last executing test programs: 5.13098515s ago: executing program 0 (id=5208): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r1, 0x5421, 0x0) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) close(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000000300"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000002c001280080001006873720020000280050003000f0000000a0004009ef377a82b07000008000100", @ANYRES32=r0, @ANYBLOB="34d9194018faa7ecfc3a2abf887bf7"], 0x4c}}, 0x50) 5.104124572s ago: executing program 0 (id=5210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200402}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0xb, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x11, 0x1, '/dev/net/tun\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r0, &(0x7f0000000140)=ANY=[], 0xc2) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[], 0xffdd) 3.234678496s ago: executing program 0 (id=5225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) (async, rerun: 32) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0x0, 0x4e21}, {@in=@broadcast, 0x0, 0x33}, @in6=@remote, {}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x0, 0x0, 0xa}, [@algo_auth={0x89, 0x1, {{'sha256\x00'}, 0x208, "408b1465cc98145235faa3108e14d7b2fee081eb57514a4196af7d15b24d9eb526931a287b2e7c3c563ca407db93c418bddf98a2dbff0f1ac7fa6d079ef090fb51"}}]}, 0x17c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100003052abd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="18800300a0010200140012800b0001006d616373656300000400028008000500", @ANYRES32=r5, @ANYBLOB="080003"], 0x44}}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r7, 0x0, 0x0) (async, rerun: 32) r8 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x140c, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.137159241s ago: executing program 2 (id=5226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x34, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x12, 0x0, @opaque="6b8b836832cfd4d288a8"}}}}}, 0x0) (async) close(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9379, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x5}, @private1, [], "8029335287b7a081"}}}}}}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f5101007f51010049f4e34e860200eb08000240000000000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.050197648s ago: executing program 0 (id=5227): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@getchain={0x7f, 0x66, 0xd9c3c2591a058268, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x9}, {0xfff1, 0xa}, {0xe, 0xd}}}, 0x34}}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xe, 0xb}, {0x9, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000002400)="800000", 0x3, 0x200040c9, &(0x7f00000001c0)={0x11, 0x88a8, r9, 0x1, 0x3}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c"], 0x68}}, 0x24040800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r11, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) (async) r12 = openat$cgroup_pressure(r11, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) preadv(r12, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) socket$kcm(0x10, 0x2, 0x10) (async) r13 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000004300)=@delchain={0x3dc4, 0x65, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x6, 0xfffc}, {0xffe0, 0xe}, {0xfff1, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_flow={{0x9}, {0x205c, 0x2, [@TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_EMATCHES={0x84, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x80, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x60, 0x2, 0x0, 0x0, {{0x4d00, 0x0, 0xb696}, "50d69f870eb5e12dcf1e16f7ba896999b4464959364092aa75f4303f8ef637ddb2fa8da790a559f7cdbc59ab3e24bad32cadc3bd23024b50474842ac05b183a0511c1ddfbdb257e8c8e7fa9bae3ee93a10"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x3}, {0x6, 0xf57, 0x4, 0x8000}}}]}]}, @TCA_FLOW_ACT={0x1f40, 0x9, 0x0, 0x1, [@m_gact={0x50, 0x1b, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x6, 0x20000000, 0x7fffffff, 0x3a}}]}, {0xc, 0x6, "4fa2bb36453af171"}, {0xc}, {0xc, 0x8, {0x0, 0x2eafd16e31bfc6f0}}}}, @m_csum={0x168, 0x1f, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5712, 0x7, 0x4ea3, 0x800}, 0x6c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x20000000, 0x400, 0x1}, 0x1f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xfffffffb, 0x3, 0xffcc, 0x6}, 0x46}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x35}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x800, 0x0, 0x9, 0x4}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffff800, 0x80000001, 0x10000000, 0xb, 0x200}, 0x7d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffe, 0x2, 0x1, 0x7, 0x96}, 0x71}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xff, 0x8, 0x7, 0x7}, 0x68}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x401, 0xffffffffffffffff, 0x9, 0x1}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9ec, 0x8, 0x5, 0x9}, 0x68}}]}, {0x21, 0x6, "ec96409eed1dc3b201d833d6af6ab61c096a1130ebcf505eeb852314ff"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ctinfo={0xf8, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x10000}]}, {0xc1, 0x6, "4ad65d3b5ba5819b2483d5c29126a395e2e31fa09ebcaced22930f5b25dd17a962b9af1974308aa47e5b47141bc0e1895a470051598a4469849899dd4ce04aa3bf74f2a9ee976766627c2b59b5a4ef4703f4d69d38cf07c35302c681db1c98f32575425fdd0369912a7732fd0ce7d090dea5b04410ba83acdc2485116e51fb98d47a77390c050061be1abac8c07f3033e24d8884fa83b40dd36ffa73e493543c8ac898cc5dfad358a2471594c6252366eb355e7261a992f6dce7bc392d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ife={0x78, 0xf, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @random="9a3e71218161"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x7, 0x1, 0x54, 0x6}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @local}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x1ad0, 0x19, 0x0, 0x0, {{0xb}, {0x1a54, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x1, 0x2, 0x1ff, {0x1, 0x1, 0x48f, 0x7, 0x1b, 0x7f}, {0x5, 0x1, 0x2, 0x3, 0x80, 0x8}, 0x9, 0x2, 0x80000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x20}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x80000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fffffff, 0x7, 0x1, 0x1000, 0x2f67, {0x9b, 0x0, 0x3, 0x7, 0x800, 0x157}, {0x0, 0x0, 0x7fff, 0x9d, 0x2, 0x8001}, 0x9, 0x1, 0x2}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffa}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x4, 0xf, 0x7f, 0x2, {0xe, 0x1, 0x8000, 0x8, 0x3, 0x10}, {0x1, 0x0, 0x0, 0xc, 0xfffa, 0x7f}, 0xd81, 0xb, 0x72581878}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffd}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x5, 0x4, 0x7, {0xc0, 0x2, 0x4, 0x4e61, 0x8, 0x8001}, {0x0, 0x2, 0x1, 0x0, 0xfffb, 0x3}, 0x3, 0xe7, 0x1}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x68}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x4, 0x4, 0x9, {0xe, 0x1, 0xb92, 0x8000, 0x200, 0x8e}, {0xb3, 0x0, 0x55, 0x9, 0x5, 0xfff}, 0x7ed, 0x81, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x0, 0x3ff, 0x4, 0x7, 0xfffffffe, 0x3, 0x81, 0x4, 0x3, 0x4, 0x1, 0x7fffffff, 0xfffffff8, 0x1208, 0x80, 0x2, 0x3, 0x2, 0x3, 0x4, 0x9, 0x3, 0x1a45, 0xc41a, 0x0, 0x7, 0xf9, 0x4000, 0x2, 0x4c, 0x0, 0x400, 0x5, 0x7cb, 0x3, 0x1, 0xff, 0xffffffff, 0x8, 0x9, 0x5, 0x13c, 0xf79e, 0x9, 0x0, 0x8, 0x4, 0x401, 0x2, 0xe, 0x9a, 0x55a, 0x2, 0x3cbd, 0x1, 0x1, 0x8001, 0x7, 0xf, 0x6, 0xa, 0x1f, 0x9, 0xb1, 0x5, 0x5, 0x200, 0x2, 0x9, 0x9, 0xfffffffd, 0x5, 0x6, 0x9, 0x40, 0x100, 0xfff, 0x7f, 0x2, 0x1, 0x6, 0x0, 0x8, 0x1, 0x1, 0x3, 0x1, 0x7, 0x3, 0x7, 0xe, 0x2, 0x8, 0x7, 0xa2e, 0x7, 0x2, 0x6, 0x80, 0x0, 0x8000, 0x10, 0x7, 0xb, 0xe, 0x7, 0x0, 0x8, 0x9690, 0x0, 0x1, 0x3, 0x7, 0x80000000, 0xffff, 0xdf, 0xa, 0x2, 0xfffffffe, 0x3, 0x2, 0x8, 0x8, 0x6, 0x9, 0x40, 0x80000000, 0x15, 0xfffffff8, 0x6, 0x5, 0xe6ba, 0x20000000, 0xffff, 0x9, 0x1, 0x4, 0x2, 0x5, 0x2, 0x3, 0x6, 0xd, 0xa1d5, 0x7fff, 0x401, 0x1, 0x5, 0x4, 0xfffffff9, 0x7ff, 0x7, 0x9, 0xde2, 0x595b, 0x7f, 0xfff, 0xd, 0x4, 0x28c0, 0x1, 0x4, 0xf, 0x2, 0xfffff800, 0x8, 0x10000, 0x5, 0x10001, 0x383d, 0x3, 0x5, 0x101, 0x10001, 0x9, 0xbdc9, 0x3, 0x6f8, 0x2, 0x2, 0x7fff, 0xff, 0x3, 0x6, 0x1, 0x5, 0xf6, 0x1, 0x9, 0x3, 0x736, 0x22, 0x9, 0x4, 0x10, 0x2, 0x168, 0x5, 0x8, 0x9, 0x1, 0x1, 0x5, 0x7, 0x1d, 0x40, 0x8, 0x9, 0x1, 0x10001, 0x8001, 0x6, 0xf7, 0x81, 0x5, 0x0, 0x10000, 0x29cf, 0x3a0f, 0x7fff, 0x7, 0x3, 0x9, 0x2, 0x80, 0x3ff, 0x3ff, 0x9, 0x5, 0x1, 0x2, 0xc, 0x1, 0x900, 0x8000, 0x0, 0x8, 0xff, 0x7, 0x62, 0x1, 0x200, 0x3, 0x2, 0x7ff, 0x4, 0x9, 0x9, 0x8, 0x6, 0x1, 0x1, 0xd, 0x6, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4ccb, 0x2, 0x8, 0x3, 0x3, {0x0, 0x1, 0x0, 0x81, 0x0, 0x6}, {0x7, 0x1, 0x9, 0x9, 0x8, 0x9}, 0x90e, 0x5, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x1, 0x451, 0x4, 0x0, 0x2, 0x100, 0x8, 0x62e, 0x400, 0x4, 0x4, 0x9, 0x3, 0xeaa, 0x9, 0x2, 0x6f, 0x0, 0x6, 0x5, 0x3, 0x5, 0x3, 0x40, 0x8, 0x7, 0x3, 0x4, 0x2, 0x0, 0x4, 0x1, 0x0, 0x4, 0x101, 0x8a49, 0x6, 0x4, 0x4, 0x80000001, 0x9, 0x6, 0x100, 0x0, 0x7, 0x5, 0xfffffff7, 0x7, 0x9, 0x53, 0x5, 0x678, 0xffff4552, 0x7, 0x8, 0x9e81, 0xd, 0x9, 0x4, 0x63, 0x4, 0x4, 0x8, 0x7, 0x5, 0xa5a4, 0x7d1f, 0x60, 0x2, 0x10, 0x0, 0x6, 0x8, 0x401, 0x2, 0x6, 0x3, 0x6, 0x7, 0x7, 0x2ed1, 0x2, 0xcb6b, 0x5, 0x2, 0x6, 0x6, 0x80, 0x4, 0xffffffff, 0x0, 0x2, 0xfffffc00, 0x3, 0xad, 0xe7d, 0x3, 0x75, 0x2, 0x1ff, 0x1, 0xff, 0x80000000, 0x80000000, 0x10, 0xe6f, 0x1, 0x10001, 0x1000, 0xf, 0x9, 0x1, 0xfff, 0x0, 0x3a4c282f, 0x3, 0xfffffff6, 0x1, 0x1000, 0x4, 0x2, 0x4, 0x8cf, 0x6, 0x6, 0x2, 0x1, 0x1, 0x7, 0x10001, 0x962a, 0xf, 0x101, 0x9, 0xf7ae, 0x6, 0x5, 0x8, 0x8, 0x3ff, 0x7, 0xfffffff7, 0x3, 0x2, 0x3ff, 0xfffffff2, 0x3ff, 0x1, 0x9fca, 0x0, 0x7, 0xc72, 0x269, 0xff, 0x7, 0x3, 0x2, 0x5, 0xfffffff8, 0xe, 0x1, 0x1000, 0xffff531c, 0x9, 0x0, 0x0, 0x8, 0x7, 0xfffff000, 0x6, 0x3, 0xbc3c, 0x2, 0xffff, 0xffffffff, 0x7c3f, 0x400, 0x8, 0xfffffffa, 0x80000001, 0x8, 0x4, 0x400, 0x1, 0xc1, 0xb, 0x6, 0x1, 0x8, 0x1, 0xffff8001, 0x5, 0x10, 0x4, 0xffffffff, 0x35d, 0x40, 0x7fff, 0x5e, 0xd339, 0x1, 0x6, 0x7, 0x3, 0xd, 0xffff, 0x8, 0x3, 0xb, 0x7, 0x0, 0x0, 0xffffffff, 0x1ff, 0x0, 0x4258, 0x1, 0x1, 0x8, 0x6, 0x8, 0x8, 0x80000000, 0x80000001, 0xff, 0x8, 0x7fffffff, 0x184, 0x2, 0x8, 0x4, 0x395e1906, 0x9, 0x8, 0x6a7, 0x7, 0x1000100, 0x4, 0xaece, 0xa744, 0x6, 0x401, 0x200, 0x6, 0x4, 0x4, 0x80000000, 0x2, 0x8, 0x33, 0x94f, 0xd55, 0x6, 0x401, 0x251]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf809}, @TCA_POLICE_RATE={0x404, 0x2, [0xee6, 0x9, 0x401, 0x7, 0xc, 0x7, 0x10000, 0x80000000, 0x9, 0xffffd42a, 0xee48, 0x7, 0x200, 0xe2, 0x0, 0x8, 0xfffffff8, 0x3, 0x7, 0x0, 0x5, 0x526, 0x0, 0x2, 0x6, 0x105, 0x3f, 0x7, 0x8, 0x5, 0xffffffff, 0x9, 0x1ff, 0x7, 0x3, 0x7, 0x100, 0x3ff, 0x5, 0x9, 0x10001, 0x100, 0x8, 0x6b9, 0x62, 0x3, 0x9, 0xfffffff8, 0x5, 0x4, 0x9, 0x8, 0x9, 0x6, 0x193, 0x4, 0x3, 0x7e, 0x0, 0x3, 0xffffffb8, 0x100, 0xf, 0x4, 0x2, 0x5, 0x0, 0x1, 0xe, 0xe, 0x7, 0x3, 0x7, 0xfffffffd, 0x800, 0x5, 0x2, 0xc, 0x0, 0x3, 0x80000000, 0xb, 0x5, 0x10001, 0x3ff, 0xa4c, 0x1, 0x3, 0x5, 0xf, 0x39d, 0x1, 0x4, 0x7, 0x9, 0x3, 0x5, 0x8, 0x0, 0x800, 0x80, 0x7, 0x1, 0xffffffff, 0x7e9, 0x4, 0xff, 0x3, 0xfffffff9, 0xfffffffe, 0x7, 0x6, 0x7, 0x7ff, 0x5, 0xffff, 0x1f1, 0x2, 0x5, 0x2, 0x8, 0x0, 0x2, 0xa03e, 0x0, 0x6, 0x5, 0x2, 0x0, 0x4d, 0x3, 0x7f, 0x7ff, 0xfffffff8, 0x8, 0x1, 0x101, 0x8, 0x8293, 0x6, 0x81, 0x7fffffff, 0x7, 0x6, 0x9, 0x1390, 0x5, 0x4, 0x3, 0x0, 0x1, 0x1, 0x8, 0x3, 0x3, 0x9, 0x8, 0xb7, 0x20000, 0xfffffffe, 0xeec, 0x1, 0x7, 0x800, 0x7, 0x6, 0x10000, 0x0, 0x1, 0x4, 0x1039, 0x4678, 0x6, 0x0, 0x8, 0xfff, 0xa, 0x0, 0x4, 0x3ff, 0x1, 0x7f, 0x0, 0x4, 0x0, 0xa, 0x3, 0xa1, 0x0, 0xfff, 0x1, 0xe, 0xfffffff7, 0x1, 0x565, 0x5, 0x4, 0x0, 0x2, 0x8001, 0x6, 0x9, 0x13e, 0x3, 0xd, 0x6, 0x0, 0x8, 0xc11, 0x101, 0x101, 0x8, 0x4, 0xffffffff, 0xc, 0x7, 0x1, 0x7, 0xfff, 0x80000000, 0x3, 0x80, 0x0, 0x0, 0x4, 0x80000, 0x1, 0x48, 0x2, 0xfffffff6, 0x4c, 0x1000, 0x200, 0x5a41, 0x9, 0x7, 0x0, 0x0, 0x6, 0x6, 0x2afe, 0x80000001, 0x401, 0xfff, 0x4, 0x7, 0x8, 0x1, 0x5, 0x0, 0x81, 0x6, 0x9, 0xf6d, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf3, 0xe3c2, 0xe, 0x6, 0xbcef, 0xba, 0x304, 0x6, 0xfffffff9, 0x401, 0xe, 0xed, 0xbc7f, 0x9, 0xffff, 0x8000, 0xfff, 0x2, 0x6, 0x40, 0x1, 0x10000000, 0x3, 0x0, 0x8, 0x1, 0x4, 0x7f, 0x6, 0x1, 0x1, 0x0, 0x8, 0x7f, 0x8, 0x1, 0x401, 0x9, 0x3, 0x4, 0x6, 0x2, 0x10001, 0xc4b, 0x3, 0x7, 0x5, 0x1, 0x1, 0x80000001, 0x8, 0x6, 0x4, 0x8c55, 0x7fffffff, 0x9, 0xbd, 0x0, 0x7ff, 0x6, 0xa, 0x4988, 0x81, 0x9, 0x401, 0x2, 0x5cf0dfd2, 0x3, 0x5, 0x3, 0x1, 0x6, 0x7f, 0x200, 0x76, 0x15c43d80, 0x8d, 0x5, 0x7, 0x9, 0xfffffffc, 0x7, 0x58fd, 0xfffffff7, 0x6, 0x1, 0xf, 0x0, 0xe, 0x80000000, 0x2, 0x26f, 0x7, 0x6, 0x8001, 0x12a, 0x1, 0xff, 0x2, 0x6, 0x800080, 0x2, 0x1ff, 0x7f, 0x0, 0x7, 0x3, 0x6, 0x81, 0xf, 0x8001, 0x1, 0x4, 0x5, 0x7, 0x0, 0xfff, 0x3, 0x4, 0x2, 0x20000, 0x0, 0x14, 0x2, 0x8000, 0x6, 0x5, 0x1, 0xac2, 0x5, 0x2, 0x8, 0x7, 0x24, 0x7fff, 0x3, 0xffffff5c, 0x3, 0x8fc9, 0x0, 0x1, 0xfffffff8, 0x4, 0x9e4c, 0x6, 0x7, 0x4, 0x4, 0xa4, 0x8, 0x4, 0x400, 0x8, 0x2, 0x8, 0x81, 0xffff, 0x4, 0x34e1, 0x2b, 0x7, 0x10001, 0x4, 0x7fff, 0x2, 0x9, 0x80000000, 0x6, 0x1a, 0xdf12, 0x39, 0x5, 0x8, 0x7, 0x401, 0x3, 0xa, 0x10, 0xff, 0x5, 0x4, 0xfff, 0x4, 0x2, 0x8, 0x5, 0x4, 0x8, 0xdf, 0x8, 0x7fff, 0x6, 0xfffffe01, 0x4, 0x2, 0x9, 0x62b, 0x4, 0x8, 0xfb26, 0x6, 0xe0f, 0x2, 0x2, 0xf9f, 0x8, 0x80000000, 0x9776, 0x800, 0x1d2, 0xa, 0x5, 0x8, 0x8, 0xe6d, 0x2, 0xffffffff, 0x732e, 0x3, 0x0, 0x2, 0xff, 0x1, 0x5, 0x9, 0x0, 0x23, 0xe, 0x9, 0x7fff, 0x38a4e669, 0x10, 0x3ff, 0x8, 0x4, 0x5, 0x9, 0x0, 0x8, 0xfffff298, 0x6, 0x5, 0x6, 0x1, 0x2, 0x8, 0xc326, 0x1, 0x1ec00, 0x1, 0x1000, 0x7ff, 0x7fff, 0x9, 0x1, 0x4915]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x40000000, 0x8, 0xd9, 0x8, 0x2, 0x5, 0xde28, 0xc41c, 0x1, 0x3, 0xa88, 0xfffffff0, 0xfffffff8, 0x7, 0x5, 0x1c000, 0x2, 0x5, 0x8, 0xb, 0x3, 0xfffffffb, 0xc9d, 0x4bd8, 0x100, 0x800, 0x691, 0x80000001, 0x8, 0xfff, 0x6, 0x3, 0xebe, 0xfffff09b, 0x80, 0x4, 0x5, 0x80000000, 0x5e, 0x101, 0x2, 0x4a2d0a98, 0x5, 0x2, 0x0, 0x6, 0x7, 0x625, 0x5, 0x7, 0x3, 0x9, 0x7, 0x2, 0x5, 0x3ff, 0x7, 0x3ff, 0x87, 0x8, 0x10001, 0x7, 0x80000001, 0x47a, 0xa46, 0x4, 0x1ff, 0x622, 0x7, 0x3, 0x8, 0x6, 0x707b, 0xf, 0x80000001, 0xed6, 0x1, 0x1, 0x5, 0x10001, 0x6, 0x48, 0x7, 0x1, 0x9f7, 0x1b9, 0x3, 0xce7, 0x6, 0x5, 0x0, 0x80000001, 0x1, 0x7, 0x5ff, 0x7570, 0x2, 0x7a, 0xfffffffa, 0x1, 0xfff, 0xffffffff, 0xc, 0x7, 0x7, 0x7, 0x306, 0x9, 0xfff, 0xffffffff, 0x7fff, 0x9, 0x0, 0xb9, 0xf, 0x2, 0x6, 0x8, 0xb, 0x7, 0x9, 0x3, 0xecca, 0x9, 0x7fffffff, 0x4, 0x3, 0x7f, 0x7, 0x5, 0x6, 0x1ff, 0x5, 0x1, 0x9, 0x9, 0x7f, 0xd7, 0x2, 0x1, 0x6, 0x1, 0xca87, 0x2, 0x2, 0x7, 0x5, 0x4, 0x8, 0x270, 0x6, 0xfffffff5, 0x7f, 0x0, 0x100, 0xb95, 0x4, 0x3, 0x1, 0x2, 0x5, 0x800, 0x7, 0xd, 0xa, 0xd67, 0xffffffc0, 0xffffffff, 0x6, 0x7fffffff, 0x4, 0xc0, 0x7, 0x1, 0x80, 0xffffff93, 0x50000, 0x80000, 0xf, 0x93d, 0x8, 0x1, 0xffff, 0x9000, 0xe, 0x40, 0x6, 0x1, 0x7, 0x9, 0x2, 0x2, 0x4, 0x4, 0x7f, 0xc, 0x73c73b35, 0x9, 0x5, 0x4, 0x7, 0x4, 0x9, 0x71f6, 0x6, 0x9, 0x8001, 0x1400, 0x4, 0x9, 0x2, 0x7, 0x9, 0x9, 0xffff8000, 0x2, 0x4, 0x24c2b8e9, 0x7, 0x3, 0xf13, 0xdf9, 0x10000, 0x2e5, 0x10001, 0x7, 0x3ff, 0x2, 0x3, 0x8, 0x1d54, 0xc, 0x8, 0x6, 0xfffffffa, 0x6, 0xc0000000, 0x800, 0xfffffff2, 0x7, 0xa, 0x3, 0x37, 0x9, 0x80000000, 0x8, 0x2, 0x3, 0x5, 0x5, 0x87c4, 0x1, 0x0, 0x2, 0xe1ab, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x46c, 0x2, 0x5, 0x9, 0x1, 0x9, 0x3, 0x3ff, 0x1, 0x9, 0x0, 0xc, 0x7a4, 0xf, 0x3, 0x7, 0x7ff, 0x7, 0x81, 0x4, 0x7, 0x10001, 0x9, 0x6, 0xe529, 0x31d3, 0x1, 0x3, 0x3, 0x2, 0x6, 0x7f, 0x80000001, 0xc, 0x6, 0x1, 0x200, 0x3, 0x6, 0x3, 0x9, 0xa, 0xfffff000, 0x8, 0x9, 0x9, 0x5, 0x0, 0xff, 0xfffffffd, 0x805, 0xfffff800, 0x400, 0xa56, 0x1, 0x8, 0xd, 0x8, 0x8000, 0x5, 0x7ff, 0x3, 0xaa1, 0x401, 0x800, 0x1, 0xc9, 0x4, 0x9c7f, 0x66e1, 0x0, 0x8, 0x80000001, 0x100, 0x0, 0xfffffff9, 0x5, 0x8, 0x800, 0xeb, 0x5, 0xcbc, 0x3ff, 0x2, 0x8, 0x1, 0x9, 0x4, 0x1, 0xb75, 0x62, 0xc000, 0x5, 0x3, 0xff, 0x8, 0x71c4, 0x8, 0x80, 0x0, 0x1, 0x5, 0xb, 0x4, 0x7, 0xcb, 0x8000, 0x0, 0x8, 0x8000, 0xc53d, 0xfffffff6, 0x4, 0x106, 0x3, 0xf7c, 0x559cc25b, 0x5, 0x3ff, 0x0, 0x7ff, 0x8, 0x5, 0x1, 0x1, 0x80, 0xc3, 0x6, 0x6, 0x5, 0xff, 0x7, 0xf59, 0x6, 0x8, 0x5, 0x1, 0x5, 0x0, 0x2, 0x9, 0x80, 0xffff, 0x1ff, 0x9, 0x1, 0x4, 0x7, 0x101, 0xd, 0x6, 0xbf, 0xd, 0x9, 0x800, 0xfffeffff, 0x800, 0x3, 0x2e, 0xc, 0xd, 0x0, 0x1, 0x8000, 0x7, 0x9cfc, 0x7, 0x7, 0x7, 0xa, 0x9, 0x1, 0x8, 0x401, 0x2, 0x4, 0x5, 0x2, 0xff, 0x82, 0x80, 0xe6f2, 0xffffffff, 0x3, 0x2, 0x5, 0xc000000, 0x3, 0xc06, 0x9e9f, 0x3, 0x9, 0x4, 0x52, 0x548, 0x4, 0x1, 0xc9, 0x4, 0xfffffffc, 0xfffffffd, 0x8, 0x8, 0x31, 0x200, 0x7, 0x200, 0x7, 0xf, 0xf7, 0x81, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80000000, 0x7, 0x5, 0xb, 0x6, 0x101, 0x6, 0x9, 0x2, 0x2, 0x8a, 0x5, 0x6, 0x9b, 0x9, 0x4, 0x2, 0x80, 0x80000001, 0x4, 0x0, 0x9, 0x4, 0x20000000, 0xce, 0x4, 0x7ff, 0x0, 0x4, 0x7fffffff, 0x7fffffff, 0x3ff, 0xfffffff8, 0x2, 0x2, 0xfffffff9, 0x401, 0x4, 0x5, 0x2be]}, @TCA_POLICE_RATE64={0xc}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x2, 0x27a, 0x4, 0x1, {0x1, 0x2, 0x1, 0x8, 0x6, 0xc}, {0xe, 0x0, 0xc, 0x8000, 0x2, 0x5}, 0x8, 0x0, 0x1000}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3ff}]]}, {0x51, 0x6, "65d4ecd2c65f538dd8ea5e2e673f638660badf707281ac333f58162ca11361d4340d6282f204b245004800c8caedd49b2f7be21b9e15f80c842091b6210f2cd53702b881af2f7874335cd7190e"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x144, 0x5, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x4, 0xf597d6a9c9f6fdcc, 0x9}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x5, 0xff, 0xffff}, 0x7}}]}, {0xdf, 0x6, "7137c05f6b3ff40488766a48199379ae3cdd72e6e0fd70fb7fd92eb1257bc7ef2ab3cc8b1793297763dcc69f3fdc3d1e0f7a584ee0ca3a67097b6b39c02bff61b06abab52f0f638964069adeab576d0f5ceeefb7be1fa44cf2748fb9296856dd49c971478bed09932faf35276e0955d6d1e7eb1188f46865e4034b5623ce96296461e71db23989c2b6b6b5a25d7b448cfaa03790434c763f5b4502a12146e30d59d0d1a2fe427ca6656b8714534a3786565eb20b021e5f1b13d46ea1d527276e740c058da95e97366b41fbaa19a6e1471b72e042612daa075ac787"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_FLOW_POLICE={0x7c, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x1, 0x0, 0x3, 0x9, {0x80, 0x2, 0x5, 0x2, 0x5, 0x200}, {0x8, 0x1, 0x3, 0x100, 0x9, 0x6}, 0x6, 0x80, 0x6}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x81, 0x2, 0xc306, {0xff, 0x0, 0xffff, 0x2, 0x0, 0x81}, {0x0, 0x5, 0x2188, 0x3, 0xff, 0x6}, 0x800, 0x3, 0x8}}]}, @TCA_FLOW_MODE={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xf}}, @filter_kind_options=@f_route={{0xa}, {0x1d14, 0x2, [@TCA_ROUTE4_POLICE={0xc, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x65}, @TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_ACT={0xd30, 0x6, [@m_skbmod={0xd4, 0xb, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xb98}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1e}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}]}, {0x72, 0x6, "e94d7b9bd16a28cc3d13fd2f4a90cb512df3f6d1d0aad6bd00068f04e94619d86b981199c8d9b7894849c6a45cda9323be9bbe96dcce01fbd7e6c633307a0f9f85b863b42ecd9da7f6501868cb9c26a64e35b818d24cc1abb7991e178cb3208078e218e182f01daeb15423e030ef"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0x15c, 0x12, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0x101, 0x7, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x849d, 0x3, 0x7452, 0x6}, 0x95}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xd7d, 0x2, 0x2, 0x6}, 0x5}}]}, {0xd5, 0x6, "1d5b9e61e36595c951cc420736a4ed2c9432f4b3c4b78311cce8271e13cb19735da619fa4eedae7cf1a45ce01f5b6211ed88c02a5cd38b25c3b627302dbfcfcf72e230f30c94647b233b373d5538fa063491bf013413344740c7b5da385545cf334c6a49bf5161d7e17753c198bde5eb3eb2693f4af2f207a6a81bb68fe8855af909a2146a9c2bdc4db67e7453e886cc83e642b2276ef5aeb192c514f39dbbed2bb19cdcce4c13e331456c7f52df82c3a00f46d600309eb1f6cff56fbc5a6f8036bba45dcf599aefc8a5ab71d0788c83bb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_bpf={0x148, 0x11, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x6, 0x9, 0x81, 0x5}, {0x100, 0xf3, 0x92, 0x3}, {0x0, 0x9, 0x8a, 0x1ff}, {0x8, 0x4, 0x40, 0x2}, {0x800, 0xee, 0x4, 0x7}, {0xfffc, 0x80, 0x29}, {0x84f7, 0x0, 0x4, 0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xfffff63d, 0x0, 0x4, 0xe25, 0x4}}]}, {0xca, 0x6, "8ba876484f2358a4b8250d044fed9881f7fac6f947e9a7bb6e6095eeca2f83f0fca950685befb99be5508a76e69ff76f1bcb4a56b47de415d1e5b1ae58040803b01be61b969eb4dcc8e09d0ba464d86c1a40a9c59ec20180d4c429c78c8706d5fcdac0a7497668a131649a81ae849d82c8125fe07ff731d4cb665a7ac18a3c3721b06e773cc687765d1932f24d2cfc2622f252f7bf33ab59fcdc04f7bee12a2b32e642d573d412412f8456b1acb97ced17e271d1a7db16cd8a7166adf1f53451c5eacfed2e50"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x234, 0x3, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x74c, 0x1, 0x1, 0xd}, @loopback, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xb, 0x1, 0x80000001, 0x3}, @private=0xa010102, @private=0xa010101, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x2, 0x2, 0x0, 0xe8c3}, @private=0xa010102, @broadcast, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x18e, 0x8, 0x4, 0x494, 0x55b}, @local, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9c3f, 0x8, 0x1, 0x1, 0xffff}, @rand_addr=0x64010102, @rand_addr=0x64010101, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x7fffffff, 0x3, 0x8, 0x2}, @remote, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xba8, 0xfffffff9, 0x3, 0x16218e7a, 0x9}, @broadcast, @local, 0xffffff00, 0x1}}]}, {0xf2, 0x6, "65b3b47f554b55d8c8c3a46303fc855b9ea91727e1f12a22c3a9edb575222a6465c759128335b79d18e9bd221efa255f6d0361b1ab39e8ab86e8789112f56e9a312734407fe38d5280d5fbd060074f9c3c84ce535dbc9672b18444924de46d1189a070a270082d0480d805a3f55b846738c2eba9d95a1932076d210467e47388786db544a27a5709a9c9261121884fc5826e171fe52530fc77455ca3db6a4c2fbc2b8338b21e39c3788d58c917276c5da8fdf0563b9f9c64f6f8d4475d4566896da043f4d0d3d0d860804b150dab68b3efaf8b6b7db4b0eba74f11fc80d337474ca8b263fb720dc01850f3dfeadc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x198, 0x16, 0x0, 0x0, {{0x7}, {0x128, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0x11c, 0x6, {0x80, 'raw\x00', 0x0, 0xa, "473932556ba68b10f0f154e4948e93c56b9784afbc60b6f4ece16301d48b353f30afa1a8c7cbe4c883ba86f876c03ef95c1c5b693b1932a9b0bdb8bad1e95b1a78ca52a128f3fe08c63a894d2cb569458e506742b8b0e9e9b50edf9567c54d647f20b82f2ffd5fb975af12167e08126c4cc22c601858c68f8bf6f7c852b3e182e9e4dd7fc4b454825d0fc68a8ec98bec548b4312b4750b9d9a6b055c38ea2b754ba03b899e126e8fa9273436139fd07e6caa98a4e95b2f9eb67b142744cf27eac6f1d2c4056fd7280e45d5bce219c0ef284d75e8461cabe5f2f3dc4920f7af359c39df572f1955b77016c02633aca47add2d"}}]}, {0x4a, 0x6, "a1a3a248da20c514d4935fe2236b800d7b13d19076b65ef7836fba1e84e4bea94012ad21354694d786e96370df0c3f42b92cc579ee383bb50a3f51def2c6baaedc49a26375b4"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_police={0x4c4, 0xf, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x6, 0x5, 0x1, 0x9, 0x464b, 0x7, 0x9, 0x8, 0x7, 0x6, 0x9, 0x5, 0x5, 0xfff0, 0x800, 0xff, 0x4, 0x5, 0x2, 0x4, 0xf912, 0x3, 0x8fcf, 0x5, 0x25e, 0x0, 0x51e, 0xf73d, 0xe6, 0x10001, 0x8, 0x1, 0x7a, 0x5, 0xffff, 0x4, 0x8000, 0x7, 0x10001, 0x7, 0x5, 0x23e4, 0x2, 0xff, 0x6, 0x8fae, 0x9, 0x7, 0x4, 0x5, 0x3ff, 0x10, 0x8, 0x736, 0x0, 0x0, 0x8, 0x4, 0x1000, 0x9, 0x9, 0x170, 0xfffffe00, 0x7ff, 0xf, 0x9, 0x10001, 0x3, 0x6, 0xeb5, 0x6, 0xe, 0x8, 0x1, 0x9, 0x5459, 0xb, 0x101, 0x7ff, 0x7, 0xe, 0xfffffffc, 0xffffff80, 0xfffffff8, 0x69, 0x3, 0xd20, 0xffff88bc, 0x1ff, 0x8, 0x10, 0xfffffffb, 0x0, 0xffffa101, 0xeda, 