last executing test programs: 3.503544079s ago: executing program 2 (id=4730): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48) unshare(0x24060400) r1 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000015, 0x805, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x90}, 0xc8c5) close(0x3) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2d, 0x27, 0xb, 0x8, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback={0xff00000000000000}, 0x8, 0x388, 0x9, 0x6}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000181100009c80ee4a63f29efb41c7009d6804915d35a369e724e7d2b76cea6709b1fc2b9aac8d156e64c86bd238a625c0d6447e7ef652a89bcccb7ba66968ef814c54338fe73a2abc754dd895f5f9c7e455", @ANYRES32=r0, @ANYRES8=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$sock(r7, &(0x7f00000006c0)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e23, 0x2}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)="a5b465a15fe7cc9bc19285c63c32c4bf720414cdfdc096ac039d4d51fbbc4857b829ec9e7ee987d733b9a20f6f786716c4cbc7a86dfd801e0e0d9f210d88", 0x3e}, {&(0x7f0000000300)="6e79c46c39236ffd28f2f3889acabb42598a661cbc30321004fd74c899f87829f3383ef7c5071df2cb1db849249e119dee4433120b5799bfa991a8abee38a349d1b1c6bc2b23899ca9fed609801b899147bb4b029069f74a4c945da2c03349aac015df604d831c4d5ccf723df62579301b4b134084a5af5257d1", 0x7a}, {&(0x7f0000000380)="132436d54d40f74d124da0519f784b59a4cc6f5e8b92f284b5bfb3dbd9d44312a87ca98599f401da59f5291dd0f9516323a0e52fe2eb", 0x36}, {&(0x7f00000003c0)="521c52cbedccfe9d3f8bb88fc294d54e9b04b98380275fa6934c7550de1fc23a49d93dbfd3edb4891bb73acc71d66c9d23c7de508330f3a6a83adf0d559a63a08806affd5143912241e506df28e3881d2973209520e549121c2e1160888d47383e41d082213bc256050f2890f07dc04b071c8bb3545328362077532011baefcde4c6f422e5ce8ca41b5d3f65b9ebcc58fc11da1e11ca749a00ea04fe9915162797e351f6e32c97654142645fea3836de7c4ee06af6efc101c83d0ee0cfeddbd519380a261d210a742b1d53cff49bb7833b05076557c9d6f5fabcd656917437fb7ce1", 0xe2}, {&(0x7f0000000580)="1687de938fc184d96e2a0de5d87de16fa7ba385e23eed0b87421fe936722436b453e492eef3c845f405673db18d89896", 0x30}, {&(0x7f00000005c0)="9b29e7010bd2e7423591dfa78b50b278882079ff8e82b2424672276cc1002ea935c2123e99fba36dfe9ff711c6b25e1e91169ad6076f70bd33f471c361a8679d5fa545", 0x43}], 0x6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r10}, 0x18) 2.474480648s ago: executing program 0 (id=4734): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8020}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000500012000000800010000000000080029007e6b00000800"], 0x104}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) tee(r1, r3, 0x80000001, 0x0) r4 = socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="601200000206010100000000000000000100000307000400020000000d000300686173683a6e657400000000050004000180f029716c81a996797a3200000000050004000100000005000400020000000500050000000000050000000700000092097618b73f5000d2b9c48d001adf01faf6d9a22556e875d64890ac7154"], 0x60}, 0x1, 0x0, 0x0, 0x20000044}, 0x4004040) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r8], 0x20, 0x6044}, 0x6) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x1, 0xfff3}, {0x0, 0x1}, {0x10, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffe}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7, 0xfe, 0x7f}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x3}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000340)={r8, 0x3, 0xf, 0x4, 0xffff, 0xa875, 0x2, 0x4, {r13, @in={{0x2, 0x4e22, @broadcast}}, 0x7eef, 0x80000001, 0xfffffe65, 0x4, 0x7f}}, &(0x7f0000000400)=0xb0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000008c40)={0x11, 0x3, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff89, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$packet(0x11, 0x2, 0x300) 2.120515439s ago: executing program 2 (id=4741): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000060000000410000010"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x20, 0x2, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r4 = socket(0x8, 0x3, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x61f0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x0, 0x5, 0x4, @remote, @private0, 0x80, 0x40, 0x8783, 0x3}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'vlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=@mpls_newroute={0xc0, 0x18, 0x1, 0x70bd28, 0x25dfdbfb, {0x1c, 0x0, 0x20, 0x7, 0xfc, 0x0, 0x0, 0x9, 0x900}, [@RTA_DST={0x8, 0x1, {0x9a0, 0x0, 0x1}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_DST={0x8, 0x1, {0x1}}, @RTA_NEWDST={0x84, 0x13, [{0x200, 0x0, 0x1}, {0x4f1}, {0x8}, {0x5}, {0x5}, {0x6}, {0x0, 0x0, 0x1}, {0x96e}, {0x7, 0x0, 0x1}, {0x3}, {0x100}, {0x7, 0x0, 0x1}, {0x5}, {}, {0x7, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x1000}, {0xffff0, 0x0, 0x1}, {0x5}, {0x5}, {0x81}, {0x9, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x5}, {0xf, 0x0, 0x1}, {0xd}, {0xe8, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x6, 0x0, 0x1}]}, @RTA_OIF={0x8, 0x4, r7}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000895}, 0x880) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r8, &(0x7f0000000240)='\x00', 0x1, 0x4008002, &(0x7f0000000140)={0xa, 0x4e23, 0x3, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) recvmmsg(r8, &(0x7f0000003200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/115, 0x73}, 0x4}], 0x1, 0x140, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000006c0)={0x5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40800000000000073113b00000000008510000002000000b7000000000000009500c20000000000950000120000000023dcd6e0bb7ca319641c718b4a44ba5601ae847031ffa10db7ffe4c27bf8770f9a57781cffa24bba9d1ec229828ce1557508966e17c3710a53a83fba9ecf58be66373013cd58eda4030a891b742f59fed1c672e7a00034c4a2204822c1a91dcfbeb501b158a5ed95735c99c33d23c7f770"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 1.760980678s ago: executing program 1 (id=4748): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@initdev, 0x0}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003800)=@delqdisc={0xb4, 0x25, 0x800, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0xfff3, 0xffff}, {0x3, 0x8}, {0xffe0, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x80}}, @qdisc_kind_options=@q_mq={0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x5, 0x9, 0xffff, 0x0, 0xa2, 0x3, 0x4}}, {0xc, 0x2, [0x6, 0x3, 0x6, 0xa]}}, {{0x1c, 0x1, {0x5, 0x10, 0x8, 0x1, 0x0, 0x5, 0xfffffffe, 0x3}}, {0xa, 0x2, [0x8, 0x3, 0x8001]}}, {{0x1c, 0x1, {0x4, 0x2, 0x1, 0x6, 0x2, 0x7, 0x64, 0x1}}, {0x6, 0x2, [0xf]}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x20000085) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x1) unshare(0x2c060000) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 1.727722337s ago: executing program 3 (id=4749): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x808, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.631356242s ago: executing program 3 (id=4750): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000020e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f00000000c0)="1c3cfc42d7570fdc0523dea35a711073df6dbfbb6b43c27a68175a006c49dfdee51869df5bd01f2586325d7b6dc2d604fb4f2b20570007c854215550f746f771960d32c9478259e81a95e36a51b0e63b29c03173304a94ed723881e424a4661260aac29e857d62171055ca2ff7ec899b6eb74a57c8388ab1a4a2b6a9421a7bebad5b16d1ed1f0db1eaa9068e46788b8623c7696d077fb8e5") 1.480759427s ago: executing program 0 (id=4752): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x25, &(0x7f00000002c0), 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffff8}]}}]}, 0xa4}}, 0x0) socket$inet(0x2, 0x6, 0xfffffff2) 1.441178179s ago: executing program 1 (id=4753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@can_newroute={0x78, 0x18, 0x20, 0x70bd2c, 0x25dfdbfb, {0x1d, 0x1, 0x3}, [@CGW_SRC_IF={0x8, 0x9, r2}, @CGW_FILTER={0xc, 0xb, {{0x1, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}}, @CGW_DST_IF={0x8, 0xa, r2}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "b61bb98870bd652f"}, 0x1}}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "7d7efb4cfe6f53a0"}, 0x5}}, @CGW_MOD_AND={0x15, 0x1, {{{0x1, 0x1, 0x0, 0x1}, 0x2, 0x0, 0x0, 0x0, "7e0343dfcaaa9888"}, 0x1}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc080}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff1}, {0xffff, 0xd}, {0xa, 0x1}}}, 0x24}}, 0x4000080) 1.316663705s ago: executing program 0 (id=4755): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x53, &(0x7f00000000c0)=0x1000, 0x4) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x80800) read$alg(r4, &(0x7f0000000580)=""/110, 0x6e) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003e7c2877d7eebc60fc3b7721e2ebe78f04a34912084be39995a0b0b1d098d2a0a09a6bf793bbd9045924059b2cc009ab1e563fb1cb059716c197d872084832760895eae9e346a2afdf58be95f245b30279fec8b3f9024b3149995af19f8c2ad470ed439e62ce2dece00950115a544fcc547ac58ddaea05997bdaac7cc6f6402e495ff78548e1d2008ffcdeda", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf250c00000004000580"], 0x18}, 0x1, 0x0, 0x0, 0x24000000}, 0x8010) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003d40)={&(0x7f0000003c80)=ANY=[@ANYBLOB="9f00180000090000000700000001000013080000000100000006000000370b0000005f000d0030092e00"/55], 0x0, 0x39, 0x0, 0x1, 0x320}, 0x1f) 1.304276515s ago: executing program 3 (id=4757): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xfff3}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x5}]}}]}, 0x3c}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000014c0)=@delchain={0x73e4, 0x65, 0x630, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xc, 0x2}, {0xf, 0xffff}, {0x7, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x6, 0x40}}, @filter_kind_options=@f_route={{0xa}, {0x41c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xf6, 0x4d, 0x10000, 0x9, 0x0, 0x7, 0x5, 0x57, 0x1000, 0x1, 0x8, 0x2, 0xfffffffb, 0x10000, 