, 0xcd, 0x6, 0x0, 0xb5d, 0x30, 0x9, 0x6, 0xfffffff2, 0x6, 0xfffffffa, 0x5, 0x3, 0x80000000, 0x5, 0x3c, 0x8c, 0x0, 0x508b6ba7, 0x3, 0xb, 0x5, 0x8, 0x9000, 0x7, 0x10001, 0x10, 0x4, 0x1, 0x9, 0x4792, 0x1d4, 0x7, 0x0, 0x2, 0x2, 0x4, 0x6, 0x3, 0xffff14e7, 0x6715f408, 0x81, 0x3, 0x2, 0x6, 0x0, 0x7, 0x40000000, 0x0, 0x3, 0xffffffff, 0x40, 0x34e, 0x8, 0xe, 0x7ff, 0x7fffffff, 0x8, 0x0, 0x1, 0x1, 0x1, 0x3a82, 0x101, 0x8, 0x2, 0x1, 0x4, 0x4, 0x1, 0x7, 0x7, 0x1000, 0x3, 0x6, 0x6, 0x80000000, 0x9, 0x4, 0x140, 0x9, 0xc6, 0x8062, 0x8, 0x4, 0x80000000, 0x7, 0x0, 0x0, 0x2, 0xfff, 0x3, 0x8, 0x9, 0x6, 0xb6, 0x0, 0x3, 0x4, 0x2, 0x0, 0x2, 0x3ff, 0x1, 0x7, 0x4, 0x76, 0x3, 0xfffffffe, 0x888, 0xffffff1a, 0x7, 0x1ff, 0x6be3, 0x0, 0xf2bf, 0x80000001, 0xe244, 0x2, 0x1, 0x5, 0x2, 0x6, 0xc89, 0xffffffff, 0x1, 0xbec, 0x9, 0x1, 0xe1d8, 0x0, 0x2, 0x52, 0x80, 0xd853, 0x8, 0x3, 0x804, 0x9, 0xb, 0x9, 0x5, 0x9, 0x8db, 0xc0a1182, 0x62, 0x80000001, 0x80, 0x0, 0x9, 0x92f2, 0x6, 0x4, 0xffff, 0x5, 0xd6f, 0x10, 0xf4, 0x800000, 0x10000, 0x1, 0x401, 0xf, 0x9, 0x80000000, 0x9, 0x100, 0x80000001, 0x9b5f, 0x1, 0x6, 0x417e, 0x9, 0x400, 0x9, 0xa, 0xfff, 0x1, 0x1, 0x4, 0x6d, 0x88b0, 0x0, 0x0, 0x3, 0x5, 0x5, 0x5, 0xa06, 0x1ca7, 0xd, 0xb, 0x10000, 0x1, 0x9, 0x1, 0x1, 0xae, 0x8]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x1, 0xfffffff1, 0xff, 0x6, {0x8, 0x2, 0x9, 0xaa, 0x8, 0x2}, {0x9, 0x0, 0x2, 0x7, 0x0, 0x2}, 0x1, 0x8, 0x1}}, @TCA_POLICE_RATE={0x404, 0x2, [0x81, 0x5, 0xd80, 0xeeb, 0x4, 0x7, 0x9, 0x9, 0x6, 0x1, 0x9, 0x3, 0x10001, 0xe, 0x2, 0x4ae, 0xf, 0xa, 0x401, 0x7ff, 0x5, 0xe, 0x8, 0x60, 0x4, 0x4, 0x9, 0xfffffffc, 0xb, 0x7, 0x1, 0x9, 0x4c, 0x9b, 0x8, 0x6, 0xa, 0x200, 0x559, 0x9, 0x1, 0x8, 0x40, 0x0, 0x4, 0x8, 0x5, 0x7f, 0x2, 0xd8d2, 0x2ea3, 0x8c, 0x7ff, 0xffffc17a, 0x6, 0x2, 0x80000000, 0x8, 0xfff, 0x7, 0x9, 0x5, 0x4, 0x8, 0x2, 0x5, 0x0, 0x2, 0x4, 0x845, 0x4, 0x2, 0x2, 0x0, 0x800, 0x101, 0x77, 0x70fa, 0xfffffffb, 0x33c7, 0x0, 0x7, 0x1, 0x664, 0x2, 0xfffffff5, 0x48, 0x7, 0x2, 0x2, 0x8, 0x2, 0xfffffff9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x8, 0xb, 0x57b, 0xb, 0x3, 0x2, 0x5, 0xab5, 0x7, 0x3, 0x8, 0x52cc, 0x1ff, 0x4, 0x3bd, 0x5, 0x9, 0x9, 0x0, 0x28000, 0x2, 0x5, 0xffff, 0x4, 0x7f, 0xffff, 0x6, 0x2, 0x6, 0x7, 0x4, 0x7, 0x2, 0x7ff, 0x0, 0x4, 0x1e24aae6, 0x2d, 0x0, 0x7d44, 0x8, 0xe0b, 0x800, 0x7fff, 0x1, 0x3806, 0x4, 0x47, 0x7, 0x6, 0xfff, 0x9b, 0x5, 0x5, 0x7, 0x8, 0x400, 0x660, 0x8, 0xa0, 0x3ff, 0x8, 0x4, 0xffff, 0x0, 0x4, 0x5, 0x9, 0x1, 0xfffffff7, 0xd, 0x9, 0x4, 0xef, 0x7, 0xfffffffe, 0x9f0a0000, 0x4, 0x7, 0x0, 0x4, 0x9, 0x3, 0x0, 0xd, 0x1, 0x5, 0x7ff2, 0xd67, 0x5, 0x5, 0x3, 0x101, 0x0, 0x8, 0x7, 0x200, 0x1b, 0x80000000, 0x8, 0x5, 0x1, 0x0, 0x9, 0x5, 0x8, 0xd, 0x9, 0xffffffff, 0x40a, 0xbe1d, 0x521, 0xdd, 0x80, 0x3, 0xa352, 0x3, 0x5, 0x2, 0x1000, 0xfffffe00, 0x7, 0x6, 0x4, 0x4, 0x1, 0x6, 0x5, 0x73b8, 0x24d, 0xfffffffb, 0x7fffffff, 0xf, 0x9, 0xfc0, 0x2, 0x5, 0x5, 0x200, 0x3, 0x4, 0x1, 0x2, 0x7, 0x4, 0x0, 0x132b, 0x7, 0x2, 0x8, 0x8, 0x6, 0x5, 0xe, 0x5, 0x5, 0x8b]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xb4af, 0x0, 0x15, 0x6, 0x10001, {0x7, 0x1, 0xa, 0x0, 0x2, 0x7ff}, {0x7, 0x2, 0x7, 0x63fa, 0x55, 0x6}, 0x8, 0x4a61, 0x3}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x8, 0x81, 0x1f, 0x420f600, 0x3, 0x1, 0x0, 0x8, 0xf, 0x9, 0x6, 0x6, 0x5, 0x3, 0x200, 0x9, 0x6, 0xce, 0x8001, 0x9, 0x4, 0x80000000, 0x4, 0x3, 0x8e41, 0x1673, 0xff, 0x5, 0x169, 0xc04, 0x2, 0x101, 0xffffffff, 0xc, 0x3, 0xf, 0x1a, 0x1, 0x9, 0x4, 0x3d7c, 0xfffffff8, 0xf87, 0x4, 0x2, 0x8, 0xd, 0x80000001, 0x6, 0x9, 0x7, 0x3, 0x5, 0x4, 0x4, 0x53, 0x5, 0x400, 0x2, 0x76c, 0xa, 0x7, 0x4800, 0x1, 0x9, 0xf06a, 0x7, 0x7, 0x7, 0x1, 0x0, 0x1, 0x80000000, 0x3, 0x8000, 0xffffffff, 0xfdd, 0x80000000, 0x1f70, 0x314, 0x5, 0x55a6, 0x1, 0x6, 0x1664, 0x46c, 0x0, 0x9, 0x52d4, 0x80000000, 0xff, 0x8, 0xfffffffb, 0x101, 0x3, 0x4, 0xfff, 0x8, 0x8001, 0x2, 0x29, 0x6, 0x71f, 0x87, 0x8, 0x8, 0x4, 0x38404d02, 0xa751, 0x2, 0x7fff, 0x3, 0x9, 0x1a11f565, 0x6, 0x1, 0x5, 0x200, 0x1a9, 0x1, 0x5, 0x613, 0x90, 0x18000, 0xfff, 0x9, 0x100, 0x7, 0x925, 0x80000000, 0xd, 0x50, 0x400, 0x10000, 0xfffffffb, 0x9, 0x1c, 0x89290486, 0xfffffff8, 0x2, 0x2, 0x7, 0x1, 0x340, 0x9, 0x3, 0x9, 0x9, 0x200, 0x7, 0x10001, 0xcf, 0xfffffff8, 0x7f, 0x4, 0x9, 0x7, 0x9, 0x1e00, 0x4, 0x2, 0x1, 0x3, 0x10, 0x4eb058b1, 0x80000, 0x80000001, 0x8, 0x7, 0x0, 0xd71b, 0x6278, 0x0, 0x8, 0x1000, 0x5, 0x55, 0x1, 0xd4e, 0x2, 0xd, 0x4, 0x0, 0x7, 0x4, 0x97, 0x78678194, 0x1, 0x2, 0xcb1, 0x1, 0x2, 0x1, 0x9, 0x737, 0x40b, 0x100, 0x0, 0x7f, 0xfffffffe, 0x7fff, 0x18000000, 0x0, 0x200, 0x800, 0xf9b, 0x924e, 0x889, 0x7, 0x1, 0x838a, 0x3, 0x670b9614, 0x7, 0x2, 0x5, 0x3, 0x6, 0x4, 0x9332, 0x59bc4c82, 0x5, 0xffffff6f, 0x3c, 0x7fffffff, 0x3ee, 0x1, 0x0, 0x9, 0x3, 0xef, 0x10001, 0x10, 0x6, 0xcea, 0xd, 0x5, 0x1, 0x6, 0xd, 0x101, 0x81, 0x9, 0x22, 0x8, 0x8, 0x4, 0x9, 0x4, 0x0, 0x4, 0xffffff4e, 0x8, 0x80, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xcb6f, 0x80, 0x327c, 0x3, 0xc0ab, 0xfffffe01, 0x6, 0xf9ae, 0x30, 0x6, 0x5, 0x6, 0x800, 0x1, 0x200, 0x2, 0x10000, 0x5, 0x101, 0x7, 0x2, 0x9, 0xb78, 0x0, 0x80, 0x8001, 0x2, 0xf1a, 0x1000, 0x401, 0x8, 0x7, 0xa, 0x98, 0xfffffba0, 0x8, 0xffff, 0x3a3, 0x100, 0x7, 0x7fff, 0x8, 0x101, 0x3ed82d78, 0x7fff, 0xffffbf54, 0xf171, 0x1, 0x4, 0xfffff0c3, 0x8, 0x88000, 0x7, 0x80, 0x4, 0x6, 0x2, 0xe24, 0x60000000, 0xfffff2b8, 0xffffffff, 0x4, 0x4, 0xff, 0x6, 0xfffffffa, 0x9f, 0x8ddc, 0x8, 0x800, 0x9, 0x3, 0x9, 0x55e, 0x0, 0x0, 0xfffffffc, 0xe83, 0x401, 0x8, 0xff, 0x10003, 0x1, 0x9, 0x7, 0xfff, 0xfffffffb, 0x0, 0xe3b, 0x1, 0x7, 0xffffffff, 0x6, 0x40, 0x4b, 0x3, 0x9, 0x849a, 0x2, 0x0, 0x9, 0x80000000, 0x7, 0x4, 0xfffffffc, 0x401, 0x8, 0x800, 0x800, 0x0, 0x0, 0x1, 0xa, 0x2, 0x10000, 0x3ff, 0x2f1, 0x7ab5ae80, 0x9, 0x10001, 0x4, 0x98a, 0xb037affa, 0x652, 0x9, 0x8, 0x8, 0xfdbb, 0x0, 0x7f, 0x6, 0x3, 0x4, 0x5a28, 0x8, 0x0, 0x6cf, 0x7, 0x8, 0x7, 0x6, 0x3, 0x5, 0xabb, 0x101, 0x9, 0x4, 0x9, 0x4, 0x32, 0x4, 0x999f, 0x5, 0x6, 0xd1, 0xd81, 0x7, 0x3, 0x1, 0xc, 0x8, 0x7, 0x618, 0x8, 0x31e, 0xffffffff, 0x6, 0x9, 0xfffffffb, 0x0, 0xe, 0x3949, 0x400, 0x9, 0xb4, 0xfffffffd, 0x3, 0x2, 0x5, 0x2, 0x88, 0x6, 0x7fec, 0xffffffff, 0x401, 0x0, 0x1ff, 0x1000, 0x1, 0x0, 0x7fff, 0x1000, 0x6, 0xe25f, 0x5, 0x9, 0x5, 0xfffffffd, 0x7, 0x3, 0x0, 0x7, 0x1, 0x3, 0x3, 0x6, 0x685, 0x432, 0x6, 0x100, 0x0, 0x3fd0, 0xd, 0xffff, 0xffffffff, 0x5448, 0x10000000, 0xbe, 0xa49, 0x0, 0x6, 0x4, 0x7, 0x80000000, 0x7, 0xfffffff2, 0xb6, 0x5, 0x0, 0xf11, 0x0, 0x1, 0x4, 0x7, 0x56, 0x8, 0x1000, 0x4, 0x1, 0x7f, 0x2d1f, 0x9, 0x1, 0x80000000, 0x7, 0x5, 0x7, 0x9, 0x4, 0x5, 0xfaf, 0xd, 0xd4c, 0x9, 0x6]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0x0, 0x1, 0x1, 0x5, 0x5, 0x1, 0xcb7, 0x5, 0x2, 0xe, 0x1, 0x2, 0x200, 0xd6, 0xfffffffa, 0x401, 0x6, 0x3, 0x7, 0x0, 0x7bc, 0xee, 0xd, 0xe70c, 0x7, 0x3, 0x4, 0x7, 0x9, 0x76f9, 0x1, 0x1, 0x6, 0x4, 0x3, 0x1, 0x1, 0x5, 0x0, 0x7, 0xfa43, 0x7fff, 0xffffffff, 0x0, 0x4, 0x7, 0x4, 0x6, 0x4, 0x5, 0x5, 0x81, 0x4, 0x6, 0x0, 0x4, 0x9000, 0x2ff, 0x5, 0x2, 0x5, 0x1, 0x3, 0x8000, 0x2, 0xd, 0x700, 0x3c0, 0x3, 0x87, 0x8, 0xb, 0x2, 0x5, 0x4, 0xb1f0, 0x2, 0x3, 0x9, 0x100, 0x3, 0x2, 0x6, 0x1ff, 0x7, 0x9, 0x0, 0x7, 0xfffffff5, 0x77, 0x80000000, 0x4, 0xfffffff0, 0xd, 0x6, 0x8, 0xae7, 0x3892050, 0x3, 0x8, 0x0, 0x4, 0x0, 0x80, 0x50e9c556, 0x4, 0xd01, 0x6, 0x8, 0xfffffff9, 0x7, 0x3ff, 0x7, 0x6, 0x3, 0x0, 0x7, 0x7, 0x0, 0x1, 0x40, 0x5, 0x3, 0x2, 0x616, 0xe, 0x4, 0x9, 0x2, 0xffffffff, 0x2, 0x8, 0x4, 0x0, 0xc, 0x7, 0x1ff, 0x401, 0xc, 0x7f, 0x0, 0x3ff, 0x6, 0x47d4b20b, 0x6, 0x7fff, 0x7, 0x401, 0xc0000000, 0x9, 0x8001, 0x80000000, 0x800, 0xffff, 0x6, 0x8001, 0xffff, 0x8, 0x6, 0x0, 0x1, 0x10001, 0x6, 0x5, 0x4, 0xfff, 0x3, 0x7f, 0x5, 0x8, 0x70000, 0x4, 0x4d16445a, 0x10000, 0x7f, 0x6, 0x401, 0x0, 0x2, 0x0, 0x0, 0x327, 0x6, 0x7fff, 0x4, 0x4, 0x4, 0x0, 0xb6f, 0x9, 0x9, 0x1, 0x6, 0x4, 0x80000000, 0x2, 0x2, 0xa, 0x401, 0x9, 0x5, 0x1, 0x2, 0x7f, 0x80000000, 0x4, 0x692, 0x3, 0x2, 0x7, 0x9, 0xed63, 0xb5f8, 0x7, 0x80, 0x6, 0x80000000, 0x5, 0x2, 0x3, 0x80000000, 0x8, 0x2, 0x7, 0x2, 0x0, 0x7, 0x2020000, 0x7, 0x5, 0x8001, 0x0, 0x8, 0x3, 0x7, 0xff, 0xfff, 0x7, 0x7, 0x7, 0x2, 0x45, 0x8, 0x3, 0x3, 0x9a, 0x3, 0xf1f, 0x1, 0x1, 0x962, 0x9, 0xd1b, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0x7, 0x93, 0x1, 0x400, 0x7, 0xfffff001, 0x5cd2, 0x14, 0x2, 0x6, 0x7668, 0x9, 0x7, 0x67b5, 0x3, 0x9, 0x7fffffff, 0x0, 0x8548, 0x5, 0xe, 0x4, 0x5, 0xfff, 0x4d, 0x2bc49f5a, 0x9, 0x6, 0x9, 0x6, 0x4, 0xffffffff, 0xba, 0xa00, 0x7, 0x140, 0x6, 0xfff, 0x8001, 0x528d4541, 0x98, 0xfffffff7, 0x7, 0x7, 0x401, 0x9, 0x5, 0x5, 0x6, 0xef5, 0x1, 0x8, 0xffffffff, 0x1, 0x4, 0x5, 0x9, 0x77b7, 0x0, 0x7, 0x7, 0x200, 0xb, 0x800, 0xffffffff, 0x7fffffff, 0x7070, 0x200, 0x3, 0x3, 0x7, 0x3, 0x1a0b, 0x9, 0x74, 0x5885, 0x9, 0xdb5f, 0x4, 0x1d0d0003, 0x2, 0xa, 0x0, 0x3, 0xed, 0x4, 0x3, 0x0, 0x3, 0x6, 0x3, 0x3a4c, 0x2, 0x5, 0x2, 0x0, 0xc, 0x7, 0xea, 0x5, 0xae0, 0x4, 0x4, 0x40, 0x8, 0x10001, 0x58f5, 0x8, 0x5, 0x6, 0x7ff, 0x9, 0x8, 0x9, 0xc75a, 0x3, 0x427, 0x3, 0x0, 0x553, 0x8, 0x9, 0x1000, 0x800, 0x91e8, 0xc, 0xaadc, 0x7, 0xfffffffb, 0x7, 0x2008000, 0xd, 0xa05, 0x5, 0x1, 0x1, 0x7788, 0x7, 0x6, 0x3, 0x1, 0x1ff, 0x9, 0xfffffffc, 0x3, 0xd, 0x8, 0x101, 0x5, 0x924, 0x3ff, 0x2, 0xe, 0x118a, 0xa6, 0x9, 0x8001, 0xfe, 0x8, 0x3, 0x4, 0x6, 0x2, 0xe7c, 0x3, 0x5074, 0x5, 0x8000, 0x7, 0x7, 0x40, 0x0, 0x7fffffff, 0x0, 0x3, 0x7, 0x4, 0x5, 0xbe, 0x1ff, 0x3, 0x401, 0x3, 0xff, 0xd, 0xffff5b36, 0x10, 0xa, 0x2, 0x9fba, 0x4, 0xbe1f, 0x4, 0x20000007, 0xfffffffe, 0x8, 0x1, 0x9, 0x7, 0x757, 0x8, 0x1e81, 0x8, 0x1, 0xfffffffe, 0x1, 0xfffffffd, 0x1, 0x8, 0x100, 0x5, 0x8, 0x5, 0x15, 0x401, 0xa2, 0x6, 0x4, 0x7b, 0x9, 0x1, 0xf, 0x1ff, 0x1, 0x120, 0xff800, 0x10, 0xc, 0x2, 0x0, 0x8, 0x1, 0x0, 0x6, 0x6, 0x8001, 0x1, 0xf, 0x0, 0x5, 0x2, 0x0, 0x6, 0x80000000, 0x2, 0x3, 0x6, 0x3, 0x7fff, 0x5, 0x6, 0x80000000, 0x3, 0x4, 0x9]}]]}, {0x8b, 0x6, "ab1b8c155f75a1416d8e06055ce5bffa2ba72558e144a9b60a126deb04c0d5016aaef430c2391bbb83f3f7b677f611f49ce328d258fb4bae7c8a714082639b0e07f552547a57c16c10c4e60f43e27ec56df299b7d7ef557b7ec9bf2b0a6a56b1bd3910facbfcf26452ab50bf76f179b4ceda80b36dd372ad3dd2ef5acc88ca60b3447dc8b091b4"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x60, 0xa, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xa699b}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88f5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8917}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}]}, {0xa, 0x6, "aeb809e9e356"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x13, 0xfff2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xffe0}}]}}]}, 0x22b4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b00)=';', 0x1}], 0x1, 0x0, 0x0, 0x84}, 0x20000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) close(r3) (async) close(r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0000000000000000000", 0xb7) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) shutdown(r7, 0x1) (async) shutdown(r7, 0x1) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 243.662951ms ago: executing program 2 (id=4447): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000007010800000000000000000000000009000100"], 0x20}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000003280)={'ipvlan1\x00', &(0x7f0000003240)=@ethtool_cmd={0x4c, 0x6, 0x7, 0x4, 0xb, 0x4, 0x6, 0x6, 0xfd, 0x0, 0x5, 0x8000, 0x3, 0xd, 0x0, 0x9, [0x2, 0xb893]}}) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r1, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) (async, rerun: 32) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000540)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000006c0)=[@in6={0xa, 0x4e21, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fff}], 0x1c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x10, 0x8000, 0x3, 0x6, {{0xd, 0x4, 0x0, 0x8, 0x34, 0x64, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010102, @empty, {[@ra={0x94, 0x4}, @rr={0x7, 0x1b, 0xe2, [@local, @remote, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x11}]}]}}}}}) (async, rerun: 64) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000380)=0x10000) (rerun: 64) setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000300)={@remote, r6}, 0x14) 131.567848ms ago: executing program 3 (id=4448): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r3 = socket(0x2, 0x2, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) r4 = accept(r2, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000163f17000fbdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008800) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r1, @ANYBLOB="01012dbd7000fbdbdf257a00000008000300", @ANYRES32=0x0, @ANYBLOB="63002a000301043c04007fa107824c460d07050000000802110000000600000008021100000000000000089f260004000802110000013800000000ffffffffffffff03000004080211000001080059dd63cc02110000010700000075060100e30034000035002a007e15037fe0ffffffffffff030000000a000000070000000301087e1507b702ffffffffffff050000000000000001000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4080}, 0x14) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0xc4) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="afffffff170a010100000000000000000700826f8900000900020073797a31000000000900010073797a30000000000000054000000000000000010000010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x24000000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="ba1ab4dbaefe73ba3dde3cc800b66c718908a59408e6d45fc4e68839f8b77c04c33216417ea50291d5b2599eb6e5bceb30a2", 0x32}, {&(0x7f00000029c0)="bd", 0x1}, {0x0}], 0x3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xc}, {0x0, 0xb}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0x1c, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000) socket$netlink(0x10, 0x3, 0x0) 121.314345ms ago: executing program 2 (id=4449): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6020400) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv4_newrule={0x34, 0x20, 0xf4db158ec847dc81, 0x1, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r2, r3}}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x80000003}]}, 0xffffffffffffffe9}, 0x1, 0x0, 0x0, 0x81}, 0x40884) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r4, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 47.520473ms ago: executing program 2 (id=4450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="8400000000010104210000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1414aa0c0002800500010000000000080007400000000020000680080001"], 0x84}, 0x1, 0x0, 0x0, 0x8d7f1b7f2655125c}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000780)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000084003803afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000030aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e340e6d42ca0a5c15b37adac15084dbaf736b41e5af0302000100001c0500000000260004000318fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a665599ea60d49aa49a6191ace3d0363a979acf93f88eea07d6842280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8675b87ba8b58f81ece27975cc39e595e9af90b4ff92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b7bf7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000220b17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0032107b8a3e100908f61640000000200fff500000000000000000000008879e66485201a0015ca83747357a0274500040000000000000000000000145e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac37a57d79b05613a12328f6112901738fb632dbf04542188b196e213408c0005d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81edb9efd8f23a20897b2b86610626ba7346cad838"], 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='[#\\)$\x00', 0x204a00, &(0x7f0000000040)={@_ha_fsid={[0x69f, 0x7]}, {0x1, 0xff, 0x2, 0x7}}, 0x7, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x10001}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r2, 0x2f, 0x4, 0xb4, 0x65, 0x18, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x80, 0x40, 0x6, 0xf37b}}) 0s ago: executing program 0 (id=4451): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_ADDRESS={0xa, 0x1, @random="baeead4459ac"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x24000040) kernel console output (not intermixed with test programs): m0: Port device team_slave_1 added [ 353.563567][T17297] tc_dump_action: action bad kind [ 353.662116][T17173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.677464][T17173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.776576][T17173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.822033][T17173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.830333][T17173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.864579][T17173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.915283][T17310] netlink: 