0x4, 0x400, 0x2, 0x7, 0x8, 0x0, 0x8, 0xdd3, 0x7ff, 0x9, 0x400, 0x0, 0x0, 0xe4b, 0x2fc1, 0x3ff, 0x3, 0x1, 0x5, 0x8, 0x0, 0x2, 0x3, 0x8, 0x2, 0x7a, 0x800, 0x219f, 0x44e2e840, 0x1, 0x6, 0x9aa, 0x9, 0x6, 0x5, 0x4, 0xe7c, 0xbd, 0x8, 0xfffff19b, 0xc0000000, 0x2, 0xbe, 0x0, 0x0, 0x5, 0x6, 0x0, 0x7, 0x9, 0xfffffaf0, 0x727, 0x6, 0x7c, 0x800, 0x2, 0x4, 0x100, 0x1, 0x1, 0x7, 0x0, 0x7, 0x6f, 0x8000, 0x0, 0x7, 0x0, 0xfffffffe, 0x3, 0x7, 0x2, 0x0, 0x8, 0x8001, 0x39b6, 0x5, 0x6, 0x5, 0x1000, 0x4, 0x80000001, 0x16ae, 0x9, 0x6, 0x5, 0x40, 0x4, 0x552, 0x4, 0x400, 0xfffff67d, 0x1ff8000, 0x1e5f, 0x0, 0x5, 0xa, 0x7ff, 0x97b2, 0x5, 0x200, 0x4, 0x4f4, 0x3, 0x81, 0x2c0, 0xba, 0x6, 0x7, 0x0, 0xfffffffc, 0x5f8, 0x2, 0x80000000, 0x400, 0x3, 0x2, 0x80, 0x0, 0x10, 0x1, 0x0, 0x7f, 0x3, 0xbad9, 0xbb6, 0x0, 0x4, 0x1, 0x0, 0x0, 0x8, 0xf8f0, 0x2, 0x6, 0x0, 0xa, 0x9, 0xe2, 0x0, 0x1ff, 0x4000000, 0x4c1, 0x10000, 0x6, 0x4, 0x100, 0x3, 0x2, 0x7, 0x0, 0x7, 0x7, 0x4b, 0x40, 0xe099, 0x9, 0x2, 0x2, 0x48]}]]}, {0x91, 0x6, "1ab47d9125ed192942ddb525cc8bfe4ea0331201265721fb44553d324377d54df1985bfd8ec95fd1fc559aed4d87c2aacacd2c5e55572634aa209ce60c49861f41c6af272df0214a829a7a76f49db5056bf026b58fb76194d5b7f5b1373671997700a00ae8c1461c622a5d02207e488fdc3879bf2e70d2a95fba5a92aa8cac5547877d7921b160e74b98ba6692"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_mirred={0x124, 0x1f, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0xffff, 0x20000000, 0x400, 0x8}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x453, 0x4, 0x9, 0x81}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x518fa9e4, 0x8, 0xffffffffffffffff, 0x1a, 0x7fffffff}, 0x2, r5}}]}, {0x96, 0x6, "a8626e5c07277973afefc4a62179aa65dfda05aa9ddcd7cf2433ec4ca22fb4989d9f4c679590c155354549b193678102458e262fefde30e89c366feb529891996e3174ef172204431d349fcacb23ed5e9f7f6b68da475d23ac55eec0898649bb48335d4662e7cc0f4b4bb15514d63cc29816436d507993efd491517426feeaf7eb90bc2bd60d3d8af5db4d3882d67ed409b4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_ROUTE4_ACT={0xbbc, 0x6, [@m_ife={0x148, 0x1f, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0xffff, 0x0, 0x3, 0x1ff}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xfffffff8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x4}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffffd}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xe59a}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @local}]}, {0xad, 0x6, "c732fd58980346bde52955b5e02583df33a697ae7bb36e1c202eac9fbd1968bd3a1ce631a0e716a23194bf004f9f85699cf784e45b495341a9d268e655d51b62c016c919adb91536cf69b746be875948e449a9f9fe80c5f63c2de45495b047741764893d6ae1e5fc3d13774775198ff456e97ed7cdfa209a84fdae4a6ae54ebb0da21ec5ccaa2559d745b1f8596aa11a082edaed922be73bc4f291c4c59f515e6e7e9861ddf5d8c68c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x180, 0xf, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffff8, 0x3, 0xffffffffffffffff, 0x3, 0x4}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffff9, 0x3, 0xb, 0x80, 0x8}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x745faeacf2d80a81}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8ba}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_police={0xe0, 0xe, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x80000000}]]}, {0xa5, 0x6, "e76b336464387e8627fa0088a468881ce0cf775909cdf91fa04f990f9b5c034c294fccf5b2d4436809dbaf4f92c077126fd3611e3b9fbdca44e0c1a33a58304c030a4900d053e98e9f562bcf2161b2c2edce4db3c5afea8df73dc7e8e413eaf2ea489888cdf192cba5da879ffe4b8d2711bb014c9acb3f8305b97c213902795301874fb4ad976f12a95b590336d4ce9035b4224261f4bc68706910fe38e1d07be6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x80, 0x12, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}]}, {0x4a, 0x6, "ce3646f3c8157a56db34f7a40c563b163292eacd5f7093cfcb9570ea80a01e29b392b9e273476b401dc72a2c5839470690958af275f033c6ffe62c33d903a3b4a0e9df858e32"}, {0xc, 0x7, {0xc5c00674c1e209a9, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x218, 0x8, 0x0, 0x0, {{0x7}, {0xfc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TARG={0x6b, 0x6, {0x9, 'raw\x00', 0x2, 0x93, "40ca3250d1aa078f3bcbb30582c99222e9a855ca7f89b210e69495eb2800c8860ee38af9e02af1b207ba5a8167596d759a6b20746c506f0c7cf21e56186ce4dc77"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TARG={0x69, 0x6, {0x380, 'security\x00', 0xd, 0x5, "becaddcb77a0d413e204daa01a5b80cea74db895ca7b63d8e38ea7d2a66c95313c2d6e628367cbd99b728eae707b35ab1762dd0fecc45d4d6041306e0c8aa2"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0xf5, 0x6, "9686c68c41c506947f343696e0e593e20168c46e60e52ef6be6abb48ee5fb3896034bc47b9a60b40c0919bd6c83bedefbbbb575f2ec167231ea5412bb4438fd90d0cfd60ab73dedbb61c85c4f4d5e74a58c2f1d4e7b869441436fc8350278ca93b976b9a54b1836cf55e887e78b56c568a60b1913add697c9c587e1d62dcbbcc6e60968289446e51036e0906f54da7dc732f178d5a76e6a47193cca7cced887e8d37d18788d125d7c306d5df6eff3398de4fd1b17f8baed34abba3e842bb65a3798f32bd320adc24da34762189cf629ff966ce76919728eaeb8d02d1edfea667e8dd231faabbb021ccf4eb1c3f9e5134ac"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4}}}}, @m_skbedit={0x8c, 0x2, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0x9504250ee0e5ad75}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xfff3}}]}, {0x4e, 0x6, "8411c7fb02ecd6e8ee3163d275080cfd2ad05d4eebe459814bd97e8ab597f2c6de58a9f7d56147d2629d6d3c8e67ccf8c123b85360c766fbaca91d77904590721cf67248d0d814d9f316"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0xfc, 0x1b, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}]}, {0xbd, 0x6, "df508e114383ecb25c192b9e5dfb8f2c958ff889e23dd839648742e3e2063467ddac58ea59e282de6c2f2076f14902d46a02f6946f0b36f45f0bb8644da05ee05bcbeaa3bf3ab12c6c7f18cf67f253ce6b0b050f9d64f1a67246c09d5ee0b41cb511d33c7309e69ba6e1b5c77649e87dfb06fb9f0a8f4be8b3687001465efbfc177af21e519d7fd6adf6bb2a8002607a392a939c8040816a1f0e8c9f841f34cb295dbf3e3ddad7ca0c40c3829b334cd28840af836cdcc1fb22"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x178, 0xb, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xc, 0x0, 0x0, 0xae13, 0x1000}}, @TCA_ACT_BPF_FD={0x8, 0x5, r7}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x8, 0x0, 0x82, 0x3}, {0x6, 0x9, 0xff, 0xfff}, {0x401, 0xff, 0x20, 0xeccd}]}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x148, 0x2, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xce3, 0x9, 0x10000000, 0xfffffff7}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x6, 0xffffffffffffffff, 0x13ad, 0x8}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x844}]}, {0xe4, 0x6, "7b19239fdb9d9e47247dd190e3cea62b4966709256edc14313cd721e81340a68ead4bafc9c94e99a1902742538eeb5f95c8a15c5dfb3ec3a0e2fca206a263cbfa9ab7e585f3038b34251e94e8f243e962017408ae2ba6006cbcda8f7e6c8dd2635e5409da6f1939dc1b9e1a52a89996478a8f4157a37a3d3bc8809dbdc1a5ce711c71c7e23611c415deefdfbd3bd1d39edfe9c824736c352c7b3c1709642d7c3e52e67bce231231e6952acd2d946c88316ca505574bd8fadfaada6f4b1cb37d473327a1a723477834ad6525d80b19747806332bbaf46390a9ac22ead5599b570"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x130, 0x1e, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x347}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x63, 0x5, 0x3, 0xfffffe01, 0x1}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8ac}]}, {0xbd, 0x6, "da940b276f7621da997c0696fa2737910a57382ea1c9dd8a8e06efb5f3f797e2c55d62c99629020218378f6bf3b0722244a0b9fec78b1ec8eb423a9f969d2a2263459b75fadc9146ffd85cef3b7682a4013e8688cc44674987ded59e617bbc6afa5fbe7aaacefabcfcea518fe80c504a5e5f70f20726436c8e92d5fc32000dca2235c37cc6586f4c729acdbbbdc6500a4707bfd6f89a300c6a7582944ee0f2c437dca6e78f771180dc0433a6bfc43a7c10f49904a2e25f293b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x1, 0x4, 0x7f, 0x8000, 0x4, 0x3, 0x4, 0x3, 0x7fff, 0x6, 0x2, 0x9, 0xc0d, 0xc1, 0x7ff, 0xfffffff7, 0x1, 0x0, 0x3, 0x4, 0x0, 0xfffffff7, 0x4942, 0x4, 0x5, 0x58a, 0x81, 0xc, 0x9, 0x1, 0x9, 0x5, 0xcf, 0x4, 0x8, 0x0, 0x2, 0xfffffffc, 0xffffff7f, 0x40, 0x401, 0x3, 0x5, 0x8, 0x398, 0x0, 0x4, 0x7, 0x9, 0x4, 0x101, 0x4, 0x5, 0x5, 0x7, 0x6, 0x6, 0x5, 0x1, 0x1, 0xfffffa8d, 0x400, 0x9, 0x6, 0x1, 0x3, 0x40, 0x9e6, 0xc, 0x9, 0xfffffffd, 0x7, 0x82, 0x95c, 0x9, 0x5, 0xffff0001, 0x3, 0x4, 0x8, 0x5, 0x1, 0xb46, 0x8000, 0x9a5a, 0x7, 0x2, 0x7, 0x8000, 0x276, 0x7, 0xf14, 0x1, 0x9, 0xd12d, 0x7fffffff, 0x2, 0xa, 0x10001, 0xc81, 0x4, 0x6, 0xd5, 0x3b77, 0x681b1053, 0x4, 0x9, 0x8, 0xffff, 0x9, 0xa8d, 0xfffffffb, 0xffffffff, 0x3, 0x100, 0xfff, 0x4, 0x9, 0x9, 0x2, 0x7ff, 0x9, 0x2, 0x1, 0x8, 0x7fff, 0x648, 0x0, 0x9, 0x1a1, 0x4, 0x81, 0x5f44, 0x0, 0x1, 0xfffffff7, 0x10000, 0x8, 0x16c, 0x8, 0x8, 0x9, 0x8, 0x4bc, 0x101, 0x3, 0xfffffff8, 0x41, 0xa2, 0x3, 0x2d9, 0x6, 0x50, 0x8d, 0x2, 0xc, 0x81, 0x7, 0x8, 0x12000, 0x5000000, 0xea, 0x7ff, 0x6, 0xc3, 0xd52, 0xfffffffd, 0x6, 0x8, 0x7, 0xd2, 0x10, 0x0, 0x3, 0x0, 0x2, 0x5, 0xd7a, 0x40, 0x7f, 0x4, 0x1, 0x0, 0x1, 0xbad, 0x4, 0x99c, 0x8, 0x1, 0x4, 0x8, 0x1000, 0x1, 0x0, 0xfdf7, 0x1, 0xc4, 0x9, 0x0, 0x6bc, 0x5, 0x2, 0x6, 0x4, 0x5, 0x3, 0x5, 0x7054, 0x23, 0x3f4b, 0x7, 0x6, 0xff, 0xffff, 0x19c, 0x5, 0x0, 0x7, 0x5, 0x3, 0x3, 0x9, 0xffff, 0x64, 0x8000, 0x8b6, 0x3, 0x80000000, 0x4, 0x38ea, 0x80, 0x5, 0x7, 0x9, 0x0, 0x9, 0x2, 0xe, 0x80, 0x2, 0xde8a, 0x2, 0xfffffffd, 0x7, 0x7f, 0x401, 0x2, 0x1, 0xdd, 0x3, 0x6, 0xffffffff, 0x0, 0x5, 0x877d]}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x7}}]}, 0x3dc4}}, 0x40004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e00000000a5fe0280060001000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000a00505eb4f99599cab9742f2c5692fb31b17e16aa10953e8b234fa7ea6a883b9a01d038d5633a088ba5011c77164fd2897d87cdbba65fe52128c1f00cb9aff262864fca5f8d29fb31b15a383654024bf95e8132e97efef1e10b73fc47aa0b4a853239e913435a024b871682f5d370a175e7c1a23a63d80783ddc8dbf25268", @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 2.895208202s ago: executing program 2 (id=5232): socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)) (async) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x0, @empty, 0x5}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000000c0)="8895888ee7db1c7f4dd8fbf49c875bb1", 0x10}, {&(0x7f0000000300)="448494cfb86823a8c15d3e8fa72dc88b5ed7421dafe4a2b2678ea61718b76bb3f1d261ad97bd5805441599e956b2fae6bbe995f79bfacfe2d495c20ee63f018388e75bc8", 0x44}, {&(0x7f0000000200)="4aad9b1dc594aaa28b36525bab4e8ff4c7ec88f7cdaa77a663bb30bcca648dc5cffef608bca3971eb77c63d89944", 0x2e}, {&(0x7f0000000380)="dab69140faa9ef0762f79323a7b9e474ed94b8d6635d6e9ff9654b922e4a88e18318118d0890ce47f87867f0d373685a84b73fae5c918276dbf5c33593431bb6e76e3bb0807dab6e029ee52c96587098b951e8c26f4b93c06cc843bd7956934bc0eba0b5121975fba36cd45c2e1bd59a568cda6a7c98226db7b52f76249d00e0efa3f239e72779", 0x87}, {&(0x7f0000000480)="bb158355c2c79906cce9d2718bfc8dabc5fdcc0d49ce5b68c74278a27197ce7582672a3a845425275552fad77cadded90798d72560edd2e211ab4933c17bb8c658cd90571e034b09747a95f839158f382bf100bf611b5d3436aae1fb62007b9975d766bdd38a2db943a4cc9c535ac0e7a4e4e74e6f4af0bda98a78bb322594605374a98d090d8639c616e02f69b77b47cad566e414cc5ae1e92f52dcf98c47393c9360fc8d8cfd3113ef9bcdbbc2d54a3c3c6d3833320462e6f35802e877665bca", 0xc1}, {&(0x7f0000000580)="e8cdd26c4ca4f937644d5638fde07f4d5f8d4b418ed10d369ef1acab7a1b6cd838985cbf13b13074e1c6fc34da79036cc5b5c6", 0x33}], 0x6, &(0x7f0000000640)=[{0x68, 0x112, 0x2, "fea2c8a2bdaf346e110655d13ca0ad7d22d68669b2b5543610827df2d0829626afdcfc9000ac5638dbaedd630870e7f5db41f4d68e93b20c071159e708b0bae972f4ed44b22233dfbc4f6393e3d81a6952129fd3652645"}, {0x78, 0x0, 0x8, "22799bc4ddd7aa86c1d8bdb725bc096f3b18d3d15c5c3850442d22943ba23f54b35f8aa6ff3d73a2ed0e2a58ee6f786fdea24947ad55e2b3f19fd7101295942ec26777a67ddaf56830dea3e58a2255c37a14f5ffbd66413176f29115a1c9330731290c1e8a8b76"}, {0x78, 0x114, 0x6, "ac474de83fc645e95ca49a63c14c220418f22f7bd59857f73da866f4babbb16e4c1c42ffbbda3f6324adec6bc64a6d05effd48d9c2c9a98360e108b40de61103533d2ddfdd14a53bfed2f81e16dc286e2b2101e7f67c4bc0b049d82a7170c79c4613c5cb"}, {0xe0, 0x88, 0x0, "410a2cd57abec7895d2c4ebac96298e07d9a4aadc7ae111ea8672edc30ec196cbd3798d12aca295f21d5f0a2f2c38a41de3c7f484155365a25e160405d95626d26cb33d9e52e1e35bb6c61032c26967135f032feee5ab467f7e9458d7cbbe817c3dda68ef8422acac810d1f6b08bf69e2288783df6e4ca547a4b47f6dff1335899cb59ba9cf15d9776fcf0397df8efd2979646bd9c4fc52eb39e9b849e41fc4b7a8d76b79fba0e0fbfc389af301b2d0b336bcf28071dd1938b9ea4f381b7ecc45de7e9fdc191257ba092e6209dca"}], 0x238}, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) (async) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @empty}, {0x304, @local}, 0x5a, {0x2, 0x4e25, @private=0xa010102}}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000000206050000000000000000000000000005000400000000000900020073797a3200000e000c0007800800120000000000050005000a00000005000100060000000d0003006861bfcfabe96a639ef6806525bc9973683a8665740000000061a2e7b219bcfa86ea8c6edf7ae4"], 0x54}}, 0x0) 1.294855353s ago: executing program 4 (id=5238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) connect$llc(r1, &(0x7f00000000c0)={0x1a, 0x8, 0xf9, 0xa, 0x2, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x10) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xb9}, @TCA_ROUTE4_IIF={0x8, 0x4, r4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@deltclass={0xb8, 0x29, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x10}, {0xe, 0xe}, {0x4, 0xfff3}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x8}}}, @c_atm={{0x8}, {0x68, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x1}}, @TCA_ATM_FD={0x8, 0x1, r6}, @TCA_ATM_HDR={0x2d, 0x3, "58eddaeb503e33a5a04c362da4e06af46e554affdd06babdf5d7ecec79ef438ec787e1b6d23aaf9e39"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x6, 0xfff1}}, @TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0xa}}, @TCA_ATM_HDR={0x9, 0x3, "f9f933648e"}]}}, @c_atm={{0x8}, {0x4}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24040840}, 0x4) r7 = accept4$netrom(r2, 0x0, &(0x7f0000000180), 0x800) getsockopt$netrom_NETROM_IDLE(r7, 0x103, 0x7, &(0x7f00000001c0)=0x1cc0, &(0x7f0000000200)=0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x3ff, 0x89, 0x10, 0x89}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 1.294086315s ago: executing program 2 (id=5239): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x20, 0x0}, 0x40051) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000340)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010429bd7000fddbdf2505000000200001800d0001007564701e735c6d8d99"], 0x34}, 0x1, 0x0, 0x0, 0x4c444}, 0x4000140) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0xf4, 0xec, 0x3ff, 0x9, @private0, @dev={0xfe, 0x80, '\x00', 0x37}, 0x8000, 0x7800, 0x263c000, 0x6}}) sendto$packet(r0, &(0x7f0000000180)="f8135e7fc5a027a7f18d3b238a6f33bbb4bbba1865ac7350db557e3acbb2280ea2d0c6136f35bfb96ab9e2f7501a788890ce9347643f65f0072c51fe8c21dd3b45beb2eb1330c3b3b48f311857dc1b962c6790f11e047ccfb792d31a5b7bb7b06dd5ed94624101a3f4977caf75525137b0b6d47db64dd05e9845e127cb7914d4c37e399855eb03875fb1b0befeecaba20745ba0c4e65a64ceb", 0x99, 0x0, &(0x7f0000000380)={0x11, 0x2, r6, 0x1, 0x4}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3b}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.292818521s ago: executing program 0 (id=5240): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x20048884) recvmmsg(r1, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000080)=[{0xfffffffffffffffd}, {0x0}], 0x1}, 0x80000001}], 0x2, 0x0, 0x0) 1.131330843s ago: executing program 4 (id=5243): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000040)=0xfffffffa, 0x4) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}, 0xffe}], 0x1, 0x40010142, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x40000000, {}, [{0x54, 0x1, [@m_mpls={0x1b, 0x1, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf47eb}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48a41, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xfc}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x17, &(0x7f0000000000)=0xfffffffd, 0x4) setsockopt$inet_int(r8, 0x0, 0x17, 0x0, 0x0) write$tun(r5, &(0x7f0000000540)=ANY=[], 0x5b) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000001180)={0x1e8, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1cc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0x1b5, 0x4, "b30a6efe2dfb8755f19831792d52ea2ea32f5594e924800a8d29a9841dbc91a1c366136f7b2ee013a160af87e6df7a6c5f21dab2c9a09f586ac8561c585e9ddd67b49a16bf630c22dd2e9ce3e6f05c4cbc536f2d3111b99db0f4acfd666eada1ef29d367751f6bfb5ec2750602d551d677a18c9497015a626b4d0e848a0496734948aef2dfc3d701d439a0bbd9fd59e5bd39a9aa91214892a92d0a49ee71f1f02b7e9ed16378f60e0b19e2ac9d6fd76dc42ecf13a65b83fe6e13b10218ccd068ec1fe5e9cf53abd7a4cbcf0c91b6c915ac71e117b46c09aabf1d5fc8414ba4ce28f4274070b057c41c31dd6ed2d171ae924dbe7150f9876a02a18508030b4caec17ba8f1127150bd30a2c68f7dd8114d5bfdbce3a074b8f70963fb4174fa6326e4f6c54d6f5667c9b51167ee865fbb61d2c6ddf570fcfeaf7aa3716f0c275d7237268d8a3ca279abeaea8e7ff23d002a7bcc8156bdec06413950f81b5a468425877d2fbaaf1794af59e411f1810289ed77d702eb95fdf8a08892313474ac2dce6da06786da4cd519bc5d44b0a414d229abffb55603ac16de7c09936a79ea02a6b869c57ca3a29e552153cfc64fcc7dedc2"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x8}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x10}, 0x50) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081000400000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) shutdown(r6, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000840)={r1, &(0x7f0000000740)='TIPC\x00', 0x4000, &(0x7f0000000780)={@_ha_fsid={[0x1, 0x1]}, {0x2, 0x8001, 0x5, 0x2}}, 0x755, &(0x7f00000007c0)={@_ha_fsid}, &(0x7f0000000800)=0xfffffffa}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r9, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000880)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f00000008c0)=[0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf4, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x5e, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x80}}, @var={0xf, 0x0, 0x0, 0xe, 0x1, 0x1}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x1}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @struct={0x4, 0x8, 0x0, 0x4, 0x1, 0xfffffff1, [{0x2, 0x2, 0x9}, {0x5, 0x0, 0x4}, {0x10, 0x0, 0x8}, {0xa, 0x5, 0xfffffff8}, {0xb, 0x1, 0x493}, {0x5, 0x1, 0x3}, {0x1, 0x1, 0x7}, {0xa, 0x4}]}]}, {0x0, [0x30, 0x0, 0x61]}}, &(0x7f0000000c80)=""/95, 0xc9, 0x5f, 0x1, 0x8}, 0x28) sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x0, r11, 0x40, 0x4, 0xa}, [@NDA_DST_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4042}, 0x80) sendmsg$DCCPDIAG_GETSOCK(r10, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000002100)={0x13e0, 0x13, 0x200, 0x70bd27, 0x25dfdbfc, {0x1f, 0x7f, 0xf8, 0x16, {0x4e23, 0x4e20, [0xe7b, 0x1eaf, 0x3, 0x95], [0x9, 0x5, 0x2], r11, [0x80000000, 0x200]}, 0x1, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "6303eb4b562c9b67c6a21e801662b794e58066a520a3f2a033bc97e6718cad407523911d19eff19022cfdebbbe9acb7695a679639e01aa4c3d3b94a571a8727e96146199a5d605eb5970f9fd1f2f65c6f8152858c166764a132b0a50e4a69d7be4992fca809add27dba4a0159adac8eecdd82989707afaab8c2edf9a71a8979873ed99593699a4f2c0c3a24980b9a29f7eaba0592ad5e92558c6da640cb864e5926750947fe0ceaf8da5dbc2d0faab618fbccae7989ebb096e3c962bdfa8f2634c1e84e73ef52fb26e0043fa547e697d41ab9baa3f5109073717d838f0099a2c47f307ddf2ee5cb881e4c24cba49bc533a9d0c5209d7d6b1cd248c402f85b418eac11bb92d13cf310e3eed34fdd18901a0f4647ef66cd13b8f3d82f232854e95d83fd2f4db9636fb22843fc11dff2e4a142d0bb25ce022679bac3cf987b788b433c127a83c96c6df2e652401f46fcaf82b8e709f1498a74f15311cc8af4bc3a1df10d0a89e4f5ea19cf5912058a2f90cd7387ff0bedf7d3217a21b1f126303cd74d8bec9cdcc239006e63d416b0d88e9a1d134cba356b8d40af6d2bbd311a0815cb5760205fe3e012fa9f0f522b65fa054d5426d6604107371b5809e0dd2bdc0844406f5beec31e75bd3630e94d6bede9d9e09c5c2fc92be80c51b13cf2f4d5b5b459aba013d37213c90d67a1f0710710080254227e2a030051fe33062d375371614959814e6239cfd699898e2676e5599543f8f31c77bfcf8d567dec83d2a8388af38906e08de9b67a5af3fac45af488264e3ff11aed44e5097d1cf72f2ae87ef6831653fd9a509ad7deddc164b15ec94989415f495f0579702b21c38730b2dfb17dac7cbafff6ef233b1332a66e0a82245b5f04b91ef915d34dc02ad06e26e30695599e0af6fa001f65ddabaddda9874ee3b5cca781960cc9a8caeeadd8c1efe036bdaa1a841114503f4f1eb38d79897840d37697c48522d3afad59bc032443a839fc208442beb1712cb1b78d5c08a98adce7770b997be163a6ed5b62c6e31cb37f7405f66ef5381220e9ccd72cfcc06fb9fc590ea6290e817f4e23383eca3d95115a422f5922dd6e1e2b32a0e3504f3e0fb2d37cfef91d994947741d5caba731d3c7e85617aeafd3ccfbb5d32ba6b2f245978e1781015b33fdda0484672f73c8a41d5ed6e67553213e48b192f46e925fcba3a3d158a732e3abe1d62cb64ffadaf52c129c4c7ff958436b0edc174ab225f95d1339deb8eac7426e3b878fcb8e7f43a9087818d12159cf5f902dc51f79c3b1bb27a03170b4d3eefe59243920d5a9c9678f2915747c5f09b801eb4d5b8ad6ea27f7249f8564262cba33caedab6a9672dac87c71de447be5a537795cd097cba745ea28676438e3331dd7f7ba3346356779b4393499da5537cd9e23f15100200029a96173bf94a54dee1ae6df32b827cfea5c3cfec913ad80c1699932440781cbe7ba9326803e3577fef85e8ceb949fad6ba1969b64b653da2294effb468587de3ff7a1720faaf18509eebab8d16b1c9de5ab5189a4ca689bafda759b8727761cc68b88e9e6d751543475f8e665cfeba94ce2060b288dcc6d3a184d020fd54ed3f8389a5c0c0d4fd63ffee1845fd5b5bef03d9123952345cb3d22868c17e1ccaf34b3f5bd0dea9e66c67ecb163415fcea15b8c1f0cc5893a1b0630a73027a6eeb28a0ee2e8ef49780cd3f429e2d1cf88356e2e72b8ea8af395f6091d57fcfc5e58793e76587b1824c108595a04fd73d253540e11267839eb0eecbb591418229eb242145cf31638310166b76e5d14136ddba443d72880fc3e45c91a85068bb08fb468210b2119cb34ada8d7ccd75fc418dfc7c0d41e8015ae72f8c54573666617714773b127cc86d3125955bc317f9f50bd4266696ba11dbeb41e10ba789312518f6f4418a982649a6ced8093fc92c48d06ee5d4abc754f57c96e5594935a3df9e8cc9e10f18c1c713e14764e8b941b916bc4e4038fbdfda4b8c132a8847421b4d4d17be927ed9112fcfc199a60fd095da0e1b9a7b102f28e728697329b893d1a09de7116933bff47577dd194a7ded6f8b0db4fd5e27e748029fa9569d504316459690c1a01645fb0d64e6f05d53ff036efdffacc886d180d1dc4e4ab51a0398e85ce57251d73b728d0a1304e666eb4b817a4d36ca3b906d4b2201a8d260b82b6ec4eee3b2e6ae2c8e18278f43caff3dd3b3b2f3ff069d82688253ea4d653193876814d3617acb4478cf274697ad6bcdeb3b5dabd4ecc1f02adf4986bcd3380a2ea545aa163b5f6fc9f628b04e6fa1011f6523e31a9e35b71b10680a5d474ae8309af21c64ea0cccf474e56244ddd5414b30235545b57c9bf9a8c142bb7e411ff90e5dc04fe3ed64d43a36cc0be353e000f8aea1536ce774c0fa355d20dd85fd5c558705815261835d5d115fd8e9943d2e92a3e249f6f02d3e8dc4ef291fbcb157b39800f96b77bd77f1712db6630602167337b466c35c01282ffb73084f20ae4822f3acbaa32548575097648ecb16edaea11ed64eba6aed22f014960750d5d66432587bc5bed3113a8a649fc5ff594b8251bc0a726b85e78bfeb9fcff0390e4b567ab288ba098d992ee28042a149266d8d849373af5098c234474b89819d756f20c711ced386fe21686563f67fe1a15b472d2b82225ff43cc5bae892909689c579185e5f4a7518091988d35804988c8d4ac9833f46634f3fc70c94c98ab4f5c65b26b35c20e12bdb18f04945ab5634ce42f64f47a61cfc8b6b535ee454d187cd6f54a293989b69e43990375164d26565c323a22cce657ee1a42b65a858cc922c9e873a30b0bce140e75f2ad986ad8c36d9603d10cd935b3498b2bf974f88e534f2e31da333fe48bc0f9b9a172e8d4faac53cd7ebcd9dc0c70b0c3b11d129cc78b85b2880a0eaee06500095f03f4b050d4293fb693bcf6d5a0d3e0f1f01905aee213136c20b856835c62ef0750fe170fe2a51463bf6d316aa5e138dd2e2dad8ab3be5aab0e7667969646595b2f735558c14f433b587da5bb04182f2890101978ea936695aed0528d5be3dae25418374c501a9574fc9229ca02f572da9ac1dd1030f97009bebfaabdb313c750fa04792a87b36e401293fe3d8d0b05b16792bf91f229c98b2fd9c189cedf75844de64e27d20ad854c77f30c1aeaba350bc613556e15e4e9f1cd9a34c530fb4fb386ade0462ed3db96877a7b7ccdfb8ae2be97ac1d1cb5643c4fa3e19ed805727ecd8e88f4bedcf95471aa4a5760656da8ef8d6315033695ed12e6d29698200acaaa15fbb6a2f680c7f0a2bed6e29ef227eb0a618147c3a29220b7a6ed722019765061b2c1229c77a2f7cc98eb357d5e756719c5f22e651cf16d4a588cb4d45b798451b4c2bc294a95579539a86aadc50bbf559c99b29bb08fa2b9ed03568b7f527f96b9bcaa6add8f134c7de7c05e0d9f5e50cfca40b331125856bcca82af9acff3d28b5f88a20bafec83bddf237cc5f6ac15b6b3708d04b78827614c3e33a6daf81a87414d4e1eba12f1d8de57d689e9da682a5b957f0dcfc190fc25a3be123aa353a1a03798242f541cdafcd2c5c5da677b733c6de12ffc77b256946c16413638f366ee136cfd0a594c2f4df236e9c64f545cf749607091efda8f84e897b7d27a54f32638a662635290c777c2fec962963d41993ddc263083d1e3a6360d7879d478413be185d370267ceb3fa031b769fe3696a5a43f40aba14088a887cf958d03b6c48b2f0551ea8e2e116399efe52ca351c96d1ee4a9ea80459c89a9ff9d0457c562de2cad05ec5e1014fb4166aa81e2d985daeee02ce9147b814415b1d41c80cf4ef91c86ef27e56f011bde0f827da9cb7ec6443252f21565ec2144b92fbd2c02a2caa7a4428c91e3d8a2ce31bda8db90a93177b6a90cbf3ac7971b05fbcb6c4f2e2b04edced6f25e302b7dd167be577456b03837340f2afff70b3847d46521fa24ef7251e3593c5b8b2645c72dba613212898bab1efba772e81c454a7bc82b31d17ca5ceace784fbf5793e1da27de5d0c2080b21972ffe8755f77211b14f0f77836f6c1973aeabff4db0a2c1ef371081955df145c22214071ac44412b085f7862a54819e94b256ec97e90df578841a66ccc7c1c4f363d061c5aa83a3ba90419f076c639eac9a8c3e1c7f289b27890fb846a9a1cf3f26a305fe861c5addfbe3959ba777668324b5ad67b6c274273b3546c27d5f39785c713dfbb5ef398907ce5e8e3bef8fc7aa884e0e57ce0ac4ee12c89c54665833e5457fe72f2e4e833d3f954c539b5545bc583d2288f629a55a1c3b1a6edf35ff262daf29b3db18a05b91e3d3de5243e62093e8df1a88fe3e817ad8ae947c77096c819da7c95aeca125d4e9735fd7aa6631ed805040f3cf335630568d67fbb29e6e7780219938515746d08671faa12f51ec4cd88327bd37eb19ca83b3f1519c16eb600193b9c7e3f7282a7770a9c9ee501b6e43550cfb2dd900d9537e74b5f22f838ce5707f80c4c7f2d80d8d046e242846f498d887a84d0651ce823945498acf2f6c70e4528ca115fc0250f3282f744065a28f449eb8d3c4db31793a40e6b81124643d55ee8657012af2fad1f182b023068b83a194a5d5652d5898cbad20997948ef25d8b7576c0f1bb474a7c8026c4491f65a7a2895d9d06617c4703b33c83e5a38da813739ca45262a6b3536f4ce5de4952fca07c35d954a270fa91811a536fc85800924d4b7bb6b831da35639bf039a50594076fb17957db57e1aeb1680b6256cb4176c46ef9ba0a55e829254ca8991cca8ac9e6a9f10afbb2736a932d53f7cec43e4bc6f919d0d13ee72264234f65246ec28d981f59d595b3d00fb55e8eaf78e57609b5776f60432aad0234262dab37e825faf9d2342adc39b169926055427cd49904b99599c15c852f2a55fbc387b2eba2086147cd8257d97aee46df197556dbd5388b16859bb625ccebbde7b6a6710fc2762e4fedb1c91bec293b67614f467502d25386066a7cc60042f4ccc3406860ca400537ef61ed3fa1e49984293e897f4e0968272d4b3fbb26ce7a1b7ecf3089f9143ac61067b6cece8956f6c2bce2290e5ba404d6564a8b64b99a7d84fbf4b93d7d82f98a6cd341f7109ae6ca5491937886ec57e55d51202d1b6405b3d0f638e3c0e96eb4ab7dcbfcd61c853f0b740f55c87b60bfba1938f0589ed19f5d364cb5e6cbbae1217e5c283ef9d4ba177f0eeb683c6221b7242ce9dd7a5bb19d777df97536a8bcd275abf12ccd6e0d05234a01c9701f56912343496b7c977f1a0ff51714d83847366987c43434275a7997dc273e86a0ba5039cee4178d3be0d0598c3c94fb68a68320fe0d083ae0dfef74c817ba727acf1b42a1fc330b7dfbc088c40d8d6723eb1342a05a54db91cfba0766b5e30a1687af86fc7224ebed8a83677db93986a474e052d35f3529fb2db51315d8e189aae8cf8753edd6b459373b752c3258b8fa67abdfc74636b3321213fe4234a2e453eb35a42dbe87376f3fe9ba3945f1e4795e46c99823e057e7fb675eae4c676d9db11742212f5c130253885e60bfd1fe54c5522b13ca7172e24157b536ef03224761996358818bcafa1e6f1d13065b19b5b9fd1f05dbab3585ce1868b8f4cdd43052b7286dc52669660719dfae03f873711a525396adec88c08f3dde4e30ee1df209287550ba2867838c8ed85a69cf4dd076500409ce99660bdb59b5df95e21c6ad8f9adde00412e588c17d79ab3019cb6959b45040b8e9360b0689521c8c712f0e5479861c"}, @INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "5a97f273ad7a8df7901dab903f552e16f3ca644400c302b162fbf1d1cd0a1aec4d58c0721776ca1db737"}, @INET_DIAG_REQ_BYTECODE={0xdf, 0x1, "0780e95eebf54e461d01a4af376727a74b88239dac3b5d8754612481b509db9590832be2911b49e01e056adfbc6b73be147b2772d8df567d600aa7652e5cf45a16cbc63d6c4ab0fed8fcd64ff07ee4610f2b471fcbca444eb6a692c72954eb0028599f2a2ff030b1d3c214fa0f956b4414c89ee2c88dbd0831533e1aba8617b2935668f69232b238b43ff3cce282dc58a94250c990f1387849d8fb40d119b0b8dc3b296217f979a8cede748f527a942d7bf44dc9ac93d4ea5aefacdaf3b6daf51d9642310f357c8de9e7f7816028ac05dbc46a10f6a275edf6ca60"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "ce805c7f527d2ae5d1957f4e4d5bc6d9bd1a1bce69f61292327f9fdfcc01666dc900e71e082bf53c7a6788739e62141bdf565b9c9c2a784bc34f5dcc33089e13aab9c5062733cc4e77afe35a5d3f5371231c9529e021761511580a9298bda41ca394c22164d7cbbb3e76edf9a213461e3c5656e4e608ac723c670a7011bdc8845a598c5d7f2487299e1a09ba27f08f948878e6c0145cca3412c7937ac50b5629da3f77bdda01df1a27156f3ff20cfebe90764d42e75564755c5722f0f8fd2fc699757440a9886d006195abe2b70b81e941edc4beb7ca6a058891cdeb340020bdc7d290ced8055ac7ac56423b65"}, @INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "43b45ab6f8c7b0848a540690e9e9a549308829cbf99850d927439f10bb89c35e63e452bec7cf68f53c04e9b8c038dee0c85d04d3f296456428a0497b129ee2cb5178bd7c35f5639e947927b531a850866af116b195f7c8594f635e6236051d6640941fc3e9fa08ef388873331ed5671d592c91847107e32614ac"}, @INET_DIAG_REQ_BYTECODE={0xaf, 0x1, "39ec818e038dd35747817d1bc6089a424b322d25ae16ec9f7298b90851a8f806c7bb0679e84e1fcf1296bd8013bf6b090209f47bd09ef184feed8420d1504d1756145762eac28d44cc334d22ca84cee298f2e52d604cab47a0d4590c5a0db9403e85f83e149328be00cdb833db886c1cb5ef689e2c1983a063577814e95ca99a1d8ce037ad05c610c95217e72b3f52afacf6ed0ef5ec93920667acafd339b2353b690073a4f4d921f2d7fc"}, @INET_DIAG_REQ_BYTECODE={0x5b, 0x1, "dd8c219c3c5eba70d03264ac0d028b739c475ec39f71381b0296671155d0f100cd05a6632d77c3c6407f02799cb84629e0de0c7bf6e5420bdb794b31b7629db9bdbe05957f79563c934f4df038f036864f3f23b6f0a7c2"}]}, 0x13e0}, 0x1, 0x0, 0x0, 0x80}, 0x44880) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@bloom_filter={0x1e, 0x1, 0x3, 0x48, 0x60800, r10, 0x8, '\x00', r11, r12, 0x5, 0x0, 0x5, 0xb}, 0x50) 1.079000039s ago: executing program 3 (id=5245): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffb) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r1, 0x5c2a7000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r3, 0x0, 0x0, 0x25dfd9fd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2004404d}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f0000000380)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000600)=[{0x0, 0x1b8}], 0x1, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x1}, 0x4000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0xff07}, 0x2000000) 723.685366ms ago: executing program 3 (id=5246): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c080}, 0x4) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000004c0)=0x3, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000180)={0x8, 'veth1_to_bond\x00', {'syzkaller1\x00'}, 0x400}) recvmmsg(r1, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xbc}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 694.342601ms ago: executing program 2 (id=5247): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) unshare(0x20000400) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x248241, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000040)={0x1, 0x1, [@empty]}) writev(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delneigh={0xac, 0x1d, 0x400, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x0, r3, 0x20, 0x40, 0x5}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @remote}, @NDA_DST_IPV6={0x14, 0x1, @remote}, @NDA_VNI={0x8, 0x7, 0x880}, @NDA_PROTOCOL={0x5, 0xc, 0x3}, @NDA_MASTER={0x8, 0x9, 0x9}, @NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_FDB_EXT_ATTRS={0x34, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x0, 0x1, 0x5}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x9}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xf}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xfa}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_DST_MAC={0xa, 0x1, @multicast}]}, 0xac}}, 0x0) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x194}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) (async) unshare(0x20000400) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x248241, 0x0) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000040)={0x1, 0x1, [@empty]}) (async) writev(r1, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delneigh={0xac, 0x1d, 0x400, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x0, r3, 0x20, 0x40, 0x5}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_LLADDR={0xa, 0x2, @remote}, @NDA_DST_IPV6={0x14, 0x1, @remote}, @NDA_VNI={0x8, 0x7, 0x880}, @NDA_PROTOCOL={0x5, 0xc, 0x3}, @NDA_MASTER={0x8, 0x9, 0x9}, @NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_FDB_EXT_ATTRS={0x34, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x0, 0x1, 0x5}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x9}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xf}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xfa}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_DST_MAC={0xa, 0x1, @multicast}]}, 0xac}}, 0x0) (async) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x194}}, 0x0) (async) 690.723017ms ago: executing program 3 (id=5249): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x130, 0x98, 0x130, 0x130, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x14}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {0x59e9ca6af987edf9}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x0, 0x28}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x70, 0x0, 0xc, 0xc, 0x0, 0xf9e78fc95245f17b}) 649.66409ms ago: executing program 1 (id=5250): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xe4) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) r4 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) (async) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000280)={0x0, @local, @local}, &(0x7f0000000500)=0x50) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x0, r5}) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x15}, 0x4000000) (async) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) (async) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x657d95c42dfbb0d4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r8, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0x13, 0x14, 'batadv_slave_0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x24044011) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000060000f307000400e000000108000500ac1e00010f0007"], 0x34}, 0x2, 0x34005}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r10}]}, 0x20}}, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x192}}, 0x20}}, 0x0) 607.480655ms ago: executing program 2 (id=5251): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000400488014000180100010800400058005000300000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x9, 0x1, "0e"}, 0x9) (async) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x8, 0x1010, &(0x7f0000002500)=""/4112, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) (async) shutdown(r4, 0x1) (async) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) (async) poll(&(0x7f0000000340)=[{r4, 0x480}], 0x1, 0x33a0) (async) r5 = socket$inet(0xa, 0x801, 0x84) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/9, 0x8000, 0x1000, 0x7}, 0x20) (async) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r5, 0x8) (async) r7 = accept4(r5, 0x0, 0x0, 0x0) connect$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019340)={0x54, r3, 0x1, 0x70bd2d, 0xfffffffe, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2001}}, {0x8, 0xb, 0x1003}, {0xffffffffffffff32, 0x16, 0x794}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x448c5}, 0x24008004) 587.532853ms ago: executing program 3 (id=5252): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="ee00"/20, @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="0800000000000000030000000000000f00"/28], 0x50) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="5400000012000100000000000000000002"], 0x54}}, 0x20004010) 572.809184ms ago: executing program 4 (id=5253): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000000)={r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x91}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = accept$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) accept4$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14, 0x800) 519.531243ms ago: executing program 1 (id=5254): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2e4601, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x40, 0x2, 0x70bd25, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@nested={0x4, 0x5c}]}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc040) socket$rxrpc(0x21, 0x2, 0x2) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) (async) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4) (async) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2e4601, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x40, 0x2, 0x70bd25, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@nested={0x4, 0x5c}]}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc040) (async) 500.810632ms ago: executing program 2 (id=5255): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000040)="0ae32b8d560582fa2cad819e7c88c1b6b3b349d182e687800ee7775a2462fb0d0233109f8658ca4108e7ae546fd9309cdb251481bbc1c827f59e61", 0x3b}, {&(0x7f0000000200)="a9018d46c0d9596b049a6f0345104cd14cec72672b2cf42bbcac09a9b1f35b4b255cda84343daff9d1ac38cce63f2c6d7b39841e648e5b44831e7b22f8e5c4b080d52e06b7e578dca85bd48b8b503c35b15abb03018f5317f580f0e41338f0b5778c08da0853f88e3b788482ae0c5e79462996f7019426897a352ce58eda83a9e5", 0x81}, {&(0x7f00000002c0)="cc18846d194467fb2b31ecf51d5fe10fad61653c34d974728c3cadf6fb25da7c5a9df3b114adae5fc4b162fa38c84231218c459e30ca5e489b64523a63ee15f8b5c2dd65de99b394320f1294d030cbd8fec8da904388843a6db99e906d18811a1b0280c2bb2e88baf86393024235357e9ab8f8ef1b732296086a1767ca63d401b52a991599ad8e7669ea4aa7c1ae2b2600442c7b979e6381a4ab", 0x9a}, {&(0x7f0000000380)="982175250ba0ef4828077e09d86327cb214a62bb210897570c5e39e7871fc2556937008a6b127d73134b146688206caaaeea7b3a2a4d29b013523da756a4c93f3abd8b4fc5773bfdfa2a6006363147286f46d99cb63a46e639d860e3a453fb1f79cdfe2004035297947e6e5ad6721f0c98fe0c088268fe323b6cc652c120ce5f4fdf456d9209b61e7f9f19d22557f46bbf50c64c9acfdd3f9b9f857a31c1073e56a0d11f3923982a6443d6fda9c3b686b12aeb981262ae66e951bf8f6ca4faed4d2acd975c038b0448", 0xc9}, {&(0x7f00000000c0)="6654c9269f581805d574eb7364a62a48688eed196bcc06262d0c919496f6b78d03ceeb0632d16ff82727b50497d9e8bd89748ae2cb9157b3574aaf75c34ce51f2133cba57c4b6a47a8f2286f", 0x4c}, {&(0x7f0000000480)="d92d3a5f34cd555a014279d3d95ff40c8d5760505e308e4c82462ddaa568b2ace84b0aca6e37f4aa54949551c32016984df428f0b5b1a2e8b843f033e806a4dc53628256a403f37a164caf0cf21f05bf9f0f12cf34a497318d7b48877112b677531f87f2f43b9eb6f1815e105906c7f7168ef6d1281a52e1d5c1a9fe370f", 0x7e}, {&(0x7f0000000500)="c3dacf80739a591a45280b55c31d4e92d8ab0731d44da16545c29ecd564ad1b08052a9986b4bf6041d7f7cf2cee47df07c62c259ce5dd72ffc99386479ba8291fa5d50ee011bb2b5f887889921c46bdcab", 0x51}, {&(0x7f0000000580)="5c9ced936ccb3d5bf3de911ce03e31da1b2a8732d68d054fb72b0bf8cf1d44baaea490208ee78d37fafeba9ebeb1a1e32697666dc76aad57f81107e26c2f7d94694cef13f9319546fbf5fc77a4be2ab4333144761c5bc68733df1b9732f3cb789a5df5ef810f2df026a1bb4358e3f189d726c8f45932395cef85adb4b7894d78ee65af9c1fe407195058ec46bed267386ca5219d9ff8bc9bbc271c00748c31a1dfb6d8e03eaa0f24ac446f4ebb57360be6a6a2a64c", 0xb5}, {&(0x7f0000000640)="616f6ae8830a033ec74d3710548b0f442e2301f2e6d4ca81fed36da6699859324cc4a4a8239f5f42967754786c1cb1b75f94373e104ac1113913cb6a38b3b7b703928ca8e9efc80f3fc8684c85d5c72338a73e9c9eb2a01d562dbc26b604f5a19fcadc3ae096c4e30407c39a9585f3efa077bb789cca0a91e47b3cec2419ebd52d4f4b20f387d8403b3f9c3ce1b2dd12fe225a70705a49e86070731c1f8ac62b3cb383004590c45d85a32a6c9ed1605d611c9da50bbdd69709f2114c393085f03c0cc1dc7724886dd4416d70e682a2906b6e5fdbef16bd1bce4967f116f2bd660d5de543a70e3198c7b82768ca7a9d244d690f680b3ffa6996", 0xf9}], 0x9) r2 = socket$kcm(0x2, 0xa, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x5, 0xc, 0x80, 0x3, 0x6}, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r4, 0x0, 0x94, 0xc7, &(0x7f0000000880)="9ae04c69d6d77d76b87e56abc534e172dc641ae88c1436eac61bb5e44f82b86f3caa99e2ae74902b8a41863a1747a6e3756af89301e954d14beb707b5c8d8a2f2f2ffb0ce1191178c1d41d6838da5f23d9eebcaa38855c7d648fafe0457e4376da5ceef595c4694bffd669ff05d2370fa5854e03dfe85de6ba0acecf643e776ae0880dd500f9a32017896d146dc34f78843b9a12", &(0x7f0000000940)=""/199, 0x7, 0x0, 0x8e, 0x85, &(0x7f0000000a40)="1907af053bae35da94da9aa27350cc0b6daa2768be5c6023ab39b95c0ad58a02d2c364c90c2f43c39102d1046900425bd6b795c78b788c7ca37f94d0f688ea466735e40e76c3b919d1dbd5344bf37a56b9529d6ce1de8267c67acf86363481e36ded75133acd00e0ab8bc69406c48d5061b77351b92ca780e6a122fdeea4671c6aed588307c13589bb304b36869e", &(0x7f0000000b00)="f73689e1a9373a83d45aae437920eb1227e248d79efc9a43871e0f90199efcedccc5a7847478fecbc9d7560b5b79829c705cecba26e3ec3d1480f61c58c9354653b5a3c53a7a6b8b8d84a714069db7735465d24175b9e3ddff8585e608b0fb025b6fe84ca76b86ed93c18f45e5b137cee15c00778737b81f9c94ce3a179e06665943eea177", 0x1, 0x0, 0x2c7}, 0x50) 416.784905ms ago: executing program 4 (id=5256): sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4000, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/117, 0x75}, {&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000140)=""/215, 0xd7}, {&(0x7f0000000280)=""/245, 0xf5}, {&(0x7f00000003c0)=""/15, 0xf}, {&(0x7f0000000400)=""/65, 0x41}], 0x6}, 0x40) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b7040000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r5}, &(0x7f0000000a40), &(0x7f0000000a80)=r6}, 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000200), &(0x7f00000003c0)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1c, 0x19, &(0x7f00000006c0)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}, @jmp={0x5, 0x1, 0xb, 0x7, 0x0, 0xffffffffffffffff, 0xffffffffffffffe8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @map_val={0x18, 0x8, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @alu={0x7, 0x0, 0xc, 0x0, 0x7, 0xfffffffffffffff8}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x1, 0x0, 0x8, 0x8, 0x0, 0xffffffffffffffff}], &(0x7f00000000c0)='GPL\x00', 0x36a3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007311350000000000061c0000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170900000000000000000100000be6029ea4da342b000807090000000000060002000100000006001b004e0d000006001a000000000006001b0000000000"], 0x44}}, 0x4880) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) r13 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r13, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x8, 0xbd, 0xffffffff, @vifc_lcl_ifindex=r12, @multicast1}, 0x10) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 315.184977ms ago: executing program 3 (id=5257): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x3db8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) (async, rerun: 32) close(r2) (async, rerun: 32) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r5 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17045}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) (async, rerun: 64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async, rerun: 64) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x23953, r3, 0x3f9b1000) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r8, 0x29, 0x41, 0x0, &(0x7f0000000100)) (async, rerun: 64) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'ip6_vti0\x00', 0x112}) (rerun: 64) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000080)=r0) close(r7) 314.728192ms ago: executing program 0 (id=5258): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x18, r3, 0x1, 0x81}, 0x14) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x78}}], 0x2, 0x3404c8d4) recvfrom$inet6(r0, &(0x7f0000000000)=""/93, 0x5d, 0x40000120, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2, 0x1}, 0x1c) 299.005744ms ago: executing program 1 (id=5259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket(0xa, 0x803, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@getqdisc={0x30, 0x26, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0x6}, {0xb, 0xf}, {0xffe5, 0xd}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b02805402148006"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) listen(r1, 0x0) poll(&(0x7f0000000200)=[{r1, 0x401}], 0x1, 0x0) writev(r0, &(0x7f0000000040), 0x2) 236.950853ms ago: executing program 4 (id=5260): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000090108000000040000000000000001080005400000001c09f8000073797a31000000000c000480060001"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffda1, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0006", @ANYRES16=r0, @ANYRESOCT=r0], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 131.122852ms ago: executing program 4 (id=5261): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@empty, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x6}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) close(r1) connect$rose(r0, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c000200cb"], 0x44}, 0x1, 0x0, 0x0, 0x200480d8}, 0x8080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@empty, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x6}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) (async) close(r1) (async) connect$rose(r0, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c000200cb"], 0x44}, 0x1, 0x0, 0x0, 0x200480d8}, 0x8080) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x0) (async) 66.738629ms ago: executing program 1 (id=5262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000014000000030a010200000000000000000100000058000000060a010400000000000000000103000000000b40000000000900010073797a3000000000300004802c0001800900010068617368000000001c00028008000440fffff3e0080002400000000b0800064000000003140000001100010000000000000000000000000a"], 0xb4}}, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r2, &(0x7f0000000140)="9c65e5408e82568156e6ec2923715500a06f0e0a5f709c03bb82aa88a2ba1698c4d45ab4c87872d29b228ba4d5165aa5e443954a3b3ee3d45eb2717bb1fc2bfa49c1cf93b31013ddfd2d241a", 0x4c, 0x24000801, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xffffffffffffffc2, 0x2, {0x3, "416643c46427168209669d736b27af61"}}}]}, 0x48}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="200000000114010028fd7000ffdbdf25080001"], 0x20}, 0x1, 0x0, 0x0, 0x844}, 0x800) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0xc, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40050}, 0x800) 66.403152ms ago: executing program 3 (id=5263): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000380)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0xfffffffe, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 30.641398ms ago: executing program 1 (id=5264): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0x1, 0x470bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xffe0, 0xfff2}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 0s ago: executing program 1 (id=5265): unshare(0x6060600) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r0, 0x0, 0x0, 0x4}, 0x20) (async) r1 = socket$inet(0x2, 0x4000000805, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0x7, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000000000000e0021001400000002800000121f", 0x2e}], 0x1}, 0x0) (async) sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)="ae", 0x1}], 0x37}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x84, 0x31d}], 0x10}}], 0x2, 0x0) kernel console output (not intermixed with test programs): _unreclaimable? no Balloon:0kB [ 420.395831][T19595] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 420.427977][T19595] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 420.459416][T19595] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 