0x400, 0x1, 0x8c, 0xfffffffb, 0x0, 0x19, 0x1, 0x8, 0x8, 0x9, 0x8, 0x5ab4, 0x200, 0x9, 0x5, 0x4, 0x80000001, 0x5, 0x81, 0x1, 0x30, 0x5, 0x100, 0x3, 0x1, 0x3ff, 0x9, 0xe878, 0x4, 0x6, 0xfff, 0x8, 0x1000, 0x1, 0x0, 0x2, 0xb0e6, 0x9, 0x0, 0x9, 0x7000, 0xffff8000, 0x5, 0x8, 0xfffffc25, 0x1, 0xc5400000, 0x5, 0x13, 0x1b, 0x9, 0x400, 0x2, 0xf0e600, 0xa4, 0x4a, 0x5, 0x81, 0xc888, 0x1, 0x161a, 0x8, 0xfffff567, 0x0, 0x0, 0x8001, 0x1, 0x5, 0x7b04, 0x8, 0x3, 0x947a, 0xfffff800, 0x9, 0x7, 0x3, 0x3, 0x100, 0x7fff, 0xffffffff, 0x0, 0x8000, 0x9, 0x7, 0xffffffff, 0xad8a, 0x5, 0x0, 0x4, 0x3, 0x0, 0xff, 0xbf1, 0x8, 0x2, 0x8, 0x9, 0xfffff5a3, 0x3, 0x9, 0x9, 0x7f, 0x2, 0x1000, 0x8, 0x4, 0xa, 0x7, 0x6, 0x5, 0x7fffffff, 0xfa3, 0x0, 0x6, 0xe4, 0xd0, 0xebce, 0xffffffff, 0x101, 0x8, 0x0, 0x3, 0x3, 0x7ff, 0x7cb, 0x7ff, 0x7, 0x8, 0xc327, 0xfffffff7, 0x7, 0x99b, 0xedf7, 0x13, 0x4, 0xfffffff8, 0x3, 0x3, 0x408d2303, 0x1ff, 0x200, 0x5, 0x7fff, 0xe, 0x8, 0x7, 0x9, 0x9, 0x5, 0x8, 0x2, 0x8c86, 0x1, 0x0, 0x44295167, 0xfffffffe, 0x7fffffff, 0x200, 0xf, 0xa, 0x396, 0x4, 0x5, 0x0, 0x6c1, 0x5, 0x6, 0x7, 0x3, 0xb, 0x0, 0x6, 0x4, 0x3, 0x2, 0x8000, 0x9, 0x2, 0x5, 0xd, 0x6, 0xffff, 0x2, 0xb, 0x0, 0x8, 0x80000000, 0x2853d13a, 0x0, 0x1, 0x80000000, 0x400, 0x4, 0x2314, 0x81, 0x7, 0x8001, 0xda6d, 0x5, 0x9, 0xb, 0x3, 0x7fffffff, 0x6, 0x9, 0x3ff, 0x31, 0x28000, 0x0, 0x0, 0xfffffff9, 0xf, 0x14, 0x7ff, 0xfc, 0x100, 0x180, 0x8e, 0x400, 0x8, 0x10, 0x2, 0x7, 0x2, 0x412, 0x4, 0x7f, 0x6, 0x50c1, 0x8, 0x0, 0x1000, 0x5, 0x3ed, 0xff, 0x1, 0xeed, 0x0, 0x4, 0x5, 0x800]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x10}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x7f}]}}, @filter_kind_options=@f_fw={{0x7}, {0x858, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ip6erspan0\x00'}, @TCA_FW_POLICE={0x838, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xea, 0x80000000, 0x3, 0x9, 0x800, 0x8, 0x3, 0x3, 0x9, 0x2, 0x3, 0x7, 0xfff, 0xfffffff5, 0x6, 0x3, 0xc6f, 0x5f01d33c, 0x5, 0x3e1, 0x6, 0x9, 0xe, 0x4, 0x81d, 0x400, 0x8000, 0x400, 0x20000, 0x9, 0x2, 0x9, 0xc, 0xe, 0xfffffff8, 0x4, 0x4, 0x7, 0xfb, 0x5, 0x681, 0x2, 0x1ff, 0x1, 0x8001, 0x0, 0xf, 0x2, 0x4, 0x5, 0x4, 0xe, 0xa, 0x5, 0x2, 0x2, 0x0, 0x800, 0x3, 0x401, 0x4, 0x5, 0x8, 0x4, 0x4, 0x8, 0x0, 0xb7, 0x0, 0xff, 0x4, 0x8, 0x1ff, 0x8, 0xfffffffe, 0x7, 0x9, 0xfe3, 0x84, 0x0, 0xe1f, 0x8, 0xfffffe01, 0x5, 0x9, 0x132a, 0xd5, 0x1, 0x7, 0x9, 0x3, 0x7fffffff, 0x2, 0x1, 0xffffff47, 0x0, 0x3, 0x7f, 0x7c, 0x8, 0x1, 0x6, 0x2, 0x560, 0x4, 0x2000, 0x4, 0x2, 0x9, 0x9, 0x9, 0x1d, 0xfffffffe, 0x1, 0x1ff, 0x8, 0xc39e, 0xfa, 0x4, 0x6, 0x9, 0xfffffffd, 0x1, 0x48, 0x80000000, 0x3f, 0x5, 0x3, 0xd, 0x4, 0xfffffffb, 0x8, 0x9, 0xd, 0xc2b9, 0x4, 0xf, 0xc000, 0xfffffff9, 0x2, 0x6, 0x4, 0x9, 0x4, 0x28000000, 0x9df, 0x8, 0x9, 0x0, 0xdf, 0x5, 0xffff0001, 0x9, 0xdba7bd00, 0x401, 0x4, 0x9, 0xfffffff3, 0x3, 0x0, 0x4, 0xffffff5a, 0x9, 0x10, 0x2, 0x3, 0x8001, 0x6, 0x5, 0x7, 0x254d, 0x0, 0x5, 0x1, 0x7fffffff, 0xae, 0xff, 0x0, 0x9, 0x8, 0x7fff, 0xa, 0x80, 0x8001, 0x17, 0xf, 0x9, 0x0, 0x4, 0x1c0, 0x7ff, 0x3, 0xcc, 0x3, 0xfffffff7, 0x80000000, 0x3, 0x2, 0x8, 0x1, 0xfff, 0x9, 0x6, 0x3, 0x8, 0x9, 0x6, 0x100, 0x7, 0x200, 0x876, 0x5, 0x5, 0x40, 0xca9a, 0x4, 0x200, 0x6, 0x0, 0x1, 0x81, 0x4, 0x80, 0x8000, 0x2b6c, 0x200, 0x2, 0x8000, 0xa6, 0x6, 0x2, 0x3, 0x0, 0x3, 0xff, 0xc0d0, 0xa5b2, 0x80000000, 0x5, 0xfffffff5, 0x100, 0x6, 0xfffffffa, 0x8001, 0x0, 0x6, 0x0, 0x9, 0x1ff, 0x2, 0x6, 0x8, 0x6, 0x9, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10001}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x1, 0x2, 0x3, 0x99c8, 0x3ff, 0x7, 0xfffffff8, 0x4, 0x8, 0x7, 0x0, 0xfffffffc, 0x3, 0x0, 0x2, 0xcfa, 0x1, 0xfffffffc, 0x80, 0x4, 0xc2, 0xfffffffd, 0x6, 0x7fff, 0x6, 0xb8, 0x2000000, 0x6, 0x1, 0x977, 0x40, 0xe0000, 0x8, 0x1abc, 0x9d8b39d2, 0x80000000, 0xb, 0x0, 0x10000, 0x80000000, 0x3, 0x9, 0x0, 0x4, 0x7, 0x8, 0x6409203, 0x2b2, 0x881e00, 0x1, 0x6, 0x3, 0x0, 0x100, 0x200, 0xffff, 0xf, 0xfffff801, 0x4, 0x5, 0x9, 0x1, 0xd, 0xf, 0x80000000, 0x9, 0x9, 0x8, 0xe42d, 0x4, 0xe0, 0x6b, 0x0, 0x3ff, 0x35f8, 0x1b, 0x9, 0x1, 0x9, 0x2, 0x80000000, 0x8000, 0x1, 0x2, 0x1, 0x9, 0xe0000000, 0x6, 0x7, 0x4, 0xb75, 0x5, 0x8001, 0x7fff, 0x2, 0x8, 0xba91, 0x0, 0x1, 0xaa2, 0x2, 0x11, 0xb46, 0x9, 0xfffff000, 0x3, 0x7, 0x101, 0x8, 0x7, 0xc, 0x9, 0x9, 0x700, 0x1000, 0x0, 0x0, 0x3e8, 0xf, 0x3, 0x9, 0x5, 0x5, 0x8, 0x3ff, 0x0, 0x5, 0x1, 0x3, 0x3, 0x4, 0x4, 0x5, 0x7, 0x4, 0x6, 0xc, 0x5, 0x1, 0x8, 0x3, 0x1, 0x1ff, 0x5, 0x8, 0x4, 0x1, 0x5, 0xfffffff8, 0x4, 0x6, 0x6, 0x3, 0x1, 0x6, 0x3, 0x5, 0x0, 0xc109, 0xfffffffd, 0x1, 0x6, 0x4, 0x5, 0xf, 0xfffffff9, 0x8, 0x0, 0x9, 0x2, 0xfffffe00, 0x9, 0x9, 0x80000000, 0x35, 0x5, 0x6, 0x7, 0x3ff, 0x9, 0x0, 0x4, 0xffffff00, 0xffffffff, 0x2, 0x101, 0x1381, 0x0, 0x1, 0xf, 0x101, 0x2, 0x1, 0x6, 0x8, 0x10000, 0x9, 0x6, 0x5, 0x0, 0x80000001, 0x7, 0x8, 0x40, 0x7, 0x7, 0x2, 0x0, 0xd, 0x2, 0x7, 0x0, 0x3, 0x4, 0x7, 0xec, 0x1, 0x11b, 0xa, 0x0, 0x3, 0x0, 0x0, 0x9, 0x7, 0x0, 0x1, 0x40, 0xe0000000, 0x8, 0x4, 0x1, 0x7fffffff, 0x7, 0x8, 0xffc00000, 0xa84, 0x200, 0x82, 0x1, 0x5, 0xf9da, 0x5, 0x5, 0xfffff15a, 0x0, 0x439c3edc, 0x3, 0x5, 0x8, 0x5, 0x0, 0x2, 0x1, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xb}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x6, 0x9}}]}}, @filter_kind_options=@f_route={{0xa}, {0x66c0, 0x2, [@TCA_ROUTE4_ACT={0x6224, 0x6, [@m_xt={0x58, 0x1a, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x290}, @TCA_IPT_INDEX={0x8, 0x3, 0x200}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}]}, {0xe, 0x6, "04771eb0125cdb408c42"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0x108, 0x1b, 0x0, 0x0, {{0xb}, {0xdc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x80000000, 0x8, 0x1, 0x1, 0x5}, 0x3}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xf2, 0x1, 0x6, 0x6a}, 0x6}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0xfffffffd, 0x0, 0xb, 0x7}, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x0, 0x0, 0x9, 0x10000}, 0x7}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_police={0x1d70, 0x16, 0x0, 0x0, {{0xb}, {0x1d00, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x8, 0x80000000, 0x4, 0x0, 0x4, 0x4, 0xfffff0fb, 0x9, 0x0, 0x3, 0x6, 0x7fff, 0x200, 0x6, 0x6, 0xd, 0x7, 0x800, 0x0, 0x7, 0x80000001, 0x8000, 0x800, 0x1, 0x5, 0x6, 0xedc, 0x6fe, 0x9, 0x3, 0x4, 0x48a6, 0xfffffff0, 0xc, 0xe3c, 0xff, 0x3, 0x8, 0x6, 0x5, 0x7, 0x3, 0xfff, 0xfffff800, 0x6000000, 0x8, 0x6, 0xfffffff8, 0x400, 0x8, 0x8, 0x0, 0x6, 0x2, 0x5, 0x3, 0xc8000000, 0x7, 0xc474, 0x5, 0xb, 0x1, 0x3, 0x4, 0x200, 0x70, 0x3, 0x3, 0x199, 0x1000, 0x0, 0x3ff, 0xffffad04, 0x3, 0x1b5, 0xfff, 0x3, 0x8, 0x8, 0x6, 0xef63, 0xd588, 0x4, 0x80, 0xd3d, 0x2, 0x1, 0x7, 0x407, 0x9d, 0x3, 0x31, 0x6, 0xfffff05c, 0x2, 0x5, 0x100, 0x6, 0x2, 0x10000, 0x0, 0x7, 0x7f, 0x4, 0x3, 0x8, 0x6113, 0x5, 0x2, 0x7, 0x9, 0xcc6, 0xb, 0x1, 0x1, 0x8001, 0x64, 0x800, 0x401, 0x8, 0x4, 0x10001, 0xe, 0x20000000, 0x0, 0x0, 0x5, 0x10, 0x7, 0x8, 0x9, 0x3, 0xffffb5ca, 0x9, 0x78, 0x4, 0x1000, 0x4, 0x16000, 0xfffffff9, 0x6, 0x79, 0x40, 0x0, 0x8, 0x5, 0x800, 0x3, 0x9, 0x1, 0x400, 0x7, 0x3, 0x5, 0x9, 0x7, 0x7f, 0x400, 0xa15a, 0x9, 0x8001, 0x1, 0x5, 0x6, 0x5, 0x79, 0x9, 0xb98, 0x6, 0x3, 0x8, 0x7, 0xffff, 0xb9, 0x9, 0x6f7, 0x5, 0x8, 0x60000000, 0x0, 0xa, 0x1, 0x3, 0x31c, 0xc95f, 0x2, 0x11, 0x8cda, 0x1, 0x615, 0x0, 0x8, 0x0, 0x538f, 0xfca8, 0x3, 0xc, 0xb, 0x7f, 0x0, 0x80000001, 0x3a36, 0x4, 0x4, 0xdf, 0x3cd9, 0xb63b, 0x9c, 0x7, 0x2, 0x7, 0xfffffffb, 0x4, 0x3c, 0x936, 0x8, 0x8, 0x7b, 0xc, 0x0, 0x10000, 0x3, 0xff, 0x77b27fea, 0x8, 0x400, 0x18000000, 0xf8b, 0x4, 0x4, 0x81, 0xd, 0x9c, 0xe, 0x5, 0x5, 0x9, 0x400, 0xe363, 0xfffffff7, 0x2, 0x10, 0x7ff, 0x1, 0x1, 0x6, 0x2, 0x1000, 0x4, 0x7, 0x80000001, 0x9, 0x3, 0x8, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x1, 0x4, 0xedb, 0x7, 0x3, 0x4, 0x6, 0x8000, 0x101, 0x7, 0x401, 0x80000001, 0x9, 0x8, 0x5, 0x3, 0x6, 0x40, 0x8, 0x791, 0x5, 0x800, 0x6, 0x7fffffff, 0x400, 0x0, 0xffffffff, 0x7, 0x3, 0x7, 0xbc97, 0xa, 0x1, 0xd, 0x5, 0x3, 0xffff18f8, 0x6, 0x9, 0x80, 0x1, 0x0, 0xe4d, 0x3, 0x81, 0xf8bd, 0x7, 0x5, 0x9, 0x400, 0x8, 0x3, 0x18000000, 0x8, 0xfffffffc, 0x7, 0x0, 0x6, 0x9, 0x2, 0x0, 0x7f, 0x80000001, 0xfffffff8, 0x3d2e0365, 0x3, 0x10000, 0xffffff93, 0x7fffffff, 0x0, 0x6, 0x101, 0x7, 0x102a16f1, 0x7, 0xb, 0x9, 0xd, 0x0, 0x3e78ec1b, 0x6, 0x9, 0x8001, 0x58b, 0xff, 0x3, 0x3f, 0xc6fd, 0x183, 0x6, 0x9c, 0x0, 0x0, 0x5c7, 0x8, 0x6, 0xff, 0x7fffffff, 0x3, 0x2, 0xfff, 0x1, 0xa879, 0x10001, 0x9b5, 0x6, 0x1, 0x408, 0x7, 0x1f61, 0x7ff, 0xd, 0xc, 0x10000, 0x8000, 0x865, 0x4f0, 0x4, 0x5, 0x2, 0x4, 0x4, 0x7, 0x907e, 0x4, 0x6, 0x4, 0xffffffff, 0x7f, 0x11, 0x1ff, 0x2d90c388, 0x7, 0x10, 0x1, 0x1, 0x9, 0xfb4f, 0x4, 0x6, 0x7, 0x9, 0x7, 0x69d864ad, 0x40, 0xfc48, 0x4, 0x1, 0x6c, 0x5, 0x8, 0x9, 0x6, 0x9, 0x6eb, 0xd6a, 0x7fffffff, 0x5, 0xff, 0x10001, 0x8, 0x1d3, 0x3, 0xfffffff8, 0x52598db1, 0x5, 0x4, 0x1, 0x3000, 0x6, 0xe, 0x3, 0xffff, 0x6, 0x0, 0x4, 0x1, 0x6, 0xd, 0x8, 0x80000000, 0x0, 0xf804, 0x4, 0xff, 0x1, 0x7, 0x4, 0x0, 0x3, 0x6, 0x3ff, 0x5c, 0x2, 0x4, 0x3, 0x310, 0x3, 0xbc, 0x3, 0x4, 0x5, 0xff, 0x7ff, 0x7fff, 0x2, 0x52, 0x7ff, 0x1, 0x9, 0x80000001, 0xffff, 0x6, 0x9, 0x1, 0x0, 0x6, 0x2, 0x2, 0x7, 0x80, 0x5, 0x3, 0x4, 0x4, 0xfffffffc, 0xff, 0x1906, 0x3, 0xd, 0x3, 0x7fffffff, 0x9, 0x5, 0x4, 0x9, 0xff800000, 0x6, 0x9, 0x3, 0x6, 0x80, 0x1, 0x4, 0x1, 0x8, 0x9, 0x6, 0x8, 0x4, 0x5, 0x4, 0x29, 0x4, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x800}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x7, 0xf6d, 0x9, 0xffffff01, 0xc1, 0x4, 0x8, 0x8, 0x0, 0x8, 0x9e, 0x3b4ae4ec, 0x81, 0x1000, 0x7ff, 0x1, 0x1000, 0x2000, 0xeec2, 0xdad9, 0x4, 0x8, 0xc, 0x3, 0x101, 0x9, 0x2, 0x1, 0x4, 0x6e, 0x3, 0x5, 0x0, 0x8000, 0x7, 0x10001, 0x8, 0x40, 0x1ad53aa5, 0x9e32, 0x8000, 0x56, 0x6, 0x2, 0x4, 0x8, 0x2, 0x2, 0x2, 0x2, 0x7, 0x55, 0x8c27, 0x0, 0x9, 0x8, 0x7f, 0x6, 0x7f, 0x59, 0x767, 0x8000, 0x4, 0x40, 0x7fff, 0x7, 0x5, 0xe, 0x16e, 0x2, 