'syz.3.3059': attribute type 1 has an invalid length. [ 353.977582][T17310] Cannot find del_set index 1 as target [ 354.033458][T17173] hsr_slave_0: entered promiscuous mode [ 354.040334][T17173] hsr_slave_1: entered promiscuous mode [ 354.059872][T17173] debugfs: 'hsr0' already exists in 'hsr' [ 354.090488][T17173] Cannot create hsr debugfs directory [ 354.248608][T17321] bridge0: entered allmulticast mode [ 354.401318][T17305] lo speed is unknown, defaulting to 1000 [ 354.740953][T17342] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 354.771158][ T5834] Bluetooth: hci0: command tx timeout [ 354.993067][T17173] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 355.017576][T17173] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 355.044611][T17173] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 355.065156][T17173] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 355.320597][T17372] __nla_validate_parse: 11 callbacks suppressed [ 355.320616][T17372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3076'. [ 355.332621][T17173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.419397][T17173] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.462920][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.470119][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.531096][ T9990] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.538323][ T9990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.027442][T17173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.199107][T17401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3081'. [ 356.238106][T17408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3082'. [ 356.273500][T17173] veth0_vlan: entered promiscuous mode [ 356.290436][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6120 ms [ 356.298568][ C1] lec:lec_tx_timeout: lec0 [ 356.304866][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 356.318907][T17173] veth1_vlan: entered promiscuous mode [ 356.330879][T17410] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3083'. [ 356.407948][T17173] veth0_macvtap: entered promiscuous mode [ 356.444780][T17173] veth1_macvtap: entered promiscuous mode [ 356.491248][T17419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3085'. [ 356.504565][T17173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.525374][T17419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.550324][T17173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.633391][ T9981] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.650627][ T9981] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.702221][ T9981] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.726761][T17430] vlan5: entered promiscuous mode [ 356.844611][ T9981] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.854089][ T5834] Bluetooth: hci0: command tx timeout [ 357.103821][ T9988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.136928][ T9988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.165958][T17418] lo speed is unknown, defaulting to 1000 [ 357.254122][ T9988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.275425][ T9988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.383158][T17450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3094'. [ 357.530290][T17459] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3095'. [ 357.757938][T17468] syzkaller0: entered promiscuous mode [ 357.790964][T17470] IPVS: length: 233 != 24 [ 357.801590][T17468] syzkaller0: entered allmulticast mode [ 357.983127][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 357.989171][T17475] vlan2: entered promiscuous mode [ 357.997986][T17475] bridge0: entered promiscuous mode [ 358.004487][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 358.020336][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 358.040531][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 358.048804][T17476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.060877][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 358.214868][ T5830] syz_tun (unregistering): left allmulticast mode [ 358.230937][ T5830] syz_tun (unregistering): left promiscuous mode [ 358.237750][ T5830] bridge0: port 3(syz_tun) entered disabled state [ 358.297440][T17481] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3102'. [ 358.312036][T17483] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3102'. [ 358.495737][T17490] €Â: renamed from dummy0 (while UP) [ 358.632680][T17492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3106'. [ 358.648410][T17490] xt_hashlimit: overflow, rate too high: 0 [ 358.656387][T17490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.672007][T17492] netlink: 'syz.1.3106': attribute type 3 has an invalid length. [ 358.683480][T17492] netlink: 'syz.1.3106': attribute type 1 has an invalid length. [ 358.692184][T17492] netlink: 'syz.1.3106': attribute type 1 has an invalid length. [ 358.885367][T17477] lo speed is unknown, defaulting to 1000 [ 358.930966][ T5834] Bluetooth: hci0: command tx timeout [ 359.030363][T17504] netlink: 'syz.3.3111': attribute type 1 has an invalid length. [ 359.174568][T17510] vlan2: entered promiscuous mode [ 359.197528][T17510] bridge0: entered promiscuous mode [ 359.422173][T17506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.440570][T17506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.457317][T17506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan0 [ 359.480713][T17506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.531753][T17506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.549734][T17506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.939434][T17477] chnl_net:caif_netlink_parms(): no params data found [ 360.065719][T17525] lo speed is unknown, defaulting to 1000 [ 360.132697][ T5834] Bluetooth: hci4: command tx timeout [ 360.185931][T17546] €Â: renamed from dummy0 (while UP) [ 360.349983][T17546] xt_hashlimit: overflow, rate too high: 0 [ 360.363138][T17477] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.366993][T17546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.370443][T17477] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.387148][T17477] bridge_slave_0: entered allmulticast mode [ 360.395647][T17477] bridge_slave_0: entered promiscuous mode [ 360.413483][T17477] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.430979][T17477] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.438425][T17477] bridge_slave_1: entered allmulticast mode [ 360.445038][T17545] xt_CT: No such helper "syz1" [ 360.454327][T17477] bridge_slave_1: entered promiscuous mode [ 360.540597][T17477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.561786][T17477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.640014][T17477] team0: Port device team_slave_0 added [ 360.649832][T17477] team0: Port device team_slave_1 added [ 360.759910][T17477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.770260][T17477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.791355][T17570] __nla_validate_parse: 7 callbacks suppressed [ 360.791375][T17570] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3126'. [ 360.814144][T17477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.825370][T17550] lo speed is unknown, defaulting to 1000 [ 360.826825][T17477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.838270][T17477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.922891][T17477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.036516][T17574] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3128'. [ 361.053968][T17477] hsr_slave_0: entered promiscuous mode [ 361.061534][T17477] hsr_slave_1: entered promiscuous mode [ 361.068400][T17477] debugfs: 'hsr0' already exists in 'hsr' [ 361.084721][T17477] Cannot create hsr debugfs directory [ 361.718512][T17587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3132'. [ 361.770813][T17587] veth1_macvtap: left promiscuous mode [ 362.050444][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 362.058571][ C1] lec:lec_tx_timeout: lec0 [ 362.065762][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 362.210996][ T5834] Bluetooth: hci4: command tx timeout [ 362.271312][T17604] xt_hashlimit: overflow, rate too high: 0 [ 362.278250][T17604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.315993][T17606] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3138'. [ 362.364695][T17608] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.373111][T17608] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.608750][T17477] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 362.635374][T17477] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 362.658515][T17477] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 362.695998][T17477] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 362.753788][T17626] netlink: 'syz.3.3145': attribute type 1 has an invalid length. [ 362.844676][T17626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 362.860014][T17637] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3148'. [ 362.959272][T17638] bond1: (slave ip6erspan0): making interface the new active one [ 362.963814][T17644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3149'. [ 362.977249][T17638] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 362.993790][T17630] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3147'. [ 363.005543][T17623] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3145'. [ 363.085171][T17630] dummy0 (unregistering): left promiscuous mode [ 363.169736][T17618] lo speed is unknown, defaulting to 1000 [ 363.216214][T17650] netlink: 'syz.0.3152': attribute type 6 has an invalid length. [ 363.260972][T17477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.342782][T17477] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.374074][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.381319][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.433917][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.441305][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.840129][T17672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3158'. [ 364.008958][T17477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.179756][T17686] FAULT_INJECTION: forcing a failure. [ 364.179756][T17686] name failslab, interval 1, probability 0, space 0, times 0 [ 364.199456][T17686] CPU: 1 UID: 0 PID: 17686 Comm: syz.2.3161 Not tainted syzkaller #0 PREEMPT(full) [ 364.199496][T17686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 364.199517][T17686] Call Trace: [ 364.199524][T17686] [ 364.199531][T17686] dump_stack_lvl+0xe8/0x150 [ 364.199559][T17686] should_fail_ex+0x412/0x560 [ 364.199586][T17686] should_failslab+0xa8/0x100 [ 364.199608][T17686] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 364.199626][T17686] ? __alloc_skb+0x186/0x7d0 [ 364.199644][T17686] ? __alloc_skb+0x1d0/0x7d0 [ 364.199660][T17686] ? __local_bh_enable_ip+0xd0/0x130 [ 364.199684][T17686] __alloc_skb+0x1d0/0x7d0 [ 364.199707][T17686] netlink_sendmsg+0x5d4/0xb40 [ 364.199734][T17686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.199756][T17686] ? aa_sock_msg_perm+0xf1/0x1b0 [ 364.199780][T17686] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 364.199802][T17686] ____sys_sendmsg+0x972/0x9f0 [ 364.199833][T17686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.199863][T17686] ? import_iovec+0x73/0xa0 [ 364.199909][T17686] ___sys_sendmsg+0x2a5/0x360 [ 364.199937][T17686] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.199990][T17686] ? __fget_files+0x2a/0x420 [ 364.200006][T17686] ? __fget_files+0x3a0/0x420 [ 364.200029][T17686] __x64_sys_sendmsg+0x1bd/0x2a0 [ 364.200054][T17686] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 364.200086][T17686] ? __pfx_ksys_write+0x10/0x10 [ 364.200113][T17686] do_syscall_64+0x14d/0xf80 [ 364.200134][T17686] ? trace_irq_disable+0x3b/0x150 [ 364.200149][T17686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.200165][T17686] ? clear_bhb_loop+0x40/0x90 [ 364.200186][T17686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.200208][T17686] RIP: 0033:0x7f8566b9c819 [ 364.200226][T17686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.200241][T17686] RSP: 002b:00007f85679f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.200259][T17686] RAX: ffffffffffffffda RBX: 00007f8566e15fa0 RCX: 00007f8566b9c819 [ 364.200272][T17686] RDX: 0000000020000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 364.200283][T17686] RBP: 00007f85679f0090 R08: 0000000000000000 R09: 0000000000000000 [ 364.200294][T17686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.200305][T17686] R13: 00007f8566e16038 R14: 00007f8566e15fa0 R15: 00007ffe9d8ff1d8 [ 364.200333][T17686] [ 364.207651][T17650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3152'. [ 364.298724][ T5834] Bluetooth: hci4: command tx timeout [ 364.749667][T17477] veth0_vlan: entered promiscuous mode [ 364.763337][T17477] veth1_vlan: entered promiscuous mode [ 364.802156][T17477] veth0_macvtap: entered promiscuous mode [ 364.814383][T17477] veth1_macvtap: entered promiscuous mode [ 364.838098][T17477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.872856][T17477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.887553][ T9990] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.896559][ T9990] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.906639][ T9990] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.920003][ T9990] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.985481][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.995045][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.028325][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.037169][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.115694][T17704] netlink: 'syz.4.3097': attribute type 4 has an invalid length. [ 365.129993][T17704] netlink: 'syz.4.3097': attribute type 4 has an invalid length. [ 366.536103][ T5834] Bluetooth: hci4: command tx timeout [ 367.080442][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 367.088535][ C1] lec:lec_tx_timeout: lec0 [ 367.094092][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 367.143707][T17721] syzkaller1: entered promiscuous mode [ 367.188920][T17721] syzkaller1: entered allmulticast mode [ 367.277338][T17727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3169'. [ 367.293225][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 367.312828][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 367.322901][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 367.333140][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 367.345349][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 367.526091][ T5831] syz_tun (unregistering): left allmulticast mode [ 367.538360][ T5831] syz_tun (unregistering): left promiscuous mode [ 367.549803][ T5831] bridge0: port 3(syz_tun) entered disabled state [ 367.659721][T17736] bond1: Unable to set up delay as MII monitoring is disabled [ 367.687769][T17736] bond1 (unregistering): Released all slaves [ 367.908955][T17756] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.916232][T17756] bridge0: port 2(bridge_slave_1) entered listening state [ 367.923683][T17756] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.930875][T17756] bridge0: port 1(bridge_slave_0) entered listening state [ 368.105535][T17728] lo speed is unknown, defaulting to 1000 [ 368.175520][T17765] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 368.250964][T17769] ip6t_srh: unknown srh invflags 4000 [ 368.275756][T17771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3187'. [ 368.614410][T17774] macvlan4: entered promiscuous mode [ 368.625176][T17774] bond_slave_0: entered promiscuous mode [ 368.631328][T17774] bond_slave_1: entered promiscuous mode [ 368.650533][T17774] bond0: entered promiscuous mode [ 368.662595][T17774] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 368.687579][T17774] team0: Port device macvlan4 added [ 368.758988][T17783] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3192'. [ 368.760467][T17784] xt_hashlimit: size too large, truncated to 1048576 [ 368.904572][T17787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3193'. [ 369.255068][T17728] chnl_net:caif_netlink_parms(): no params data found [ 369.337198][T17808] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3200'. [ 369.413726][ T5834] Bluetooth: hci2: command tx timeout [ 369.479473][T17826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3203'. [ 369.495052][T17826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3203'. [ 369.527806][T17828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3203'. [ 369.567840][T17826] netlink: 'syz.0.3203': attribute type 1 has an invalid length. [ 369.576643][T17826] netlink: 'syz.0.3203': attribute type 2 has an invalid length. [ 369.584986][T17828] netlink: 'syz.0.3203': attribute type 1 has an invalid length. [ 369.620993][T17828] netlink: 'syz.0.3203': attribute type 2 has an invalid length. [ 369.689833][T17843] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3209'. [ 369.731943][T17728] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.745768][T17846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3208'. [ 369.762869][T17728] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.770250][T17728] bridge_slave_0: entered allmulticast mode [ 369.785481][T17728] bridge_slave_0: entered promiscuous mode [ 369.794947][T17728] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.802717][T17728] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.809993][T17728] bridge_slave_1: entered allmulticast mode [ 369.818387][T17728] bridge_slave_1: entered promiscuous mode [ 369.885140][T17728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.904307][T17855] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 369.944602][T17728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.961753][T17855] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 369.976488][T17862] batadv_slave_1: entered promiscuous mode [ 369.983381][T17862] macsec0: entered promiscuous mode [ 370.068931][T17868] xt_CT: You must specify a L4 protocol and not use inversions on it [ 370.076791][T17728] team0: Port device team_slave_0 added [ 370.096046][T17728] team0: Port device team_slave_1 added [ 370.163772][T17728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.172288][T17728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.200120][T17728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.213117][T17728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.220171][T17728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.254111][T17728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.327528][T17883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.341507][T17728] hsr_slave_0: entered promiscuous mode [ 370.348351][T17728] hsr_slave_1: entered promiscuous mode [ 370.355862][T17728] debugfs: 'hsr0' already exists in 'hsr' [ 370.361987][T17728] Cannot create hsr debugfs directory [ 370.975619][T17902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.133882][T17907] netlink: 'syz.4.3227': attribute type 1 has an invalid length. [ 371.205237][T17909] bond0 (unregistering): left promiscuous mode [ 371.232752][T17909] bond_slave_0: left promiscuous mode [ 371.250092][T17909] bond_slave_1: left promiscuous mode [ 371.289839][T17909] team0: Port device macvlan4 removed [ 371.326081][T17909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.346797][T17909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.368004][T17909] bond0 (unregistering): Released all slaves [ 371.404965][T17916] netlink: 'syz.3.3230': attribute type 11 has an invalid length. [ 371.470261][T17921] vlan2: entered promiscuous mode [ 371.477043][T17921] bridge0: entered promiscuous mode [ 371.490758][ T5834] Bluetooth: hci2: command tx timeout [ 371.555834][T17728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 371.636758][T17728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 371.693584][T17728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 371.763915][T17728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 371.814439][T17943] xt_hashlimit: size too large, truncated to 1048576 [ 372.104576][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 372.112670][ C1] lec:lec_tx_timeout: lec0 [ 372.117614][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 372.143858][T17728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.214056][T17728] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.248188][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.255406][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.296490][ T9990] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.303730][ T9990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.467041][T17728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 372.605307][T17983] __nla_validate_parse: 9 callbacks suppressed [ 372.605326][T17983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3246'. [ 372.707096][T17988] netlink: 'syz.0.3248': attribute type 29 has an invalid length. [ 372.722310][T17992] netlink: 'syz.0.3248': attribute type 29 has an invalid length. [ 372.732658][T17987] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3248'. [ 372.837656][T17998] FAULT_INJECTION: forcing a failure. [ 372.837656][T17998] name failslab, interval 1, probability 0, space 0, times 0 [ 372.882229][T17998] CPU: 0 UID: 0 PID: 17998 Comm: syz.0.3250 Not tainted syzkaller #0 PREEMPT(full) [ 372.882254][T17998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 372.882263][T17998] Call Trace: [ 372.882270][T17998] [ 372.882277][T17998] dump_stack_lvl+0xe8/0x150 [ 372.882306][T17998] should_fail_ex+0x412/0x560 [ 372.882336][T17998] should_failslab+0xa8/0x100 [ 372.882360][T17998] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 372.882382][T17998] ? __alloc_skb+0x1d0/0x7d0 [ 372.882402][T17998] ? __local_bh_enable_ip+0xd0/0x130 [ 372.882428][T17998] __alloc_skb+0x1d0/0x7d0 [ 372.882454][T17998] netlink_dump+0x1ef/0xe80 [ 372.882480][T17998] ? __netlink_lookup+0xc6/0x8b0 [ 372.882505][T17998] ? __pfx_netlink_dump+0x10/0x10 [ 372.882522][T17998] ? __netlink_lookup+0x7e4/0x8b0 [ 372.882554][T17998] ? netlink_lookup+0x30/0x200 [ 372.882573][T17998] ? netlink_lookup+0x30/0x200 [ 372.882589][T17998] ? netlink_lookup+0x30/0x200 [ 372.882612][T17998] __netlink_dump_start+0x5cb/0x7e0 [ 372.882638][T17998] rtnetlink_rcv_msg+0xa3a/0xbe0 [ 372.882660][T17998] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 372.882676][T17998] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 372.882695][T17998] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 372.882714][T17998] ? ref_tracker_free+0x693/0x840 [ 372.882730][T17998] ? __pfx_rtnl_dumpit+0x10/0x10 [ 372.882748][T17998] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 372.882777][T17998] netlink_rcv_skb+0x232/0x4b0 [ 372.882797][T17998] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 372.882819][T17998] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.882847][T17998] ? netlink_deliver_tap+0x2e/0x1b0 [ 372.882874][T17998] netlink_unicast+0x80f/0x9b0 [ 372.882900][T17998] ? __pfx_netlink_unicast+0x10/0x10 [ 372.882919][T17998] ? netlink_sendmsg+0x650/0xb40 [ 372.882936][T17998] ? skb_put+0x11b/0x210 [ 372.882961][T17998] netlink_sendmsg+0x813/0xb40 [ 372.882998][T17998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.883019][T17998] ? aa_sock_msg_perm+0xf1/0x1b0 [ 372.883044][T17998] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 372.883063][T17998] ____sys_sendmsg+0x972/0x9f0 [ 372.883085][T17998] ? __lock_acquire+0x6b5/0x2cf0 [ 372.883110][T17998] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.883136][T17998] ? import_iovec+0x73/0xa0 [ 372.883156][T17998] ___sys_sendmsg+0x2a5/0x360 [ 372.883183][T17998] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.883210][T17998] ? kstrtouint+0x6e/0xe0 [ 372.883257][T17998] ? __fget_files+0x2a/0x420 [ 372.883271][T17998] ? __fget_files+0x3a0/0x420 [ 372.883294][T17998] __sys_sendmmsg+0x27c/0x4e0 [ 372.883319][T17998] ? __pfx___sys_sendmmsg+0x10/0x10 [ 372.883338][T17998] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 372.883382][T17998] ? ksys_write+0x242/0x270 [ 372.883401][T17998] ? __pfx_ksys_write+0x10/0x10 [ 372.883423][T17998] __x64_sys_sendmmsg+0xa0/0xc0 [ 372.883448][T17998] do_syscall_64+0x14d/0xf80 [ 372.883468][T17998] ? trace_irq_disable+0x3b/0x150 [ 372.883481][T17998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.883496][T17998] ? clear_bhb_loop+0x40/0x90 [ 372.883514][T17998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.883528][T17998] RIP: 0033:0x7fb23d99c819 [ 372.883543][T17998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.883556][T17998] RSP: 002b:00007fb23e8ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 372.883574][T17998] RAX: ffffffffffffffda RBX: 00007fb23dc15fa0 RCX: 00007fb23d99c819 [ 372.883585][T17998] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 372.883597][T17998] RBP: 00007fb23e8ce090 R08: 0000000000000000 R09: 0000000000000000 [ 372.883607][T17998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.883617][T17998] R13: 00007fb23dc16038 R14: 00007fb23dc15fa0 R15: 00007ffc5394c6b8 [ 372.883642][T17998] [ 372.899307][T17728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.937074][T18003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3251'. [ 373.254395][T17728] veth0_vlan: entered promiscuous mode [ 373.375597][T18018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3253'. [ 373.385871][T18009] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 373.476902][T17728] veth1_vlan: entered promiscuous mode [ 373.563001][T18026] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3255'. [ 373.572703][ T5834] Bluetooth: hci2: command tx timeout [ 373.629000][T17728] veth0_macvtap: entered promiscuous mode [ 373.668836][T17728] veth1_macvtap: entered promiscuous mode [ 373.689961][T18034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3259'. [ 373.703660][T17728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.753604][T17728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.807267][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.835218][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.849149][T18036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3258'. [ 373.898356][T18041] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 373.925184][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.936497][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.143383][T18050] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3261'. [ 374.165561][T13181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.179525][T13181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.291707][T18043] lo speed is unknown, defaulting to 1000 [ 374.298919][T13181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.314525][T13181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.386405][T18053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3262'. [ 374.499631][T18053] FAULT_INJECTION: forcing a failure. [ 374.499631][T18053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.538528][T18053] CPU: 1 UID: 0 PID: 18053 Comm: syz.1.3262 Not tainted syzkaller #0 PREEMPT(full) [ 374.538554][T18053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 374.538565][T18053] Call Trace: [ 374.538573][T18053] [ 374.538580][T18053] dump_stack_lvl+0xe8/0x150 [ 374.538609][T18053] should_fail_ex+0x412/0x560 [ 374.538635][T18053] _copy_from_user+0x2d/0xb0 [ 374.538655][T18053] ___sys_sendmsg+0x1c6/0x360 [ 374.538685][T18053] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.538754][T18053] __sys_sendmmsg+0x27c/0x4e0 [ 374.538783][T18053] ? __pfx___sys_sendmmsg+0x10/0x10 [ 374.538805][T18053] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 374.538853][T18053] ? ksys_write+0x242/0x270 [ 374.538895][T18053] ? __pfx_ksys_write+0x10/0x10 [ 374.538920][T18053] __x64_sys_sendmmsg+0xa0/0xc0 [ 374.538947][T18053] do_syscall_64+0x14d/0xf80 [ 374.538979][T18053] ? trace_irq_disable+0x3b/0x150 [ 374.538994][T18053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.539012][T18053] ? clear_bhb_loop+0x40/0x90 [ 374.539033][T18053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.539054][T18053] RIP: 0033:0x7fae70b9c819 [ 374.539070][T18053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.539085][T18053] RSP: 002b:00007fae719d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 374.539104][T18053] RAX: ffffffffffffffda RBX: 00007fae70e15fa0 RCX: 00007fae70b9c819 [ 374.539116][T18053] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 374.539128][T18053] RBP: 00007fae719d0090 R08: 0000000000000000 R09: 0000000000000000 [ 374.539139][T18053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.539149][T18053] R13: 00007fae70e16038 R14: 00007fae70e15fa0 R15: 00007ffdd3f18498 [ 374.539177][T18053] [ 374.782326][T18057] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3165'. [ 374.969189][T18070] netlink: 'syz.3.3265': attribute type 1 has an invalid length. [ 375.375110][T18081] xt_hashlimit: size too large, truncated to 1048576 [ 375.650525][ T5834] Bluetooth: hci2: command tx timeout [ 376.047391][T18100] syzkaller0: entered promiscuous mode [ 376.092957][T18100] syzkaller0: entered allmulticast mode [ 376.145207][T18068] lo speed is unknown, defaulting to 1000 [ 376.297835][T18106] team0: No ports can be present during mode change [ 376.482255][T18120] veth1_macvtap: left promiscuous mode [ 376.885322][T18082] lo speed is unknown, defaulting to 1000 [ 377.130486][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 377.138536][ C1] lec:lec_tx_timeout: lec0 [ 377.143392][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 377.231360][T18141] netlink: 'syz.0.3288': attribute type 1 has an invalid length. [ 377.298361][T18141] 8021q: adding VLAN 0 to HW filter on device bond1 [ 377.443709][T18147] netlink: 'syz.3.3289': attribute type 1 has an invalid length. [ 377.499066][T18103] lo speed is unknown, defaulting to 1000 [ 377.658903][ T6529] hid-generic 0005:15C2:0006.0001: item fetching failed at offset 0/1 [ 377.672817][ T6529] hid-generic 0005:15C2:0006.0001: probe with driver hid-generic failed with error -22 [ 377.957205][T18160] team_slave_0: entered promiscuous mode [ 377.963354][T18160] team_slave_1: entered promiscuous mode [ 378.004371][T18160] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 378.035460][T18149] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 378.280864][T18164] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 378.382942][T18174] __nla_validate_parse: 16 callbacks suppressed [ 378.382963][T18174] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3294'. [ 378.407058][T18158] lo speed is unknown, defaulting to 1000 [ 378.842559][T18176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3295'. [ 378.885130][T18176] 8021q: adding VLAN 0 to HW filter on device bond2 [ 379.413640][T18189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3299'. [ 379.842401][T18189] vlan3: entered promiscuous mode [ 379.847633][T18189] bridge0: entered promiscuous mode [ 380.270746][T18207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3302'. [ 380.291963][T18207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3302'. [ 380.307670][T18209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3304'. [ 380.321179][T18207] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3302'. [ 380.334912][T18209] openvswitch: netlink: Flow actions attr not present in new flow. [ 380.639477][T18224] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3310'. [ 380.653370][T18226] netlink: 'syz.0.3311': attribute type 4 has an invalid length. [ 380.671603][T18224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3310'. [ 380.930292][T18224] netlink: 'syz.1.3310': attribute type 1 has an invalid length. [ 380.943668][T18224] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3310'. [ 380.963989][T18224] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 381.123822][T18252] žÿ: renamed from team_slave_1 (while UP) [ 381.379047][T18249] tipc: Can't bind to reserved service type 2 [ 381.818891][T18283] bond0: option min_links: invalid value (18446744073426799689) [ 381.835934][T18283] bond0: option min_links: allowed values 0 - 2147483647 [ 382.150461][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 382.158562][ C1] lec:lec_tx_timeout: lec0 [ 382.163791][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 382.233287][T18304] 8021q: adding VLAN 0 to HW filter on device bond3 [ 382.674368][T18335] .70·: renamed from hsr0 (while UP) [ 382.687379][T18335] .70·: entered allmulticast mode [ 382.699958][T18335] hsr_slave_0: entered allmulticast mode [ 382.709165][T18335] hsr_slave_1: entered allmulticast mode [ 