420.475578][ T58] bond6 (unregistering): (slave bridge3): Removing an active aggregator [ 420.477861][T19595] Node 0 DMA32 free:1217832kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25124kB inactive_anon:0kB active_file:11448kB inactive_file:161760kB unevictable:1536kB writepending:772kB zspages:0kB present:3129332kB managed:2552780kB mlocked:0kB bounce:0kB free_pcp:35376kB local_pcp:14912kB free_cma:0kB [ 420.485265][ T58] bond6 (unregistering): (slave bridge3): Releasing backup interface [ 420.522057][T19595] lowmem_reserve[]: 0 0 0 0 0 [ 420.527074][ T58] bond6 (unregistering): (slave bridge3): the permanent HWaddr of slave - 06:83:77:d9:04:a3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 420.532674][T19595] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 420.581739][ T58] bridge3 (unregistering): left promiscuous mode [ 420.581780][T19595] lowmem_reserve[]: 0 0 0 0 0 [ 420.594116][T19595] Node 1 Normal free:3954452kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 420.626466][T19595] lowmem_reserve[]: 0 0 0 0 0 [ 420.627956][ T58] bridge3 (unregistering): left allmulticast mode [ 420.631790][T19595] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 420.652219][T19595] Node 0 DMA32: 6607*4kB (UM) 4867*8kB (UME) 2054*16kB (UME) 540*32kB (UM) 181*64kB (UM) 57*128kB (UME) 482*256kB (UM) 365*512kB (UME) 251*1024kB (UM) 110*2048kB (UM) 71*4096kB (UM) = 1217780kB [ 420.678390][T19595] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 420.690903][T19595] Node 1 Normal: 1*4kB (M) 8*8kB (UM) 11*16kB (UM) 5*32kB (UM) 10*64kB (UME) 6*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 963*4096kB (UM) = 3954452kB [ 420.709979][T19595] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 420.711176][ T58] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 420.719618][T19595] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 420.719641][T19595] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 420.719659][T19595] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 420.719676][T19595] 44719 total pagecache pages [ 420.762321][T19595] 0 pages in swap cache [ 420.764729][ T58] bridge4 (unregistering): left promiscuous mode [ 420.766546][T19595] Free swap = 124996kB [ 420.773414][ T58] bridge4 (unregistering): left allmulticast mode [ 420.778901][T19595] Total swap = 124996kB [ 420.788428][T19595] 2097051 pages RAM [ 420.792237][T19595] 0 pages HighMem/MovableOnly [ 420.796965][T19595] 427020 pages reserved [ 420.801121][T19595] 0 pages cma reserved [ 421.095750][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.106358][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.126953][ T58] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 421.137266][ T58] bond0 (unregistering): Released all slaves [ 421.148248][ T58] bond1 (unregistering): Released all slaves [ 421.161716][ T58] bond2 (unregistering): Released all slaves [ 421.175923][ T58] bond3 (unregistering): Released all slaves [ 421.191575][ T58] bond4 (unregistering): (slave veth3): Releasing active interface [ 421.210537][ T58] bond4 (unregistering): (slave veth5): Releasing active interface [ 421.219985][ T58] bond4 (unregistering): Released all slaves [ 421.232593][ T58] bond5 (unregistering): Released all slaves [ 421.245419][ T58] bond6 (unregistering): Released all slaves [ 421.260610][ T58] bond7 (unregistering): Released all slaves [ 421.277802][ T58] bond8 (unregistering): Released all slaves [ 421.300228][ T58] bond9 (unregistering): (slave veth13): Releasing active interface [ 421.311879][ T58] bond9 (unregistering): Released all slaves [ 421.327541][ T58] bond10 (unregistering): Released all slaves [ 421.341458][ T58] bond11 (unregistering): Released all slaves [ 421.355871][ T58] bond12 (unregistering): Released all slaves [ 421.368858][ T58] bond13 (unregistering): Released all slaves [ 421.384023][ T58] bond14 (unregistering): (slave veth0_to_bond): Releasing active interface [ 421.400860][ T58] bond14 (unregistering): (slave bond15): Releasing active interface [ 421.410791][ T58] bond14 (unregistering): Released all slaves [ 421.424173][ T58] bond15 (unregistering): Released all slaves [ 421.436409][ T58] bond16 (unregistering): Released all slaves [ 421.478331][T19592] tipc: Started in network mode [ 421.484444][T19592] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 421.492990][T19592] tipc: Enabled bearer , priority 14 [ 421.666300][ T58] tipc: Disabling bearer [ 421.672476][ T58] tipc: Left network mode [ 421.846706][T19629] lo: Caught tx_queue_len zero misconfig [ 421.878223][T19629] netem: change failed [ 422.047487][T19637] __nla_validate_parse: 10 callbacks suppressed [ 422.047507][T19637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3740'. [ 422.397009][T19658] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3744'. [ 422.604163][ T1209] tipc: Node number set to 10005162 [ 422.684694][T19674] smc: net device team0 applied user defined pnetid SYZ2 [ 422.710009][T19674] smc: net device team0 erased user defined pnetid SYZ2 [ 422.811015][T19678] validate_nla: 2 callbacks suppressed [ 422.811034][T19678] netlink: 'syz.0.3751': attribute type 1 has an invalid length. [ 422.930203][T19680] netem: change failed [ 423.137226][T19690] smc: net device team0 applied user defined pnetid SYZ2 [ 423.297249][T19688] bond3: (slave veth5): Enslaving as an active interface with a down link [ 423.540314][T19722] tipc: Enabling of bearer rejected, failed to enable media [ 423.560808][T19720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3760'. [ 423.640642][T19726] vlan1: entered allmulticast mode [ 423.656158][T19726] veth0_vlan: entered allmulticast mode [ 423.813552][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 423.821644][ C0] lec:lec_tx_timeout: lec0 [ 423.830145][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 423.836212][ T58] hsr_slave_0: left promiscuous mode [ 423.850137][ T58] hsr_slave_1: left promiscuous mode [ 423.892173][ T58] veth1_macvtap: left promiscuous mode [ 423.904649][ T58] veth0_macvtap: left promiscuous mode [ 423.915756][ T58] veth1_vlan: left promiscuous mode [ 423.927821][ T58] veth0_vlan: left promiscuous mode [ 424.795958][T19729] syzkaller1: entered allmulticast mode [ 425.222616][T19762] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 425.262385][T19762] bond4 (unregistering): Released all slaves [ 425.269773][T19772] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3776'. [ 425.505284][T19780] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3779'. [ 426.035141][ T58] IPVS: stop unused estimator thread 0... [ 426.198758][T19813] netlink: 'syz.2.3789': attribute type 4 has an invalid length. [ 426.231241][T19813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3789'. [ 426.275085][T19813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3789'. [ 426.294399][T19819] delete_channel: no stack [ 426.585857][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 426.664034][T19861] xt_hashlimit: size too large, truncated to 1048576 [ 426.716156][T19867] net veth1_virt_wifi : renamed from virt_wifi0 [ 427.212352][T19932] syzkaller0: entered promiscuous mode [ 427.234579][T19932] syzkaller0: entered allmulticast mode [ 427.258451][T19932] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3796'. [ 427.617982][T19988] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.744047][T19999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3799'. [ 427.789451][T19988] bridge_slave_0 (unregistering): left allmulticast mode [ 427.800452][T19988] bridge_slave_0 (unregistering): left promiscuous mode [ 427.818387][T19988] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.863186][T19999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.945489][T19999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.180447][T20057] netlink: 'syz.2.3802': attribute type 1 has an invalid length. [ 428.222425][T20057] netlink: 'syz.2.3802': attribute type 3 has an invalid length. [ 428.258499][T20057] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3802'. [ 428.336632][T20057] NCSI netlink: No device for ifindex 813332851 [ 428.588983][T20087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3806'. [ 428.695140][T20090] netlink: 'syz.4.3808': attribute type 62 has an invalid length. [ 428.844963][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 428.852996][ C0] lec:lec_tx_timeout: lec0 [ 428.858025][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 429.050230][T20104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3814'. [ 429.369415][T20122] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3820'. [ 429.632689][T20137] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3826'. [ 429.649397][T20140] xt_TPROXY: Can be used only with -p tcp or -p udp [ 429.707104][T20144] netlink: 'syz.1.3828': attribute type 28 has an invalid length. [ 429.754062][T20144] netlink: 'syz.1.3828': attribute type 3 has an invalid length. [ 429.761820][T20144] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3828'. [ 430.058926][T20164] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3833'. [ 430.288879][T20177] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3836'. [ 430.310536][T20176] smc: net device team0 erased user defined pnetid SYZ2 [ 430.364189][T20171] netlink: 'syz.2.3836': attribute type 1 has an invalid length. [ 430.447881][T20171] bond3: entered promiscuous mode [ 430.459095][T20171] 8021q: adding VLAN 0 to HW filter on device bond3 [ 430.493061][T20184] bridge_slave_1: left allmulticast mode [ 430.545545][T20184] bridge_slave_1: left promiscuous mode [ 430.551282][T20184] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.643156][T20184] bond0: (slave bond_slave_0): Releasing backup interface [ 430.694013][T20184] bond0: (slave bond_slave_1): Releasing backup interface [ 430.730755][T20184] team0: Port device team_slave_0 removed [ 430.753244][T20184] team0: Port device team_slave_1 removed [ 430.760422][T20184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.781694][T20184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.819025][T20184] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 430.966293][T20199] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 430.973602][T20199] IPv6: NLM_F_CREATE should be set when creating new route [ 432.533042][T20201] : renamed from bond0 (while UP) [ 433.252001][T20251] sit0: left promiscuous mode [ 433.294183][T20251] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.301845][T20251] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.531226][T20251] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 433.561316][T20255] pimreg: entered allmulticast mode [ 433.567108][T20241] __nla_validate_parse: 1 callbacks suppressed [ 433.567123][T20241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3855'. [ 433.613360][T20276] netlink: 'syz.1.3862': attribute type 8 has an invalid length. [ 433.621915][T20276] sch_fq: defrate 0 ignored. [ 433.759853][T20287] netlink: 'syz.2.3868': attribute type 21 has an invalid length. [ 433.803388][T20292] netlink: 344 bytes leftover after parsing attributes in process `syz.4.3866'. [ 433.842342][T20294] netlink: 344 bytes leftover after parsing attributes in process `syz.4.3866'. [ 433.873777][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 433.881817][ C0] lec:lec_tx_timeout: lec0 [ 433.888107][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 434.094851][T20312] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3874'. [ 434.096838][T20314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3875'. [ 434.116111][T20316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3877'. [ 434.285249][T20323] netlink: 'syz.2.3879': attribute type 4 has an invalid length. [ 434.304458][T20323] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 434.311717][T20323] IPv6: NLM_F_CREATE should be set when creating new route [ 434.459320][T20268] IPVS: starting estimator thread 0... [ 434.507004][T20335] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3882'. [ 434.553653][T20332] IPVS: using max 27 ests per chain, 64800 per kthread [ 434.669641][T20346] syzkaller0: entered promiscuous mode [ 434.677863][T20346] syzkaller0: entered allmulticast mode [ 434.687674][T20346] FAULT_INJECTION: forcing a failure. [ 434.687674][T20346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.703256][T20346] CPU: 1 UID: 0 PID: 20346 Comm: syz.2.3887 Not tainted syzkaller #0 PREEMPT(full) [ 434.703287][T20346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 434.703298][T20346] Call Trace: [ 434.703305][T20346] [ 434.703313][T20346] dump_stack_lvl+0xe8/0x150 [ 434.703343][T20346] should_fail_ex+0x412/0x560 [ 434.703372][T20346] _copy_from_user+0x2d/0xb0 [ 434.703418][T20346] ___sys_sendmsg+0x1c6/0x360 [ 434.703442][T20346] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.703494][T20346] ? __fget_files+0x2a/0x420 [ 434.703518][T20346] ? __fget_files+0x3a0/0x420 [ 434.703550][T20346] __x64_sys_sendmsg+0x1bd/0x2a0 [ 434.703571][T20346] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 434.703595][T20346] ? __pfx_ksys_write+0x10/0x10 [ 434.703621][T20346] do_syscall_64+0x14d/0xf80 [ 434.703636][T20346] ? trace_irq_disable+0x3b/0x150 [ 434.703660][T20346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.703676][T20346] ? clear_bhb_loop+0x40/0x90 [ 434.703698][T20346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.703714][T20346] RIP: 0033:0x7fabad79c799 [ 434.703729][T20346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.703743][T20346] RSP: 002b:00007fabae70e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.703760][T20346] RAX: ffffffffffffffda RBX: 00007fabada15fa0 RCX: 00007fabad79c799 [ 434.703772][T20346] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000008 [ 434.703782][T20346] RBP: 00007fabae70e090 R08: 0000000000000000 R09: 0000000000000000 [ 434.703792][T20346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.703801][T20346] R13: 00007fabada16038 R14: 00007fabada15fa0 R15: 00007fffa80eca98 [ 434.703828][T20346] [ 434.890415][T20349] netem: unknown loss type 0 [ 434.895135][T20349] netem: change failed [ 434.899938][T20349] netem: unknown loss type 0 [ 434.904991][T20349] netem: change failed [ 435.092039][T20362] netlink: 'syz.2.3894': attribute type 9 has an invalid length. [ 435.101607][T20363] netlink: 'syz.1.3893': attribute type 16 has an invalid length. [ 435.104246][T20366] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.3891'. [ 435.114204][T20363] netlink: 'syz.1.3893': attribute type 3 has an invalid length. [ 435.126604][T20366] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 435.131260][T20363] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3893'. [ 435.198413][T20370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3896'. [ 435.270920][T20373] macvtap1: entered allmulticast mode [ 435.294182][T20373] veth0_macvtap: entered allmulticast mode [ 435.313720][T20377] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 435.324338][T20377] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 435.333409][T20377] team0: Failed to send options change via netlink (err -105) [ 435.341445][T20377] team0: Port device batadv1 added [ 435.448563][T20383] team0: Device gtp0 is up. Set it down before adding it as a team port [ 435.500713][T20385] netlink: 'syz.1.3902': attribute type 2 has an invalid length. [ 436.288528][T20451] ipt_REJECT: TCP_RESET invalid for non-tcp [ 436.907098][ T5143] Bluetooth: hci1: command 0x0406 tx timeout [ 437.146487][T20477] bridge3: port 1(erspan0) entered disabled state [ 437.213526][T20477] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.221197][T20477] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.512643][T20477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.549229][T20477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.834761][T20477] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 437.926527][T20477] vlan2: left allmulticast mode [ 437.931398][T20477] bridge3: left allmulticast mode [ 437.962742][T20477] bridge5: left promiscuous mode [ 437.968822][T20477] bridge5: left allmulticast mode [ 437.979072][T20477] sit1: left promiscuous mode [ 437.984074][T20477] sit1: left allmulticast mode [ 438.000211][T20500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.060182][T20502] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 438.077198][T10387] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.129328][T10387] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.159482][T10387] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.169730][T10387] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.632506][T20543] syzkaller0: entered promiscuous mode [ 438.654027][T20543] syzkaller0: entered allmulticast mode [ 438.671581][T20526] wg1 speed is unknown, defaulting to 1000 [ 438.764058][T20560] __nla_validate_parse: 12 callbacks suppressed [ 438.764072][T20560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3952'. [ 438.779343][T20560] netlink: 'syz.1.3952': attribute type 5 has an invalid length. [ 438.793832][T20560] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3952'. [ 438.814507][T20560] geneve2: entered promiscuous mode [ 438.820005][T20560] geneve2: entered allmulticast mode [ 438.828273][T10389] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 438.844130][T10389] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 438.864149][T10389] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 438.875055][T10389] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 438.903655][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 438.911767][ C0] lec:lec_tx_timeout: lec0 [ 438.916725][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 438.928878][T20563] syzkaller0: entered promiscuous mode [ 438.934643][T20563] syzkaller0: entered allmulticast mode [ 438.951095][T20563] tc action pedit offset 128 out of bounds [ 439.079688][T20566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3954'. [ 439.868947][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.012891][T20595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3962'. [ 441.186015][T20586] : renamed from hsr0 [ 441.214462][T20600] syzkaller0: entered promiscuous mode [ 441.219974][T20600] syzkaller0: entered allmulticast mode [ 441.352920][T20614] syzkaller0: entered promiscuous mode [ 441.377776][T20614] syzkaller0: entered allmulticast mode [ 441.393419][T20614] tc action pedit offset 128 out of bounds [ 441.490902][T20623] netlink: 'syz.0.3969': attribute type 10 has an invalid length. [ 441.503476][T20623] batman_adv: batadv0: Adding interface: netdevsim0 [ 441.510585][T20623] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.545100][T20623] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 441.946247][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 442.224583][T20682] openvswitch: netlink: Message has 1 unknown bytes. [ 442.231625][T20682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.420110][T20694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.488505][T20699] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3991'. [ 442.531170][T20705] tc_dump_action: action bad kind [ 442.656331][T20710] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3995'. [ 442.823426][T20722] netlink: 'syz.1.4000': attribute type 1 has an invalid length. [ 442.856818][T20724] geneve2: entered promiscuous mode [ 442.862079][T20724] geneve2: entered allmulticast mode [ 442.871967][ T61] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 442.894389][T10398] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 442.937578][T10398] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 442.961042][T10398] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 443.127924][T20741] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4008'. [ 443.138115][T20740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4007'. [ 443.138610][T20741] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4008'. [ 443.158460][T20741] IPVS: set_ctl: invalid protocol: 43 172.30.0.4:20000 [ 443.219031][T20748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4010'. [ 444.223273][T20775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4018'. [ 444.301013][T20784] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4020'. [ 444.325419][T20786] wg1 speed is unknown, defaulting to 1000 [ 444.433113][T20792] openvswitch: netlink: Actions may not be safe on all matching packets [ 444.513873][T20793] openvswitch: netlink: Actions may not be safe on all matching packets [ 444.532850][T20795] netlink: 'syz.0.4022': attribute type 1 has an invalid length. [ 444.688403][T20781] lec:lec_atm_close: lec0: Shut down! [ 444.726016][T20797] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 444.751731][T20797] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 444.762759][T20797] bond0: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 444.783147][T20804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4023'. [ 444.844727][T20795] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 444.890899][T20795] bond0: (slave vcan1): making interface the new active one [ 444.907034][T20795] bond0: (slave vcan1): Enslaving as an active interface with an up link [ 445.219756][T20827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4025'. [ 445.545653][T20839] geneve2: entered promiscuous mode [ 445.571528][T20839] geneve2: entered allmulticast mode [ 445.587344][T20843] netlink: 'syz.0.4032': attribute type 4 has an invalid length. [ 445.620135][T20840] tunl0: entered promiscuous mode [ 445.632265][T20840] netlink: 'syz.3.4031': attribute type 3 has an invalid length. [ 445.678435][T20840] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4031'. [ 445.707626][ T1147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 445.738158][ T1147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 445.768759][ T1147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 445.793611][ T1147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 445.833698][T20847] netlink: 'syz.2.4033': attribute type 1 has an invalid length. [ 445.841478][T20847] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4033'. [ 445.899425][T20845] netlink: 'syz.2.4033': attribute type 1 has an invalid length. [ 445.979872][T20866] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 0, id = 0 [ 445.984974][T20864] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 446.396548][T20889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4045'. [ 446.419081][T20889] netlink: 'syz.3.4045': attribute type 1 has an invalid length. [ 446.445559][T20889] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4045'. [ 446.462895][T20889] netlink: 'syz.3.4045': attribute type 1 has an invalid length. [ 446.470793][T20881] syzkaller0: entered promiscuous mode [ 446.470815][T20881] syzkaller0: entered allmulticast mode [ 446.474025][T20891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4046'. [ 446.477942][T20889] netlink: 'syz.3.4045': attribute type 8 has an invalid length. [ 446.512426][T20889] netlink: 606 bytes leftover after parsing attributes in process `syz.3.4045'. [ 448.186803][T20907] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 448.439872][ T1147] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.449621][ T1147] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.469793][T20926] syzkaller1: entered promiscuous mode [ 448.476522][T20926] syzkaller1: entered allmulticast mode [ 448.483930][T20932] block