0xfffffffe, 0x7, 0xa, 0x5, 0x4, 0x8, 0x9, 0x0, 0x90000000, 0xd, 0x2, 0x80000001, 0xd, 0x1, 0x4, 0x8, 0x100, 0x10, 0x1, 0xffffffff, 0x7, 0x4, 0xffffffff, 0xb61, 0x63990, 0x7f, 0x7fffffff, 0xff, 0x7, 0x0, 0x8001, 0x401, 0x3, 0x3, 0x9, 0x4, 0x2, 0x1, 0x3, 0x3ff, 0x8, 0x6, 0xfffffffb, 0x5f, 0x1, 0x8, 0x8e8b, 0x5, 0x800, 0x7, 0x8000, 0x2, 0x5, 0xb, 0x33a7, 0x8, 0xda1, 0x7, 0x74bc, 0x101, 0x4, 0x590e33b1, 0xaa, 0xff, 0xaad, 0x800, 0x3, 0x7fff, 0x6, 0x5, 0xc, 0x7ff, 0x9, 0x8, 0x400, 0x8, 0x2, 0x100, 0x3, 0x5, 0x6, 0x2, 0x8, 0x9, 0x0, 0xffffff80, 0x390afba8, 0x5, 0x8, 0x2, 0x2, 0x3, 0x1, 0x5, 0xd, 0x4, 0x4, 0x48, 0x2, 0x8, 0x1, 0x7, 0x2, 0x8, 0x9, 0x1, 0x81, 0x361, 0x7, 0x4, 0x2, 0x9, 0x4, 0xe1, 0x1, 0x7, 0xfffffffb, 0x8, 0x3, 0x1000, 0x2, 0x6, 0x5, 0x2, 0x4, 0x0, 0x5, 0x21, 0x5, 0x80, 0xf, 0x3, 0xc, 0x91a, 0x1, 0x0, 0x8000, 0xbb, 0x4, 0xa, 0x0, 0x2, 0x9f0, 0x6, 0x0, 0x5, 0x3, 0x8, 0x0, 0x1, 0x2, 0x6, 0xd9, 0x4, 0x1, 0x19, 0x7, 0x5, 0x7, 0xb, 0x6, 0x2, 0x88, 0x5, 0x538, 0x40, 0x69c59e32, 0x6, 0xfffffffa, 0x9, 0x7, 0x0, 0x738, 0x1, 0x2, 0x5, 0x8001, 0x8, 0x1, 0x7, 0x5, 0x6, 0x848e, 0xfffffff7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}, @TCA_POLICE_RATE64={0xc, 0x8, 0xaef2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x1, 0xfffffffe, 0xbe17, 0x100, 0x553c, 0x1, 0x7, 0x5, 0x63, 0x401, 0xffff, 0x800000, 0x80000000, 0x5, 0x1, 0xe9, 0x4, 0x5, 0x2, 0xd50, 0x8, 0xbae, 0xfffffffb, 0x637b, 0x80000000, 0x2, 0x2, 0x3, 0x4547, 0x4, 0x1, 0x3, 0x6, 0x2, 0x6, 0x0, 0x2, 0x10, 0x1ff, 0x8, 0x10000, 0x4, 0x9, 0x1, 0x9, 0xb9, 0x7, 0x3, 0x80000001, 0x9, 0x7, 0x8, 0xcb7, 0xd30b, 0x8, 0x5, 0x1, 0x3, 0xfffffffd, 0x0, 0x1, 0x4, 0x8000, 0x5, 0x7fffffff, 0x3, 0x1000, 0x7, 0x7, 0x40, 0x6, 0xfffffffb, 0x9, 0x1ff, 0x4, 0x3, 0x4246, 0x5, 0x10000, 0x3, 0x8, 0x10, 0x10001, 0x3, 0x100, 0x30, 0x8, 0x8f0, 0x4, 0x1, 0x9, 0x3, 0x10, 0xd, 0x8, 0x7, 0x1, 0x80000001, 0x4, 0x80, 0x1, 0x8, 0x2, 0x6, 0x0, 0x8, 0x1ff, 0xffffa40a, 0x3ff, 0x200, 0xfffffe01, 0x7ff, 0x7, 0x9, 0xfffffffd, 0x145, 0x1, 0x3, 0xfff, 0xc5, 0x7, 0x5, 0x2, 0x7, 0x7, 0x9b32, 0x0, 0x1, 0x80000000, 0x6, 0x9, 0x3, 0x3, 0x81, 0x700, 0xfffffffc, 0x9, 0x9, 0x3, 0x280, 0x10000000, 0x8000000, 0x3, 0xec04, 0xa52, 0x6, 0x5, 0xddaa, 0x2, 0x400, 0x5, 0x6, 0x5000, 0x400, 0x8bc, 0x3, 0x6, 0x0, 0x7, 0xc6d, 0x51, 0x9, 0x40ce, 0x7, 0x6, 0xff, 0x8, 0x0, 0x8, 0x5, 0x401, 0x4, 0x4ab, 0x7d614a3d, 0x626, 0x8, 0x5, 0x5, 0x5, 0x4, 0x9, 0x84, 0x2, 0x9, 0x90cb, 0x10, 0x5e, 0xffff, 0x8, 0x1, 0x0, 0xb, 0x9, 0xe0, 0xe3, 0x8, 0x0, 0x8000000, 0x2, 0x7, 0x782, 0xfff, 0x7, 0x4, 0xffffffff, 0x10000, 0x1ff, 0xd, 0x7a2b, 0x835a, 0x3ff, 0x7, 0x7fffffff, 0x91, 0xd17, 0x1, 0x4, 0xffff0285, 0x5, 0x5, 0x10000, 0xff, 0x2, 0x4, 0x9, 0x40, 0x5, 0x2, 0x5, 0xff, 0x0, 0x3, 0x6, 0xfffff2b5, 0x43161ed8, 0x1, 0x1, 0x7841eeca, 0x0, 0x0, 0xe, 0xf1, 0x3, 0x1000, 0x0, 0x400, 0x5, 0x6, 0x0, 0x0, 0x3, 0x8, 0x8, 0xb, 0x9]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x7f, 0x9, 0x5, 0x2, 0x100, 0x40, 0x9, 0x0, 0x8001, 0xfff, 0x4, 0x0, 0xf55, 0x44, 0x7f, 0x7, 0x7fffffff, 0x9, 0x6fba, 0x5, 0x8001, 0x751, 0x2, 0xfffff5c7, 0x4, 0x720f, 0x1, 0xfd, 0x6, 0xcd26, 0x0, 0xd, 0xb2, 0xffffffff, 0x6, 0x1, 0x40, 0xb7e, 0x7, 0xcb3, 0x1, 0x4, 0xfffffffd, 0x8, 0x9, 0x1, 0x3, 0xd, 0x80000000, 0xcf2, 0x6, 0x4, 0x4, 0x9, 0x5e07, 0x10, 0x1, 0x7fff, 0x7, 0x3, 0x9, 0x8, 0x4, 0x2, 0xa, 0x2, 0x5, 0xfffffff7, 0x100, 0x6, 0x1, 0x200, 0xbc0, 0xce22, 0x200, 0x5, 0x7be9b85f, 0x0, 0x5, 0x4d8, 0x1, 0xf, 0xc00000, 0x0, 0x2, 0x5, 0x1fc1, 0x6, 0x1, 0x1, 0x236c, 0x1ff, 0x8, 0x81, 0x4, 0xfff, 0x2, 0x8, 0x5, 0x2, 0x3, 0x8001, 0x800, 0x2aae, 0x3, 0x4, 0xf3, 0x5, 0x800, 0x7ff, 0x7, 0x8, 0x0, 0x4, 0x404, 0x4, 0x1000, 0x8, 0x0, 0x7fff, 0x3, 0x9, 0x4, 0x3, 0x1, 0x973d, 0x0, 0x5, 0xa08, 0x2, 0x7, 0x20000000, 0x61ec, 0x3, 0x2f0, 0x8, 0x6, 0x7e926bbb, 0x6, 0xfffffff8, 0x3, 0x0, 0x8c0b, 0xff, 0x3, 0x3, 0x52, 0x7, 0x6, 0xfbe3, 0x3, 0x0, 0x1, 0x830, 0x8, 0x5, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x8, 0x1, 0x1ff, 0x80000000, 0x1000, 0x800, 0x5, 0xfffffffd, 0x8, 0x82a1, 0x401, 0x7, 0x5, 0x2, 0x322, 0x8000, 0x8001, 0x6, 0xeadb76ad, 0x18d, 0xb6, 0x1, 0x10, 0x8, 0x1, 0x8001, 0x171, 0x0, 0x3, 0xaa7, 0x5, 0x1e, 0x1231, 0x1ff, 0x9, 0xffffffff, 0xfffffc8a, 0xc0fd, 0x9, 0x407, 0x9, 0x3ff, 0x3, 0x9f, 0x9, 0x9, 0x9, 0xd, 0x101, 0x3, 0x7f0, 0x0, 0x4, 0xffff0001, 0x8, 0x10000, 0x3, 0x4, 0x6, 0x5, 0x1, 0x800, 0x7ff, 0x7, 0x1000, 0xe, 0x3, 0x8, 0x4, 0xa5, 0x9, 0x10, 0x7ff, 0xf, 0x2, 0x0, 0x1, 0x2, 0xfff, 0x1, 0x7f, 0x0, 0x0, 0xa, 0x1e, 0x6, 0x6, 0xe3ba, 0xba, 0x0, 0x6, 0x7fff, 0x36]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xb, 0x568f, 0x5, 0x7fff, 0xb0d, 0x1, 0x6, 0xa44, 0x0, 0x7, 0x4, 0x7fff, 0x8, 0x6, 0x3, 0x54a0, 0x4, 0xffffffff, 0x3, 0x9, 0x6, 0x4, 0x3, 0x7a5, 0x8, 0x401, 0x7fffffff, 0x7, 0x8, 0x0, 0x5, 0xa, 0x1, 0x1000, 0x4, 0x1ff, 0x7, 0x4, 0x400, 0x9, 0x100, 0x9, 0x7, 0xe3, 0x2a1f, 0x53, 0x1, 0x400, 0x1, 0x0, 0xaed5, 0x66af, 0x7, 0x7, 0x4, 0x5, 0x3, 0x15, 0x7, 0x800, 0x2, 0x0, 0x8, 0x10c2, 0x6, 0x8, 0x8000, 0x4, 0x3170c00, 0xc, 0x9, 0x40, 0x800, 0x612, 0x0, 0x60, 0x563e, 0xffff, 0x10000, 0x10001, 0x4, 0x10, 0x4, 0x0, 0x9, 0x6a00fcb3, 0x200, 0x1, 0x13, 0xf4, 0x3, 0x8, 0xff, 0x81, 0x3, 0x3ff, 0x80000000, 0x9, 0x3, 0x9, 0x31, 0x9, 0xffffff80, 0x9d37, 0x75, 0x0, 0x9, 0x3, 0x9, 0x1ff, 0x7ff, 0x200, 0x9, 0x4, 0x1, 0x0, 0x2, 0xffff8000, 0xd, 0xfffffffc, 0x20, 0x80000000, 0x4, 0x6, 0x4fb4, 0x1, 0x2dcd5c54, 0x4d, 0x6, 0x6, 0x6, 0x3ff, 0x6, 0x2, 0x200, 0x3, 0x1, 0x5, 0x9, 0x401, 0x4, 0x7, 0x9, 0x7, 0x1, 0x2, 0x0, 0x0, 0xd, 0x3, 0xf, 0x9, 0xe42c, 0x4, 0x7ca1, 0x2, 0x5, 0x9, 0x167, 0x0, 0x9, 0x55, 0x7, 0x3, 0x400, 0x0, 0x5, 0x100, 0x8, 0x5, 0x3, 0x3, 0x9, 0x18f8, 0x3, 0x4, 0x9, 0x735, 0xffffffff, 0x3, 0x4, 0x5, 0x9, 0x1, 0xa, 0x4, 0x200, 0x1000, 0x36b, 0x3, 0x80000000, 0xb01, 0x9, 0xfffffffb, 0x3, 0x5, 0x0, 0x2, 0xffffffff, 0x14000, 0x2, 0x3, 0x80000000, 0x3, 0x4, 0xd, 0x7fffffff, 0x7, 0x6, 0x100, 0x2, 0xb928, 0x8, 0x200, 0x8, 0xfffff19b, 0x4, 0x2, 0x2, 0x0, 0x5, 0x6, 0x4, 0xeec9, 0x8000, 0x6, 0x6, 0xffff3529, 0x7, 0x9, 0xfff, 0x3c0000, 0x9, 0x1, 0xff000000, 0x0, 0x4, 0x5, 0x2, 0x5, 0xc4, 0xfffffeff, 0x9, 0x101, 0x100, 0x6, 0xc, 0xfffffffc, 0x7, 0x10000, 0x0, 0x3, 0x7fffffff, 0x5, 0x7ff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffa}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6bbc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x10000004, 0x9, 0x1ae, 0x1, {0x2, 0x2, 0x6, 0x62e, 0x8000, 0xb}, {0x8, 0x0, 0x5d8, 0x5, 0x7, 0x1}, 0x1, 0xb618, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x0, 0x10, 0x3, 0x8, 0x0, 0x7, 0x5, 0x7, 0xfff, 0x2, 0x6, 0x8, 0xf, 0x9, 0x80, 0x80, 0x6, 0x0, 0x9, 0x3, 0x3, 0x5, 0x7, 0x8, 0x2, 0x3, 0x668, 0xf7, 0x5, 0x3, 0x9, 0x4, 0x10001, 0x5, 0x0, 0x3b, 0x4, 0x1, 0x8, 0x8, 0x7, 0x713, 0x5, 0x7, 0x2, 0x0, 0x6, 0x4f03, 0x4a, 0x6c, 0x1ff, 0x9, 0x3, 0x9a9, 0x2, 0x0, 0x4, 0x6, 0xffffffff, 0x7, 0x1, 0x6, 0x3, 0x0, 0x2, 0x4, 0x7, 0xfffffffc, 0x7f, 0x8, 0x3ab, 0xc, 0x6, 0x401, 0x50, 0x4, 0xfffffffc, 0x6, 0x3, 0xffff, 0x1, 0x8001, 0x8, 0x50000000, 0x100, 0x7, 0x0, 0x6903, 0x2, 0x3, 0x9, 0x1, 0x5, 0x8, 0x9, 0x5, 0x9, 0x5, 0xf, 0x8, 0x747ac24d, 0x4, 0xd, 0x6, 0x64, 0xfffffffc, 0x9, 0x4, 0x23bb, 0x8, 0x9, 0x0, 0x66d, 0x7, 0x40, 0x5, 0x3, 0x6018, 0x4, 0x9, 0xfff, 0x7fff, 0x0, 0xb, 0x8, 0x1, 0x48, 0x85, 0x0, 0x9, 0x7, 0xd, 0x6, 0x4, 0x9387, 0xffffffff, 0x6, 0x2, 0x7fffffff, 0xb9, 0x8, 0x7f, 0x5, 0x6, 0x1f4, 0x3, 0x7, 0x4, 0xf72, 0x4100000, 0x4, 0x6, 0x380, 0x7f, 0x1ff, 0x2, 0x3, 0x3, 0x5, 0x3, 0x1, 0x8, 0x8, 0x7, 0x1, 0x23aa22d6, 0xe, 0x4, 0x8000000, 0xffff43c6, 0x1000, 0x81, 0x6, 0x10, 0x5, 0xe, 0x7, 0x5406, 0xb, 0x5, 0x2, 0x9, 0x9, 0x2, 0x0, 0x3, 0x9, 0x0, 0x4, 0x0, 0x6, 0x7, 0x6, 0x40, 0x3, 0xff, 0x120f, 0x62c6, 0x1, 0x8000, 0x9, 0x4, 0x5, 0x6, 0xed5e, 0x2, 0x9, 0xd096, 0xec, 0x6, 0x5, 0x0, 0x4, 0x0, 0x10001, 0x10, 0x2, 0x8, 0x0, 0x2, 0xfffffc01, 0x3, 0x9, 0x7, 0x7f1b, 0x68, 0x9, 0x0, 0x1, 0x40, 0xef9, 0x8, 0x3, 0x4, 0x5, 0xffff, 0x3, 0x81, 0x0, 0x11ab206f, 0xfffffff9, 0x110, 0x4b, 0x1, 0xffffff0c, 0x2, 0x0, 0x1ff, 0x8000, 0x7f, 0x1000, 0x0, 0xfffffffb, 0xfffffffb, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x4, 0x1, 0x69, 0x0, {0xa3, 0x2, 0x6, 0x2, 0x79e, 0xfffffc00}, {0xfd, 0x0, 0xfd, 0x8, 0x9, 0x6}, 0x9, 0xc8, 0x79}}]]}, {0x48, 0x6, "616d06a0f96bd277bdc193a917fedf76671042c964a9aba0975358584563c88e8c135075ac0a024936d8745ec4a79fdb961b836c3f4045f796d797a4a2c02c38399fae87"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0x1054, 0x6, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x4304, 0xffffffffffffffff, 0xa14d, 0x5b7c3be9}, 0x9}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x84, 0x1a, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xe2b398d2797ff6fa}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8035}, @TCA_MPLS_LABEL={0x8, 0x5, 0x3acc0}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1fffc00, 0x0, 0xffffffffffffffff, 0xd}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0xf8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88f5}]}, {0x14, 0x6, "64271148e72ee12befc444fb9f52b1ee"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x2f2c, 0x20, 0x0, 0x0, {{0xb}, {0x2ed0, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x811, 0x5, 0x10001, 0x1, 0xfffffff9, 0x0, 0x0, 0x3, 0x2e, 0x1, 0x6, 0x2, 0x86, 0x7, 0x10, 0xe02, 0x8, 0x6, 0xfffffffc, 0x0, 0x0, 0x2, 0xe, 0xe, 0xf, 0x3ff, 0x0, 0x3, 0x5, 0x8001, 0x9, 0x4, 0x6, 0x10, 0x4, 0xa, 0x0, 0x310a843b, 0x8, 0x0, 0x3, 0xd, 0xfffffffa, 0x8, 0xb6c, 0x2, 0xc00000, 0x1, 0x45f9, 0xfffffffb, 0x6f79, 0xc29, 0xa04, 0x401, 0x80000000, 0x8, 0x7, 0x3, 0x3, 0x2, 0x8389, 0x1, 0x5, 0x7, 0x1, 0x4f0, 0x6, 0x9, 0x1a, 0x2, 0x480, 0x8, 0x6, 0x2, 0x1, 0x7, 0xbd59, 0x1, 0x5, 0xb85, 0x7, 0x46, 0x6, 0xa, 0x1000, 0x7fff, 0x4, 0x6, 0x0, 0x8001, 0xfa63, 0x6, 0x4, 0x9, 0x7f6a, 0x9, 0x7, 0x67d, 0x7, 0x3, 0x43c8, 0x80, 0xfadb, 0x1, 0x2, 0x7, 0xab, 0x3, 0x4, 0x3, 0x6, 0xfffffff9, 0x4, 0x200, 0x7, 0xe5, 0x678, 0x9, 0x2, 0xffff, 