382.719902][T18335] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 382.867622][T18349] netlink: 'syz.3.3354': attribute type 13 has an invalid length. [ 382.916735][T18349] gretap0: refused to change device tx_queue_len [ 382.925722][T18349] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 383.087154][T18361] netlink: 'syz.1.3358': attribute type 10 has an invalid length. [ 383.156066][T18364] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 383.451574][T18384] __nla_validate_parse: 16 callbacks suppressed [ 383.451596][T18384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3366'. [ 383.516265][T18386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3367'. [ 383.767288][T18407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3372'. [ 383.942693][T18371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3361'. [ 384.170011][T18393] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3370'. [ 384.192775][T18393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3370'. [ 384.275180][T18368] lo speed is unknown, defaulting to 1000 [ 384.417258][T18431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3379'. [ 384.438064][T18431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3379'. [ 384.438173][ T9988] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.529468][ T9988] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.558310][ T9988] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.598434][ T9988] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.634144][T18442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3381'. [ 384.812128][T18450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3385'. [ 385.251406][T18470] tipc: Started in network mode [ 385.260847][T18470] tipc: Node identity , cluster identity 4711 [ 385.277213][T18470] tipc: Failed to obtain node identity [ 385.291838][T18470] tipc: Enabling of bearer rejected, failed to enable media [ 385.903597][T18483] lo speed is unknown, defaulting to 1000 [ 386.033702][T18504] No such timeout policy "syz0" [ 386.693738][T18531] 8021q: adding VLAN 0 to HW filter on device bond3 [ 387.076671][T18554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.181713][T18559] netlink: 'syz.1.3420': attribute type 1 has an invalid length. [ 387.876941][T18577] bond4: (slave bond_slave_1): Device is not our slave [ 387.910782][T18577] bond4: option active_slave: invalid value (bond_slave_1) [ 387.921920][T18577] bond4 (unregistering): Released all slaves [ 387.949311][T18569] lo speed is unknown, defaulting to 1000 [ 387.963057][T18587] tipc: Started in network mode [ 387.971685][T13181] wlan1: Trigger new scan to find an IBSS to join [ 387.985124][T18587] tipc: Node identity ce0054a05e6d, cluster identity 4711 [ 388.015038][T18587] tipc: Enabled bearer , priority 0 [ 388.118572][T18585] tipc: Disabling bearer [ 388.290431][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6130 ms [ 388.298486][ C1] lec:lec_tx_timeout: lec0 [ 388.304884][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 388.729437][T18611] __nla_validate_parse: 17 callbacks suppressed [ 388.729457][T18611] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3432'. [ 388.858809][T18624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3436'. [ 388.879073][T18617] vlan0: entered allmulticast mode [ 388.885130][T18617] macvtap0: entered allmulticast mode [ 388.912888][T18617] veth0_macvtap: entered allmulticast mode [ 389.428263][T18640] block nbd4: not configured, cannot reconfigure [ 389.459739][T18640] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3441'. [ 389.793013][T18655] syzkaller1: entered promiscuous mode [ 389.798628][T18655] syzkaller1: entered allmulticast mode [ 389.808837][T18655] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 389.946193][ T796] IPVS: starting estimator thread 0... [ 390.050582][T18665] IPVS: using max 37 ests per chain, 88800 per kthread [ 390.162283][T18677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3451'. [ 390.436231][T18683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3455'. [ 390.491110][T18697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3457'. [ 390.550319][T18695] bond5: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 390.584111][T18695] bond5 (unregistering): Released all slaves [ 390.622905][T18660] lo speed is unknown, defaulting to 1000 [ 390.931552][ T9981] wlan1: Trigger new scan to find an IBSS to join [ 391.090126][T18720] lo speed is unknown, defaulting to 1000 [ 391.780176][T18736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3467'. [ 391.821418][T18736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3467'. [ 392.056164][T18744] lo speed is unknown, defaulting to 1000 [ 392.684992][T18752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3471'. [ 393.295801][T18683] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 393.459613][T18769] netlink: 'syz.3.3479': attribute type 1 has an invalid length. [ 393.534346][T18769] 8021q: adding VLAN 0 to HW filter on device bond4 [ 393.556953][T18774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3478'. [ 393.692398][T18786] netlink: 'syz.3.3481': attribute type 3 has an invalid length. [ 393.792728][T18793] netlink: zone id is out of range [ 393.814216][T18793] netlink: zone id is out of range [ 393.819512][T18793] netlink: zone id is out of range [ 393.825405][T18793] netlink: zone id is out of range [ 393.831000][T18793] netlink: zone id is out of range [ 393.846439][T18793] netlink: zone id is out of range [ 393.865761][T18793] netlink: zone id is out of range [ 393.881593][T18793] netlink: zone id is out of range [ 393.889155][T18793] netlink: zone id is out of range [ 393.896194][T18793] netlink: zone id is out of range [ 393.971288][ T9981] wlan1: Trigger new scan to find an IBSS to join [ 394.025726][T18806] team0 (unregistering): Port device team_slave_0 removed [ 394.033446][T18816] __nla_validate_parse: 1 callbacks suppressed [ 394.033816][T18816] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3492'. [ 394.049657][T18816] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3492'. [ 394.050822][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 394.067104][ C1] lec:lec_tx_timeout: lec0 [ 394.075698][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 394.089205][ T6527] IPVS: starting estimator thread 0... [ 394.109452][T18806] team0 (unregistering): Port device team_slave_1 removed [ 394.162371][T18820] tap0: tun_chr_ioctl cmd 1074025676 [ 394.177933][T18819] netlink: 'syz.4.3491': attribute type 30 has an invalid length. [ 394.181328][T18820] tap0: owner set to 0 [ 394.201671][T18821] IPVS: using max 32 ests per chain, 76800 per kthread [ 394.351392][T18828] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 394.542281][T18845] netlink: 'syz.0.3499': attribute type 2 has an invalid length. [ 394.582753][T18854] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3502'. [ 394.592110][T18850] hsr0: entered promiscuous mode [ 394.601402][T18853] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3502'. [ 394.616789][T18850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3501'. [ 394.629275][T18856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3503'. [ 394.674621][T18856] vlan2: entered promiscuous mode [ 394.687545][T18856] bridge0: entered promiscuous mode [ 394.716645][T18850] hsr_slave_0: left promiscuous mode [ 394.736885][T18850] hsr_slave_1: left promiscuous mode [ 394.772097][T18850] hsr0 (unregistering): left promiscuous mode [ 394.802527][T18865] netlink: 'syz.3.3505': attribute type 3 has an invalid length. [ 394.893743][ T9986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.932161][T18873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3506'. [ 395.003153][T18879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3509'. [ 395.057444][T18886] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3512'. [ 395.477520][T18917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3519'. [ 395.653802][T18925] netlink: 'syz.0.3520': attribute type 6 has an invalid length. [ 395.949453][T18931] netlink: 'syz.1.3522': attribute type 4 has an invalid length. [ 395.980311][T18898] lo speed is unknown, defaulting to 1000 [ 396.134642][T18945] netlink: 'syz.1.3527': attribute type 1 has an invalid length. [ 396.198907][T18951] netlink: 'syz.4.3525': attribute type 9 has an invalid length. [ 396.262615][T18945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.275041][T18951] netlink: 'syz.4.3525': attribute type 6 has an invalid length. [ 396.289565][T18943] sctp: [Deprecated]: syz.4.3525 (pid 18943) Use of struct sctp_assoc_value in delayed_ack socket option. [ 396.289565][T18943] Use struct sctp_sack_info instead [ 396.295977][T18952] bond0: up delay (288) is not a multiple of miimon (100), value rounded to 200 ms [ 396.335718][T18952] bond0: entered allmulticast mode [ 396.780802][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.803704][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.875386][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.916247][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.111988][T18963] bond_slave_0: entered promiscuous mode [ 397.117804][T18963] bond_slave_1: entered promiscuous mode [ 397.124166][T18963] vlan0: entered promiscuous mode [ 397.129233][T18963] bond0: entered promiscuous mode [ 397.209393][T18999] bond0: option all_slaves_active: invalid value (73) [ 398.388705][T19057] ip6erspan0: entered promiscuous mode [ 398.531791][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 398.540292][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 398.643481][T19032] lo speed is unknown, defaulting to 1000 [ 399.090481][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 399.098543][ C1] lec:lec_tx_timeout: lec0 [ 399.103517][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 399.413441][T19086] __nla_validate_parse: 19 callbacks suppressed [ 399.413455][T19086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3566'. [ 399.698097][T19098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3570'. [ 399.715999][T19098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3570'. [ 399.763195][T19098] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3570'. [ 400.120948][T19121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3576'. [ 400.344726][T19133] xt_hashlimit: size too large, truncated to 1048576 [ 400.374883][T19137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3580'. [ 400.384483][T19137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3580'. [ 400.431255][T19143] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 400.611635][T19147] validate_nla: 5 callbacks suppressed [ 400.611656][T19147] netlink: 'syz.2.3582': attribute type 1 has an invalid length. [ 400.656080][T19149] netlink: 'syz.0.3583': attribute type 4 has an invalid length. [ 400.663604][T19153] netlink: 'syz.2.3582': attribute type 8 has an invalid length. [ 400.665427][T19149] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3583'. [ 400.765355][T19147] 8021q: adding VLAN 0 to HW filter on device bond1 [ 400.900311][T19158] xt_TCPMSS: Only works on TCP SYN packets [ 400.919023][T19153] bond1: (slave geneve2): making interface the new active one [ 400.982165][T19153] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 401.022629][T19149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3583'. [ 401.034213][ T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 401.046608][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 401.066232][ T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 401.078269][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 401.278955][T19173] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3590'. [ 401.289162][T19173] netlink: 'syz.2.3590': attribute type 6 has an invalid length. [ 401.300021][T19173] netlink: 'syz.2.3590': attribute type 5 has an invalid length. [ 401.397522][T19173] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 401.420867][ T796] syzkaller1: tun_net_xmit 90 [ 401.578100][T19188] net_ratelimit: 339 callbacks suppressed [ 401.578120][T19188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.581955][T19184] netlink: 'syz.4.3591': attribute type 1 has an invalid length. [ 401.742312][T19197] netlink: 'syz.2.3596': attribute type 13 has an invalid length. [ 401.777033][T19197] netlink: 'syz.2.3596': attribute type 17 has an invalid length. [ 401.988756][T19197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 402.485916][T19237] FAULT_INJECTION: forcing a failure. [ 402.485916][T19237] name failslab, interval 1, probability 0, space 0, times 0 [ 402.510874][T19237] CPU: 1 UID: 0 PID: 19237 Comm: syz.1.3605 Not tainted syzkaller #0 PREEMPT(full) [ 402.510900][T19237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 402.510910][T19237] Call Trace: [ 402.510918][T19237] [ 402.510925][T19237] dump_stack_lvl+0xe8/0x150 [ 402.510956][T19237] should_fail_ex+0x412/0x560 [ 402.510985][T19237] should_failslab+0xa8/0x100 [ 402.511011][T19237] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 402.511031][T19237] ? __alloc_skb+0x186/0x7d0 [ 402.511051][T19237] ? __alloc_skb+0x1d0/0x7d0 [ 402.511069][T19237] ? __local_bh_enable_ip+0xd0/0x130 [ 402.511205][T19237] __alloc_skb+0x1d0/0x7d0 [ 402.511244][T19237] ? netlink_ack_tlv_len+0x6c/0x210 [ 402.511268][T19237] netlink_ack+0x146/0xa50 [ 402.511285][T19237] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 402.511306][T19237] ? ref_tracker_free+0x693/0x840 [ 402.511322][T19237] ? __copy_skb_header+0xa3/0x4a0 [ 402.511348][T19237] ? __pfx_ref_tracker_free+0x10/0x10 [ 402.511375][T19237] netlink_rcv_skb+0x2b6/0x4b0 [ 402.511396][T19237] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 402.511418][T19237] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 402.511446][T19237] ? netlink_deliver_tap+0x2e/0x1b0 [ 402.511472][T19237] netlink_unicast+0x80f/0x9b0 [ 402.511496][T19237] ? __pfx_netlink_unicast+0x10/0x10 [ 402.511516][T19237] ? netlink_sendmsg+0x650/0xb40 [ 402.511534][T19237] ? skb_put+0x11b/0x210 [ 402.511560][T19237] netlink_sendmsg+0x813/0xb40 [ 402.511589][T19237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.511613][T19237] ? aa_sock_msg_perm+0xf1/0x1b0 [ 402.511640][T19237] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 402.511664][T19237] ____sys_sendmsg+0x972/0x9f0 [ 402.511686][T19237] ? __lock_acquire+0x6b5/0x2cf0 [ 402.511716][T19237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.511748][T19237] ? import_iovec+0x73/0xa0 [ 402.511772][T19237] ___sys_sendmsg+0x2a5/0x360 [ 402.511802][T19237] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.511830][T19237] ? kstrtouint+0x6e/0xe0 [ 402.511874][T19237] ? __fget_files+0x2a/0x420 [ 402.511889][T19237] ? __fget_files+0x3a0/0x420 [ 402.511909][T19237] __sys_sendmmsg+0x27c/0x4e0 [ 402.511934][T19237] ? __pfx___sys_sendmmsg+0x10/0x10 [ 402.511955][T19237] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 402.512004][T19237] ? ksys_write+0x242/0x270 [ 402.512026][T19237] ? __pfx_ksys_write+0x10/0x10 [ 402.512051][T19237] __x64_sys_sendmmsg+0xa0/0xc0 [ 402.512076][T19237] do_syscall_64+0x14d/0xf80 [ 402.512099][T19237] ? trace_irq_disable+0x3b/0x150 [ 402.512114][T19237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.512132][T19237] ? clear_bhb_loop+0x40/0x90 [ 402.512161][T19237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.512178][T19237] RIP: 0033:0x7fae70b9c819 [ 402.512196][T19237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.512211][T19237] RSP: 002b:00007fae719d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 402.512230][T19237] RAX: ffffffffffffffda RBX: 00007fae70e15fa0 RCX: 00007fae70b9c819 [ 402.512243][T19237] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 402.512255][T19237] RBP: 00007fae719d0090 R08: 0000000000000000 R09: 0000000000000000 [ 402.512266][T19237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.512277][T19237] R13: 00007fae70e16038 R14: 00007fae70e15fa0 R15: 00007ffdd3f18498 [ 402.512305][T19237] [ 402.947966][T19243] Cannot find set identified by id 3 to match [ 403.039186][T19243] gretap1: entered promiscuous mode [ 403.209920][T19259] Bluetooth: MGMT ver 1.23 [ 404.110439][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 404.118607][ C1] lec:lec_tx_timeout: lec0 [ 404.123487][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 404.590056][T19283] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 404.607648][T19282] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 