nbd5: server does not support multiple connections per device. [ 448.502426][ T1147] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.511875][T20932] block nbd5: shutting down sockets [ 448.519202][ T1147] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.559832][T20921] syzkaller1: left promiscuous mode [ 448.599572][T20921] syzkaller1: left allmulticast mode [ 448.650861][T20941] Bluetooth: MGMT ver 1.23 [ 448.669458][T20941] netlink: 'syz.2.4059': attribute type 24 has an invalid length. [ 449.013332][T20976] only policy match revision 0 supported [ 449.013353][T20976] unable to load match [ 449.071685][T20974] wg1 speed is unknown, defaulting to 1000 [ 449.701129][T21000] __nla_validate_parse: 11 callbacks suppressed [ 449.701149][T21000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4076'. [ 449.707630][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 449.707702][ C0] lec:lec_tx_timeout: lec0 [ 449.716796][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 449.793583][T21000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4076'. [ 449.935936][T21011] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4079'. [ 449.967247][T21011] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4079'. [ 450.432834][T21036] netlink: 'syz.0.4088': attribute type 8 has an invalid length. [ 451.309514][T21090] netlink: 'syz.2.4109': attribute type 1 has an invalid length. [ 451.333925][T21090] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4109'. [ 451.472108][T21100] netlink: 'syz.1.4111': attribute type 4 has an invalid length. [ 451.515635][T21100] netlink: 'syz.1.4111': attribute type 4 has an invalid length. [ 451.537579][T21100] netlink: 'syz.1.4111': attribute type 4 has an invalid length. [ 451.611504][T21116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4115'. [ 451.716283][T21119] xt_TPROXY: Can be used only with -p tcp or -p udp [ 451.823204][T21093] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 452.068021][T21147] openvswitch: netlink: EtherType 50a is less than min 600 [ 452.081435][T21147] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4124'. [ 452.143816][T21149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4125'. [ 452.186841][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 452.203325][T21156] syzkaller0: entered promiscuous mode [ 452.215723][T21156] syzkaller0: entered allmulticast mode [ 452.414184][T21159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4127'. [ 452.730153][T21171] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 452.757138][T21171] syzkaller1: Refused to change device type [ 452.958391][T21185] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 452.984606][T21189] netlink: 'syz.0.4136': attribute type 5 has an invalid length. [ 453.061475][T21193] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 453.278440][T21204] netlink: 'syz.3.4143': attribute type 2 has an invalid length. [ 453.425625][T21215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4145'. [ 453.468924][T21215] bond5: entered promiscuous mode [ 453.475374][T21215] 8021q: adding VLAN 0 to HW filter on device bond5 [ 453.490217][T21215] netlink: 'syz.0.4145': attribute type 11 has an invalid length. [ 453.947739][T21246] xt_hashlimit: size too large, truncated to 1048576 [ 454.417107][T21266] netlink: 'syz.1.4160': attribute type 10 has an invalid length. [ 454.461895][T21266] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 454.743556][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 454.751616][ C0] lec:lec_tx_timeout: lec0 [ 454.756804][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 454.826123][T21285] netlink: 'syz.3.4164': attribute type 1 has an invalid length. [ 455.186542][T21300] wg1 speed is unknown, defaulting to 1000 [ 455.285109][T21307] IPv6: sit2: Disabled Multicast RS [ 455.319387][T21307] sit2: entered allmulticast mode [ 455.498667][T21326] __nla_validate_parse: 3 callbacks suppressed [ 455.498686][T21326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4176'. [ 455.728869][T21326] openvswitch: netlink: Flow actions attr not present in new flow. [ 456.008496][T21347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.087394][T21353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4178'. [ 456.108108][T21359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.133617][T21353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4178'. [ 456.292965][T21360] wg1 speed is unknown, defaulting to 1000 [ 456.294231][T21351] netlink: 'syz.2.4180': attribute type 3 has an invalid length. [ 456.340312][T21351] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4180'. [ 456.363230][T21347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.406844][T21347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.496845][T21375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4179'. [ 456.516345][T21375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.559785][T21377] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4185'. [ 457.060405][T21403] veth1_macvtap: left promiscuous mode [ 457.151358][T21408] netlink: 'syz.2.4196': attribute type 21 has an invalid length. [ 457.360465][T21418] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 457.646549][T21439] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4204'. [ 457.812734][T21450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4209'. [ 457.880709][T21450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4209'. [ 457.916436][T21450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4209'. [ 458.307416][T21477] veth5: entered promiscuous mode [ 458.731007][T21520] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 458.928856][T21517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 458.988176][T21449] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 459.243205][T21558] netlink: 'syz.3.4232': attribute type 1 has an invalid length. [ 459.281979][T21558] netlink: 'syz.3.4232': attribute type 2 has an invalid length. [ 459.599105][T21580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.763555][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 459.771648][ C0] lec:lec_tx_timeout: lec0 [ 459.776659][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 459.907378][T21599] bond2: entered promiscuous mode [ 459.928955][T21599] 8021q: adding VLAN 0 to HW filter on device bond2 [ 460.079653][T21599] 8021q: adding VLAN 0 to HW filter on device bond2 [ 460.088467][T21599] bond2: (slave sit2): The slave device specified does not support setting the MAC address [ 460.101457][T21599] bond2: (slave sit2): Error -95 calling set_mac_address [ 460.324920][T21641] sctp: [Deprecated]: syz.2.4253 (pid 21641) Use of int in max_burst socket option. [ 460.324920][T21641] Use struct sctp_assoc_value instead [ 460.387072][T21643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.575610][T21661] __nla_validate_parse: 12 callbacks suppressed [ 460.575627][T21661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4258'. [ 460.715442][T21677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4261'. [ 460.878717][T21677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4261'. [ 460.888819][T21677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4261'. [ 460.898407][T21677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4261'. [ 460.909443][T21677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4261'. [ 460.919109][T21677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4261'. [ 460.954059][T21677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4261'. [ 461.023948][T21677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4261'. [ 461.049924][T21677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4261'. [ 461.070228][T21684] syzkaller0: entered promiscuous mode [ 461.114987][T21684] syzkaller0: entered allmulticast mode [ 461.196587][T21696] tipc: Resetting bearer [ 461.209215][T21696] tipc: Resetting bearer [ 461.246529][T21696] bond5: (slave vlan0): Enslaving as a backup interface with an up link [ 461.758981][T21689] netlink: 'syz.3.4265': attribute type 6 has an invalid length. [ 461.767032][T21689] netlink: 'syz.3.4265': attribute type 5 has an invalid length. [ 461.937753][T21723] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 462.126412][T21732] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 462.303208][T21733] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 462.512723][T21745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.693243][T21765] bond0: Error: Cannot enslave bond to itself. [ 462.943440][T21783] netlink: 'syz.1.4286': attribute type 28 has an invalid length. [ 462.958873][T21782] netlink: 'syz.2.4287': attribute type 30 has an invalid length. [ 462.968680][T21783] netlink: 'syz.1.4286': attribute type 3 has an invalid length. [ 462.978430][T21782] netlink: 'syz.2.4287': attribute type 14 has an invalid length. [ 463.446836][T21819] openvswitch: netlink: IP tunnel TTL not specified. [ 463.809472][T21847] netlink: 'syz.0.4302': attribute type 1 has an invalid length. [ 463.897145][T21847] bond6: entered promiscuous mode [ 463.902698][T21847] 8021q: adding VLAN 0 to HW filter on device bond6 [ 464.491909][T21903] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 464.531884][T21909] netlink: 'syz.0.4315': attribute type 33 has an invalid length. [ 464.783602][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 464.791642][ C0] lec:lec_tx_timeout: lec0 [ 464.797283][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 464.812196][T21926] bond0: (slave gre0): Error: Device type is different from other slaves [ 465.078818][T21947] bond6: entered promiscuous mode [ 465.295903][T21957] vlan3: entered promiscuous mode [ 465.311408][T21957] vlan3: entered allmulticast mode [ 465.321184][T21957] hsr_slave_1: entered allmulticast mode [ 465.557361][T21967] nbd: illegal input index -8454144 [ 465.617405][T21973] xt_nat: multiple ranges no longer supported [ 465.854460][T21991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.878890][T21991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.987173][T22003] __nla_validate_parse: 76 callbacks suppressed [ 465.987194][T22003] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4339'. [ 466.054456][T22009] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 466.088531][T22009] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 466.264924][T22020] netlink: 'syz.3.4345': attribute type 16 has an invalid length. [ 466.281155][T22020] netlink: 'syz.3.4345': attribute type 17 has an invalid length. [ 466.297420][T22020] tunl0: left promiscuous mode [ 466.334054][T22026] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4343'. [ 466.442198][T22020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.460820][T22020] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.491681][T22020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 466.529876][T22025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4345'. [ 466.544244][T22025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4345'. [ 466.567001][T22026] dummy0: entered promiscuous mode [ 466.575214][T22026] bridge0: port 3(dummy0) entered blocking state [ 466.591552][T22026] bridge0: port 3(dummy0) entered disabled state [ 466.604333][T22026] dummy0: entered allmulticast mode [ 466.860909][T22051] syzkaller0: entered promiscuous mode [ 466.874448][T22051] syzkaller0: entered allmulticast mode [ 466.937637][T22059] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4355'. [ 466.962800][T22059] vlan5: entered allmulticast mode [ 466.971716][T22059] erspan0: entered allmulticast mode [ 467.130516][T22071] validate_nla: 1 callbacks suppressed [ 467.130532][T22071] netlink: 'syz.1.4360': attribute type 28 has an invalid length. [ 467.174089][T22071] netlink: 'syz.1.4360': attribute type 3 has an invalid length. [ 467.189192][T22071] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4360'. [ 467.304302][T22080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4363'. [ 467.335152][T22080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4363'. [ 467.359702][T22072] syzkaller0: entered promiscuous mode [ 467.371253][T22072] syzkaller0: entered allmulticast mode [ 467.461889][T22072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4359'. [ 467.498065][T22072] : entered promiscuous mode [ 467.675377][T22106] netlink: 'syz.0.4366': attribute type 11 has an invalid length. [ 467.710601][T22110] netlink: 'syz.4.4365': attribute type 16 has an invalid length. [ 467.718934][T22110] netlink: 'syz.4.4365': attribute type 17 has an invalid length. [ 468.525610][T22116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4367'. [ 469.489617][T22107] tipc: Resetting bearer [ 469.614629][T22110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.624070][T22110] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.639232][T22110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 469.722713][T22141] vlan2: entered allmulticast mode [ 469.732535][T22141] hsr0: entered allmulticast mode [ 469.744674][T22141] hsr_slave_0: entered allmulticast mode [ 469.750505][T22141] hsr_slave_1: entered allmulticast mode [ 469.764103][ T61] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.785497][ T61] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.803606][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 469.811632][ C0] lec:lec_tx_timeout: lec0 [ 469.816935][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 469.829754][ T61] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.850647][ T61] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.866653][T22161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.922556][T22161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.970494][T22170] FAULT_INJECTION: forcing a failure. [ 469.970494][T22170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.984582][T22170] CPU: 0 UID: 0 PID: 22170 Comm: syz.2.4376 Not tainted syzkaller #0 PREEMPT(full) [ 469.984606][T22170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 469.984617][T22170] Call Trace: [ 469.984624][T22170] [ 469.984631][T22170] dump_stack_lvl+0xe8/0x150 [ 469.984663][T22170] should_fail_ex+0x412/0x560 [ 469.984691][T22170] _copy_from_iter+0x1d3/0x1670 [ 469.984718][T22170] ? rcu_is_watching+0x15/0xb0 [ 469.984747][T22170] ? __pfx__copy_from_iter+0x10/0x10 [ 469.984777][T22170] ? netlink_sendmsg+0x650/0xb40 [ 469.984798][T22170] ? skb_put+0x11b/0x210 [ 469.984827][T22170] netlink_sendmsg+0x6c0/0xb40 [ 469.984857][T22170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.984882][T22170] ? aa_sock_msg_perm+0xf1/0x1b0 [ 469.984917][T22170] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 469.984941][T22170] ____sys_sendmsg+0x972/0x9f0 [ 469.984964][T22170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.984987][T22170] ? import_iovec+0x73/0xa0 [ 469.985014][T22170] ___sys_sendmsg+0x2a5/0x360 [ 469.985036][T22170] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.985084][T22170] ? __fget_files+0x2a/0x420 [ 469.985108][T22170] ? __fget_files+0x3a0/0x420 [ 469.985139][T22170] __x64_sys_sendmsg+0x1bd/0x2a0 [ 469.985158][T22170] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 469.985183][T22170] ? __pfx_ksys_write+0x10/0x10 [ 469.985212][T22170] do_syscall_64+0x14d/0xf80 [ 469.985230][T22170] ? trace_irq_disable+0x3b/0x150 [ 469.985255][T22170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.985273][T22170] ? clear_bhb_loop+0x40/0x90 [ 469.985293][T22170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.985309][T22170] RIP: 0033:0x7fabad79c799 [ 469.985326][T22170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.985340][T22170] RSP: 002b:00007fabae70e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.985359][T22170] RAX: ffffffffffffffda RBX: 00007fabada15fa0 RCX: 00007fabad79c799 [ 469.985371][T22170] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 469.985382][T22170] RBP: 00007fabae70e090 R08: 0000000000000000 R09: 0000000000000000 [ 469.985392][T22170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.985401][T22170] R13: 00007fabada16038 R14: 00007fabada15fa0 R15: 00007fffa80eca98 [ 469.985427][T22170] [ 469.986120][T22164] erspan0: entered promiscuous mode [ 470.385612][T22190] openvswitch: netlink: IP tunnel dst address not specified [ 470.403385][T22190] netlink: 'syz.3.4380': attribute type 28 has an invalid length. [ 470.432111][T22190] netlink: 'syz.3.4380': attribute type 3 has an invalid length. [ 470.619402][ T5143] block nbd5: Receive control failed (result -32) [ 470.817724][T22224] FAULT_INJECTION: forcing a failure. [ 470.817724][T22224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.838814][T22224] CPU: 0 UID: 0 PID: 22224 Comm: syz.1.4391 Not tainted syzkaller #0 PREEMPT(full) [ 470.838842][T22224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 470.838852][T22224] Call Trace: [ 470.838867][T22224] [ 470.838874][T22224] dump_stack_lvl+0xe8/0x150 [ 470.838904][T22224] should_fail_ex+0x412/0x560 [ 470.838933][T22224] _copy_from_user+0x2d/0xb0 [ 470.838960][T22224] ___sys_sendmsg+0x1c6/0x360 [ 470.838986][T22224] ? __pfx____sys_sendmsg+0x10/0x10 [ 470.839039][T22224] ? __fget_files+0x2a/0x420 [ 470.839064][T22224] ? __fget_files+0x3a0/0x420 [ 470.839100][T22224] __x64_sys_sendmsg+0x1bd/0x2a0 [ 470.839121][T22224] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 470.839148][T22224] ? __pfx_ksys_write+0x10/0x10 [ 470.839179][T22224] do_syscall_64+0x14d/0xf80 [ 470.839196][T22224] ? trace_irq_disable+0x3b/0x150 [ 470.839221][T22224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.839239][T22224] ? clear_bhb_loop+0x40/0x90 [ 470.839261][T22224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.839279][T22224] RIP: 0033:0x7faaf219c799 [ 470.839296][T22224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.839311][T22224] RSP: 002b:00007faaf03f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.839331][T22224] RAX: ffffffffffffffda RBX: 00007faaf2415fa0 RCX: 00007faaf219c799 [ 470.839343][T22224] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 470.839354][T22224] RBP: 00007faaf03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 470.839364][T22224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.839375][T22224] R13: 00007faaf2416038 R14: 00007faaf2415fa0 R15: 00007fffae064de8 [ 470.839409][T22224] [ 471.084091][T22229] __nla_validate_parse: 6 callbacks suppressed [ 471.084109][T22229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4385'. [ 471.553437][T22260] netlink: 'syz.2.4400': attribute type 1 has an invalid length. [ 471.654311][T22261] veth3: entered allmulticast mode [ 471.712704][T22265] FAULT_INJECTION: forcing a failure. [ 471.712704][T22265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.729551][T22265] CPU: 1 UID: 0 PID: 22265 Comm: syz.1.4403 Not tainted syzkaller #0 PREEMPT(full) [ 471.729576][T22265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 471.729587][T22265] Call Trace: [ 471.729593][T22265] [ 471.729601][T22265] dump_stack_lvl+0xe8/0x150 [ 471.729628][T22265] should_fail_ex+0x412/0x560 [ 471.729662][T22265] _copy_from_user+0x2d/0xb0 [ 471.729689][T22265] __copy_msghdr+0x3c5/0x5b0 [ 471.729717][T22265] ___sys_sendmsg+0x213/0x360 [ 471.729739][T22265] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.729789][T22265] ? __fget_files+0x2a/0x420 [ 471.729813][T22265] ? __fget_files+0x3a0/0x420 [ 471.729843][T22265] __x64_sys_sendmsg+0x1bd/0x2a0 [ 471.729862][T22265] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 471.729886][T22265] ? __pfx_ksys_write+0x10/0x10 [ 471.729913][T22265] do_syscall_64+0x14d/0xf80 [ 471.729928][T22265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.729944][T22265] ? clear_bhb_loop+0x40/0x90 [ 471.729965][T22265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.729982][T22265] RIP: 0033:0x7faaf219c799 [ 471.729999][T22265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.730012][T22265] RSP: 002b:00007faaf03f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.730030][T22265] RAX: ffffffffffffffda RBX: 00007faaf2415fa0 RCX: 00007faaf219c799 [ 471.730042][T22265] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 471.730054][T22265] RBP: 00007faaf03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 471.730064][T22265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.730074][T22265] R13: 00007faaf2416038 R14: 00007faaf2415fa0 R15: 00007fffae064de8 [ 471.730103][T22265] [ 472.028445][T22273] netlink: 'syz.1.4406': attribute type 1 has an invalid length. [ 472.088326][T22275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4406'. [ 472.107260][T22273] bond6: entered promiscuous mode [ 472.112809][T22273] 8021q: adding VLAN 0 to HW filter on device bond6 [ 472.154485][T22283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4408'. [ 472.222665][T22293] netlink: 'syz.4.4410': attribute type 1 has an invalid length. [ 472.225244][T22284] bond6: (slave bridge5): making interface the new active one [ 472.257944][T22284] bridge5: entered promiscuous mode [ 472.290895][T22284] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 472.314942][T22303] netlink: 'syz.2.4413': attribute type 28 has an invalid length. [ 472.326266][T22293] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 472.347726][T22303] netlink: 'syz.2.4413': attribute type 3 has an invalid length. [ 472.385735][T22303] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4413'. [ 472.465662][T22313] FAULT_INJECTION: forcing a failure. [ 472.465662][T22313] name failslab, interval 1, probability 0, space 0, times 0 [ 472.511352][T22313] CPU: 1 UID: 0 PID: 22313 Comm: syz.1.4416 Not tainted syzkaller #0 PREEMPT(full) [ 472.511379][T22313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 472.511387][T22313] Call Trace: [ 472.511394][T22313] [ 472.511401][T22313] dump_stack_lvl+0xe8/0x150 [ 472.511429][T22313] should_fail_ex+0x412/0x560 [ 472.511453][T22313] should_failslab+0xa8/0x100 [ 472.511477][T22313] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 472.511496][T22313] ? __alloc_skb+0x186/0x7d0 [ 472.511520][T22313] ? __alloc_skb+0x1d0/0x7d0 [ 472.511540][T22313] ? __local_bh_enable_ip+0xd0/0x130 [ 472.511564][T22313] __alloc_skb+0x1d0/0x7d0 [ 472.511590][T22313] netlink_sendmsg+0x5d4/0xb40 [ 472.511619][T22313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.511646][T22313] ? aa_sock_msg_perm+0xf1/0x1b0 [ 472.511668][T22313] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 472.511703][T22313] ____sys_sendmsg+0x972/0x9f0 [ 472.511727][T22313] ? __pfx_____sys_sendmsg+0x10/0x10 [ 472.511750][T22313] ? import_iovec+0x73/0xa0 [ 472.511777][T22313] ___sys_sendmsg+0x2a5/0x360 [ 472.511800][T22313] ? __pfx____sys_sendmsg+0x10/0x10 [ 472.511846][T22313] ? __fget_files+0x2a/0x420 [ 472.511869][T22313] ? __fget_files+0x3a0/0x420 [ 472.511898][T22313] __x64_sys_sendmsg+0x1bd/0x2a0 [ 472.511916][T22313] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 472.511943][T22313] ? __pfx_ksys_write+0x10/0x10 [ 472.511973][T22313] do_syscall_64+0x14d/0xf80 [ 472.511990][T22313] ? trace_irq_disable+0x3b/0x150 [ 472.512013][T22313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.512031][T22313] ? clear_bhb_loop+0x40/0x90 [ 472.512053][T22313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.512071][T22313] RIP: 0033:0x7faaf219c799 [ 472.512088][T22313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.512104][T22313] RSP: 002b:00007faaf03f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.512123][T22313] RAX: ffffffffffffffda RBX: 00007faaf2415fa0 RCX: 00007faaf219c799 [ 