0x81, 0x0, 0x8, 0x8d, 0x5, 0x1, 0x101, 0x9, 0x9000000, 0x6, 0x7fffffff, 0x6, 0x0, 0xf8, 0x3, 0x1, 0x8, 0x5, 0x3, 0xfffffff4, 0xfffffffa, 0x3, 0x9, 0x7, 0x2, 0x7, 0x2, 0x0, 0x5, 0x80000000, 0x1ff, 0x9, 0x8f22, 0x9b, 0x3, 0x4000, 0x7, 0x9, 0x9, 0x6, 0x1, 0x2, 0x8, 0x3, 0xa3a1, 0x4, 0x2984, 0x7, 0x7fff, 0x2, 0x9, 0xfffffff7, 0x0, 0x84, 0x8d, 0x7, 0x4, 0x3ff, 0x2, 0x9, 0x4, 0x7, 0xff, 0xffffffff, 0xff, 0x1000, 0x4, 0x10000, 0x3b1, 0x80000000, 0xaf, 0x1, 0x1, 0xf5b, 0xb077, 0x5, 0x5, 0x7f, 0x8, 0x2, 0x8, 0x3, 0x7, 0x8000, 0x8, 0xf81, 0x10001, 0x4, 0x0, 0x0, 0x5582, 0x401, 0x5b40e10, 0x8, 0x9, 0x0, 0x0, 0xffae, 0x101, 0x3, 0x4, 0x40, 0x7, 0x3ff, 0xffffffff, 0x600000, 0x4, 0xd, 0x80000001, 0x2, 0x8, 0x2, 0x8001, 0x8, 0x7, 0x1, 0x2, 0x2, 0x79e0, 0xfeca, 0x4, 0x5, 0x9, 0x5, 0x433, 0x4, 0x7, 0x8, 0x80000001, 0x0, 0x6, 0x9, 0x6, 0x101, 0x1, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6c2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x10000000, 0x0, 0x9, 0x8, {0x2, 0x1, 0x1, 0x6, 0x4, 0x4}, {0x40, 0x1, 0xfeff, 0x5, 0x3c}, 0x5, 0xffffffff, 0x4}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x40}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x124}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x8, 0xffffffff, 0x2, {0x7f, 0x2, 0x8, 0x2, 0x8, 0x1}, {0x31, 0x1, 0x8, 0x6, 0x0, 0x6}, 0x0, 0xf}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x3, 0x0, 0x2, 0xa, 0x4, 0x400, 0x9, 0x7fff, 0x2, 0xa, 0x7, 0x800, 0x2, 0x3ff, 0x3, 0x8, 0x3, 0x6, 0xc5, 0x0, 0x7ff, 0xd, 0xb, 0xfffffffe, 0x1, 0x6, 0x1, 0x2, 0x7, 0x1, 0xfffffffd, 0x80000000, 0x4, 0x0, 0x8, 0x2, 0x7, 0x6, 0x9823, 0x60000000, 0x8, 0x2, 0x7ff, 0x2, 0x7e82, 0x69c2, 0x2, 0x4, 0x4c1, 0xb, 0x8, 0x8, 0x2, 0x8bf, 0x9, 0x1, 0x8000, 0x31ef208a, 0x0, 0x3, 0x101, 0x594d, 0x8000, 0x7, 0x4, 0x1, 0x0, 0xffff, 0x9, 0x8, 0x8, 0x8, 0xffffffff, 0x5c74, 0x9, 0x8, 0x40, 0xe, 0x8001, 0x6, 0xe7ff, 0x3c, 0x9, 0x624, 0x9, 0xb8d1, 0x9, 0x5, 0x4, 0x7, 0x3, 0x3ff, 0x40, 0x7, 0x1d2b, 0xf8bd, 0xb6e1, 0x8ee, 0x2d2d, 0x0, 0xf, 0x7, 0x7fff, 0x1, 0x1ff, 0xb, 0x5, 0x9, 0x6, 0x3be4, 0x0, 0x7, 0x80000001, 0x400, 0x0, 0x3, 0x3, 0x7, 0x4, 0x1, 0x2, 0xffffffff, 0x240, 0x3829, 0x4, 0xf4e, 0x900, 0x29f, 0x9, 0x8000, 0xfffff215, 0x9, 0x0, 0x401, 0x9fa4, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7, 0x3, 0x6, 0x6, 0x3, 0x800, 0xdcb6, 0x40, 0x1, 0xc8cd, 0x8f, 0x7, 0x0, 0xffffff81, 0x5, 0x2, 0x6, 0x3, 0x8b3, 0x8, 0x6, 0xca11, 0x2d, 0x0, 0x0, 0x0, 0xf, 0x7, 0xc, 0x7, 0x2, 0xf8a, 0xfff, 0xfff, 0x3ff, 0xc, 0x7, 0x1, 0x2, 0x70a, 0x0, 0x1, 0x5, 0x6, 0x7, 0x8, 0x3, 0x4, 0x3, 0xb, 0x0, 0x3, 0x1, 0x7, 0xfffffffa, 0x9, 0x4, 0x4, 0x47, 0x2, 0x6, 0x0, 0x400000, 0x4b, 0x0, 0x488, 0x8, 0xd649, 0xd9b, 0xa3, 0x3ff, 0x1, 0x7, 0x3, 0x1, 0x38, 0x2, 0x0, 0xde27, 0x9, 0x0, 0x1e, 0x2, 0x9, 0x4, 0x4, 0x9, 0x1, 0x0, 0xf, 0xed, 0xfffffff9, 0xff, 0x6, 0x8, 0x7fff, 0xf, 0x5, 0x3, 0x9, 0x1, 0x4, 0x5, 0x6da5, 0x9, 0x4, 0x7fffffff, 0x1ff, 0x1, 0xc00, 0xfffffff7, 0x800, 0x4, 0x7, 0x26]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}], [@TCA_POLICE_RATE={0x404, 0x2, [0xfcc6, 0x7, 0x0, 0x2, 0x6, 0x81, 0x2, 0xec0, 0x4, 0x4, 0xffffffff, 0x3, 0x8, 0x5, 0x1, 0x200, 0x3663, 0x3d, 0x5, 0x200, 0x8, 0x2, 0x80, 0x6, 0x9, 0x7, 0xffffff8c, 0x5bcb, 0x3ff, 0xffffda76, 0xb, 0x120000, 0x1, 0x0, 0x8, 0x7ff, 0x0, 0x7, 0x7, 0x6, 0x0, 0x10000, 0x2, 0x3, 0x2, 0x7ff, 0x7fff, 0x401, 0x40, 0x3, 0x1, 0x7fffffff, 0x1, 0x0, 0x53fd36ca, 0xad, 0x26be, 0x979, 0x2, 0x9, 0x800, 0x2, 0x8, 0x5, 0x6, 0x1ff, 0xffff8000, 0x8, 0xd9fb, 0x5, 0x200, 0x8, 0x2, 0x3, 0x4b1, 0xfffffffa, 0x4, 0x5, 0x9, 0x2, 0x1ff, 0x3, 0x0, 0x9fae, 0x50, 0x9, 0x1f3, 0x1, 0xabb, 0x4, 0xa83, 0x4, 0xff, 0xbe, 0xbedd, 0x2, 0x0, 0x14000000, 0x8, 0x7, 0xfff, 0x101, 0x9, 0x8001, 0x0, 0x9, 0x9cc3, 0x946, 0xffffffff, 0x6, 0x3, 0x1, 0xe4, 0xf, 0xc, 0x25b6, 0x0, 0x3279, 0x9, 0x7, 0x5087, 0xffffffff, 0x2, 0x8, 0x6, 0x6, 0x3, 0xadc, 0x38, 0xffffffff, 0x8, 0x6bebc6cb, 0x6, 0xb, 0x7, 0x5, 0x9, 0xc74, 0x1, 0x9, 0x2, 0x1, 0x80000001, 0x4, 0xc, 0x0, 0x8, 0x8, 0x0, 0x2, 0x2, 0x1, 0x9, 0x1, 0x1, 0xd, 0x5, 0xe, 0x7, 0x4, 0x6, 0xfffffff9, 0x6, 0x5, 0x40, 0x2, 0xbd22, 0x68, 0x9, 0xffff, 0x1, 0x47e, 0x100, 0xb9f9, 0x80000001, 0x0, 0x0, 0xfe8, 0xafb, 0x3ff, 0x4, 0x0, 0x2, 0xf2, 0x6, 0x2, 0x58, 0xf8a, 0xffff8000, 0x4, 0xfffffffe, 0x2, 0x8, 0x0, 0x73, 0x77dbc397, 0x8, 0x6, 0x867, 0x7ff, 0x100, 0x7, 0xfff, 0x8, 0xc, 0x9, 0x5, 0x5, 0xfffff800, 0x0, 0x49, 0x0, 0x1, 0xb20a, 0x3, 0x8, 0x2d, 0x5, 0xae8f, 0xc, 0x81, 0x7f, 0x1172f6f6, 0x8, 0xf5d, 0x9, 0xb, 0x2ca, 0x2, 0x8f66, 0x70d, 0x4, 0x1, 0x7, 0xe5b, 0x8, 0xd0c1, 0x0, 0x7, 0x7, 0x1, 0x4, 0x6, 0x7f, 0x9, 0x3, 0x4, 0xf226, 0x800, 0x4c, 0xe4ef, 0x2, 0x2, 0x8, 0x1, 0x46]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffff80e, 0x4, 0x3, 0x8000, 0x3c00, {0x4, 0x0, 0x3, 0xb, 0xb06, 0x1}, {0x6, 0x1, 0xff, 0x6, 0x2, 0x894}, 0xb, 0x4, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x6, 0xc, 0x6, 0x5, 0x8, 0x4, 0xbc8, 0x6d22, 0x81, 0x8001, 0x5, 0x2, 0x6, 0x5, 0x400, 0x4, 0x3, 0x70, 0x3, 0x30, 0xcf2, 0xb2, 0x1, 0x4f, 0x6, 0xce9, 0xfffffffe, 0x6, 0xc, 0x2f15, 0x1, 0x0, 0x5, 0x4, 0x7f, 0xffffff69, 0xba, 0x2, 0x100, 0x5, 0x2000000, 0x1, 0xbb, 0x8, 0x0, 0x2, 0x9, 0x9, 0x100, 0x5, 0xc, 0xfffffff9, 0x8001, 0x6, 0x5, 0x0, 0x1, 0x37c, 0x80000001, 0xffff6d5e, 0x0, 0x0, 0xfffffffa, 0x6, 0x3, 0xfffffffb, 0x10, 0x831, 0xb2ca, 0x86, 0x0, 0x100, 0x101, 0x6, 0x1, 0x40000, 0x6, 0x800, 0x9, 0x1, 0xe0, 0x2, 0x8, 0x200, 0x8, 0x8, 0xbf, 0x10000, 0x0, 0xfffffffa, 0x0, 0x4, 0x5e, 0x5, 0x6, 0x0, 0xc0a, 0x3, 0x8, 0x5b, 0x268, 0x5, 0x10, 0x5, 0x7, 0x8000, 0x4, 0xff, 0xf4, 0xffffffff, 0x9, 0x5bec, 0x0, 0x6, 0x7, 0x0, 0x7, 0x8, 0x0, 0x8, 0x0, 0x7, 0xfff, 0x5b6, 0xc31, 0x7, 0x3, 0x9, 0x9c, 0x2, 0xfffffffa, 0x7fff, 0x1c, 0x8, 0x2607, 0x0, 0x0, 0x9000, 0x9, 0x8, 0xf, 0x7fff, 0xd, 0x4, 0x3, 0xfc16, 0xf7, 0x8, 0x5, 0x5, 0x8, 0x40, 0x1, 0x1, 0x9, 0x80, 0x3, 0x9, 0x80, 0xd, 0x40, 0x6, 0x10000, 0x7, 0x0, 0x800, 0x9, 0x8, 0x3, 0x0, 0x3, 0x1, 0x9, 0x7, 0x8001, 0x4, 0x9, 0x1, 0x3, 0x4, 0x3, 0x15474a78, 0xc63, 0x5, 0x7, 0x5, 0x3, 0x8001, 0xb389, 0x9, 0x2, 0x7, 0x2, 0x39a2, 0x4cdd6f9b, 0x6a3, 0x0, 0x9, 0x1, 0x80, 0x6, 0x5, 0xecca, 0x80, 0x5, 0x5, 0x2, 0x1, 0x8000, 0x9, 0x6, 0x2, 0x4, 0x0, 0x2, 0x8, 0x200, 0x9, 0x0, 0x40, 0x8ed3, 0x4, 0x2, 0xc, 0x200, 0xffff, 0x2, 0x0, 0x7, 0x8000, 0x9, 0x4, 0x6fc, 0xfff, 0x2, 0x6, 0xf, 0x7, 0x3, 0xd8, 0x0, 0x3, 0x6, 0x2, 0x7fff, 0x4, 0x7fffffff, 0xee4, 0x0, 0xffffffff, 0x2, 0x7, 0x6, 0x2, 0x5]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0xffffffffffffffff, 0x472, 0x7, 0x6, {0x2, 0x2, 0xfffb, 0x3, 0x5, 0x40}, {0x0, 0x2, 0x7d, 0x5, 0x0, 0x9}, 0x2, 0xf, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x10a, 0x101, 0x24, 0x6, 0x87, 0x4, 0x5, 0x9, 0xfffffffc, 0x0, 0x4, 0x3ff, 0xf, 0x0, 0x7, 0xfff, 0x10000, 0x8000, 0x7, 0x7, 0xd, 0x8f40, 0x100, 0x5bf, 0x4, 0xa, 0x6, 0xb, 0x971c, 0x0, 0x6, 0xd, 0x34b1, 0xf3, 0xfffffffc, 0x7f, 0xffffffda, 0x3, 0x35a23f19, 0xffffffff, 0x7fff, 0x1, 0xd414, 0x7b71, 0xd, 0x13, 0x2, 0x101, 0x6, 0x7, 0x2, 0x3, 0x0, 0xfbf8, 0x0, 0x3, 0x1ff, 0x3, 0x8, 0x8, 0x0, 0x100, 0x3, 0x3ff, 0x3ff, 0x8, 0x1, 0x119, 0x8, 0x68, 0x8, 0x8, 0x9, 0x6, 0x3, 0x3, 0x10001, 0x200, 0x9, 0x2, 0x9, 0x8, 0x80, 0x5, 0x7, 0xb2, 0x0, 0x9, 0x4, 0x10001, 0x7, 0x2, 0x5, 0x0, 0xc2fa, 0x6, 0x101, 0x7ea4, 0x10001, 0x7, 0x6, 0x1, 0x7, 0xdb8a, 0xa00f, 0x4, 0x200, 0x74, 0xfffffffa, 0x5, 0x81, 0xffff, 0x80000001, 0x2, 0xc, 0x8, 0x2, 0xd, 0x1, 0x1, 0x6, 0x8, 0x7, 0x2, 0x401, 0x9, 0x17cb, 0x6, 0x2, 0x2, 0x4, 0x5, 0x7, 0x0, 0x3f86, 0x7, 0x7, 0x40, 0x5, 0x0, 0x1, 0x10000, 0x7fff, 0xfff, 0x800, 0x8, 0x2, 0x2, 0x533d88bb, 0x8, 0xd, 0xe, 0x6, 0x1, 0x8, 0x8, 0x290, 0x1a, 0x6b, 0x3, 0x37, 0x6c3, 0x4c, 0x200, 0xffff, 0x1, 0x6, 0x0, 0x67, 0x6, 0x8, 0x6, 0x401, 0xe6c3, 0x81, 0xc, 0x9, 0x0, 0x8, 0x997, 0x8, 0x2, 0x2, 0x10000, 0x8, 0x2, 0x7, 0x3, 0x8, 0x40, 0x8000, 0x9, 0x9, 0x3, 0x9, 0xca, 0xfffffffc, 0x4, 0x2, 0x5, 0x8, 0xf1, 0x81, 0x4f1, 0x3db, 0x87, 0x81, 0x9, 0xf34, 0x1, 0x80000001, 0x9, 0x4, 0xa, 0x0, 0x7fff, 0x3, 0x9, 0xffffffff, 0x0, 0x2, 0xf, 0x9, 0x1, 0xf881, 0x29d, 0x55, 0x5, 0xfffffff3, 0x4, 0x10, 0x5, 0x8, 0x7f, 0x10, 0x800, 0x81, 0x6, 0x3d1, 0xfffff001, 0x1, 0x7, 0x80000000, 0x1ff, 0x8, 0x7fffffff, 0x30, 0x7fffffff, 0x1, 0x3ff, 0x0, 0x1, 0x1, 0x9, 0xff, 0x1ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2767, 0xffffffffffffffff, 0x0, 0x40, 0x4, {0x68, 0x2, 0x1, 0x8, 0x8, 0x7}, {0x2, 0x1, 0xffff, 0x3, 0x80, 0x5}, 0x6, 0x3, 0x8e0}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9e, 0x10000000, 0xfffffff7, 0x4, 0x2, {0x7, 0x0, 0x1, 0xff, 0x7, 0x7fffffff}, {0x80, 0x0, 0x2, 0x1, 0x6, 0x7b1}, 0xeb, 0xf96, 0x9}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x200}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x4, 0x6d, 0x8, 0x5, {0x8, 0x0, 0x6, 0x3, 0x5, 0xad}, {0x6, 0x1, 0x3, 0x8, 0x101, 0x2}, 0x10000, 0x4, 0xf}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x645}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x2, 0xd, 0x0, 0x5, 0x7, 0x3eb8, 0x4, 0x200, 0xff, 0x7, 0x0, 0x7fff, 0xff, 0xddd, 0xa3e8, 0x0, 0x1, 0x3, 0x7, 0x5, 0xa8, 0x0, 0x800, 0x8, 0x89e, 0x5, 0x1, 0x400, 0x4, 0x8, 0x506, 0x4, 0x0, 0xe, 0x9, 0x1, 0x6, 0xfff, 0x8, 0xcd, 0xbb9c, 0x8, 0x5, 0x7ea, 0x2, 0x0, 0xa, 0xac, 0x9, 0x37, 0x7fffffff, 0x29a34275, 0x6, 0x0, 0xd, 0x40, 0xff, 0x1, 0x1, 0x3, 0x6, 0xffffffff, 0x4, 0x5, 0x4, 0xfffff801, 0x6, 0xbc00, 0x9, 0xff, 0xab, 0x6, 0x6a, 0x5f, 0x1, 0x9, 0x0, 0x3, 0x1c, 0x80000001, 0x9, 0x9, 0x76a80000, 0x4, 0x1, 0x88, 0x2, 0x7, 0xccb7, 0x3ff, 0xffff, 0x2, 0x7cb847a0, 0x2, 0x2, 0x8, 0x6, 0xc00000, 0x2, 0x7fffffff, 0x2, 0x6, 0x3, 0x9, 0x1, 0xfffffffa, 0x59, 0xba, 0x79, 0x228, 0x9, 0x2d, 0x5, 0x9, 0xf5, 0x10001, 0xffffffff, 0x7, 0xfffffffd, 0x3, 0x9, 0x9, 0x9, 0x20, 0x9, 0x8d5, 0x4, 0x6, 0x7, 0x3, 0xc, 0x401, 0xb, 0x0, 0x4, 0x10001, 0x8, 0x80000000, 0xfffffff9, 0x4741, 0x2, 0x6, 0x1, 0x1b, 0x825, 0x8, 0x81, 0x401, 0x7, 0xa6, 0x0, 0x5, 0x3, 0xe, 0x3, 0x1000, 0x7ef, 0x8, 0xa44, 