404.754814][T19305] __nla_validate_parse: 14 callbacks suppressed [ 404.754832][T19305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3625'. [ 405.017981][T19302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3624'. [ 405.036011][T19302] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3624'. [ 405.051322][T19302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3624'. [ 405.061566][T19302] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3624'. [ 405.096738][T19330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3632'. [ 405.196204][T19334] netlink: 'syz.2.3631': attribute type 11 has an invalid length. [ 405.272983][T19338] netlink: 'syz.2.3631': attribute type 1 has an invalid length. [ 405.347161][T19338] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3631'. [ 405.396018][T19338] netlink: 658 bytes leftover after parsing attributes in process `syz.2.3631'. [ 405.407328][T19338] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3631'. [ 405.601477][T19354] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3637'. [ 405.654936][T19327] lo speed is unknown, defaulting to 1000 [ 405.905255][T19361] netlink: 'syz.4.3639': attribute type 13 has an invalid length. [ 406.457227][T19375] netlink: 'syz.1.3642': attribute type 3 has an invalid length. [ 406.465863][T19375] netlink: 'syz.1.3642': attribute type 3 has an invalid length. [ 406.566576][T19361] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.574565][T19361] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.959984][T19361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.998154][T19361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.148720][T19361] veth0_macvtap: left allmulticast mode [ 407.394151][T19346] lo speed is unknown, defaulting to 1000 [ 407.493312][ T9986] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.521070][ T9986] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.565301][ T9986] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.585929][ T9986] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.130441][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 409.138520][ C1] lec:lec_tx_timeout: lec0 [ 409.143323][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 409.746846][T19473] lo speed is unknown, defaulting to 1000 [ 409.886757][T19503] netlink: 'syz.1.3674': attribute type 7 has an invalid length. [ 409.927929][T19508] __nla_validate_parse: 18 callbacks suppressed [ 409.927949][T19508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3675'. [ 410.224243][T19523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3679'. [ 410.319933][T19528] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3680'. [ 410.486283][T19525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3680'. [ 410.598865][T19540] netlink: 'syz.2.3685': attribute type 16 has an invalid length. [ 410.607358][T19540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3685'. [ 410.688868][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3686'. [ 410.863428][T19551] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3689'. [ 410.958923][T19556] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3690'. [ 411.196419][T19573] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 411.205429][T19573] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3692'. [ 414.031392][T19560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 414.150504][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 414.158648][ C1] lec:lec_tx_timeout: lec0 [ 414.163354][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 414.236340][T19595] syzkaller0: entered promiscuous mode [ 414.251306][T19595] syzkaller0: entered allmulticast mode [ 414.577771][T19621] netlink: 'syz.1.3708': attribute type 17 has an invalid length. [ 414.583714][T19624] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3709'. [ 414.585881][T19621] bond0: option all_slaves_active: invalid value (73) [ 414.667457][T19624] batadv1: entered promiscuous mode [ 414.706419][T19624] batadv1: entered allmulticast mode [ 415.008961][T19637] __nla_validate_parse: 7 callbacks suppressed [ 415.008996][T19637] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3713'. [ 415.119447][T19642] netlink: 'syz.1.3716': attribute type 58 has an invalid length. [ 415.144440][T19642] bridge0: port 3(erspan0) entered blocking state [ 415.154862][T19642] bridge0: port 3(erspan0) entered disabled state [ 415.161953][T19642] erspan0: entered allmulticast mode [ 415.165183][T19632] netlink: 'syz.4.3712': attribute type 1 has an invalid length. [ 415.172612][T19642] erspan0: entered promiscuous mode [ 415.176642][T19632] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3712'. [ 415.183310][T19642] bridge0: port 3(erspan0) entered blocking state [ 415.196892][T19642] bridge0: port 3(erspan0) entered forwarding state [ 415.202016][T19632] Unsupported ieee802154 address type: 0 [ 415.221864][T19646] erspan0: left allmulticast mode [ 415.238332][T19646] erspan0: left promiscuous mode [ 415.250482][T19646] bridge0: port 3(erspan0) entered disabled state [ 415.281790][T19645] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3717'. [ 415.545212][T19659] netlink: 'syz.3.3721': attribute type 17 has an invalid length. [ 415.554016][T19661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3722'. [ 415.571103][T19659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3721'. [ 415.576350][T19661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3722'. [ 415.616058][T19661] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3722'. [ 415.662825][T19663] netlink: 'syz.0.3719': attribute type 28 has an invalid length. [ 415.690784][T19663] netlink: 'syz.0.3719': attribute type 3 has an invalid length. [ 415.698693][T19663] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3719'. [ 416.014608][T19693] xt_TPROXY: Can be used only with -p tcp or -p udp [ 416.170146][T19705] netlink: 'syz.3.3734': attribute type 17 has an invalid length. [ 416.178457][T19705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3734'. [ 416.401141][T19709] syzkaller0: entered promiscuous mode [ 416.407097][T19709] syzkaller0: entered allmulticast mode [ 416.629186][T19723] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3739'. [ 416.800949][T19734] veth0_virt_wifi: entered allmulticast mode [ 416.903863][T19711] lo speed is unknown, defaulting to 1000 [ 417.538237][T19768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.678446][T19772] netlink: 'syz.4.3747': attribute type 17 has an invalid length. [ 417.810189][T19771] gre0: entered promiscuous mode [ 417.849881][T19771] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 417.909579][T19772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.643124][T19814] bridge_slave_0: left allmulticast mode [ 419.648827][T19814] bridge_slave_0: left promiscuous mode [ 419.685094][T19814] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.290403][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6130 ms [ 420.298585][ C1] lec:lec_tx_timeout: lec0 [ 420.304078][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 420.322324][T19814] bridge_slave_1: left allmulticast mode [ 420.328334][T19814] bridge_slave_1: left promiscuous mode [ 420.335027][T19814] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.374009][T19814] bond0: (slave bond_slave_0): Releasing backup interface [ 420.382202][T19814] bond_slave_0: left promiscuous mode [ 420.391809][T19814] bond0: (slave bond_slave_1): Releasing backup interface [ 420.413816][T19814] bond_slave_1: left promiscuous mode [ 420.424831][T19814] team0: Port device team_slave_0 removed [ 420.435957][T19814] team0: Port device team_slave_1 removed [ 420.461195][T19814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.483913][T19814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.509613][T19814] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 420.894247][T19838] netlink: 'syz.4.3758': attribute type 1 has an invalid length. [ 420.905830][T19835] geneve3: entered promiscuous mode [ 420.919216][T19842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.054809][T19844] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 421.113714][T19840] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.146361][T19838] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 421.177024][T19852] netlink: 'syz.0.3762': attribute type 3 has an invalid length. [ 421.262410][T19852] __nla_validate_parse: 10 callbacks suppressed [ 421.262433][T19852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3762'. [ 421.346925][T19867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3764'. [ 421.366340][T19867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3764'. [ 421.392002][T19840] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.412480][T19867] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3764'. [ 421.478473][T19872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3762'. [ 421.599305][T19883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3766'. [ 421.685188][T19840] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.779061][T19888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.952251][T19840] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.264909][T19883] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 422.279394][T19898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 422.286723][T19898] IPv6: NLM_F_CREATE should be set when creating new route [ 422.293999][T19898] IPv6: NLM_F_CREATE should be set when creating new route [ 422.326178][T19883] macsec2: entered promiscuous mode [ 422.602666][ T9986] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.694444][ T9986] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.713534][ T9986] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.755580][ T9986] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.934637][T19916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3774'. [ 422.952690][T19914] netlink: 'syz.1.3775': attribute type 16 has an invalid length. [ 422.971002][T19914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3775'. [ 422.984348][T19916] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3774'. [ 423.006842][T19914] bond0: left allmulticast mode [ 423.031022][T19914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.047125][T19947] batadv0: entered promiscuous mode [ 424.067929][T19947] debugfs: 'hsr0' already exists in 'hsr' [ 424.076770][T19947] Cannot create hsr debugfs directory [ 424.314967][T19940] lo speed is unknown, defaulting to 1000 [ 424.334166][T19956] netlink: 'syz.2.3785': attribute type 4 has an invalid length. [ 424.763758][T19967] netlink: 'syz.1.3790': attribute type 9 has an invalid length. [ 424.769217][T19969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3791'. [ 425.780880][T19995] netlink: 'syz.0.3797': attribute type 17 has an invalid length. [ 425.788880][T19995] bond0: option all_slaves_active: invalid value (73) [ 425.808766][T19997] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 425.824826][T19999] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 425.958848][T20006] tipc: Started in network mode [ 425.979694][T20006] tipc: Node identity b209c890a929, cluster identity 4711 [ 425.995021][T20006] tipc: Enabled bearer , priority 0 [ 426.011671][T20006] syzkaller0: entered promiscuous mode [ 426.019655][T20006] syzkaller0: entered allmulticast mode [ 426.022789][T20018] netlink: 'syz.0.3804': attribute type 1 has an invalid length. [ 426.050402][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 426.058591][ C1] lec:lec_tx_timeout: lec0 [ 426.063426][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 426.079263][T20018] 8021q: adding VLAN 0 to HW filter on device bond5 [ 426.088947][T20014] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 426.204627][T20018] veth9: entered promiscuous mode [ 426.223774][T20018] bond5: (slave veth9): Enslaving as an active interface with an up link [ 426.248141][T20024] tipc: Resetting bearer [ 426.283987][T20030] bridge_slave_0: left allmulticast mode [ 426.289679][T20030] bridge_slave_0: left promiscuous mode [ 426.298322][T20030] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.334603][T20030] bridge_slave_1: left allmulticast mode [ 426.340303][T20030] bridge_slave_1: left promiscuous mode [ 426.350992][T20030] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.375103][T20030] team0: Port device team_slave_0 removed [ 426.383599][T20036] netlink: 'syz.0.3809': attribute type 10 has an invalid length. [ 426.397963][T20030] team0: Port device team_slave_1 removed [ 426.411363][T20030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.424269][T20030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.433658][T20030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.435161][T20037] netlink: 'syz.0.3809': attribute type 10 has an invalid length. [ 426.441254][T20030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.467094][T20004] tipc: Resetting bearer [ 426.500010][T20004] tipc: Disabling bearer [ 426.552195][T20036] €Â: entered promiscuous mode [ 426.558463][T20036] team0: Port device €Â added [ 426.618852][T20037] team0: Port device €Â removed [ 426.626728][T20037] €Â: left promiscuous mode [ 426.637811][T20037] bond0: (slave €Â): Enslaving as an active interface with an up link [ 426.653285][T20041] xt_TPROXY: Can be used only with -p tcp or -p udp [ 426.755799][T20045] batadv_slave_1: entered promiscuous mode [ 426.845883][T20049] batadv_slave_1: left promiscuous mode [ 426.883313][T20059] __nla_validate_parse: 4 callbacks suppressed [ 426.883331][T20059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3812'. [ 426.951017][T20072] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3812'. [ 427.111894][T20079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.310435][T20089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3822'. [ 427.329673][T20089] netlink: 'syz.2.3822': attribute type 20 has an invalid length. [ 427.340894][ T9986] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 427.359009][T20089] netlink: 'syz.2.3822': attribute type 21 has an invalid length. [ 427.553484][T20115] netlink: 'syz.2.3828': attribute type 1 has an invalid length. [ 427.844832][T20115] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 428.221616][T20157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3832'. [ 428.241373][T20158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.256169][T20157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3832'. [ 428.294684][T20157] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3832'. [ 428.313718][T20159] netlink: 'syz.3.3831': attribute type 1 has an invalid length. [ 428.326856][T20159] netlink: 264 bytes leftover after parsing attributes in process `syz.3.3831'. [ 428.611944][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.619251][ C1] bridge0: topology change detected, propagating [ 428.626063][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.633344][ C1] bridge0: topology change detected, propagating [ 428.696844][T20183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3839'. [ 428.791220][T20190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3841'. [ 428.939764][T20202] netlink: 'syz.0.3842': attribute type 1 has an invalid length. [ 428.949409][T20202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3842'. [ 428.966976][T20202] netlink: 'syz.0.3842': attribute type 1 has an invalid length. [ 429.121618][T20161] lec:lec_atm_close: lec0: Shut down! [ 429.171315][T20214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.498350][T20238] netlink: 'syz.1.3850': attribute type 1 has an invalid length. [ 429.758688][T20238] bond1: entered promiscuous mode [ 429.766471][T20238] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.827699][T20241] bond1: (slave bridge3): making interface the new active one [ 429.847215][T20241] bridge3: entered promiscuous mode [ 429.854926][T20241] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 429.912791][T20216] lo speed is unknown, defaulting to 1000 [ 430.308576][T20268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.319780][T20267] : entered promiscuous mode [ 430.624513][T20292] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 430.869900][T20302] bond3: entered promiscuous mode [ 430.892444][T20302] 8021q: adding VLAN 0 to HW filter on device bond3 [ 430.999817][T20306] 8021q: adding VLAN 0 to HW filter on device bond4 [ 431.009620][T20306] bond3: (slave