472.512136][T22313] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 472.512146][T22313] RBP: 00007faaf03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 472.512157][T22313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.512167][T22313] R13: 00007faaf2416038 R14: 00007faaf2415fa0 R15: 00007fffae064de8 [ 472.512194][T22313] [ 472.751595][T22316] x_tables: duplicate underflow at hook 2 [ 472.841178][T22326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4419'. [ 472.843744][T22327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4419'. [ 473.220828][T22353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4428'. [ 473.357410][T22360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4429'. [ 473.370887][T22360] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4429'. [ 473.396752][T22360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4429'. [ 473.637203][T22391] netlink: 'syz.2.4437': attribute type 10 has an invalid length. [ 473.679239][T22393] gre1: entered promiscuous mode [ 473.685523][T22393] gre1: entered allmulticast mode [ 473.701216][T22395] netlink: 'syz.1.4438': attribute type 10 has an invalid length. [ 473.707179][T22391] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 473.720113][T22395] dummy0: entered promiscuous mode [ 473.753068][T22395] team0: Port device dummy0 removed [ 473.771146][T22395] bridge0: port 3(dummy0) entered blocking state [ 473.782075][T22395] bridge0: port 3(dummy0) entered disabled state [ 473.791711][T22395] dummy0: entered allmulticast mode [ 473.871775][T22409] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 474.035547][T22421] netlink: 'syz.3.4444': attribute type 28 has an invalid length. [ 474.065305][T22421] netlink: 'syz.3.4444': attribute type 3 has an invalid length. [ 474.237367][T22443] netlink: 'syz.1.4451': attribute type 1 has an invalid length. [ 474.247431][T22443] netlink: 'syz.1.4451': attribute type 1 has an invalid length. [ 474.284468][T22443] netlink: 'syz.1.4451': attribute type 2 has an invalid length. [ 474.810078][T22481] FAULT_INJECTION: forcing a failure. [ 474.810078][T22481] name failslab, interval 1, probability 0, space 0, times 0 [ 474.824014][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 474.827486][T22481] CPU: 1 UID: 0 PID: 22481 Comm: syz.1.4462 Not tainted syzkaller #0 PREEMPT(full) [ 474.827514][T22481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 474.827526][T22481] Call Trace: [ 474.827533][T22481] [ 474.827541][T22481] dump_stack_lvl+0xe8/0x150 [ 474.827574][T22481] should_fail_ex+0x412/0x560 [ 474.827605][T22481] should_failslab+0xa8/0x100 [ 474.827630][T22481] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 474.827650][T22481] ? __alloc_skb+0x186/0x7d0 [ 474.827676][T22481] ? __alloc_skb+0x1d0/0x7d0 [ 474.827696][T22481] ? __local_bh_enable_ip+0xd0/0x130 [ 474.827724][T22481] __alloc_skb+0x1d0/0x7d0 [ 474.827751][T22481] inet6_rtm_getroute+0xd77/0x1840 [ 474.827936][T22481] ? kmem_cache_free+0x187/0x630 [ 474.827953][T22481] ? inet6_rtm_getroute+0x8dc/0x1840 [ 474.827978][T22481] ? __pfx_inet6_rtm_getroute+0x10/0x10 [ 474.828020][T22481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.828058][T22481] ? __pfx_inet6_rtm_getroute+0x10/0x10 [ 474.828078][T22481] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 474.828175][T22481] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 474.828197][T22481] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 474.828218][T22481] ? ref_tracker_free+0x693/0x840 [ 474.828271][T22481] ? __copy_skb_header+0xa3/0x4a0 [ 474.828290][T22481] ? __pfx_ref_tracker_free+0x10/0x10 [ 474.828322][T22481] netlink_rcv_skb+0x232/0x4b0 [ 474.828348][T22481] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 474.828372][T22481] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 474.828404][T22481] ? netlink_deliver_tap+0x2e/0x1b0 [ 474.828432][T22481] netlink_unicast+0x80f/0x9b0 [ 474.828460][T22481] ? __pfx_netlink_unicast+0x10/0x10 [ 474.828482][T22481] ? netlink_sendmsg+0x650/0xb40 [ 474.828502][T22481] ? skb_put+0x11b/0x210 [ 474.828529][T22481] netlink_sendmsg+0x813/0xb40 [ 474.828559][T22481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.828585][T22481] ? aa_sock_msg_perm+0xf1/0x1b0 [ 474.828609][T22481] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 474.828632][T22481] ____sys_sendmsg+0x972/0x9f0 [ 474.828658][T22481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 474.828683][T22481] ? import_iovec+0x73/0xa0 [ 474.828712][T22481] ___sys_sendmsg+0x2a5/0x360 [ 474.828733][T22481] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.828787][T22481] ? __fget_files+0x2a/0x420 [ 474.828812][T22481] ? __fget_files+0x3a0/0x420 [ 474.828845][T22481] __x64_sys_sendmsg+0x1bd/0x2a0 [ 474.828864][T22481] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 474.828889][T22481] ? __pfx_ksys_write+0x10/0x10 [ 474.828920][T22481] do_syscall_64+0x14d/0xf80 [ 474.828937][T22481] ? trace_irq_disable+0x3b/0x150 [ 474.828960][T22481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.828977][T22481] ? clear_bhb_loop+0x40/0x90 [ 474.828998][T22481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.829016][T22481] RIP: 0033:0x7faaf219c799 [ 474.829033][T22481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.829048][T22481] RSP: 002b:00007faaf03f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.829068][T22481] RAX: ffffffffffffffda RBX: 00007faaf2415fa0 RCX: 00007faaf219c799 [ 474.829080][T22481] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 474.829090][T22481] RBP: 00007faaf03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 474.829101][T22481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.829111][T22481] R13: 00007faaf2416038 R14: 00007faaf2415fa0 R15: 00007fffae064de8 [ 474.829139][T22481] [ 475.174411][ C0] lec:lec_tx_timeout: lec0 [ 475.180517][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 476.321584][T22553] __nla_validate_parse: 17 callbacks suppressed [ 476.321618][T22553] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4483'. [ 476.560609][T22583] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4492'. [ 476.616470][T22585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4493'. [ 476.674864][T22585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4493'. [ 476.679556][T22591] FAULT_INJECTION: forcing a failure. [ 476.679556][T22591] name failslab, interval 1, probability 0, space 0, times 0 [ 476.698829][T22591] CPU: 0 UID: 0 PID: 22591 Comm: syz.2.4495 Not tainted syzkaller #0 PREEMPT(full) [ 476.698853][T22591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 476.698864][T22591] Call Trace: [ 476.698871][T22591] [ 476.698879][T22591] dump_stack_lvl+0xe8/0x150 [ 476.698914][T22591] should_fail_ex+0x412/0x560 [ 476.698947][T22591] should_failslab+0xa8/0x100 [ 476.698975][T22591] __kmalloc_noprof+0xe8/0x760 [ 476.698996][T22591] ? rcu_is_watching+0x15/0xb0 [ 476.699020][T22591] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 476.699126][T22591] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 476.699153][T22591] genl_family_rcv_msg_doit+0xd9/0x330 [ 476.699172][T22591] ? __asan_memcpy+0x40/0x70 [ 476.699202][T22591] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 476.699229][T22591] ? apparmor_capable+0x126/0x170 [ 476.699291][T22591] ? bpf_lsm_capable+0x9/0x20 [ 476.699315][T22591] ? security_capable+0x7e/0x2c0 [ 476.699379][T22591] genl_rcv_msg+0x61c/0x7a0 [ 476.699404][T22591] ? __pfx_genl_rcv_msg+0x10/0x10 [ 476.699421][T22591] ? __pfx_smc_pnet_flush+0x10/0x10 [ 476.699491][T22591] ? __lock_acquire+0x6b5/0x2cf0 [ 476.699532][T22591] netlink_rcv_skb+0x232/0x4b0 [ 476.699558][T22591] ? __pfx_genl_rcv_msg+0x10/0x10 [ 476.699578][T22591] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 476.699619][T22591] ? down_read+0x272/0x2e0 [ 476.699645][T22591] ? genl_rcv+0xd/0x40 [ 476.699664][T22591] genl_rcv+0x28/0x40 [ 476.699680][T22591] netlink_unicast+0x80f/0x9b0 [ 476.699709][T22591] ? __pfx_netlink_unicast+0x10/0x10 [ 476.699732][T22591] ? netlink_sendmsg+0x650/0xb40 [ 476.699761][T22591] netlink_sendmsg+0x813/0xb40 [ 476.699794][T22591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.699821][T22591] ? aa_sock_msg_perm+0xf1/0x1b0 [ 476.699847][T22591] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 476.699872][T22591] ____sys_sendmsg+0x972/0x9f0 [ 476.699902][T22591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 476.699930][T22591] ? import_iovec+0x73/0xa0 [ 476.699962][T22591] ___sys_sendmsg+0x2a5/0x360 [ 476.699987][T22591] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.700041][T22591] ? __fget_files+0x2a/0x420 [ 476.700069][T22591] ? __fget_files+0x3a0/0x420 [ 476.700104][T22591] __x64_sys_sendmsg+0x1bd/0x2a0 [ 476.700125][T22591] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 476.700154][T22591] ? __pfx_ksys_write+0x10/0x10 [ 476.700194][T22591] do_syscall_64+0x14d/0xf80 [ 476.700212][T22591] ? trace_irq_disable+0x3b/0x150 [ 476.700238][T22591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.700258][T22591] ? clear_bhb_loop+0x40/0x90 [ 476.700281][T22591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.700299][T22591] RIP: 0033:0x7fabad79c799 [ 476.700317][T22591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.700331][T22591] RSP: 002b:00007fabae70e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.700351][T22591] RAX: ffffffffffffffda RBX: 00007fabada15fa0 RCX: 00007fabad79c799 [ 476.700364][T22591] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 476.700376][T22591] RBP: 00007fabae70e090 R08: 0000000000000000 R09: 0000000000000000 [ 476.700386][T22591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.700396][T22591] R13: 00007fabada16038 R14: 00007fabada15fa0 R15: 00007fffa80eca98 [ 476.700428][T22591] [ 476.723921][ T61] tipc: Subscription rejected, illegal request [ 476.836183][T22552] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 477.062997][T22552] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 477.197396][T22552] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 477.221529][T22552] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 477.323158][T22552] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 477.329900][T22552] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 477.345173][T22618] validate_nla: 5 callbacks suppressed [ 477.345188][T22618] netlink: 'syz.3.4502': attribute type 10 has an invalid length. [ 477.371672][T22618] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 477.385185][T22618] netlink: 'syz.3.4502': attribute type 10 has an invalid length. [ 477.412533][T22618] team0: Device vxcan1 is of different type [ 477.446447][T22552] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 477.452413][T22552] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 477.580736][T22616] netlink: 'syz.1.4501': attribute type 1 has an invalid length. [ 477.595619][T22616] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4501'. [ 477.661488][T22627] bond0: entered promiscuous mode [ 477.706238][T22627] gretap0: entered promiscuous mode [ 477.712802][T22627] hsr1: entered promiscuous mode [ 477.749003][T22638] FAULT_INJECTION: forcing a failure. [ 477.749003][T22638] name failslab, interval 1, probability 0, space 0, times 0 [ 477.762040][T22638] CPU: 1 UID: 0 PID: 22638 Comm: syz.2.4507 Not tainted syzkaller #0 PREEMPT(full) [ 477.762063][T22638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 477.762074][T22638] Call Trace: [ 477.762081][T22638] [ 477.762088][T22638] dump_stack_lvl+0xe8/0x150 [ 477.762119][T22638] should_fail_ex+0x412/0x560 [ 477.762148][T22638] should_failslab+0xa8/0x100 [ 477.762172][T22638] __kmalloc_noprof+0xe8/0x760 [ 477.762192][T22638] ? rcu_is_watching+0x15/0xb0 [ 477.762215][T22638] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 477.762240][T22638] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 477.762267][T22638] genl_family_rcv_msg_doit+0xd9/0x330 [ 477.762301][T22638] ? __asan_memcpy+0x40/0x70 [ 477.762322][T22638] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 477.762347][T22638] ? apparmor_capable+0x126/0x170 [ 477.762377][T22638] ? bpf_lsm_capable+0x9/0x20 [ 477.762400][T22638] ? security_capable+0x7e/0x2c0 [ 477.762428][T22638] genl_rcv_msg+0x61c/0x7a0 [ 477.762452][T22638] ? __pfx_genl_rcv_msg+0x10/0x10 [ 477.762469][T22638] ? __pfx_smc_pnet_flush+0x10/0x10 [ 477.762490][T22638] ? __lock_acquire+0x6b5/0x2cf0 [ 477.762523][T22638] netlink_rcv_skb+0x232/0x4b0 [ 477.762548][T22638] ? __pfx_genl_rcv_msg+0x10/0x10 [ 477.762568][T22638] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 477.762608][T22638] ? down_read+0x272/0x2e0 [ 477.762626][T22638] ? genl_rcv+0xd/0x40 [ 477.762644][T22638] genl_rcv+0x28/0x40 [ 477.762659][T22638] netlink_unicast+0x80f/0x9b0 [ 477.762690][T22638] ? __pfx_netlink_unicast+0x10/0x10 [ 477.762713][T22638] ? netlink_sendmsg+0x650/0xb40 [ 477.762748][T22638] netlink_sendmsg+0x813/0xb40 [ 477.762781][T22638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.762807][T22638] ? aa_sock_msg_perm+0xf1/0x1b0 [ 477.762849][T22638] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 477.762872][T22638] ____sys_sendmsg+0x972/0x9f0 [ 477.762899][T22638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.762926][T22638] ? import_iovec+0x73/0xa0 [ 477.762956][T22638] ___sys_sendmsg+0x2a5/0x360 [ 477.762977][T22638] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.763030][T22638] ? __fget_files+0x2a/0x420 [ 477.763055][T22638] ? __fget_files+0x3a0/0x420 [ 477.763090][T22638] __x64_sys_sendmsg+0x1bd/0x2a0 [ 477.763117][T22638] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 477.763145][T22638] ? __pfx_ksys_write+0x10/0x10 [ 477.763174][T22638] do_syscall_64+0x14d/0xf80 [ 477.763190][T22638] ? trace_irq_disable+0x3b/0x150 [ 477.763214][T22638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.763232][T22638] ? clear_bhb_loop+0x40/0x90 [ 477.763254][T22638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.763272][T22638] RIP: 0033:0x7fabad79c799 [ 477.763290][T22638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.763305][T22638] RSP: 002b:00007fabae70e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.763323][T22638] RAX: ffffffffffffffda RBX: 00007fabada15fa0 RCX: 00007fabad79c799 [ 477.763335][T22638] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 477.763346][T22638] RBP: 00007fabae70e090 R08: 0000000000000000 R09: 0000000000000000 [ 477.763357][T22638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.763367][T22638] R13: 00007fabada16038 R14: 00007fabada15fa0 R15: 00007fffa80eca98 [ 477.763398][T22638] [ 478.100383][T22644] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4508'. [ 478.111547][T22644] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4508'. [ 478.304419][T22660] bridge8: entered promiscuous mode [ 478.309675][T22660] bridge8: entered allmulticast mode [ 478.458784][T22660] team0: Port device bridge8 added [ 478.527362][T22670] bridge0: port 3(team0) entered blocking state [ 478.537954][T22670] bridge0: port 3(team0) entered disabled state [ 478.575058][T22670] team0: entered allmulticast mode [ 478.580787][T22670] team_slave_0: entered allmulticast mode [ 478.597077][T22670] team_slave_1: entered allmulticast mode [ 478.665935][T22670] team0: entered promiscuous mode [ 478.671027][T22670] team_slave_0: entered promiscuous mode [ 478.703060][T22670] team_slave_1: entered promiscuous mode [ 478.739208][T22682] netlink: 'syz.2.4515': attribute type 33 has an invalid length. [ 478.998627][T22693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4520'. [ 479.121220][T22693] hsr_slave_0 (unregistering): left promiscuous mode [ 479.172511][T22688] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4517'. [ 479.264592][T22708] netlink: 'syz.0.4522': attribute type 1 has an invalid length. [ 479.272787][T22708] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4522'. [ 479.351478][T22719] FAULT_INJECTION: forcing a failure. [ 479.351478][T22719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.409880][T22719] CPU: 1 UID: 0 PID: 22719 Comm: syz.1.4524 Not tainted syzkaller #0 PREEMPT(full) [ 479.409904][T22719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 479.409915][T22719] Call Trace: [ 479.409922][T22719] [ 479.409930][T22719] dump_stack_lvl+0xe8/0x150 [ 479.409961][T22719] should_fail_ex+0x412/0x560 [ 479.409991][T22719] _copy_to_user+0x31/0xb0 [ 479.410019][T22719] simple_read_from_buffer+0xe1/0x170 [ 479.410050][T22719] proc_fail_nth_read+0x1bb/0x230 [ 479.410124][T22719] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 479.410152][T22719] ? rw_verify_area+0x2a6/0x4d0 [ 479.410171][T22719] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 479.410194][T22719] vfs_read+0x20c/0xa70 [ 479.410211][T22719] ? fdget_pos+0x246/0x320 [ 479.410240][T22719] ? __pfx___mutex_lock+0x10/0x10 [ 479.410259][T22719] ? __pfx_vfs_read+0x10/0x10 [ 479.410286][T22719] ? __fget_files+0x2a/0x420 [ 479.410314][T22719] ? __fget_files+0x3a0/0x420 [ 479.410338][T22719] ? __fget_files+0x2a/0x420 [ 479.410371][T22719] ksys_read+0x150/0x270 [ 479.410393][T22719] ? __pfx_ksys_read+0x10/0x10 [ 479.410423][T22719] do_syscall_64+0x14d/0xf80 [ 479.410446][T22719] ? trace_irq_disable+0x3b/0x150 [ 479.410469][T22719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.410486][T22719] ? clear_bhb_loop+0x40/0x90 [ 479.410508][T22719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.410525][T22719] RIP: 0033:0x7faaf215cfce [ 479.410543][T22719] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 479.410558][T22719] RSP: 002b:00007faaf03f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 479.410576][T22719] RAX: ffffffffffffffda RBX: 00007faaf03f66c0 RCX: 00007faaf215cfce [ 479.410589][T22719] RDX: 000000000000000f RSI: 00007faaf03f60a0 RDI: 0000000000000004 [ 479.410599][T22719] RBP: 00007faaf03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 479.410610][T22719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.410620][T22719] R13: 00007faaf2416038 R14: 00007faaf2415fa0 R15: 00007fffae064de8 [ 479.410647][T22719] [ 480.166846][T22755] netlink: 'syz.1.4530': attribute type 21 has an invalid length. [ 480.207243][T22755] netlink: 'syz.1.4530': attribute type 22 has an invalid length. [ 480.223354][ T30] audit: type=1804 audit(1773319303.719:4): pid=22759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4531" name="/newroot/248/cgroup.controllers" dev="tmpfs" ino=1283 res=1 errno=0 [ 480.244034][T22755] netlink: 'syz.1.4530': attribute type 23 has an invalid length. [ 480.293733][T22755] netlink: 'syz.1.4530': attribute type 25 has an invalid length. [ 480.301855][ T30] audit: type=1800 audit(1773319303.719:5): pid=22759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4531" name="cgroup.controllers" dev="tmpfs" ino=1283 res=0 errno=0 [ 480.743527][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5560 ms [ 480.751748][ C0] lec:lec_tx_timeout: lec0 [ 480.756623][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 480.795311][T22793] xt_hashlimit: size too large, truncated to 1048576 [ 481.280196][T22823] ipvlan2: entered allmulticast mode [ 481.286292][T22823] batadv_slave_1: entered allmulticast mode [ 481.305617][T22823] batman_adv: batadv0: Adding interface: ipvlan2 [ 481.312322][T22823] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.359822][T22823] batman_adv: batadv0: Interface activated: ipvlan2 [ 481.398606][T22832] __nla_validate_parse: 6 callbacks suppressed [ 481.398625][T22832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4554'. [ 481.470660][T22838] netlink: 'syz.2.4555': attribute type 20 has an invalid length. [ 481.490133][T22838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4555'. [ 481.536370][ T1147] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.545477][ T1147] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.554509][T22838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4555'. [ 481.591553][ T1147] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.602688][ T1147] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.638546][T22840] tipc: Enabled bearer , priority 0 [ 481.721977][T22840] syzkaller0: entered promiscuous mode [ 481.734366][T22840] syzkaller0: entered allmulticast mode [ 481.740814][T22840] tipc: Resetting bearer [ 481.804418][T22840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4556'. [ 481.842061][T22867] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4565'. [ 481.843001][T22870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4564'. [ 481.966818][T22862] bridge0: port 3(dummy0) entered blocking state [ 481.973356][T22862] bridge0: port 3(dummy0) entered listening state [ 481.980148][T22862] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.987388][T22862] bridge0: port 2(bridge_slave_1) entered listening state [ 481.999116][T22862] 8021q: adding VLAN 0 to HW filter on device  [ 482.010655][T22862] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.021119][T22862] bridge0: port 3(dummy0) entered disabled state [ 482.030784][T22862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 482.049612][T22839] tipc: Resetting bearer [ 482.227848][T22882] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4569'. [ 483.406107][T22839] tipc: Disabling bearer [ 483.433150][T22877] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 483.539976][T22888] pim6reg: entered allmulticast mode [ 483.755584][T22909] validate_nla: 4 callbacks suppressed [ 483.755604][T22909] netlink: 'syz.3.4577': attribute type 1 has an invalid length. [ 483.898739][T22921] netlink: 'syz.4.4581': attribute type 2 has an invalid length. [ 483.910596][T22921] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4581'. [ 485.251974][T22909] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 485.252967][T22919] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 485.350378][T22939] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4583'. [ 485.410609][T22945] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.4585'. [ 485.519460][T22951] bridge0: Device is already in use. [ 485.616341][T22958] netlink: 'syz.0.4591': attribute type 2 has an invalid length. [ 485.627810][T22958] netlink: 'syz.0.4591': attribute type 8 has an invalid length. [ 485.663490][ T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.672445][ T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.711828][ T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.745293][T10398] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.763589][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 485.771606][ C0] lec:lec_tx_timeout: lec0 [ 485.776255][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 485.853127][T22969] syzkaller0: entered promiscuous mode [ 485.863855][T22969] syzkaller0: entered allmulticast mode [ 485.905166][T22973] bond3: option resend_igmp: invalid value (32767) [ 485.915119][T22973] bond3: option resend_igmp: allowed values 0 - 255 [ 485.925866][T22973] bond3 (unregistering): Released all slaves [ 486.422254][T22997] GUP no longer grows the stack in syz.1.4600 (22997): 200000003000-20000000a000 (200000001000) [ 486.438599][T22997] CPU: 0 UID: 0 PID: 22997 Comm: syz.1.4600 Not tainted syzkaller #0 PREEMPT(full) [ 486.438627][T22997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 486.438639][T22997] Call Trace: [ 486.438647][T22997] [ 486.438655][T22997] dump_stack_lvl+0xe8/0x150 [ 486.438690][T22997] __get_user_pages+0x2453/0x29d0 [ 486.438722][T22997] ? __lock_acquire+0x6b5/0x2cf0 [ 