0x8, 0x3, 0x4, 0x101, 0x81, 0x2, 0x34, 0x9, 0x8, 0x9, 0xfff, 0x9, 0x741, 0x9, 0x9ee, 0xb, 0x6, 0x6, 0x4, 0x44, 0x5, 0x5, 0xff, 0x1d2, 0xe5a, 0x2, 0x5, 0x5, 0x4, 0x8, 0x8, 0x1d, 0x10001, 0x1ff, 0x7, 0x80, 0x1, 0x3ff, 0x6, 0x7fffffff, 0x6, 0x80000001, 0x1, 0x8, 0x3, 0x8, 0x7, 0xe49b, 0xc14e, 0x0, 0x40, 0x5, 0x8, 0x2, 0x4, 0xffff0000, 0x8, 0xb, 0x10001, 0x4, 0xb, 0x58be, 0xfffffff2, 0x9, 0x100, 0x9, 0x1, 0x9, 0x0, 0x0, 0x5fa, 0xfffffffb, 0x7fff, 0x3, 0xf8, 0x7, 0x7, 0x5, 0x3, 0x8, 0x4, 0x9, 0x7, 0x1, 0x8, 0x8856, 0x47, 0x4418, 0x1, 0x3, 0x9, 0x6, 0xac, 0x3e04, 0x8000, 0x54]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3200}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7c}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x4, 0xe, 0x4, 0x9, 0x1000, 0x9, 0x8, 0x0, 0x3, 0x10, 0x6, 0x0, 0x8a84, 0x9, 0x22, 0x8, 0x8, 0xd25, 0x8, 0x7ff, 0x1, 0x800, 0x9, 0x9, 0x5, 0x0, 0x401, 0x7, 0x4, 0x2, 0x7, 0x1, 0x4, 0x16f, 0xfffffffe, 0x4, 0x8, 0x3, 0x3b78, 0xfff, 0x3, 0x10000, 0x6, 0x5, 0xfffffff9, 0x80000001, 0x9, 0x1, 0x1, 0x0, 0x7, 0x6, 0x4, 0xa, 0xffffffff, 0x6b4, 0x6, 0x100, 0x2770, 0x2, 0x9, 0xfffff800, 0x0, 0x8e23, 0x4, 0x982, 0x78d5, 0x40, 0x60, 0x7fffffff, 0x0, 0x7, 0x7f, 0x401, 0x86e, 0x7ff, 0x357, 0x6, 0x508, 0x3, 0x5, 0x3, 0xf8, 0x1400, 0x80000000, 0x9, 0x8, 0xfffffffa, 0x9, 0x80, 0x8, 0x839, 0x6, 0x3, 0x9, 0x100, 0x676, 0x3, 0x2, 0x8, 0xc, 0x3, 0x3, 0x2, 0x8, 0x7, 0x35a, 0x2, 0x0, 0xcd54, 0x90000000, 0x1, 0x6f0, 0xa, 0x1, 0x7, 0x49, 0x1, 0x4, 0xa5, 0xffff6fbb, 0x3, 0x6, 0x6e570e1d, 0xee, 0x2, 0x5, 0x8000, 0x527b782a, 0xc, 0x100000, 0x764, 0x1, 0x436, 0x401, 0x2, 0x10000, 0x4, 0x2, 0x50000, 0xf, 0x8, 0xf1, 0x0, 0x3, 0xc659, 0xfffffffe, 0x4, 0x5, 0x5, 0x400, 0xffffff80, 0x1, 0xfff, 0x8, 0x4, 0x4, 0x81, 0x2, 0x800, 0x9, 0x81, 0xff, 0x3d, 0x8, 0xfffffffd, 0xaefd, 0xa5, 0xffff0001, 0x4a7a, 0x6, 0xffff, 0x7fff, 0x1, 0x0, 0x1c, 0x0, 0x3000000, 0x4, 0x3, 0x9906, 0x7, 0x6, 0x1, 0x2, 0x3, 0x1, 0x2, 0x9b, 0x9, 0x38000000, 0xd7c, 0x4, 0x8001, 0x8, 0x10001, 0x3, 0x7ff, 0xa8, 0x7, 0x8, 0x0, 0x7fff, 0x2, 0x4, 0x4, 0xfffffffc, 0xa753, 0x0, 0x4, 0x7f, 0x9, 0x1, 0x5, 0x2b, 0x5, 0x2, 0x3, 0xf424, 0x7fffffff, 0x6, 0x40, 0x5, 0x36f, 0x60, 0x4, 0xe, 0x7ff, 0x4, 0x3d45f41a, 0x1, 0x2, 0x400, 0xffffffff, 0x6, 0x7fff, 0x0, 0x0, 0xaa, 0x1, 0x8, 0x800, 0x8, 0x3, 0x3, 0x9, 0x3, 0x7, 0x2, 0x8, 0xcb, 0x6, 0x2, 0x1, 0x100]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10001}], [], [@TCA_POLICE_RATE={0x404, 0x2, [0xe19, 0x3, 0x2, 0x0, 0x0, 0x3, 0x4, 0x7fffffff, 0x0, 0x9, 0x2, 0x40, 0x6, 0x7, 0x80000000, 0x48, 0x6, 0x0, 0x8, 0x7, 0x8, 0x147, 0x3, 0xc51, 0x8000, 0x2, 0x2, 0x6, 0x8, 0x1, 0x317aed86, 0x9, 0x7fffffff, 0x1, 0x1ff, 0xb07, 0x5d60d07a, 0x7, 0x7, 0x80000000, 0x1000, 0x2, 0x990, 0xfa, 0x20000000, 0x29, 0x9c, 0xc, 0x7, 0xa31a, 0x9, 0x602, 0x5, 0x660, 0xfffffffc, 0xf, 0x1, 0x2, 0x7a, 0x0, 0x7, 0x1, 0x2, 0x4, 0x7ff, 0x9, 0x5, 0x40, 0xc64, 0x0, 0x1, 0x80000000, 0x1267, 0x7fff, 0x7, 0x7, 0x8, 0x4, 0x0, 0x3, 0x3, 0x7, 0x2, 0x9, 0x46, 0x33c, 0x6, 0x7, 0x4, 0x400, 0x3, 0x8, 0x7, 0x4, 0x3292, 0x4a8e, 0xfffffff9, 0x5, 0x6a2, 0x6, 0x7, 0xf, 0x9, 0x4, 0xff, 0x6, 0x0, 0x800, 0x5, 0x5, 0x0, 0xfffffff8, 0x3, 0x9cd, 0x8, 0x4, 0xb7f1, 0x4, 0x0, 0x4, 0x0, 0xffffffff, 0x1000, 0x8b7e, 0x7ff, 0x3, 0x3ad, 0x0, 0x0, 0x0, 0xf, 0x400, 0x9, 0xffff, 0x4, 0x8735, 0x196, 0x0, 0x2be, 0x6, 0x0, 0x6, 0x7, 0x6, 0x7ff, 0x1ad6f5f2, 0x1, 0x101, 0x9, 0x8000, 0x1, 0xe2, 0x9, 0x4, 0x1ff, 0x8, 0xaa6, 0x7, 0x6, 0x101, 0x3, 0x7, 0x1, 0x8000, 0x2871, 0xb, 0xffffffff, 0x1ff, 0xffff, 0xd6, 0x401, 0x7, 0x5, 0x4, 0x10001, 0x2, 0x1, 0x3, 0x9, 0x101, 0x8001, 0xff, 0x1, 0xceb, 0x8, 0x6, 0x10001, 0x102, 0xf0, 0x34e46525, 0x4, 0x4, 0x3, 0x80000000, 0x5, 0xffffffff, 0x100, 0x10001, 0x392, 0xffffffff, 0x9, 0x6, 0x6, 0x2, 0x6, 0xffffffff, 0x2, 0xd, 0x9, 0xf, 0x8, 0x0, 0xffffffff, 0x3ff, 0xc, 0x3cfd, 0x3, 0x8, 0x7, 0x2, 0x6ff1, 0x4, 0x6, 0x7fff, 0xfffff000, 0x89, 0xd3, 0x7ff, 0x4, 0x6, 0x3, 0x6, 0x7fff, 0x2, 0x3, 0xfc7, 0x7fffffff, 0x5, 0x6, 0x3, 0x4, 0x81, 0x4, 0x3ff, 0x1, 0x101, 0x4, 0xffff, 0xffff2231, 0x8, 0x7, 0x7f, 0x401, 0x9, 0x2, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffb}, @TCA_POLICE_RATE={0x404, 0x2, [0x8e0, 0x6, 0x3, 0x66, 0x10001, 0x3, 0x8000, 0x3, 0x8, 0x10, 0xfff, 0x3, 0x7, 0x5, 0x9, 0xffffb4f5, 0x80, 0x2710, 0x1, 0x3ff, 0x80, 0x1000, 0x1, 0xfffffffa, 0xd11, 0xe, 0x1, 0x80, 0x0, 0x9, 0xfffff83b, 0x1, 0xee, 0x6, 0x1, 0xd, 0x3, 0x9, 0xa, 0x7, 0x0, 0xff, 0x7, 0x44, 0x1000, 0x3ff, 0x4, 0x6, 0x3ff, 0x5, 0x2, 0x2, 0x5, 0x5, 0x4c8, 0x101, 0x590a, 0x5, 0x5, 0x5, 0xa9, 0x3fb, 0xa4, 0x40, 0x3, 0x1, 0x5, 0x39, 0x4, 0x8, 0x2, 0x9, 0x4, 0x3, 0x8fdd, 0x5, 0x0, 0x8f, 0x8, 0x9, 0x7, 0xf7, 0x7f, 0x1, 0x5, 0x5, 0x401, 0x8, 0x2, 0x7, 0x7, 0xfffffff7, 0x7, 0x3ac, 0x13c6, 0x4, 0x5, 0x7, 0xffffffff, 0x8001, 0xe3, 0x4, 0x10000, 0x0, 0x4, 0xf, 0x0, 0xa9a, 0x7, 0x2, 0x800, 0x3, 0xfffffffa, 0x7, 0x6, 0x100, 0xe49, 0x9, 0x7fff, 0x0, 0x6, 0xddf, 0x9, 0x4, 0x7fffffff, 0x6, 0xc, 0xfffffff8, 0x3, 0x80000001, 0x80000001, 0x3, 0x9, 0x8, 0x8, 0x8, 0x86, 0x7, 0xffffffff, 0xfff, 0x2, 0x5, 0x8001, 0x2, 0x4, 0xfffffff8, 0x7, 0x1, 0xffff, 0x9, 0x70, 0x5, 0x7, 0x1, 0x1, 0x9, 0xfffffde7, 0x4, 0x33, 0x4, 0x1, 0x5, 0x9, 0x5, 0xff, 0x9, 0xffff, 0x3, 0x6, 0x1ff, 0x7, 0x1, 0xbbc, 0xffff, 0x9, 0x100, 0x8000, 0x4, 0x6, 0x800, 0x80000000, 0xfff, 0xfffffff9, 0x40000000, 0x3, 0x5, 0x2, 0x8, 0x9, 0x14000, 0x7, 0x7, 0x5, 0x1fc9, 0xb828, 0x6, 0x4, 0xe, 0xc, 0x3, 0x80, 0x3, 0x3, 0x80000001, 0x6, 0x1, 0xc3d, 0x3, 0x7, 0x0, 0xf75, 0x4bbe, 0x85c, 0x3, 0x200, 0x9, 0x4, 0x3, 0xe0, 0x7, 0x56c, 0x6, 0x9, 0x0, 0x7fffffff, 0x1, 0xffffffff, 0x81, 0xffffff22, 0x1, 0x2, 0x10001, 0x7, 0x1c6, 0x7, 0x4, 0x2, 0x401, 0xfffffea6, 0x4, 0x5, 0x0, 0x7, 0xe, 0x7ff, 0x3, 0x9, 0x7, 0x6, 0x5, 0x2, 0x2da, 0x2, 0x6, 0x7445, 0x1]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffa}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x65, 0x2, 0x5, 0xda9f, 0x4, 0x7, 0xa57, 0x3ff, 0x800, 0xe866, 0x80000000, 0x2, 0x0, 0xb4, 0x9, 0x9, 0x9, 0x80000000, 0x8000, 0x3, 0x1, 0xec, 0x4, 0x800, 0x55, 0xfffffffe, 0x9000000, 0x2, 0x4, 0x4cf6645, 0xa3ac, 0xc04, 0x7, 0x8, 0x8, 0x6, 0x9, 0xe3e8, 0x8001, 0x200, 0x63, 0x9, 0x8, 0x5, 0x0, 0x7f, 0x7, 0xfff, 0x7, 0x800, 0x8, 0xeab, 0x100, 0x35d5, 0x4, 0x6, 0x0, 0xee83, 0x7, 0x6, 0x400, 0x6, 0xc, 0xb5e, 0xffffff7f, 0x2, 0x8, 0x9, 0x2, 0x8, 0x4, 0x3, 0x6, 0x80000000, 0x3, 0x7438e8d1, 0x6431, 0xdc7, 0x9, 0x100, 0x80, 0xffff, 0x6, 0x7ff, 0x100, 0xfffffffb, 0x8, 0x1, 0x0, 0x3, 0x7, 0x20, 0x6, 0x1, 0x8, 0x5857c205, 0xff, 0xffffe3ef, 0x3, 0xfffffffe, 0x200, 0x0, 0x98d, 0x6, 0x409, 0x3, 0x4000, 0x6, 0x9, 0x4, 0xfffff800, 0xdc6, 0x97, 0x0, 0xd, 0xa85, 0xa424, 0x6e, 0x40, 0xfffffffd, 0xfffffff0, 0x3ce, 0x9, 0x6, 0xbc4, 0x6, 0xfffffffa, 0x81b, 0x6e8000, 0x8c, 0x80000001, 0x3, 0x1c4, 0xfffffff9, 0x8001, 0x9, 0x7, 0xfffffffb, 0x401, 0x3, 0x4, 0x1000, 0x1, 0x3ff, 0x70e, 0x0, 0x8, 0x9, 0x800, 0x4, 0x8d, 0x3, 0x6, 0xb8, 0x8001, 0x5, 0xffff, 0x7f, 0x3ff, 0x0, 0xe, 0x2, 0x2, 0x3, 0x2, 0x9, 0x100, 0x5, 0x9, 0x9559, 0x10, 0x7, 0x4, 0x4, 0x4, 0x7660, 0xc00, 0x10001, 0x8, 0x7, 0x9, 0x80, 0x3, 0x2, 0x3, 0x1, 0x2, 0x3, 0x7, 0x6a361fb9, 0x24141ab7, 0x9, 0xc, 0x3, 0xd, 0x93f, 0x47, 0x81, 0x7, 0x2, 0x1, 0x3, 0x1ff, 0x7, 0x5, 0x6, 0x7, 0x7f, 0x8, 0xa, 0x6, 0x3ff, 0x3, 0xa0b, 0x1, 0x2d78000, 0x7f, 0x5, 0xa, 0xf85, 0x100, 0x596b6b96, 0x82, 0xf, 0xf7c, 0x1306, 0x6, 0xfffff7b4, 0x4, 0x10000, 0x7, 0x100, 0xa91, 0xe1f2, 0xfffffff2, 0x2e, 0xfffffff8, 0x7, 0x3, 0x9, 0x9, 0x8, 0x40, 0xfff, 0xffff6768, 0x200, 0xb0, 0x1, 0xffff, 0x7fff, 0x6, 0x0, 0x2, 0x2, 0x68581653, 0x8479]}, @TCA_POLICE_RATE={0x404, 0x2, [0xf6f, 0x81, 0x6, 0x1f5f, 0x5, 0x4, 0x28, 0x9, 0x0, 0x8, 0x1, 0x5, 0x3, 0x80000000, 0xb, 0x3, 0x3, 0x6, 0x4, 0x6, 0xa05d, 0x7, 0x1, 0x401, 0xb, 0x400, 0xd, 0x9, 0x401, 0x9, 0x3, 0x6, 0x5, 0x8000, 0x80000000, 0x2, 0x6a2c, 0x800, 0x7, 0x2, 0x6, 0x8, 0x4, 0x2, 0x1, 0x5, 0x4, 0x0, 0x6, 0x81, 0xc31, 0x3, 0x6, 0xe, 0x7, 0x7f, 0x8, 0xcc, 0x5, 0x3ff, 0xc70c, 0xd, 0x8, 0x7, 0x5, 0x4, 0x5, 0x7f, 0x3, 0x17e, 0xa8d6, 0x2, 0x2, 0x0, 0x4, 0x5, 0x4, 0x10001, 0x3, 0x5, 0x8, 0x1ff, 0x0, 0xd4, 0x7, 0xff, 0x7f, 0xb, 0x724, 0x2, 0x7, 0x1, 0x1, 0x5, 0x80, 0x8000, 0x80, 0x7, 0x8c2, 0x200, 0x4, 0x3, 0xda4a, 0x0, 0x4, 0x3, 0x9, 0xf, 0x10a4, 0xf, 0x1fc, 0x9, 0x4, 0x9, 0x8, 0xb70d, 0x4, 0x1, 0x6, 0x2, 0x9, 0x7455cbe3, 0x9, 0x8, 0x4, 0x80000000, 0x3, 0x0, 0x4, 0x0, 0x9, 0x400, 0x3446, 0x2, 0x71f, 0xf, 0x2, 0x7, 0x6, 0x2, 0x10001, 0x6, 0x4, 0xfffffffd, 0xd20, 0xf9, 0xc, 0xb33, 0xfb, 0xc, 0x3, 0x0, 0x8, 0x2, 0x8, 0x101, 0x800, 0x1ff, 0x5, 0x8, 0x6, 0xb6a, 0x0, 0x92, 0x458, 0x2, 0x19, 0x10000, 0x24e, 0x2, 0x7, 0xc, 0x2, 0x5, 0xd, 0x7, 0xffff0001, 0x7, 0x2, 0xfffffff9, 0xffff, 0x7c9, 0x6, 0x80000000, 0x1, 0x1ff, 0x800, 0x67f, 0x8, 0x7f, 0x7ff, 0xb, 0x80000001, 0x4, 0x2, 0x6, 0x0, 0x401, 0x80000001, 0x1ff, 0x5, 0xffff7fff, 0x2, 0x1, 0x1, 0xaaae, 0x10000, 0x7, 0x5, 0x1, 0x2, 0x792c, 0x7, 0x8000, 0x5, 0x6, 0x6, 0x3, 0x4c3, 0x7, 0x1, 0x6, 0x2, 0x1, 0xfffffff8, 0xd30, 0xc, 0x9, 0xfffffff8, 0xffff88ae, 0x401, 0x9, 0xff, 0x6, 0x7f, 0x800, 0xad74, 0x9, 0x83, 0x7, 0x5, 0x7, 0x4, 0x5, 0x9, 0x80000000, 0x3, 0x0, 0x4, 0xffffffff, 0x5, 0x2, 0x7fff, 0xdc6, 0x8001, 0x7]}, @TCA_POLICE_AVRATE={0x8}]]}, {0x31, 0x6, "a6772a00a89330f98100f8a66e5da75d9795fccbae7ceed557381ed544a2a634e36d4e1b932ab5155b568d9f7f"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x1b0, 0xc, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x80000000, 0x0, 0x6, 0x1}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x4, 0x10000000, 0xfffffff7, 0x7}, 0x20}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x0, 0x9, 0x1}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff7, 0x7, 0x6, 0x8, 0xf}, 0x68}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x200, 0x6, 0x10000000, 0x0, 0x3}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x0, 0xa, 0x5}, 0x57}}]}, {0xda, 