bond4): making interface the new active one [ 431.018283][T20306] bond4: entered promiscuous mode [ 431.024835][T20306] bond3: (slave bond4): Enslaving as an active interface with an up link [ 431.044266][T20312] bond0: (slave €Â): Releasing backup interface [ 431.083921][T20314] validate_nla: 4 callbacks suppressed [ 431.083940][T20314] netlink: 'syz.4.3870': attribute type 4 has an invalid length. [ 431.139843][T20288] lo speed is unknown, defaulting to 1000 [ 431.225926][T20319] netlink: 'syz.0.3872': attribute type 2 has an invalid length. [ 431.239801][T20321] netlink: 'syz.0.3872': attribute type 2 has an invalid length. [ 432.033172][T20352] tipc: Started in network mode [ 432.041044][T20353] __nla_validate_parse: 12 callbacks suppressed [ 432.041063][T20353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3879'. [ 432.057120][T20352] tipc: Node identity e68a04aeb14e, cluster identity 4711 [ 432.064752][T20352] tipc: Enabled bearer , priority 0 [ 432.180003][T20349] syzkaller0: MTU too low for tipc bearer [ 432.196795][T20349] tipc: Disabling bearer [ 432.440073][T20360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3881'. [ 432.460290][T20360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3881'. [ 432.464078][T20362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.483614][T20360] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3881'. [ 432.559218][T20365] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3883'. [ 432.597057][T20367] syzkaller1: entered promiscuous mode [ 432.619410][T20367] syzkaller1: entered allmulticast mode [ 432.630812][T20365] syzkaller1: entered promiscuous mode [ 432.663328][T20365] syzkaller1: entered allmulticast mode [ 432.817667][T20382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3887'. [ 432.840193][T20382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.894730][T20382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.942238][T20386] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3889'. [ 433.058916][T20386] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3889'. [ 433.161061][T20395] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3892'. [ 433.208032][T20398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.354561][T20381] lo speed is unknown, defaulting to 1000 [ 433.507650][ T6538] IPVS: starting estimator thread 0... [ 433.610525][T20413] IPVS: using max 36 ests per chain, 86400 per kthread [ 434.094085][T20410] lo speed is unknown, defaulting to 1000 [ 434.130552][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 434.138585][ C1] lec:lec_tx_timeout: lec0 [ 434.143447][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 434.187667][T20425] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3899'. [ 434.334397][T20428] netlink: 'syz.4.3900': attribute type 4 has an invalid length. [ 434.342577][T20428] netlink: 'syz.4.3900': attribute type 1 has an invalid length. [ 434.660274][T20442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.794682][T20450] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4 [ 434.828806][T20450] xt_limit: Overflow, try lower: 324382443/0 [ 434.874807][T20449] 8021q: adding VLAN 0 to HW filter on device bond2 [ 435.024949][T20443] lo speed is unknown, defaulting to 1000 [ 435.065813][T20455] xt_hashlimit: size too large, truncated to 1048576 [ 435.120789][T20456] –: renamed from vxcan1 (while UP) [ 435.927303][T20473] geneve0: entered promiscuous mode [ 436.258403][T20495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.434249][T20504] netlink: 'syz.1.3919': attribute type 4 has an invalid length. [ 436.468848][T20478] lo speed is unknown, defaulting to 1000 [ 436.882625][T20524] netlink: 'syz.3.3926': attribute type 17 has an invalid length. [ 437.028134][T20539] veth0_macvtap: left promiscuous mode [ 437.689808][T20573] netlink: 'syz.3.3935': attribute type 2 has an invalid length. [ 437.722313][T20573] netlink: 'syz.3.3935': attribute type 1 has an invalid length. [ 437.740064][T20573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.982601][T20582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.074960][T20582] netlink: 'syz.3.3938': attribute type 13 has an invalid length. [ 438.095508][T20591] __nla_validate_parse: 11 callbacks suppressed [ 438.095525][T20591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3940'. [ 438.312012][T20591] bond0: entered promiscuous mode [ 438.317262][T20591] bond_slave_0: entered promiscuous mode [ 438.323768][T20591] bond_slave_1: entered promiscuous mode [ 438.341613][T20591] batadv_slave_0: entered promiscuous mode [ 438.348717][T20591] batadv_slave_0: left promiscuous mode [ 438.374479][T20591] bond0: left promiscuous mode [ 438.388312][T20591] bond_slave_0: left promiscuous mode [ 438.406642][T20591] bond_slave_1: left promiscuous mode [ 438.639909][T20607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3944'. [ 438.663557][T20607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3944'. [ 438.703189][T20607] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3944'. [ 438.733588][T20594] bond5 (unregistering): Released all slaves [ 438.758433][T20589] lo speed is unknown, defaulting to 1000 [ 438.915413][T20615] netlink: 'syz.4.3946': attribute type 10 has an invalid length. [ 438.922525][T20613] sctp: [Deprecated]: syz.3.3945 (pid 20613) Use of int in max_burst socket option deprecated. [ 438.922525][T20613] Use struct sctp_assoc_value instead [ 438.963726][T20615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3946'. [ 439.150438][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 439.158584][ C1] lec:lec_tx_timeout: lec0 [ 439.163776][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 439.580309][T20617] lo speed is unknown, defaulting to 1000 [ 439.620975][T20637] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3951'. [ 440.206895][T20663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3956'. [ 440.229350][T20663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3956'. [ 440.230765][T20667] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3957'. [ 440.648598][T20689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3961'. [ 440.676836][T20684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.733258][T20684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.735761][T20696] netlink: 'syz.0.3962': attribute type 10 has an invalid length. [ 440.833954][T20690] ip6_vti0: entered promiscuous mode [ 441.284126][T20724] netlink: 'syz.4.3967': attribute type 1 has an invalid length. [ 441.334772][T20726] netlink: 'syz.0.3966': attribute type 17 has an invalid length. [ 441.343508][T20726] bond0: option all_slaves_active: invalid value (73) [ 441.385047][T20728] Cannot find del_set index 2 as target [ 441.730914][T20730] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.757883][T20730] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 441.822498][T20734] syzkaller0: entered promiscuous mode [ 441.830306][T20734] syzkaller0: entered allmulticast mode [ 442.339136][T20770] netlink: 'syz.1.3980': attribute type 16 has an invalid length. [ 442.841847][T20786] lo speed is unknown, defaulting to 1000 [ 443.197783][T20816] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 443.514485][T20835] netlink: 'syz.2.3994': attribute type 16 has an invalid length. [ 443.569980][T20835] __nla_validate_parse: 13 callbacks suppressed [ 443.569997][T20835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3994'. [ 443.800555][T20845] vlan0: entered allmulticast mode [ 443.805731][T20845] bond0: entered allmulticast mode [ 443.820637][T20845] bond_slave_0: entered allmulticast mode [ 443.830156][T20845] bond_slave_1: entered allmulticast mode [ 443.846311][T20845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3997'. [ 444.044477][T20863] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 444.085573][T20878] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4007'. [ 444.407090][T20897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4013'. [ 444.644853][T20916] netlink: 'syz.0.4016': attribute type 1 has an invalid length. [ 444.653965][T20916] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4016'. [ 444.679816][T20916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4016'. [ 445.251204][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6090 ms [ 445.259329][ C1] lec:lec_tx_timeout: lec0 [ 445.264595][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 447.161271][T20915] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 447.375497][T20935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4022'. [ 447.546570][T20948] netlink: 292 bytes leftover after parsing attributes in process `syz.3.4027'. [ 447.621922][T20948] tunl0: Caught tx_queue_len zero misconfig [ 447.815741][T20975] batadv_slave_1: entered promiscuous mode [ 448.029427][T20994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4038'. [ 448.665521][T20962] batadv_slave_1: left promiscuous mode [ 448.839981][T21049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4050'. [ 448.862689][T21047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4049'. [ 448.929834][T21049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4050'. [ 448.976943][T21058] IPVS: set_ctl: invalid protocol: 5 5.0.0.0:2048 [ 448.986695][T21057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4053'. [ 448.997255][T21053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4053'. [ 449.119394][T21067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4055'. [ 449.250377][T21074] netlink: 'syz.2.4057': attribute type 1 has an invalid length. [ 449.277746][T21074] bond3: entered promiscuous mode [ 449.285132][T21074] 8021q: adding VLAN 0 to HW filter on device bond3 [ 449.334383][T21074] macvtap0: entered allmulticast mode [ 449.354325][T21078] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4058'. [ 449.410084][T21074] bond3: (slave bridge1): making interface the new active one [ 449.430092][T21074] bridge1: entered promiscuous mode [ 449.439102][T21074] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 449.451844][T21086] netlink: 'syz.1.4060': attribute type 10 has an invalid length. [ 449.465538][T21086] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.4060'. [ 449.493659][T21087] netlink: 'syz.4.4061': attribute type 5 has an invalid length. [ 449.541533][T21087] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4061'. [ 449.585061][T21100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4061'. [ 449.586229][T21101] netlink: 'syz.3.4059': attribute type 1 has an invalid length. [ 449.686463][T21102] bridge0: port 1(syz_tun) entered blocking state [ 449.694607][T21102] bridge0: port 1(syz_tun) entered disabled state [ 449.704410][T21102] syz_tun: entered allmulticast mode [ 449.713929][T21102] syz_tun: entered promiscuous mode [ 449.725127][T21102] bridge0: port 1(syz_tun) entered blocking state [ 449.731813][T21102] bridge0: port 1(syz_tun) entered forwarding state [ 450.602309][T21157] ip6tnl0: Caught tx_queue_len zero misconfig [ 450.954351][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.983112][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.005240][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.010397][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 451.022097][ C1] lec:lec_tx_timeout: lec0 [ 451.028998][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 451.036442][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.452244][T21212] vlan4: entered allmulticast mode [ 451.481452][T21212] bond0: entered allmulticast mode [ 451.496111][T21212] bond_slave_0: entered allmulticast mode [ 451.544481][T21212] bond_slave_1: entered allmulticast mode [ 451.881760][T21208] lo speed is unknown, defaulting to 1000 [ 452.053915][T21237] SET target dimension over the limit! [ 452.152756][T21239] bond6: option arp_all_targets: invalid value (129) [ 452.162687][T21239] bond6 (unregistering): Released all slaves [ 452.450651][ T51] Bluetooth: hci5: command 0x040f tx timeout [ 452.482691][T21261] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.539267][T21213] lo speed is unknown, defaulting to 1000 [ 452.570083][ T29] audit: type=1800 audit(1775775670.985:5): pid=21267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4099" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=1286 res=0 errno=0 [ 452.672479][T21261] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.776150][T21276] openvswitch: netlink: Flow key attr not present in new flow. [ 452.864286][T21274] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.872048][T21274] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.007148][T21274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.090189][T21261] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.131959][ T49] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.142624][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.156713][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 453.206072][ T49] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.217314][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.227071][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 453.236508][ T49] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.246248][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.255891][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 453.282628][T21261] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.312577][ T49] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.334936][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.348041][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 453.546108][ T49] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.610883][ T49] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.619816][ T49] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.744679][ T49] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.774142][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.837987][ T9981] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.887898][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.967168][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.252396][T21320] netlink: 'syz.0.4120': attribute type 1 has an invalid length. [ 454.268345][T21320] __nla_validate_parse: 83 callbacks suppressed [ 454.269417][T21320] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4120'. [ 454.347955][T21322] netlink: 'syz.4.4121': attribute type 29 has an invalid length. [ 454.377357][T21322] netlink: 'syz.4.4121': attribute type 29 has an invalid length. [ 454.386887][T21322] netlink: 500 bytes leftover after parsing attributes in process `syz.4.4121'. [ 454.471254][T21329] netlink: 'syz.3.4123': attribute type 6 has an invalid length. [ 454.479016][T21329] IPv6: NLM_F_CREATE should be specified when creating new route [ 454.496161][T21333] bridge4: entered promiscuous mode [ 454.502447][T21333] bridge4: entered allmulticast mode [ 454.512824][T21333] team0: Port device bridge4 added [ 454.552432][T21339] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 454.573432][T21338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4125'. [ 454.619615][T21338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4125'. [ 454.664848][T21345] lo: Caught tx_queue_len zero misconfig [ 454.682513][T21347] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4126'. [ 454.869241][T21357] netlink: 'syz.4.4132': attribute type 30 has an invalid length. [ 454.887093][T21357] netlink: 'syz.4.4132': attribute type 30 has an invalid length. [ 454.887110][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.917100][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.936260][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.956406][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.972215][T21361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4133'. [ 455.036798][T21365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4134'. [ 455.064070][T21365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4134'. [ 455.093026][T21365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4134'. [ 455.114661][T21365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4134'. [ 455.175661][T21370] FAULT_INJECTION: forcing a failure. [ 455.175661][T21370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.193173][T21370] CPU: 1 UID: 0 PID: 21370 Comm: syz.3.4136 Not tainted syzkaller #0 PREEMPT(full) [ 455.193200][T21370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 455.193211][T21370] Call Trace: [ 455.193218][T21370] [ 455.193226][T21370] dump_stack_lvl+0xe8/0x150 [ 455.193257][T21370] should_fail_ex+0x412/0x560 [ 455.193289][T21370] _copy_to_user+0x31/0xb0 [ 455.193313][T21370] simple_read_from_buffer+0xe1/0x170 [ 455.193343][T21370] proc_fail_nth_read+0x1bb/0x230 [ 455.193371][T21370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 455.193399][T21370] ? rw_verify_area+0x2a6/0x4d0 [ 455.193418][T21370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 455.193448][T21370] vfs_read+0x20c/0xa70 [ 455.193465][T21370] ? fdget_pos+0x246/0x320 [ 455.193484][T21370] ? __pfx___mutex_lock+0x10/0x10 [ 455.193511][T21370] ? __pfx_vfs_read+0x10/0x10 [ 455.193532][T21370] ? __fget_files+0x2a/0x420 [ 455.193552][T21370] ? __fget_files+0x3a0/0x420 [ 455.193567][T21370] ? __fget_files+0x2a/0x420 [ 455.193591][T21370] ksys_read+0x150/0x270 [ 455.193610][T21370] ? __pfx_ksys_read+0x10/0x10 [ 455.193637][T21370] do_syscall_64+0x14d/0xf80 [ 455.193659][T21370] ? trace_irq_disable+0x3b/0x150 [ 455.193673][T21370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.193689][T21370] ? clear_bhb_loop+0x40/0x90 [ 455.193710][T21370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.193725][T21370] RIP: 0033:0x7faff3d5d04e [ 455.193742][T21370] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 455.193756][T21370] RSP: 002b:00007faff4cabfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 455.193774][T21370] RAX: ffffffffffffffda RBX: 00007faff4cac6c0 RCX: 00007faff3d5d04e [ 455.193786][T21370] RDX: 000000000000000f RSI: 00007faff4cac0a0 RDI: 0000000000000005 [ 455.193797][T21370] RBP: 00007faff4cac090 R08: 0000000000000000 R09: 0000000000000000 [ 455.193807][T21370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 455.193817][T21370] R13: 00007faff4016038 R14: 00007faff4015fa0 R15: 00007ffcaa53adf8 [ 455.193845][T21370] [ 455.835986][T21390] netlink: 'syz.3.4144': attribute type 10 has an invalid length. [ 455.855270][T21390] €Â: entered promiscuous mode [ 455.861260][T21390] bridge0: port 3(€Â) entered blocking state [ 455.867462][T21390] bridge0: port 3(€Â) entered disabled state [ 455.875106][T21393] sctp: [Deprecated]: syz.1.4143 (pid 21393) Use of struct sctp_assoc_value in delayed_ack socket option. [ 455.875106][T21393] Use struct sctp_sack_info instead [ 455.900186][T21390] €Â: entered allmulticast mode [ 455.909216][T21390] bridge0: port 3(€Â) entered blocking state [ 455.915487][T21390] bridge0: port 3(€Â) entered forwarding state [ 455.972923][T21400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.040393][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 456.048489][ C1] lec:lec_tx_timeout: lec0 [ 456.054034][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 456.255448][T21417] 8021q: adding VLAN 0 to HW filter on device bond3 [ 456.323586][T21421] netlink: 'syz.3.4151': attribute type 2 has an invalid length. [ 457.129881][T21424] netlink: 'syz.3.4152': attribute type 1 has an invalid length. [ 457.153958][T21424] 8021q: adding VLAN 0 to HW filter on device bond5 [ 457.181737][T21424] bond5: (slave veth7): Enslaving as an active interface with a down link [ 457.199043][T21424] bridge0: port 3(€Â) entered disabled state [ 457.210832][T21424] €Â (unregistering): left allmulticast mode [ 457.217004][T21424] bridge0: port 3(€Â) entered disabled state [ 458.679502][T21384] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 458.846642][T21434] netlink: 'syz.0.4153': attribute type 89 has an invalid length. [ 458.863502][T21432] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 458.880143][T21432] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 458.892221][T21440] x_tables: duplicate underflow at hook 3 [ 458.940874][T21439] bond6: entered promiscuous mode [ 458.946499][T21439] 8021q: adding VLAN 0 to HW filter on device bond6 [ 459.061583][T21439] 8021q: adding VLAN 0 to HW filter on device bond7 [ 459.084489][T21439] bond7: entered promiscuous mode [ 459.099017][T21439] bond6: (slave bond7): Enslaving as an active interface with an up link [ 459.306847][T21455] syzkaller0: entered promiscuous mode [ 459.334701][T21455] syzkaller0: entered allmulticast mode [ 459.488708][T21468] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 459.611887][T21474] netlink: 'syz.2.4167': attribute type 1 has an invalid length. [ 459.636815][T21474] __nla_validate_parse: 41 callbacks suppressed [ 459.636832][T21474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4167'. [ 459.668241][T21474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4167'. [ 459.699501][T21480] xt_connbytes: Forcing CT accounting to be enabled [ 459.720502][T21480] xt_CT: You must specify a L4 protocol and not use inversions on it [ 459.729523][T21474] syz_tun: entered promiscuous mode [ 459.744468][T21474] debugfs: 'hsr1' already exists in 'hsr' [ 459.773479][T21474] Cannot create hsr debugfs directory [ 459.788087][T21474] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 459.804738][T21474] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 459.822537][T21486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4170'. [ 459.846290][T21475] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 459.855025][T21475] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 460.063692][T21498] netlink: 'syz.4.4174': attribute type 16 has an invalid length. [ 460.072305][T21498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4174'. [ 460.246586][T21513] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4180'. [ 460.378061][T21522] syzkaller1: entered promiscuous mode [ 460.397171][T21522] syzkaller1: entered allmulticast mode [ 460.442192][T21528] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4185'. [ 460.607410][T21537] IPVS: ip_vs_add_dest(): server weight less than zero [ 460.663726][T21537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4192'. [ 460.674647][T21536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4192'. [ 460.705702][T21537] syzkaller1: entered promiscuous mode [ 460.723560][T21546] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4193'. [ 460.736537][T21537] syzkaller1: entered allmulticast mode [ 460.753996][T21550] netlink: 'syz.2.4194': attribute type 1 has an invalid length. [ 460.764458][T21551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4194'. [ 460.823891][T21550] bond4: (slave bridge2): making interface the new active one [ 460.832234][T21550] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 461.060426][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 461.068555][ C1] lec:lec_tx_timeout: lec0 [ 461.073325][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 461.447224][T21576] lo speed is unknown, defaulting to 1000 [ 461.542546][T21596] bond8: Removing last arp target with arp_interval on [ 461.670084][T21602] netlink: 'syz.4.4211': attribute type 1 has an invalid length. [ 461.692975][T21602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.085025][T21620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.210499][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 462.216660][ T5834] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 462.290328][T21631] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 462.355166][T21639] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 462.377104][T21639] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 462.513827][T21652] netlink: 'syz.2.4228': attribute type 1 has an invalid length. [ 462.703157][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 463.030839][T21678] netlink: 'syz.3.4235': attribute type 20 has an invalid length. [ 463.050055][T21678] netlink: 'syz.3.4235': attribute type 21 has an invalid length. [ 463.154871][T21683] bond0: option min_links: invalid value (18446744073426799689) [ 463.175141][T21683] bond0: option min_links: allowed values 0 - 2147483647 [ 463.316554][T21689] tap0: tun_chr_ioctl cmd 1074025681 [ 463.501921][T21701] xt_TCPMSS: Only works on TCP SYN packets [ 463.783210][T21718] bond6: entered promiscuous mode [ 463.793642][T21718] 8021q: adding VLAN 0 to HW filter on device bond6 [ 463.871652][T21723] netlink: 'syz.1.4251': attribute type 17 has an invalid length. [ 463.892801][T21723] bond0: option all_slaves_active: invalid value (73) [ 464.072004][T21738] team_slave_0: left promiscuous mode [ 464.074119][T21736] smc: removing ib device syz2 [ 464.079422][T21738] team_slave_1: left promiscuous mode [ 464.383961][T21744] lo speed is unknown, defaulting to 1000 [ 464.428077][T21755] netlink: 'syz.4.4263': attribute type 1 has an invalid length. [ 464.558083][T21759] netlink: 'syz.3.4265': attribute type 17 has an invalid length. [ 464.566541][T21759] bond0: option all_slaves_active: invalid value (73) [ 464.630209][T21762] batman_adv: batadv0: Adding interface: dummy0 [ 464.641077][T21762] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.667615][T21762] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 464.938374][T21777] __nla_validate_parse: 18 callbacks suppressed [ 464.938395][T21777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4270'. [ 464.956104][T21772] netlink: 'syz.1.4269': attribute type 16 has an invalid length. [ 464.964832][T21777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4270'. [ 464.985361][T21772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4269'. [ 465.014986][T21777] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4270'. [ 465.126180][T21781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4271'. [ 465.864883][T21794] lo speed is unknown, defaulting to 1000 [ 466.043424][T21813] netlink: 'syz.1.4281': attribute type 16 has an invalid length. [ 466.063050][T21813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4281'. [ 466.080441][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 466.088601][ C1] lec:lec_tx_timeout: lec0 [ 466.093478][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 466.219656][T21818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4283'. [ 466.244280][T21821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4284'. [ 466.405528][T21820] vlan3: entered promiscuous mode [ 466.654425][T21830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.668557][T21828] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 466.668557][T21828] Please contact the netfilter-devel mailing list or update your nftables rules. [ 466.983369][T21836] xt_l2tp: unknown flags: 51 [ 467.371268][T21854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4293'. [ 467.380842][T21854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4293'. [ 467.979766][T21876] can: request_module (can-proto-5) failed. [ 468.578785][T21895] tipc: Enabling of bearer rejected, media not registered [ 468.798844][T21900] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 469.615459][T21913] netlink: 'syz.3.4315': attribute type 1 has an invalid length. [ 469.633128][T21913] bond0: Caught tx_queue_len zero misconfig [ 470.194204][T21923] __nla_validate_parse: 10 callbacks suppressed [ 470.194224][T21923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4318'. [ 470.277296][T21925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.420281][T21927] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20003 [ 470.428788][T21929] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4321'. [ 470.496159][T21927] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 470.685149][T21938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4323'. [ 470.699616][T21938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4323'. [ 471.018416][T21944] IPVS: Error connecting to the multicast addr [ 471.100576][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 471.108723][ C1] lec:lec_tx_timeout: lec0 [ 471.115211][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 471.156257][ T9981] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.193540][ T9981] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.224834][T21949] lo speed is unknown, defaulting to 1000 [ 471.226846][T21955] netlink: 'syz.2.4327': attribute type 1 has an invalid length. [ 471.230917][ T9981] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.238639][T21955] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.4327'. [ 471.310532][ T9981] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.345389][T21960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4328'. [ 471.367461][T21963] netlink: 'syz.2.4327': attribute type 1 has an invalid length. [ 471.392694][T21963] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.4327'. [ 471.952066][T21973] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4331'. [ 472.812380][T22002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4338'. [ 472.870897][T22000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4338'. [ 472.944925][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 472.951642][T22000] xfrm1: entered promiscuous mode [ 472.978856][T22000] xfrm1: entered allmulticast mode [ 473.174817][T22019] bridge_slave_0: left allmulticast mode [ 473.180929][T22021] netlink: 'syz.0.4345': attribute type 1 has an invalid length. [ 473.201631][T22019] bridge_slave_0: left promiscuous mode [ 473.207450][T22019] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.295864][T22019] bridge_slave_1: left allmulticast mode [ 473.309602][T22019] bridge_slave_1: left promiscuous mode [ 473.317518][T22019] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.336949][T22019] bond0: (slave bond_slave_0): Releasing backup interface [ 473.354017][T22019] bond_slave_0: left allmulticast mode [ 473.376715][T22019] bond0: (slave bond_slave_1): Releasing backup interface [ 473.385912][T22019] bond_slave_1: left allmulticast mode [ 473.402294][T22019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.411958][T22019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.422093][T22019] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 473.476251][T22021] 8021q: adding VLAN 0 to HW filter on device bond6 [ 473.658954][T22053] syzkaller0: entered promiscuous mode [ 473.666009][T22054] sctp: [Deprecated]: syz.0.4352 (pid 22054) Use of struct sctp_assoc_value in delayed_ack socket option. [ 473.666009][T22054] Use struct sctp_sack_info instead [ 473.670689][T22053] syzkaller0: entered allmulticast mode [ 473.721988][T22053] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 474.012504][T22075] netlink: 'syz.3.4361': attribute type 6 has an invalid length. [ 474.477317][T22112] netlink: 'syz.0.4371': attribute type 21 has an invalid length. [ 474.486042][T22112] netlink: 'syz.0.4371': attribute type 5 has an invalid length. [ 474.494191][T22112] netlink: 'syz.0.4371': attribute type 6 has an invalid length. [ 474.638026][T22124] netlink: 'syz.1.4375': attribute type 12 has an invalid length. [ 475.033261][T22150] FAULT_INJECTION: forcing a failure. [ 475.033261][T22150] name failslab, interval 1, probability 0, space 0, times 0 [ 475.080476][T22150] CPU: 1 UID: 0 PID: 22150 Comm: syz.2.4382 Not tainted syzkaller #0 PREEMPT(full) [ 475.080503][T22150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 475.080513][T22150] Call Trace: [ 475.080521][T22150] [ 475.080529][T22150] dump_stack_lvl+0xe8/0x150 [ 475.080560][T22150] should_fail_ex+0x412/0x560 [ 475.080592][T22150] should_failslab+0xa8/0x100 [ 475.080615][T22150] ? ovs_flow_alloc+0x24/0x1f0 [ 475.080633][T22150] kmem_cache_alloc_noprof+0x87/0x650 [ 475.080661][T22150] ovs_flow_alloc+0x24/0x1f0 [ 475.080682][T22150] ovs_flow_cmd_new+0x2b9/0xe80 [ 475.080743][T22150] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 475.080822][T22150] ? __nla_parse+0x40/0x60 [ 475.080845][T22150] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 475.080872][T22150] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 475.080904][T22150] genl_family_rcv_msg_doit+0x22a/0x330 [ 475.080936][T22150] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 475.080973][T22150] ? bpf_lsm_capable+0x9/0x20 [ 475.080997][T22150] ? security_capable+0x7e/0x2c0 [ 475.081029][T22150] genl_rcv_msg+0x61c/0x7a0 [ 475.081060][T22150] ? __pfx_genl_rcv_msg+0x10/0x10 [ 475.081084][T22150] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 475.081105][T22150] ? __lock_acquire+0x6b5/0x2cf0 [ 475.081139][T22150] netlink_rcv_skb+0x232/0x4b0 [ 475.081161][T22150] ? __pfx_genl_rcv_msg+0x10/0x10 [ 475.081188][T22150] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 475.081233][T22150] ? down_read+0x272/0x2e0 [ 475.081248][T22150] ? genl_rcv+0xd/0x40 [ 475.081273][T22150] genl_rcv+0x28/0x40 [ 