486.438777][T22997] ? __gup_longterm_locked+0xc4e/0x1630 [ 486.438808][T22997] ? down_read_killable+0x1bb/0x340 [ 486.438837][T22997] __gup_longterm_locked+0xdcf/0x1630 [ 486.438895][T22997] gup_fast_fallback+0x1d82/0x22e0 [ 486.438959][T22997] ? __pfx_gup_fast_fallback+0x10/0x10 [ 486.438987][T22997] ? futex_unqueue+0x22/0x240 [ 486.439041][T22997] ? futex_unqueue+0x22/0x240 [ 486.439064][T22997] ? is_valid_gup_args+0x11f/0x200 [ 486.439097][T22997] ? get_user_pages_fast+0x4d/0xb0 [ 486.439130][T22997] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 486.439169][T22997] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 486.439195][T22997] iov_iter_get_pages2+0x5e/0xa0 [ 486.439229][T22997] __se_sys_vmsplice+0x7b3/0x1490 [ 486.439279][T22997] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 486.439309][T22997] ? __pfx_futex_wait+0x10/0x10 [ 486.439348][T22997] ? lockdep_hardirqs_on+0x7a/0x110 [ 486.439440][T22997] do_syscall_64+0x14d/0xf80 [ 486.439457][T22997] ? trace_irq_disable+0x3b/0x150 [ 486.439487][T22997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.439508][T22997] ? clear_bhb_loop+0x40/0x90 [ 486.439533][T22997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.439554][T22997] RIP: 0033:0x7faaf219c799 [ 486.439573][T22997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.439591][T22997] RSP: 002b:00007faaf03b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 486.439613][T22997] RAX: ffffffffffffffda RBX: 00007faaf2416180 RCX: 00007faaf219c799 [ 486.439628][T22997] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000d [ 486.439641][T22997] RBP: 00007faaf2232c99 R08: 0000000000000000 R09: 0000000000000000 [ 486.439655][T22997] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 486.439667][T22997] R13: 00007faaf2416218 R14: 00007faaf2416180 R15: 00007fffae064de8 [ 486.439703][T22997] [ 486.441214][T22997] __nla_validate_parse: 6 callbacks suppressed [ 486.441227][T22997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4600'. [ 487.970369][T23020] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4605'. [ 488.451003][T23064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4618'. [ 488.848658][T23087] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4624'. [ 488.913815][T23096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4624'. [ 488.942805][T23096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4624'. [ 488.958797][T23102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4628'. [ 489.355967][T23134] Cannot find add_set index 46338 as target [ 489.365139][T23133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.444091][T23136] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 489.457585][T23136] bond7 (unregistering): Released all slaves [ 490.337877][T23168] vcan0: entered promiscuous mode [ 490.343722][T23168] vcan0: entered allmulticast mode [ 490.521180][T23173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4651'. [ 490.743137][T23196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.783542][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 490.792035][ C0] lec:lec_tx_timeout: lec0 [ 490.797355][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 491.065627][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.206423][T23228] Cannot find del_set index 4 as target [ 491.372057][T23222] syzkaller1: entered promiscuous mode [ 491.384258][T23222] syzkaller1: entered allmulticast mode [ 491.463461][T23241] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4666'. [ 491.500480][T23238] team0: Caught tx_queue_len zero misconfig [ 491.805921][T23264] netlink: 'syz.3.4674': attribute type 3 has an invalid length. [ 491.818100][T23264] netlink: 'syz.3.4674': attribute type 3 has an invalid length. [ 492.174375][T23283] netlink: 181256 bytes leftover after parsing attributes in process `syz.3.4679'. [ 492.184143][T23283] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 492.186848][T23285] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4682'. [ 492.243355][T23285] netlink: 'syz.1.4682': attribute type 1 has an invalid length. [ 492.309719][T23285] 8021q: adding VLAN 0 to HW filter on device bond7 [ 492.389534][T23298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4684'. [ 492.489027][T23302] netlink: 'syz.1.4687': attribute type 1 has an invalid length. [ 492.656927][T23316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4693'. [ 492.686860][T23318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4692'. [ 492.690669][T23314] tipc: Started in network mode [ 492.700802][T23314] tipc: Node identity b2f5babf5ff9, cluster identity 4711 [ 492.708261][T23314] tipc: Enabled bearer , priority 0 [ 493.060122][T23331] sctp: [Deprecated]: syz.0.4697 (pid 23331) Use of int in max_burst socket option. [ 493.060122][T23331] Use struct sctp_assoc_value instead [ 493.129080][T23331] gre1: entered promiscuous mode [ 493.153650][T23331] gre1: entered allmulticast mode [ 493.206917][T23337] syzkaller0: entered promiscuous mode [ 493.214063][T23337] syzkaller0: entered allmulticast mode [ 493.407886][T23362] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4706'. [ 493.546939][T23368] x_tables: duplicate underflow at hook 2 [ 493.560971][T23372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4709'. [ 493.719619][T23386] netlink: 'syz.1.4713': attribute type 24 has an invalid length. [ 493.752398][T23388] netlink: 'syz.4.4714': attribute type 28 has an invalid length. [ 493.773660][T23388] netlink: 'syz.4.4714': attribute type 3 has an invalid length. [ 493.792048][T23388] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4714'. [ 493.825227][ T9] tipc: Node number set to 3977034431 [ 493.942169][T23403] netlink: 'syz.4.4718': attribute type 2 has an invalid length. [ 493.986405][T23403] v: entered promiscuous mode [ 494.179384][T23417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4722'. [ 494.222470][T23419] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 494.232778][T23419] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 494.316097][T23422] wg1 speed is unknown, defaulting to 1000 [ 494.405118][T23428] netlink: 'syz.2.4726': attribute type 1 has an invalid length. [ 494.445186][T23433] netlink: 'syz.3.4728': attribute type 28 has an invalid length. [ 494.526183][T23428] 8021q: adding VLAN 0 to HW filter on device bond4 [ 494.583806][T23430] hsr_slave_0 (unregistering): left promiscuous mode [ 494.666667][T23443] syzkaller1: entered promiscuous mode [ 494.672362][T23443] syzkaller1: entered allmulticast mode [ 495.384861][T23469] team0 (unregistering): Port device team_slave_0 removed [ 495.425460][T23469] team0 (unregistering): Port device team_slave_1 removed [ 495.624521][T23487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.648344][T23487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.706237][T23493] openvswitch: netlink: Flow key attr not present in new flow. [ 495.803555][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 495.811623][ C0] lec:lec_tx_timeout: lec0 [ 495.816227][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 496.262561][T23522] syzkaller1: entered promiscuous mode [ 496.272801][T23522] syzkaller1: entered allmulticast mode [ 496.336195][T23524] x_tables: duplicate underflow at hook 2 [ 496.627203][T23544] tipc: Started in network mode [ 496.634024][T23544] tipc: Node identity ca9ae6978d77, cluster identity 4711 [ 496.642169][T23544] tipc: Enabled bearer , priority 0 [ 496.693350][T23551] __nla_validate_parse: 8 callbacks suppressed [ 496.693368][T23551] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4764'. [ 496.747342][T23544] syzkaller0: entered promiscuous mode [ 496.763867][T23553] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4760'. [ 496.783310][T23544] syzkaller0: entered allmulticast mode [ 496.789940][T23544] tipc: Resetting bearer [ 496.849422][T10387] tipc: Resetting bearer [ 496.881039][T23542] tipc: Resetting bearer [ 496.985011][T23562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4767'. [ 496.999273][T23562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4767'. [ 497.022592][T23565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4768'. [ 498.333047][T23542] tipc: Disabling bearer [ 498.379896][T23567] syzkaller0: entered promiscuous mode [ 498.386059][T23567] syzkaller0: entered allmulticast mode [ 498.457578][T23565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4768'. [ 498.507908][T23581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4773'. [ 498.573795][T23586] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4773'. [ 498.800410][T23596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4773'. [ 499.869831][ T5876] tipc: Node number set to 1206773399 [ 499.892769][T23593] erspan0: left allmulticast mode [ 499.898232][T23593] erspan0: left promiscuous mode [ 499.903443][T23593] bridge3: port 1(erspan0) entered disabled state [ 499.996339][T23601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4777'. [ 500.060159][T23608] sctp: [Deprecated]: syz.0.4780 (pid 23608) Use of struct sctp_assoc_value in delayed_ack socket option. [ 500.060159][T23608] Use struct sctp_sack_info instead [ 500.068046][T23597] dvmrp6: entered allmulticast mode [ 500.088359][T23603] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 500.400868][T23618] validate_nla: 2 callbacks suppressed [ 500.400885][T23618] netlink: 'syz.0.4781': attribute type 13 has an invalid length. [ 500.421013][T23643] netlink: 'syz.4.4789': attribute type 1 has an invalid length. [ 500.490992][T23618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 500.589604][T23655] bond7: (slave bridge4): making interface the new active one [ 500.603906][T23655] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 500.757558][T23672] hsr_slave_0: left promiscuous mode [ 500.824042][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 500.832128][ C0] lec:lec_tx_timeout: lec0 [ 500.837299][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 500.852241][T23682] IPVS: length: 154 != 24 [ 501.262522][T23708] netlink: 'syz.1.4807': attribute type 3 has an invalid length. [ 501.442433][T23713] syzkaller0: entered promiscuous mode [ 501.451478][T23713] syzkaller0: entered allmulticast mode [ 501.589724][T23731] Cannot find del_set index 4 as target [ 501.601090][T23732] netlink: 'syz.1.4815': attribute type 1 has an invalid length. [ 501.601105][T23731] netlink: 'syz.3.4814': attribute type 10 has an invalid length. [ 501.622209][T23734] netlink: 'syz.4.4816': attribute type 2 has an invalid length. [ 501.634668][T23732] netlink: 'syz.1.4815': attribute type 2 has an invalid length. [ 501.641660][T23734] 9: entered promiscuous mode [ 501.660049][T23731] team0: Device ipvlan1 failed to register rx_handler [ 501.662826][T23732] netlink: 'syz.1.4815': attribute type 1 has an invalid length. [ 501.851018][T23750] __nla_validate_parse: 11 callbacks suppressed [ 501.851038][T23750] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4818'. [ 501.994976][T23758] netlink: 'syz.3.4822': attribute type 1 has an invalid length. [ 502.099435][T23761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4822'. [ 503.192435][T23758] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 503.424168][T23771] netlink: 'syz.1.4825': attribute type 2 has an invalid length. [ 503.465561][T23776] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4828'. [ 503.481087][T23776] veth0_to_team: entered promiscuous mode [ 503.496943][T23776] veth0_to_team: left promiscuous mode [ 503.531967][T23778] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4829'. [ 503.640014][T23791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4834'. [ 503.661399][T23794] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4833'. [ 503.713349][T23794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4833'. [ 503.846237][T23811] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4839'. [ 504.098883][T23822] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4840'. [ 504.105363][T23835] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 504.250198][T23844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4847'. [ 504.538802][T23857] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 504.587048][T23862] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 504.616504][T23857] syzkaller0: entered promiscuous mode [ 504.627562][T23857] syzkaller0: entered allmulticast mode [ 504.636508][T23862] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 504.714730][T23869] syzkaller0: entered promiscuous mode [ 504.723659][T23869] syzkaller0: entered allmulticast mode [ 504.745110][T23869] 0: reclassify loop, rule prio 0, protocol 800 [ 505.424988][T23919] openvswitch: netlink: IP tunnel dst address not specified [ 505.546749][T23925] validate_nla: 6 callbacks suppressed [ 505.546767][T23925] netlink: 'syz.4.4875': attribute type 10 has an invalid length. [ 505.663921][T23925] bridge0: entered promiscuous mode [ 505.675058][T23925] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 505.696760][T23938] netlink: 'syz.3.4879': attribute type 1 has an invalid length. [ 505.787209][T23940] syzkaller0: entered promiscuous mode [ 505.792723][T23940] syzkaller0: entered allmulticast mode [ 505.840066][T23940] simple: basic_1 [ 505.843815][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 505.844023][T23940] simple: basic_2 [ 505.851985][ C0] lec:lec_tx_timeout: lec0 [ 505.855630][T23940] simple: basic_3 [ 505.860650][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 505.863681][T23940] simple: basic_4 [ 505.873194][T23940] simple: basic_5 [ 505.876869][T23940] simple: basic_6 [ 505.880506][T23940] simple: basic_7 [ 505.884210][T23940] simple: basic_8 [ 505.887916][T23940] simple: basic_9 [ 505.891556][T23940] simple: basic_10 [ 505.895335][T23940] simple: basic_11 [ 505.899070][T23940] simple: basic_12 [ 505.902803][T23940] simple: basic_13 [ 505.906582][T23940] simple: basic_14 [ 505.910331][T23940] simple: basic_15 [ 505.914097][T23940] simple: basic_16 [ 505.917830][T23940] simple: basic_17 [ 505.921531][T23940] 0: reclassify loop, rule prio 0, protocol 800 [ 506.545855][T23994] delete_channel: no stack [ 506.584112][ T9] IPVS: starting estimator thread 0... [ 506.693580][T24001] IPVS: using max 30 ests per chain, 72000 per kthread [ 506.841657][T24013] dvmrp0: entered allmulticast mode [ 506.869935][T24013] openvswitch: netlink: Flow key attribute not present in set flow. [ 506.895945][T24011] syzkaller1: entered promiscuous mode [ 506.901447][T24011] syzkaller1: entered allmulticast mode [ 506.972822][T24016] __nla_validate_parse: 14 callbacks suppressed [ 506.972840][T24016] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4905'. [ 507.016426][T24035] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4907'. [ 507.069859][T24035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.083216][T24035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.100096][T24035] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 507.113386][T24035] bond0 (unregistering): Released all slaves [ 507.362656][T24045] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4911'. [ 508.691695][T24062] netlink: 'syz.3.4916': attribute type 4 has an invalid length. [ 508.713832][T24064] xt_CT: No such helper "snmp_trap" [ 508.751809][T24070] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_vlan, syncid = 2, id = 0 [ 508.819392][T24074] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4920'. [ 508.870961][T24084] SET target dimension over the limit! [ 509.088975][T24099] openvswitch: netlink: Message has 1 unknown bytes. [ 509.094799][T24097] syzkaller0: Caught tx_queue_len zero misconfig [ 509.098733][T24099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.289369][T24112] netlink: 'syz.2.4931': attribute type 1 has an invalid length. [ 509.306506][T24107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4929'. [ 509.331606][T24118] xt_hashlimit: size too large, truncated to 1048576 [ 509.442752][T24112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.474334][T24125] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 509.501338][T24125] tipc: Enabled bearer , priority 10 [ 509.608812][T24135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4936'. [ 509.622520][T24135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4936'. [ 509.633869][T24135] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4936'. [ 509.653581][T24130] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.4934'. [ 509.663839][T24130] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 510.109317][T24165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4940'. [ 510.255160][ T30] audit: type=1107 audit(1773319333.749:6): pid=24171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 510.317866][ T30] audit: type=1107 audit(1773319333.749:7): pid=24171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 510.367854][ T30] audit: type=1107 audit(1773319333.749:8): pid=24171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 510.420331][ T30] audit: type=1107 audit(1773319333.749:9): pid=24171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 510.426157][T24183] ip6tnl0: Caught tx_queue_len zero misconfig [ 510.457648][T24186] ip6t_rpfilter: unknown options [ 510.463955][ T30] audit: type=1107 audit(1773319333.749:10): pid=24171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 510.504339][ T30] audit: type=1107 audit(1773319333.749:11): pid=24171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 510.540826][ T30] audit: type=1107 audit(1773319333.789:12): pid=24171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 510.573224][ T30] audit: type=1107 audit(1773319333.789:13): pid=24171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 510.595777][ T30] audit: type=1107 audit(1773319333.789:14): pid=24171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 510.711916][ T30] audit: type=1107 audit(1773319333.789:15): pid=24171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 510.873580][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 510.881623][ C0] lec:lec_tx_timeout: lec0 [ 510.886843][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 511.277131][T24246] x_tables: duplicate underflow at hook 1 [ 511.341799][T24256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.389002][T24262] 0: renamed from hsr_slave_1 [ 511.461069][T24268] netlink: 'syz.4.4971': attribute type 1 has an invalid length. [ 511.478090][T24262] 0: entered allmulticast mode [ 511.483950][T24262] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 511.570225][T24261] syzkaller0: entered promiscuous mode [ 511.578014][T24261] syzkaller0: entered allmulticast mode [ 511.976361][T24301] __nla_validate_parse: 7 callbacks suppressed [ 511.976374][T24301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4980'. [ 512.152626][T24309] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4983'. [ 512.185697][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 512.387782][T24329] netlink: 'syz.3.4990': attribute type 16 has an invalid length. [ 512.420892][T24329] netlink: 'syz.3.4990': attribute type 17 has an invalid length. [ 512.482934][T24329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 512.533592][T24335] lo: Caught tx_queue_len zero misconfig [ 512.774360][T24359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.806146][T24362] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 512.823375][T24362] IPVS: Error connecting to the multicast addr [ 512.877751][T24369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5000'. [ 512.897939][T24369] gtp0: entered promiscuous mode [ 512.903087][T24369] gtp0: entered allmulticast mode [ 512.922402][T24375] sctp: [Deprecated]: syz.1.5001 (pid 24375) Use of int in max_burst socket option. [ 512.922402][T24375] Use struct sctp_assoc_value instead [ 512.981601][T24380] xt_hashlimit: size too large, truncated to 1048576 [ 513.038537][T24384] vlan1 (unregistering): left allmulticast mode [ 513.055920][T24384] veth0_vlan: left allmulticast mode [ 513.106033][T24387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5006'. [ 513.197728][T24393] syzkaller0: entered promiscuous mode [ 513.203892][T24393] syzkaller0: entered allmulticast mode [ 513.245007][T24397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5009'. [ 513.349537][T24401] tipc: Enabled bearer , priority 0 [ 513.390149][T24402] tipc: Disabling bearer [ 513.492359][T24416] openvswitch: netlink: Duplicate or invalid key (type 0). [ 513.522993][T24416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.556796][T24416] openvswitch: netlink: Duplicate or invalid key (type 0). [ 513.564559][T24416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.574475][T24416] openvswitch: netlink: Duplicate or invalid key (type 0). [ 513.867652][T24441] netlink: 'syz.0.5023': attribute type 1 has an invalid length. [ 513.880270][T24441] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5023'. [ 513.890101][T24441] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5023'. [ 513.900767][T24441] netlink: 'syz.0.5023': attribute type 1 has an invalid length. [ 513.922205][T24441] netlink: 'syz.0.5023': attribute type 8 has an invalid length. [ 513.935055][T24446] netlink: 'syz.0.5023': attribute type 21 has an invalid length. [ 513.944601][T24441] netlink: 582 bytes leftover after parsing attributes in process `syz.0.5023'. [ 513.979837][T24453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5025'. [ 513.999381][T24453] netlink: 'syz.2.5025': attribute type 5 has an invalid length. [ 514.017751][T24453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5025'. [ 514.372395][T24484] netlink: 'syz.3.5037': attribute type 1 has an invalid length. [ 514.382366][T24484] NCSI netlink: No device for ifindex 0 [ 514.805660][T24523] netlink: 'syz.3.5049': attribute type 21 has an invalid length. [ 514.850382][T24529] netem: change failed [ 514.878679][T24528] netem: change failed [ 515.187323][T24552] tipc: Resetting bearer [ 515.246852][T24559] net_ratelimit: 125 callbacks suppressed [ 515.246873][T24559] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 515.558549][T24588] bridge0: port 4(batadv1) entered blocking state [ 515.590434][T24588] bridge0: port 4(batadv1) entered disabled state [ 515.601329][T24588] batadv1: entered allmulticast mode [ 515.626569][T24588] batadv1: entered promiscuous mode [ 515.660960][T24596] syzkaller0: entered promiscuous mode [ 515.678225][T24596] syzkaller0: entered allmulticast mode [ 515.714342][T24604] syz.2.5075: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 515.731501][T24596] team0: Cannot enslave team device to itself [ 515.745895][T24604] CPU: 0 UID: 0 PID: 24604 Comm: syz.2.5075 Not tainted syzkaller #0 PREEMPT(full) [ 515.745921][T24604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 515.745934][T24604] Call Trace: [ 515.745942][T24604] [ 515.745950][T24604] dump_stack_lvl+0xe8/0x150 [ 515.745984][T24604] warn_alloc+0x249/0x340 [ 515.746008][T24604] ? stack_trace_save+0xa9/0x100 [ 515.746034][T24604] ? __pfx_warn_alloc+0x10/0x10 [ 515.746064][T24604] ? kasan_save_track+0x4f/0x80 [ 515.746084][T24604] ? kasan_save_track+0x3e/0x80 [ 515.746103][T24604] ? __kasan_kmalloc+0x93/0xb0 [ 515.746124][T24604] ? __kmalloc_cache_noprof+0x31c/0x660 [ 515.746145][T24604] ? xskq_create+0x56/0x170 [ 515.746172][T24604] ? xsk_setsockopt+0x54c/0x990 [ 515.746196][T24604] ? do_sock_setsockopt+0x17c/0x1b0 [ 515.746225][T24604] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 515.746254][T24604] ? do_syscall_64+0x14d/0xf80 [ 