0x6, "b80fa5248ba4ef10432f5ac3e8da9bcf0b75660b64353e5d1279e2371bee9ad4da31bb5cdd1dbc8f7d9db189d54d747b2ba88349405b62c6dad41eaa3ac309399f52bfeaca846bb9f5f03a1db350b38d245f2cf443aabb35667b8293002d0532d02bc48b3798988d9bc8d17ce56ece9bb06d47650a97d0e3db2d7f16214b0452a9a96587fc701769d15a3a508f13aef61760282db41676898a091a983f4e38fdff9600f2c6b00b357be61bf0b868a0bfb6629f586912e01bbbfeefa69ee3fccefb8b113902888847463a019d6be89bd2b089cb3864e2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_mirred={0x19c, 0x15, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xaf0, 0x3, 0x1, 0x3a, 0x7}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x2, 0x10000000, 0xe, 0x1000}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x6, 0x7, 0x6}, 0x13c38e06ba06e630, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xe95, 0x10000000, 0x401, 0x5}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10, 0x80, 0xffffffffffffffff, 0x9, 0x3}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x180, 0x0, 0x6, 0x8600}, 0x2, r1}}]}, {0xb0, 0x6, "0a693299bd0d430fa92203848bc44223c5564f051de7f91601e904e6feb70938257e944c8ee09fe8203d02358c93e8e8acb5a33d9734b561e0ced1693473fae273af387ab88ecf5b888fc876eeb60dea7fbfc6c083a9766c01a9e04f74746f5ae9a9999b823ad4a85aed434828618de16c89621be5bdc80f1a4f0165a09bb62a6d4043044328c8e6446d3ab6b90f198e16d7685f64638b6973a9b40a4c4ec3d707cdb1fb9700452cc0919b06"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x1d}, @TCA_ROUTE4_POLICE={0x488, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0xfa5, 0x100, 0x9, 0x1, 0x7, 0x1, 0x401, 0x1, 0x8001, 0xa, 0x6, 0x5, 0x7, 0x198, 0x7, 0x3, 0x9, 0xff, 0x4, 0x9, 0x7, 0x4, 0x10000, 0xc, 0x4, 0x2, 0xa, 0x9, 0x7, 0x8000000, 0x4, 0x47, 0x3, 0x6, 0x5, 0x8821, 0x4, 0xe, 0xbd, 0x4, 0x2, 0x6, 0x0, 0x6321cd58, 0x10, 0x0, 0xfffffff9, 0x2, 0x1, 0x7, 0xc92, 0xfffffff7, 0x2, 0x8, 0x7, 0x7, 0x0, 0x2, 0x4, 0xa564, 0x2, 0xfffffffc, 0x7fffffff, 0x2, 0x9, 0x4, 0x5, 0x9, 0x2, 0x8001, 0x81, 0x26c00, 0x5, 0x5, 0x3, 0x8, 0x983, 0x5, 0x0, 0x2, 0x0, 0x1000, 0xffffe742, 0x81, 0x6, 0xf8, 0x8, 0x3, 0x80000000, 0x5, 0x14000000, 0x86, 0x3, 0x9, 0x4, 0x3, 0x0, 0x1, 0x7ff, 0x6, 0x8, 0x0, 0xffffffff, 0x3ff, 0x3c, 0x0, 0x107, 0x9, 0x80000000, 0x2, 0x10bb4f25, 0xee9f, 0xfffffff9, 0xaa, 0x3, 0x5, 0x3, 0x8000, 0x4, 0x80, 0x80000001, 0x101, 0x4, 0xffffff20, 0x8, 0xf38, 0x5, 0x7, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x685, 0xc, 0x2, 0x7, 0xdf, 0x3, 0xa, 0x7, 0xffffffff, 0x4, 0x8, 0x6, 0x7fffffff, 0x2, 0xffffff68, 0x3, 0x80000000, 0x2d, 0x35fd, 0x5, 0x3, 0xffffffff, 0x8, 0x7, 0x8, 0x101, 0x71f, 0x6, 0x8, 0xfffff21c, 0xffffffff, 0x9, 0x7, 0x9, 0x8, 0x2, 0xffffffff, 0x393f, 0xfffffff7, 0xeab7, 0x7, 0xe00, 0x100, 0x0, 0x0, 0x7, 0x7, 0x7, 0x100, 0x9, 0x1, 0x0, 0x3, 0x0, 0x3, 0x4, 0x1, 0x6, 0x0, 0x6, 0x4, 0x7f, 0x8000, 0x9, 0x4, 0x5, 0x10001, 0x7, 0x5f2, 0x40, 0xfffffffe, 0x5e6, 0x9, 0x2, 0xff, 0x1, 0x4, 0x81, 0x1ff, 0x100, 0x6, 0x3, 0x1ff, 0x8, 0x9, 0x101, 0x2, 0x8, 0x1, 0x8, 0x400, 0x16, 0x39, 0x9, 0x6, 0x356f, 0x6, 0x8, 0x6, 0x9, 0x7, 0x1, 0xee, 0xff, 0x4, 0x7, 0x397b5b6d, 0x1, 0x163a064f, 0x6, 0x0, 0x75ae, 0x3, 0x8, 0x10, 0x6, 0x1, 0x80, 0x7ff, 0x0, 0x7, 0x7, 0xc]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5689}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0xff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffffffffff, 0x7, 0x3, 0x5, {0x9, 0x1, 0x7, 0x9, 0x5, 0x10000000}, {0xa, 0x2, 0x0, 0x3, 0x9, 0xfffffffb}, 0x1, 0xd, 0x9}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8445}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r1}]}}, @filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'team_slave_0\x00'}, @TCA_U32_CLASSID={0x8, 0x1, {0x6}}, @TCA_U32_LINK={0x8, 0x3, 0xfffffffa}]}}, @filter_kind_options=@f_u32={{0x8}, {0x24, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x7ff, 0xfa}}, @TCA_U32_MARK={0x10, 0xa, {0x1, 0x10}}]}}]}, 0x73e4}, 0x1, 0x0, 0x0, 0x10040001}, 0x20000840) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.io_merged\x00', 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000480), 0x2, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r3, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x204, r7, 0x800, 0x70bd29, 0x25dfdc01, {}, [@TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5748262b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x14f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00', 0x9}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x80000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1ff}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pim6reg\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa66}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x70e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ID={0x22, 0x3, "b47bd6ca5f97fc39b9ccbb155fda9f2c1a83b609b5d6143f97dba1c3b9b7"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8000}, @TIPC_NLA_NODE_ID={0x61, 0x3, "ad17a83e7234ff8079d32c307f1df23aa93bd1a4fc7986cee6c6ae0b55d1d525fd5d172bc953ef32880b04d8327a002e469464bb107e967ea55c060caa5f12967052d673b76515cfb77b4a5c6d1f901a00280d9cff584b842c4e080ce0"}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x44000}, 0x20000004) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4cf2040000000000140003006e657464657673696d3000000000000034001680300001802c000c801400010006000000dd0d0000090000008100000014000100"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40) 1.19087431s ago: executing program 0 (id=4758): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x2e, 0x61, 0x2e, 0x20]}}, 0x0, 0x32, 0x0, 0x1, 0x7}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, 0x0, &(0x7f0000000780)) getsockopt$sock_buf(r1, 0x1, 0x38, 0x0, &(0x7f0000001700)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r1, &(0x7f00000030c0)=""/4117, 0x1015, 0x1, 0x0, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write$bt_hci(r4, &(0x7f0000000540)={0x1, @inquiry={{0x401, 0x5}, {"fcb316", 0x7, 0xd}}}, 0x9) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000010000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x24008004) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map, 0xf, 0x1, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000500)={0x10000, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@fallback=r0, r8, 0xa, 0x24, 0xffffffffffffffff, @void, @void, @void, @value=r10, r9}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES64=r11, @ANYRES32=r11, @ANYRESOCT=r11], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r12}, 0xc) 1.136779313s ago: executing program 4 (id=4759): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x6a, 0x5, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x23, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000010000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 1.094879413s ago: executing program 2 (id=4760): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x808, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.091624896s ago: executing program 1 (id=4761): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = epoll_create(0x9) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000000)=0x103, 0x4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x110000010}) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000005c0), 0x10) recvmmsg(r6, &(0x7f0000000040), 0x0, 0x10002, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) recvmmsg(r6, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x30001, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 912.222156ms ago: executing program 2 (id=4762): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10}, 0x40) getpeername(0xffffffffffffffff, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x2160) (async) recvmsg$unix(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x2160) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffdd, &(0x7f0000000000)='/proc/0KgOq\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0xe23, 0x3, @empty}, 0xff56) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4045b778beae5143301e6326dfab31e3f1f68bb26fcdaa621dbb452e62d7578499ba78819236f82fc2f2993e5d7f980c3a89bce52dadb05c78b86881914e0bdc0c26598e5fb725a1b14a817de97f684887a4521407200d7392aa3b5892b3a43c073016d63924e870db3adc1168cb6ab5ec5ec092c2bfa9cbdf5fbb7c6d0a279f0f1f3c4aaa9490878f349e3a4968386767", @ANYRES16=r7, @ANYBLOB="010129bd7000fddbdf2531000000050036000000000005003300030000000a0001007770616e3100000005003400060000000500350080000000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000200)) (async) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r12 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) socket(0x10, 0x3, 0x0) (async) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004a000100000000002325a4f40a008001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) write(r12, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async) write(r12, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) close(r10) 911.518953ms ago: executing program 0 (id=4763): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000) bind$llc(r0, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvfrom$packet(r4, 0x0, 0x0, 0x40, 0x0, 0x0) close(r4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac141400000000000080000000000000000080000000000000000000000000000000000000000400420497b057e85f31063625000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000025bd700000000000000000000000025fb83f6605e447f5c4"], 0x34c}}, 0x44) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, 0x0, 0x41) syz_80211_inject_frame(0x0, &(0x7f0000001fc0)=@ctrl_frame=@ba={{}, {0xf}, @device_a, @device_b, @basic={{0x1, 0x0, 0x0, 0x0, 0x6}, {0x6, 0x1}, "89b3630fd2bead961be2761f5a56762f3e77cd8cac6fdc963ab4cd268ff65c42950fa7580a36581d0536609be6cdd5b5848eefc43a9b307032fa8480546ad2c157ca3940d9586bf5d49d6ce6f5404f6f10ed55359ff61e4b653a4541ec0d5563606e4536196bdd84661efd3905d57c7b6e2a4afa9dbc7a9efb358e7dea9711d4"}}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x2}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r2, 