475.081295][T22150] netlink_unicast+0x80f/0x9b0 [ 475.081323][T22150] ? __pfx_netlink_unicast+0x10/0x10 [ 475.081343][T22150] ? netlink_sendmsg+0x650/0xb40 [ 475.081361][T22150] ? skb_put+0x11b/0x210 [ 475.081388][T22150] netlink_sendmsg+0x813/0xb40 [ 475.081419][T22150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.081443][T22150] ? aa_sock_msg_perm+0xf1/0x1b0 [ 475.081471][T22150] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 475.081495][T22150] ____sys_sendmsg+0x972/0x9f0 [ 475.081528][T22150] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.081563][T22150] ? import_iovec+0x73/0xa0 [ 475.081587][T22150] ___sys_sendmsg+0x2a5/0x360 [ 475.081617][T22150] ? __pfx____sys_sendmsg+0x10/0x10 [ 475.081676][T22150] ? __fget_files+0x2a/0x420 [ 475.081692][T22150] ? __fget_files+0x3a0/0x420 [ 475.081718][T22150] __x64_sys_sendmsg+0x1bd/0x2a0 [ 475.081746][T22150] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 475.081780][T22150] ? __pfx_ksys_write+0x10/0x10 [ 475.081811][T22150] do_syscall_64+0x14d/0xf80 [ 475.081835][T22150] ? trace_irq_disable+0x3b/0x150 [ 475.081851][T22150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.081869][T22150] ? clear_bhb_loop+0x40/0x90 [ 475.081890][T22150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.081908][T22150] RIP: 0033:0x7f4300f9c819 [ 475.081925][T22150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.081940][T22150] RSP: 002b:00007f4301e59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.081959][T22150] RAX: ffffffffffffffda RBX: 00007f4301215fa0 RCX: 00007f4300f9c819 [ 475.081972][T22150] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 475.081983][T22150] RBP: 00007f4301e59090 R08: 0000000000000000 R09: 0000000000000000 [ 475.081994][T22150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.082004][T22150] R13: 00007f4301216038 R14: 00007f4301215fa0 R15: 00007ffd74cf8818 [ 475.082035][T22150] [ 475.170406][T22143] netlink: 'syz.0.4379': attribute type 1 has an invalid length. [ 475.360529][ T6538] IPVS: starting estimator thread 0... [ 475.361268][T22143] __nla_validate_parse: 14 callbacks suppressed [ 475.361282][T22143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4379'. [ 475.379778][T22151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4379'. [ 475.480757][T22155] IPVS: using max 31 ests per chain, 74400 per kthread [ 475.621930][T22159] netlink: 'syz.4.4385': attribute type 1 has an invalid length. [ 475.663424][T22167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4386'. [ 475.739998][T22159] 8021q: adding VLAN 0 to HW filter on device bond4 [ 475.863330][T22170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4389'. [ 475.941735][T22175] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 476.050689][T22179] tipc: Enabling of bearer rejected, failed to enable media [ 476.108105][T22182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.130701][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 476.138798][ C1] lec:lec_tx_timeout: lec0 [ 476.143680][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 476.168359][T22185] xt_TCPMSS: Only works on TCP SYN packets [ 476.227227][T22193] vlan2: left promiscuous mode [ 476.233983][T22193] bond3: left promiscuous mode [ 476.244196][T22193] bridge1: left promiscuous mode [ 476.249623][T22193] macvtap0: left allmulticast mode [ 476.263559][T22193] bond6: left promiscuous mode [ 476.287742][ T9986] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.297457][ T9986] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.371387][T22199] xt_bpf: check failed: parse error [ 476.396057][T22195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.406486][T22202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4398'. [ 476.417947][T22195] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.430043][T22195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 476.446813][ T9986] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.496931][ T9986] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.517491][T22202] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4398'. [ 476.653478][T22208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4399'. [ 476.721271][T22213] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4402'. [ 476.726536][T22210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4400'. [ 476.758612][T22210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4400'. [ 477.082765][T22238] FAULT_INJECTION: forcing a failure. [ 477.082765][T22238] name failslab, interval 1, probability 0, space 0, times 0 [ 477.098352][T22238] CPU: 1 UID: 0 PID: 22238 Comm: syz.2.4410 Not tainted syzkaller #0 PREEMPT(full) [ 477.098379][T22238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 477.098388][T22238] Call Trace: [ 477.098395][T22238] [ 477.098402][T22238] dump_stack_lvl+0xe8/0x150 [ 477.098432][T22238] should_fail_ex+0x412/0x560 [ 477.098461][T22238] should_failslab+0xa8/0x100 [ 477.098485][T22238] __kmalloc_cache_noprof+0x88/0x660 [ 477.098507][T22238] ? ovs_flow_cmd_new+0x356/0xe80 [ 477.098534][T22238] ovs_flow_cmd_new+0x356/0xe80 [ 477.098564][T22238] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 477.098639][T22238] ? __nla_parse+0x40/0x60 [ 477.098662][T22238] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 477.098688][T22238] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 477.098729][T22238] genl_family_rcv_msg_doit+0x22a/0x330 [ 477.098759][T22238] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 477.098794][T22238] ? bpf_lsm_capable+0x9/0x20 [ 477.098818][T22238] ? security_capable+0x7e/0x2c0 [ 477.098849][T22238] genl_rcv_msg+0x61c/0x7a0 [ 477.098880][T22238] ? __pfx_genl_rcv_msg+0x10/0x10 [ 477.098902][T22238] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 477.098923][T22238] ? __lock_acquire+0x6b5/0x2cf0 [ 477.098956][T22238] netlink_rcv_skb+0x232/0x4b0 [ 477.098974][T22238] ? __pfx_genl_rcv_msg+0x10/0x10 [ 477.098997][T22238] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 477.099032][T22238] ? down_read+0x272/0x2e0 [ 477.099045][T22238] ? genl_rcv+0xd/0x40 [ 477.099068][T22238] genl_rcv+0x28/0x40 [ 477.099089][T22238] netlink_unicast+0x80f/0x9b0 [ 477.099116][T22238] ? __pfx_netlink_unicast+0x10/0x10 [ 477.099136][T22238] ? netlink_sendmsg+0x650/0xb40 [ 477.099155][T22238] ? skb_put+0x11b/0x210 [ 477.099182][T22238] netlink_sendmsg+0x813/0xb40 [ 477.099209][T22238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.099229][T22238] ? aa_sock_msg_perm+0xf1/0x1b0 [ 477.099254][T22238] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 477.099276][T22238] ____sys_sendmsg+0x972/0x9f0 [ 477.099308][T22238] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.099334][T22238] ? import_iovec+0x73/0xa0 [ 477.099353][T22238] ___sys_sendmsg+0x2a5/0x360 [ 477.099375][T22238] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.099419][T22238] ? __fget_files+0x2a/0x420 [ 477.099430][T22238] ? __fget_files+0x3a0/0x420 [ 477.099450][T22238] __x64_sys_sendmsg+0x1bd/0x2a0 [ 477.099470][T22238] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 477.099495][T22238] ? __pfx_ksys_write+0x10/0x10 [ 477.099518][T22238] do_syscall_64+0x14d/0xf80 [ 477.099535][T22238] ? trace_irq_disable+0x3b/0x150 [ 477.099546][T22238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.099559][T22238] ? clear_bhb_loop+0x40/0x90 [ 477.099575][T22238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.099588][T22238] RIP: 0033:0x7f4300f9c819 [ 477.099601][T22238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.099612][T22238] RSP: 002b:00007f4301e59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.099627][T22238] RAX: ffffffffffffffda RBX: 00007f4301215fa0 RCX: 00007f4300f9c819 [ 477.099637][T22238] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 477.099645][T22238] RBP: 00007f4301e59090 R08: 0000000000000000 R09: 0000000000000000 [ 477.099653][T22238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.099661][T22238] R13: 00007f4301216038 R14: 00007f4301215fa0 R15: 00007ffd74cf8818 [ 477.099682][T22238] [ 477.556191][T22245] tipc: Started in network mode [ 477.575872][T22245] tipc: Node identity b6cff2b93ea1, cluster identity 6 [ 477.600796][T22245] tipc: Enabled bearer , priority 0 [ 477.639008][T22245] syzkaller0: entered promiscuous mode [ 477.656602][T22245] syzkaller0: entered allmulticast mode [ 477.685886][T22256] validate_nla: 33 callbacks suppressed [ 477.685905][T22256] netlink: 'syz.4.4416': attribute type 1 has an invalid length. [ 477.817548][T22272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.832670][T22245] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 477.928401][T22267] tipc: Resetting bearer [ 477.972670][T22282] FAULT_INJECTION: forcing a failure. [ 477.972670][T22282] name failslab, interval 1, probability 0, space 0, times 0 [ 478.010239][T22282] CPU: 0 UID: 0 PID: 22282 Comm: syz.1.4424 Not tainted syzkaller #0 PREEMPT(full) [ 478.010263][T22282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 478.010273][T22282] Call Trace: [ 478.010280][T22282] [ 478.010288][T22282] dump_stack_lvl+0xe8/0x150 [ 478.010316][T22282] should_fail_ex+0x412/0x560 [ 478.010348][T22282] should_failslab+0xa8/0x100 [ 478.010371][T22282] __kmalloc_cache_noprof+0x88/0x660 [ 478.010391][T22282] ? ovs_flow_cmd_new+0x356/0xe80 [ 478.010415][T22282] ovs_flow_cmd_new+0x356/0xe80 [ 478.010442][T22282] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 478.010515][T22282] ? __nla_parse+0x40/0x60 [ 478.010537][T22282] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 478.010562][T22282] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 478.010594][T22282] genl_family_rcv_msg_doit+0x22a/0x330 [ 478.010632][T22282] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 478.010669][T22282] ? bpf_lsm_capable+0x9/0x20 [ 478.010691][T22282] ? security_capable+0x7e/0x2c0 [ 478.010722][T22282] genl_rcv_msg+0x61c/0x7a0 [ 478.010752][T22282] ? __pfx_genl_rcv_msg+0x10/0x10 [ 478.010776][T22282] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 478.010797][T22282] ? __lock_acquire+0x6b5/0x2cf0 [ 478.010831][T22282] netlink_rcv_skb+0x232/0x4b0 [ 478.010850][T22282] ? __pfx_genl_rcv_msg+0x10/0x10 [ 478.010874][T22282] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 478.010911][T22282] ? down_read+0x272/0x2e0 [ 478.010925][T22282] ? genl_rcv+0xd/0x40 [ 478.010950][T22282] genl_rcv+0x28/0x40 [ 478.010971][T22282] netlink_unicast+0x80f/0x9b0 [ 478.010998][T22282] ? __pfx_netlink_unicast+0x10/0x10 [ 478.011019][T22282] ? netlink_sendmsg+0x650/0xb40 [ 478.011037][T22282] ? skb_put+0x11b/0x210 [ 478.011063][T22282] netlink_sendmsg+0x813/0xb40 [ 478.011093][T22282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.011117][T22282] ? aa_sock_msg_perm+0xf1/0x1b0 [ 478.011144][T22282] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 478.011166][T22282] ____sys_sendmsg+0x972/0x9f0 [ 478.011200][T22282] ? __pfx_____sys_sendmsg+0x10/0x10 [ 478.011233][T22282] ? import_iovec+0x73/0xa0 [ 478.011258][T22282] ___sys_sendmsg+0x2a5/0x360 [ 478.011288][T22282] ? __pfx____sys_sendmsg+0x10/0x10 [ 478.011346][T22282] ? __fget_files+0x2a/0x420 [ 478.011362][T22282] ? __fget_files+0x3a0/0x420 [ 478.011389][T22282] __x64_sys_sendmsg+0x1bd/0x2a0 [ 478.011416][T22282] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 478.011449][T22282] ? __pfx_ksys_write+0x10/0x10 [ 478.011481][T22282] do_syscall_64+0x14d/0xf80 [ 478.011504][T22282] ? trace_irq_disable+0x3b/0x150 [ 478.011520][T22282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.011537][T22282] ? clear_bhb_loop+0x40/0x90 [ 478.011559][T22282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.011577][T22282] RIP: 0033:0x7fae70b9c819 [ 478.011593][T22282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.011615][T22282] RSP: 002b:00007fae719d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.011634][T22282] RAX: ffffffffffffffda RBX: 00007fae70e15fa0 RCX: 00007fae70b9c819 [ 478.011646][T22282] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 478.011658][T22282] RBP: 00007fae719d0090 R08: 0000000000000000 R09: 0000000000000000 [ 478.011668][T22282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.011678][T22282] R13: 00007fae70e16038 R14: 00007fae70e15fa0 R15: 00007ffdd3f18498 [ 478.011708][T22282] [ 478.151512][T22242] tipc: Resetting bearer [ 478.483926][T22242] tipc: Disabling bearer [ 478.601891][T22300] netlink: 'syz.4.4429': attribute type 17 has an invalid length. [ 478.609863][T22300] bond0: option all_slaves_active: invalid value (73) [ 478.622201][T22301] IPVS: Error connecting to the multicast addr [ 478.724837][T22309] openvswitch: netlink: IP tunnel dst address not specified [ 479.039867][T22321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.052264][T22304] veth15: entered allmulticast mode [ 479.242692][T22303] bond7 (unregistering): Released all slaves [ 479.324417][T22320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.602679][T22351] erspan1: entered allmulticast mode [ 479.657520][T22356] netlink: 'syz.2.4442': attribute type 2 has an invalid length. [ 479.665776][T22357] netlink: 'syz.2.4442': attribute type 2 has an invalid length. [ 479.674451][T22356] netlink: 'syz.2.4442': attribute type 11 has an invalid length. [ 479.683141][T22357] netlink: 'syz.2.4442': attribute type 11 has an invalid length. [ 479.827769][T22360] syzkaller0: entered promiscuous mode [ 479.850734][T22360] syzkaller0: entered allmulticast mode [ 480.102147][T22368] nbd0: detected capacity change from 0 to 63 [ 480.115510][ T5834] block nbd0: Receive control failed (result -32) [ 480.122226][T21921] block nbd0: Send control failed (result -32) [ 480.122584][T21921] block nbd0: Request send failed, requeueing [ 480.165148][ T2025] block nbd0: Dead connection, failed to find a fallback [ 480.173669][ T2025] block nbd0: shutting down sockets [ 480.179450][ T2025] blk_print_req_error: 138 callbacks suppressed [ 480.179470][ T2025] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 480.199528][ T2025] buffer_io_error: 138 callbacks suppressed [ 480.199542][ T2025] Buffer I/O error on dev nbd0, logical block 0, async page read [ 480.200745][ T7309] unregister_netdevice: waiting for bond1 to become free. Usage count = 2 [ 480.209511][T21921] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 480.235982][T21921] Buffer I/O error on dev nbd0, logical block 1, async page read [ 480.239392][T22383] vlan5: entered promiscuous mode [ 480.244302][T21921] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 480.259381][T21921] Buffer I/O error on dev nbd0, logical block 2, async page read [ 480.267319][T21921] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 480.277520][T21921] Buffer I/O error on dev nbd0, logical block 3, async page read [ 480.285667][T21921] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 480.295977][T21921] Buffer I/O error on dev nbd0, logical block 0, async page read [ 480.304016][T21921] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 480.325031][T21921] Buffer I/O error on dev nbd0, logical block 1, async page read [ 480.333234][T21921] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 480.342968][T21921] Buffer I/O error on dev nbd0, logical block 2, async page read [ 480.353036][T21921] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 480.387880][T21921] Buffer I/O error on dev nbd0, logical block 3, async page read [ 480.396110][T21921] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 480.405693][T21921] Buffer I/O error on dev nbd0, logical block 0, async page read [ 480.413539][T21921] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 480.423272][T21921] Buffer I/O error on dev nbd0, logical block 1, async page read [ 480.434689][T21921] ldm_validate_partition_table(): Disk read failed. [ 480.441913][T21921] Dev nbd0: unable to read RDB block 0 [ 480.447803][T21921] nbd0: unable to read partition table [ 480.459421][T21921] ldm_validate_partition_table(): Disk read failed. [ 480.466533][T21921] Dev nbd0: unable to read RDB block 0 [ 480.473145][T21921] nbd0: unable to read partition table [ 481.150860][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 481.158997][ C1] lec:lec_tx_timeout: lec0 [ 481.163655][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 483.174651][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 487.490390][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6330 ms [ 487.498484][ C1] lec:lec_tx_timeout: lec0 [ 487.503261][ C1] lec:lec_start_xmit: lec0:No lecd attached