515.746275][T24604] __vmalloc_node_range_noprof+0x132/0x1730 [ 515.746331][T24604] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 515.746360][T24604] ? __kasan_kmalloc+0x93/0xb0 [ 515.746389][T24604] vmalloc_user_noprof+0xad/0xe0 [ 515.746410][T24604] ? xskq_create+0xbf/0x170 [ 515.746438][T24604] xskq_create+0xbf/0x170 [ 515.746469][T24604] xsk_init_queue+0x8a/0xe0 [ 515.746504][T24604] xsk_setsockopt+0x54c/0x990 [ 515.746533][T24604] ? __pfx_xsk_setsockopt+0x10/0x10 [ 515.746560][T24604] ? __pfx_aa_sk_perm+0x10/0x10 [ 515.746588][T24604] ? aa_sock_opt_perm+0xff/0x1a0 [ 515.746618][T24604] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 515.746641][T24604] ? __pfx_xsk_setsockopt+0x10/0x10 [ 515.746668][T24604] do_sock_setsockopt+0x17c/0x1b0 [ 515.746704][T24604] __x64_sys_setsockopt+0x13d/0x1b0 [ 515.746741][T24604] do_syscall_64+0x14d/0xf80 [ 515.746757][T24604] ? trace_irq_disable+0x3b/0x150 [ 515.746787][T24604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.746807][T24604] ? clear_bhb_loop+0x40/0x90 [ 515.746832][T24604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.746853][T24604] RIP: 0033:0x7fabad79c799 [ 515.746872][T24604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.746889][T24604] RSP: 002b:00007fabae70e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 515.746910][T24604] RAX: ffffffffffffffda RBX: 00007fabada15fa0 RCX: 00007fabad79c799 [ 515.746925][T24604] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 515.746938][T24604] RBP: 00007fabad832c99 R08: 0000000000000004 R09: 0000000000000000 [ 515.746951][T24604] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.746962][T24604] R13: 00007fabada16038 R14: 00007fabada15fa0 R15: 00007fffa80eca98 [ 515.746995][T24604] [ 515.747003][T24604] Mem-Info: [ 515.757995][T24596] tc action pedit offset 128 out of bounds [ 515.796459][T24604] active_anon:8779 inactive_anon:0 isolated_anon:0 [ 515.796459][T24604] active_file:3057 inactive_file:40534 isolated_file:0 [ 515.796459][T24604] unevictable:768 dirty:121 writeback:0 [ 515.796459][T24604] slab_reclaimable:13378 slab_unreclaimable:122166 [ 515.796459][T24604] mapped:29325 shmem:1418 pagetables:1349 [ 515.796459][T24604] sec_pagetables:0 bounce:0 [ 515.796459][T24604] kernel_misc_reclaimable:0 [ 515.796459][T24604] free:1276580 free_pcp:24901 free_cma:0 [ 515.898248][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 515.898279][ C0] lec:lec_tx_timeout: lec0 [ 515.903744][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 516.074150][T10397] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 516.085642][T24604] Node 0 active_anon:35316kB inactive_anon:0kB active_file:12228kB inactive_file:161932kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117300kB dirty:484kB writeback:0kB shmem:4136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15468kB pagetables:5664kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 516.086724][T10397] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 516.092912][T24604] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 516.173156][T24604] Node 0 DMA free:15236kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:124kB local_pcp:40kB free_cma:0kB [ 516.204455][T24604] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 516.210459][T24604] Node 0 DMA32 free:1198100kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35316kB inactive_anon:0kB active_file:12228kB inactive_file:161932kB unevictable:1536kB writepending:484kB zspages:0kB present:3129332kB managed:2552780kB mlocked:0kB bounce:0kB free_pcp:36352kB local_pcp:19256kB free_cma:0kB [ 516.301469][T24617] syzkaller0: entered promiscuous mode [ 516.310089][T24617] syzkaller0: entered allmulticast mode [ 516.323634][T24604] lowmem_reserve[]: 0 0 0 0 0 [ 516.328386][T24604] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 516.360416][T24604] lowmem_reserve[]: 0 0 0 0 0 [ 516.367389][T24604] Node 1 Normal free:3892984kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:61464kB local_pcp:29304kB free_cma:0kB [ 516.443714][T24604] lowmem_reserve[]: 0 0 0 0 0 [ 516.451169][T24604] Node 0 DMA: 1*4kB (U) 2*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15236kB [ 516.469414][T24604] Node 0 DMA32: 8305*4kB (UM) 6048*8kB (UM) 2725*16kB (UM) 388*32kB (UME) 175*64kB (UME) 223*128kB (UM) 608*256kB (UME) 460*512kB (UM) 323*1024kB (UME) 146*2048kB (UM) 0*4096kB = 1198292kB [ 516.491469][T24604] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 516.515273][T24604] Node 1 Normal: 2*4kB (UM) 8*8kB (UM) 13*16kB (UM) 7*32kB (UM) 12*64kB (UME) 8*128kB (UM) 4*256kB (UM) 5*512kB (UM) 4*1024kB (UME) 4*2048kB (UE) 946*4096kB (UM) = 3892984kB [ 516.521344][T24631] sctp: [Deprecated]: syz.4.5083 (pid 24631) Use of struct sctp_assoc_value in delayed_ack socket option. [ 516.521344][T24631] Use struct sctp_sack_info instead [ 516.534244][T24604] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 516.561632][T24604] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 516.571908][T24604] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 516.582163][T24604] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 516.592533][T24604] 44955 total pagecache pages [ 516.597757][T24604] 0 pages in swap cache [ 516.601991][T24604] Free swap = 124996kB [ 516.606611][T24604] Total swap = 124996kB [ 516.610777][T24604] 2097051 pages RAM [ 516.614017][T24628] bond3: entered promiscuous mode [ 516.615947][T24604] 0 pages HighMem/MovableOnly [ 516.624632][T24604] 427020 pages reserved [ 516.628800][T24604] 0 pages cma reserved [ 516.632661][T24628] bond3: entered allmulticast mode [ 516.638487][T24636] sctp: [Deprecated]: syz.4.5083 (pid 24636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 516.638487][T24636] Use struct sctp_sack_info instead [ 516.657437][T24628] 8021q: adding VLAN 0 to HW filter on device bond3 [ 516.719762][T24638] Bluetooth: MGMT ver 1.23 [ 516.722887][T24640] openvswitch: netlink: Message has 6 unknown bytes. [ 516.818634][T24633] bridge11: entered promiscuous mode [ 516.823763][ T61] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 516.861246][T24633] bridge11: entered allmulticast mode [ 516.894059][T24633] bond3: (slave bridge11): Enslaving as an active interface with an up link [ 516.954795][ T61] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 516.956883][T24623] bridge12: entered promiscuous mode [ 516.994384][T24623] bridge12: entered allmulticast mode [ 517.011805][T24623] bond3: (slave bridge12): Enslaving as a backup interface with a down link [ 517.041814][T24648] __nla_validate_parse: 117 callbacks suppressed [ 517.041833][T24648] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5089'. [ 517.077251][T24666] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5092'. [ 517.213955][T24674] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5094'. [ 517.267597][T24675] lo speed is unknown, defaulting to 1000 [ 517.318440][T24675] lo speed is unknown, defaulting to 1000 [ 517.325997][T24675] lo speed is unknown, defaulting to 1000 [ 517.384252][T24675] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 517.461930][T24675] lo speed is unknown, defaulting to 1000 [ 517.462068][T24683] veth0: entered promiscuous mode [ 517.501489][T24675] lo speed is unknown, defaulting to 1000 [ 517.505453][T24683] veth0: left promiscuous mode [ 517.523651][T24675] lo speed is unknown, defaulting to 1000 [ 517.592598][T24675] lo speed is unknown, defaulting to 1000 [ 517.653807][T24696] hsr0: entered promiscuous mode [ 517.658920][T24696] hsr0: entered allmulticast mode [ 517.666953][T24696] hsr_slave_1: entered allmulticast mode [ 517.683460][T24675] lo speed is unknown, defaulting to 1000 [ 517.702233][T24675] lo speed is unknown, defaulting to 1000 [ 517.734629][T24675] lo speed is unknown, defaulting to 1000 [ 517.745511][T24675] lo speed is unknown, defaulting to 1000 [ 517.911772][T24707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5106'. [ 517.976756][T24717] validate_nla: 3 callbacks suppressed [ 517.976773][T24717] netlink: 'syz.3.5109': attribute type 1 has an invalid length. [ 518.001378][T24717] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5109'. [ 518.036617][T24717] netlink: 'syz.3.5109': attribute type 1 has an invalid length. [ 518.062914][T24717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5109'. [ 518.213997][T24735] netlink: 'syz.2.5117': attribute type 1 has an invalid length. [ 518.221853][T24735] netlink: 'syz.2.5117': attribute type 2 has an invalid length. [ 518.372223][T24742] bond7: entered promiscuous mode [ 518.378270][T24742] bond7: entered allmulticast mode [ 518.384283][T24742] 8021q: adding VLAN 0 to HW filter on device bond7 [ 518.509139][T24748] syzkaller0: entered promiscuous mode [ 518.514690][T24748] syzkaller0: entered allmulticast mode [ 518.704710][T24763] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 520.091482][T24779] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 520.309411][T24794] netlink: 276 bytes leftover after parsing attributes in process `syz.3.5131'. [ 520.360928][T24797] syzkaller1: entered promiscuous mode [ 520.368378][T24801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5135'. [ 520.378486][T24797] syzkaller1: entered allmulticast mode [ 520.388189][T24801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5135'. [ 520.401097][T24801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5135'. [ 520.469708][T24807] 0: reclassify loop, rule prio 0, protocol 700 [ 520.504296][T24811] gretap0: entered promiscuous mode [ 520.510104][T24811] vlan3: entered promiscuous mode [ 520.677963][T24826] vcan0: entered allmulticast mode [ 520.686959][T24826] xt_hashlimit: size too large, truncated to 1048576 [ 520.803897][T24837] netlink: 'syz.0.5144': attribute type 13 has an invalid length. [ 520.812132][T24838] netlink: 'syz.0.5144': attribute type 13 has an invalid length. [ 520.822833][T24837] lo: entered promiscuous mode [ 520.831121][T24837] lo: entered allmulticast mode [ 520.838228][T24837] tunl0: entered promiscuous mode [ 520.843414][T24837] tunl0: entered allmulticast mode [ 520.849356][T24837] gre0: entered promiscuous mode [ 520.854984][T24837] gre0: entered allmulticast mode [ 520.860624][T24837] gretap0: entered allmulticast mode [ 520.867868][T24837] erspan0: entered promiscuous mode [ 520.877189][T24837] erspan0: entered allmulticast mode [ 520.884074][T24837] ip_vti0: entered promiscuous mode [ 520.889356][T24837] ip_vti0: entered allmulticast mode [ 520.895451][T24837] ip6_vti0: entered promiscuous mode [ 520.901377][T24837] ip6_vti0: entered allmulticast mode [ 520.907933][T24837] sit0: entered promiscuous mode [ 520.912971][T24837] sit0: entered allmulticast mode [ 520.913556][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 520.919477][T24837] ip6tnl0: entered promiscuous mode [ 520.926220][ C0] lec:lec_tx_timeout: lec0 [ 520.927352][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 520.931865][T24837] ip6tnl0: entered allmulticast mode [ 520.957986][T24837] ip6gre0: entered promiscuous mode [ 520.963303][T24837] ip6gre0: entered allmulticast mode [ 520.969936][T24837] syz_tun: entered promiscuous mode [ 520.975619][T24837] syz_tun: entered allmulticast mode [ 520.981607][T24837] bridge0: entered promiscuous mode [ 520.989213][T24837] bridge0: entered allmulticast mode [ 520.995845][T24837] : entered promiscuous mode [ 521.000731][T24837] bond_slave_0: entered promiscuous mode [ 521.006898][T24837] bond_slave_1: entered promiscuous mode [ 521.012686][T24837] : entered allmulticast mode [ 521.017814][T24837] bond_slave_0: entered allmulticast mode [ 521.023664][T24837] bond_slave_1: entered allmulticast mode [ 521.030231][T24837] team0: entered promiscuous mode [ 521.035715][T24837] team_slave_0: entered promiscuous mode [ 521.041525][T24837] team_slave_1: entered promiscuous mode [ 521.047446][T24837] team0: entered allmulticast mode [ 521.052562][T24837] team_slave_0: entered allmulticast mode [ 521.058532][T24837] team_slave_1: entered allmulticast mode [ 521.067465][T24837] nlmon0: entered promiscuous mode [ 521.072603][T24837] nlmon0: entered allmulticast mode [ 521.078665][T24837] caif0: entered promiscuous mode [ 521.083785][T24837] caif0: entered allmulticast mode [ 521.088923][T24837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 521.108863][T24838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 522.051580][T24896] __nla_validate_parse: 10 callbacks suppressed [ 522.051600][T24896] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5163'. [ 522.175878][T24896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5163'. [ 522.385453][T24914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5171'. [ 522.397442][T24914] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 522.727989][T24938] bridge0: port 4(veth0_to_bridge) entered blocking state [ 522.738915][T24938] bridge0: port 4(veth0_to_bridge) entered disabled state [ 522.747522][T24938] veth0_to_bridge: entered allmulticast mode [ 522.760023][T24938] veth0_to_bridge: entered promiscuous mode [ 522.785886][T24943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5178'. [ 522.800703][T24943] ip6gre1: entered promiscuous mode [ 522.806407][T24943] ip6gre1: entered allmulticast mode [ 522.811727][T24942] xt_hashlimit: size too large, truncated to 1048576 [ 522.830430][T10398] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 522.845290][T10398] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 522.854148][ T5902] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 522.867192][T24940] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 523.056854][T24958] openvswitch: netlink: Duplicate key (type 2). [ 523.131100][ T5902] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 523.285757][T24969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5184'. [ 523.367307][T24967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.382900][T24984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5187'. [ 523.429871][T24985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.458910][T24985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.469645][T24988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5190'. [ 523.489864][T24985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.526619][T24992] wg1 speed is unknown, defaulting to 1000 [ 523.557197][T24996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.626759][ T5902] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 523.642328][ T5902] lo speed is unknown, defaulting to 1000 [ 523.660222][T25003] netlink: 'syz.1.5194': attribute type 1 has an invalid length. [ 523.676905][ T5902] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 523.739879][T25008] bond9: (slave bridge6): making interface the new active one [ 523.748910][T25008] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 523.924685][T24992] lo speed is unknown, defaulting to 1000 [ 523.954379][ T5902] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 524.045393][T25021] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5199'. [ 524.059254][T25027] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5200'. [ 524.089601][T25021] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5199'. [ 524.478978][T25043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 524.534605][T25048] netlink: 'syz.1.5206': attribute type 1 has an invalid length. [ 524.553063][T25048] netlink: 'syz.1.5206': attribute type 1 has an invalid length. [ 524.853383][T25068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.862651][T25068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.897158][T25071] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 525.091726][T25081] x_tables: duplicate underflow at hook 1 [ 525.167593][T25084] netlink: 'syz.1.5219': attribute type 1 has an invalid length. [ 526.507831][T25104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.520439][T25088] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 526.545157][T25088] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 526.598498][T25111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.756347][T25122] Cannot find add_set index 65532 as target [ 526.847687][T25116] syzkaller0: entered promiscuous mode [ 526.855099][T25116] syzkaller0: entered allmulticast mode [ 526.904477][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5970 ms [ 526.912826][ C0] lec:lec_tx_timeout: lec0 [ 526.918202][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 527.146654][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 527.461020][T25148] __nla_validate_parse: 11 callbacks suppressed [ 527.461042][T25148] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5236'. [ 528.565859][T25164] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 528.592457][T25165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5239'. [ 528.643245][T25165] bridge0: entered promiscuous mode [ 528.662535][T25165] macsec1: entered promiscuous mode [ 528.669326][T25165] macsec1: entered allmulticast mode [ 528.675615][T25165] bridge0: entered allmulticast mode [ 528.698768][T25165] bridge0: port 3(macsec1) entered blocking state [ 528.706049][T25165] bridge0: port 3(macsec1) entered disabled state [ 528.723302][T25165] bridge0: left allmulticast mode [ 528.740474][T25165] bridge0: left promiscuous mode [ 528.744897][T25176] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5244'. [ 528.768492][T25173] netlink: 11 bytes leftover after parsing attributes in process `syz.4.5243'. [ 528.771018][T25176] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5244'. [ 528.787771][T25176] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5244'. [ 528.793935][T25173] netlink: 11 bytes leftover after parsing attributes in process `syz.4.5243'. [ 528.797475][T25176] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5244'. [ 528.828467][T25176] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5244'. [ 528.838060][T25176] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5244'. [ 528.911075][T25183] netlink: 'syz.3.5246': attribute type 13 has an invalid length. [ 529.160947][T25200] openvswitch: netlink: IP tunnel dst address not specified [ 529.295624][T25212] pim6reg: left allmulticast mode [ 529.341036][T25215] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 529.351403][T25215] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 529.424913][T25220] veth0_to_team: entered allmulticast mode [ 529.577839][T25236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.609111][T25239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.682025][T25241] netlink: 'syz.4.5261': attribute type 1 has an invalid length. [ 529.692562][T25241] netlink: 'syz.4.5261': attribute type 2 has an invalid length. [ 529.702156][T25241] netlink: 'syz.4.5261': attribute type 1 has an invalid length. [ 529.747796][T25244] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI [ 529.759970][T25244] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 529.768400][T25244] CPU: 1 UID: 0 PID: 25244 Comm: syz.4.5261 Not tainted syzkaller #0 PREEMPT(full) [ 529.777775][T25244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 529.787921][T25244] RIP: 0010:rose_transmit_link+0x32/0xac0 [ 529.793866][T25244] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 d9 c6 2f f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6 [ 529.813567][T25244] RSP: 0018:ffffc90004a3f768 EFLAGS: 00010207 [ 529.819634][T25244] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff88802c395b80 [ 529.827685][T25244] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880419adc80 [ 529.835728][T25244] RBP: ffff8880419adc80 R08: ffff88802c395b80 R09: 0000000000000008 [ 529.843688][T25244] R10: 000000000000000f R11: 0000000000000000 R12: dffffc0000000000 [ 529.851684][T25244] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff92000947f0c [ 529.859737][T25244] FS: 0000000000000000(0000) GS:ffff888125561000(0000) knlGS:0000000000000000 [ 529.868933][T25244] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 529.875550][T25244] CR2: 000000110c24f9ed CR3: 000000009f31a000 CR4: 00000000003526f0 [ 529.883537][T25244] Call Trace: [ 529.886902][T25244] [ 529.889823][T25244] ? __alloc_skb+0x4e5/0x7d0 [ 529.894431][T25244] ? skb_put+0x11b/0x210 [ 529.898667][T25244] rose_write_internal+0x1256/0x1b60 [ 529.903957][T25244] ? lockdep_hardirqs_on+0x7a/0x110 [ 529.909146][T25244] ? __pfx_rose_write_internal+0x10/0x10 [ 529.914782][T25244] ? timer_delete+0x245/0x340 [ 529.919484][T25244] rose_release+0x25b/0x510 [ 529.924006][T25244] sock_close+0xc3/0x240 [ 529.928278][T25244] ? __pfx_sock_close+0x10/0x10 [ 529.933223][T25244] __fput+0x44f/0xa70 [ 529.937209][T25244] task_work_run+0x1d9/0x270 [ 529.941799][T25244] ? __pfx_task_work_run+0x10/0x10 [ 529.946922][T25244] ? do_raw_spin_unlock+0xf5/0x210 [ 529.952021][T25244] do_exit+0x70f/0x23c0 [ 529.956219][T25244] ? __pfx_do_exit+0x10/0x10 [ 529.960817][T25244] ? rose_connect+0xd38/0x1110 [ 529.965581][T25244] ? do_raw_spin_lock+0x12b/0x2f0 [ 529.970594][T25244] do_group_exit+0x21b/0x2d0 [ 529.975196][T25244] ? _raw_spin_unlock_irq+0x23/0x50 [ 529.980400][T25244] get_signal+0x1284/0x1330 [ 529.984893][T25244] arch_do_signal_or_restart+0xbc/0x830 [ 529.990552][T25244] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 529.996722][T25244] exit_to_user_mode_loop+0x86/0x480 [ 530.001992][T25244] ? rcu_is_watching+0x15/0xb0 [ 530.006837][T25244] do_syscall_64+0x32d/0xf80 [ 530.011438][T25244] ? trace_irq_disable+0x3b/0x150 [ 530.016460][T25244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.022538][T25244] ? clear_bhb_loop+0x40/0x90 [ 530.027203][T25244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.033079][T25244] RIP: 0033:0x7f23b1b9c799 [ 530.037475][T25244] Code: Unable to access opcode bytes at 0x7f23b1b9c76f. [ 530.044475][T25244] RSP: 002b:00007f23b2aa5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 530.052880][T25244] RAX: fffffffffffffe00 RBX: 00007f23b1e16090 RCX: 00007f23b1b9c799 [ 530.060921][T25244] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 530.068896][T25244] RBP: 00007f23b1c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 530.076860][T25244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.084858][T25244] R13: 00007f23b1e16128 R14: 00007f23b1e16090 R15: 00007fff9d0c8328 [ 530.092824][T25244] [ 530.095861][T25244] Modules linked in: [ 530.102037][T25244] ---[ end trace 0000000000000000 ]--- [ 530.108620][T25244] RIP: 0010:rose_transmit_link+0x32/0xac0 [ 530.114905][T25244] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 d9 c6 2f f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6 [ 530.135200][T25244] RSP: 0018:ffffc90004a3f768 EFLAGS: 00010207 [ 530.141338][T25244] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff88802c395b80 [ 530.152429][T25244] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880419adc80 [ 530.165354][T25244] RBP: ffff8880419adc80 R08: ffff88802c395b80 R09: 0000000000000008 [ 530.173697][T25244] R10: 000000000000000f R11: 0000000000000000 R12: dffffc0000000000 [ 530.181806][T25244] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff92000947f0c [ 530.190056][T25244] FS: 0000000000000000(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 [ 530.199345][T25244] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 530.206911][T25244] CR2: 00007fff8d629928 CR3: 000000007cb64000 CR4: 00000000003526f0 [ 530.214998][T25244] Kernel panic - not syncing: Fatal exception [ 530.221440][T25244] Kernel Offset: disabled [ 530.225862][T25244] Rebooting in 86400 seconds..