0x2, 0x1, 0x6}) getpeername$llc(r6, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000001c0)=0x10) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, 0x0, 0x0) 898.11094ms ago: executing program 4 (id=4764): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="13022cbd7000fbdbdf2501000000000000000040"], 0x68}}, 0x4000080) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000000)) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000001c0)={0x7, 'veth0_to_team\x00', {0x8001}, 0xfe00}) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="ac0000000001050500000000000008000a0000003c0002802c00018014000300ff0100000000000000000000000000011400e3fffe0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004"], 0xac}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d2, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x800, 0x1fc}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0010007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r8, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='virtio_transport_alloc_pkt\x00', r9}, 0x10) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000500)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r8, 0x1, 0x0, 0x6, @local}, 0x14) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x10, &(0x7f0000000080), &(0x7f0000000100)=0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 682.452293ms ago: executing program 4 (id=4765): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r2, 0x0, 0x4, &(0x7f0000000200)="440910bc996c301c8183070400", 0xd) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10, 0x0}, 0x40080) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r0) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xc080) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x3, r1}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540), 0x395}, 0x24048000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="8c000006fb00000427bd4bb9ffdbdf10021820fd", @ANYRES32, @ANYBLOB="140006000f00000000100000f8ffffffffffffff08000200ac1e010114000300776731000000000000000000000000001400030076657468315f746f5f7465616d000000140006000800000000080000020000000300000014000600030000000500000007000000001800000800010064010100"], 0x8c}}, 0x800) unshare(0x40600) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xfffffffffffffffd}, 0x94) unshare(0x62040200) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r7, 0x0, 0x0}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000940)={0x4, 0x0}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000980)='wg1\x00'}, 0x30) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a00)={@map=0x1, r7, 0x7, 0x2028, 0x0, @void, @void, @value=r11}, 0x20) 680.906021ms ago: executing program 2 (id=4775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)={0x94, r1, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x6a, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x94}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r2, 0x4, 0x5, 0x2}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x2}, {}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x90) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x100, r6, 0xe701ac47a3d23ecd, 0x0, 0x10002, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x100}}, 0x8800) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r7, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 524.677351ms ago: executing program 2 (id=4766): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @multicast1, 0x11, 0x3, 'fo\x00', 0xd, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x6, @loopback, 0x4e23, 0x3, 'lblcr\x00', 0x0, 0x81, 0x32}, {@rand_addr=0x64010101, 0x4e25, 0x0, 0xc3, 0xfffffff8, 0x12d5d}}, 0x44) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3, 0xcd}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0xa, 0x0, "bcf8366ba1014501426ef98d67c5d72e639f81b77c7ca58297f57a1a8c852897ff1c5ea526243a684300e08022f7a3b3c89666aa4c36982ca612dbb7b358a2e77719b81a5cc4633683d46f0cd80316c5"}, 0xd8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) connect$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x4, @none, 0x2, 0x2}, 0xe) sendto$inet(r0, 0x0, 0x0, 0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30}, 0x90) 411.631408ms ago: executing program 1 (id=4767): r0 = socket(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x6, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x3, [{}, {0xb, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @typedef={0x1, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x2e, 0x30, 0x0, 0x5f]}}, 0x0, 0x5e, 0x0, 0x4}, 0x28) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005200010000000000000000001c000000080001001103000020bcfd1144eaf34cce7c82144789b6f2c3ddf5e565bfa8f1609780fdc48509cbcf2e6dc5b5b6393a94f68128d3c4b265823ddb61bca2360ebe2537962efb4514cde0b7331a4400f7928547c1d744b24f047a7dbcc2af438b4d56911c97bd0dbec9cc98d24a2c5b729ac774b4c50df2fa80"], 0x1c}}, 0x0) 376.708063ms ago: executing program 4 (id=4768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x17, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x10) 264.647397ms ago: executing program 1 (id=4769): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000a40)="fc0000", 0x3) close(r3) close(r2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="40020000", @ANYRES16=r4, @ANYBLOB="000425bd7000ffdbdf250a0000002c0009800800020006000000080001000d0000000800010006000000080002000100000008000100030000001400058008000100657468000800010065746800a400048024000780080004000400000008000200c5020000080001002000000008000100190000000900010073797a31000000004400078008000200000200000800040005000000080001000a00000008000400010000800800020000fe000008000200d9965f4f0800040008000000080003000400ec002c00078008000100120000000800040007df0000080003000008000008000300ffff0000080001001a000000340003800800020000800000080003000000000008000200ff7f0000080001000200000008000300030000000800010008000000004e24ac14142a0000000000000000200002000a004e230000032dff01000000000000000000000000000101f0ffff100001006574683a697036746e6c30001400028008000100180000000800040005000000110001006574683a70696d367265673000000000080003000f0000000d0001007564703a73797a3100000000080003000200000038000400200001000a004e230000bd25ff010000000000000000000000000001050000001400020002004e230000000000000000000c00028008000100008000003c0005800c000280080001000d0000000800010065746800140002800800010005000000080004000400000008000100756470000800010065746800"/570], 0x240}, 0x1, 0x0, 0x0, 0x20004800}, 0x42949c75a2e76868) r5 = socket(0x1, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) recvmmsg$unix(r7, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001040)=""/6, 0x6}, {&(0x7f0000001080)=""/27, 0x1b}], 0x2}}], 0x1, 0x40000000, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_encap(r8, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000001c0)=0x2, 0x4) shutdown(r5, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x4000400) bind(r10, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000015c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) 263.390037ms ago: executing program 3 (id=4770): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x90}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7d, 0x9, 0x1, 0x8, @private0, @loopback={0x0, 0x460c6}, 0x80, 0x0, 0x25a1, 0x40}}) 262.634194ms ago: executing program 4 (id=4771): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) unshare(0x2040400) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa1000000f8ffffffb702000018000000b7030000000000008500000072000000850000007d00000095"], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x25, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x0, 0x460c6}, 0x1, 0x0, 0x25a1, 0x40}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) unshare(0x26020400) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) unshare(0x2040400) (async) socket$netlink(0x10, 0x3, 0x4) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) (async) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa1000000f8ffffffb702000018000000b7030000000000008500000072000000850000007d00000095"], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket(0x10, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x25, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x0, 0x460c6}, 0x1, 0x0, 0x25a1, 0x40}}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) (async) unshare(0x26020400) (async) 219.431028ms ago: executing program 1 (id=4772): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) socket$inet(0x10, 0x3, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x800) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 136.833517ms ago: executing program 4 (id=4773): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x40, 0x7, 0x703, 0xd, 0x2, 0x1, 0x5, {0x0, @in={{0x2, 0x4e22, @empty}}, 0x9, 0x8000, 0x0, 0x58, 0x64}}, &(0x7f0000000000)=0xb0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r2, 0x7ff, 0x9, 0x7}, 0x10) socket$alg(0x26, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000001c0)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x44, r0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r0, 0xb04, 0xffffffff, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) 32.762664ms ago: executing program 3 (id=4774): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x1, 0x3}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000005, 0x4010, 0xffffffffffffffff, 0x4b17e000) 649.381µs ago: executing program 0 (id=4776): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b00"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x11}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='pimreg1\x00', 0x10) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000300)={0x14d, 0x35, 0x6}) write(0xffffffffffffffff, &(0x7f0000000040)="cb", 0xfffffdef) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000340)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'erspan0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x10, 0x8, 0x3, 0x15ab, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x68, 0x0, 0x4, 0x2f, 0x0, @multicast1, @multicast1, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x57, [@dev]}, @ssrr={0x89, 0x1b, 0x56, [@local, @empty, @private=0xa010102, @private=0xa010100, @loopback, @broadcast]}, @cipso={0x86, 0x15, 0x2, [{0x5, 0xf, "75aca75d235637447109e45e91"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'gretap0\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x8, 0x7800, 0x7, 0x8000, {{0xf, 0x4, 0x0, 0x3d, 0x3c, 0x67, 0x0, 0xff, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x17, 0x0, [{0x6, 0x11, "31cde5e341852155815f0e9d549043"}]}, @rr={0x7, 0xb, 0xd, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x4, 0x6c, 0x3, 0x8}]}}}}}) 0s ago: executing program 3 (id=4777): socket$inet6(0xa, 0x2, 0x3a) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x20, 0x10, "f038d9ff01c8f3c396c581ec6079c7e5"}}) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) (async) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) pipe(0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}]}, &(0x7f0000000180)=0x10) close(0x3) (async) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) (async) close(0x3) (async) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="3000000000000000840000"], 0x30}], 0x1, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r4, 0x1, 0x70bd2c, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}}, 0x20040854) (async) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000480)=""/77, 0x4d}, {&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000680)=""/86, 0x56}], 0x4, &(0x7f0000000580)=""/153, 0x99}, 0x10101) (async) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) (async) getsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000780), 0x0) (async) write(r2, &(0x7f0000000800)="ab4c60b83b4f5238735f577659f0b557903815816ec807270f7f3653642c5ee4a470381f527fd10a5169f20de6c3e5b9aab7979a5fb22b7551522561363b3f0389320c1dc4830930f623db14877c139080485c76f324b99d279a8d08ea7a8e1121819eab474c0f4d896faf2666d18cacd1ea8c24ffd156fd705545f343892355db93172ee4b63df1028f1850e1c6", 0x8e) (async) r9 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000"], 0x4c}, 0x20009850) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8010}, 0x0) (async) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) kernel console output (not intermixed with test programs): netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.297168][T17800] bridge0: port 3(netdevsim2) entered blocking state [ 606.301934][T15222] udevd[15222]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 606.318293][T17800] bridge0: port 3(netdevsim2) entered disabled state [ 606.332913][T17800] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 606.343664][T17800] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 606.486288][T17779] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.777599][ T8513] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.806978][ T8513] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.835069][ T8513] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.876597][ T8513] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.961628][T17822] netlink: 'syz.0.3347': attribute type 30 has an invalid length. [ 607.175101][T17825] veth13: entered promiscuous mode [ 607.543812][T17850] __nla_validate_parse: 2 callbacks suppressed [ 607.543832][T17850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3352'. [ 607.765257][T17862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3357'. [ 607.894250][T17862] gretap0: entered promiscuous mode [ 608.001463][T17868] FAULT_INJECTION: forcing a failure. [ 608.001463][T17868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.017000][T17868] CPU: 0 UID: 0 PID: 17868 Comm: syz.3.3359 Not tainted syzkaller #0 PREEMPT(full) [ 608.017033][T17868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 608.017045][T17868] Call Trace: [ 608.017053][T17868] [ 608.017060][T17868] dump_stack_lvl+0x189/0x250 [ 608.017087][T17868] ? __pfx____ratelimit+0x10/0x10 [ 608.017111][T17868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 608.017126][T17868] ? __pfx__printk+0x10/0x10 [ 608.017147][T17868] ? __might_fault+0xb0/0x130 [ 608.017174][T17868] should_fail_ex+0x414/0x560 [ 608.017199][T17868] _copy_from_user+0x2d/0xb0 [ 608.017218][T17868] ___sys_sendmsg+0x158/0x2a0 [ 608.017241][T17868] ? __pfx____sys_sendmsg+0x10/0x10 [ 608.017290][T17868] ? __fget_files+0x2a/0x420 [ 608.017310][T17868] ? __fget_files+0x3a0/0x420 [ 608.017335][T17868] __x64_sys_sendmsg+0x19b/0x260 [ 608.017355][T17868] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 608.017380][T17868] ? __pfx_ksys_write+0x10/0x10 [ 608.017396][T17868] ? rcu_is_watching+0x15/0xb0 [ 608.017416][T17868] ? do_syscall_64+0xbe/0x3b0 [ 608.017438][T17868] do_syscall_64+0xfa/0x3b0 [ 608.017454][T17868] ? lockdep_hardirqs_on+0x9c/0x150 [ 608.017475][T17868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.017490][T17868] ? clear_bhb_loop+0x60/0xb0 [ 608.017508][T17868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.017538][T17868] RIP: 0033:0x7f37de98eec9 [ 608.017555][T17868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.017569][T17868] RSP: 002b:00007f37df8c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 608.017588][T17868] RAX: ffffffffffffffda RBX: 00007f37debe5fa0 RCX: 00007f37de98eec9 [ 608.017601][T17868] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000004 [ 608.017613][T17868] RBP: 00007f37df8c5090 R08: 0000000000000000 R09: 0000000000000000 [ 608.017625][T17868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.017636][T17868] R13: 00007f37debe6038 R14: 00007f37debe5fa0 R15: 00007fff978297e8 [ 608.017667][T17868] [ 608.255007][T17870] netlink: 'syz.4.3360': attribute type 1 has an invalid length. [ 608.262880][T17870] netlink: 'syz.4.3360': attribute type 2 has an invalid length. [ 608.270923][T17870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3360'. [ 608.282299][T17870] netlink: 'syz.4.3360': attribute type 1 has an invalid length. [ 608.435545][T17872] netlink: 'syz.3.3361': attribute type 30 has an invalid length. [ 608.614930][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 608.623812][ T9956] syz1: Port: 1 Link DOWN [ 608.638423][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 608.654016][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 608.672423][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 608.680098][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 608.860412][T17891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3365'. [ 609.107105][T17900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3368'. [ 609.137772][T17900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3368'. [ 609.152809][T17900] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3368'. [ 609.352600][T17908] FAULT_INJECTION: forcing a failure. [ 609.352600][T17908] name failslab, interval 1, probability 0, space 0, times 0 [ 609.376070][T17908] CPU: 0 UID: 0 PID: 17908 Comm: syz.1.3372 Not tainted syzkaller #0 PREEMPT(full) [ 609.376097][T17908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 609.376117][T17908] Call Trace: [ 609.376125][T17908] [ 609.376137][T17908] dump_stack_lvl+0x189/0x250 [ 609.376163][T17908] ? __pfx____ratelimit+0x10/0x10 [ 609.376187][T17908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 609.376205][T17908] ? __pfx__printk+0x10/0x10 [ 609.376233][T17908] ? __pfx___might_resched+0x10/0x10 [ 609.376259][T17908] should_fail_ex+0x414/0x560 [ 609.376286][T17908] should_failslab+0xa8/0x100 [ 609.376309][T17908] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 609.376329][T17908] ? __alloc_skb+0x112/0x2d0 [ 609.376350][T17908] __alloc_skb+0x112/0x2d0 [ 609.376372][T17908] netlink_sendmsg+0x5c6/0xb30 [ 609.376399][T17908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.376419][T17908] ? aa_sock_msg_perm+0xf1/0x1d0 [ 609.376443][T17908] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 609.376460][T17908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.376480][T17908] __sock_sendmsg+0x21c/0x270 [ 609.376507][T17908] ____sys_sendmsg+0x505/0x830 [ 609.376533][T17908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 609.376563][T17908] ? import_iovec+0x74/0xa0 [ 609.376587][T17908] ___sys_sendmsg+0x21f/0x2a0 [ 609.376607][T17908] ? __pfx____sys_sendmsg+0x10/0x10 [ 609.376656][T17908] ? __fget_files+0x2a/0x420 [ 609.376676][T17908] ? __fget_files+0x3a0/0x420 [ 609.376706][T17908] __x64_sys_sendmsg+0x19b/0x260 [ 609.376728][T17908] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 609.376755][T17908] ? __pfx_ksys_write+0x10/0x10 [ 609.376781][T17908] ? do_syscall_64+0xbe/0x3b0 [ 609.376801][T17908] do_syscall_64+0xfa/0x3b0 [ 609.376815][T17908] ? lockdep_hardirqs_on+0x9c/0x150 [ 609.376838][T17908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.376855][T17908] ? clear_bhb_loop+0x60/0xb0 [ 609.376876][T17908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.376892][T17908] RIP: 0033:0x7f3421d8eec9 [ 609.376909][T17908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.376923][T17908] RSP: 002b:00007f3422bc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 609.376952][T17908] RAX: ffffffffffffffda RBX: 00007f3421fe5fa0 RCX: 00007f3421d8eec9 [ 609.376964][T17908] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000004 [ 609.376974][T17908] RBP: 00007f3422bc0090 R08: 0000000000000000 R09: 0000000000000000 [ 609.376984][T17908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.376994][T17908] R13: 00007f3421fe6038 R14: 00007f3421fe5fa0 R15: 00007ffc9fb49588 [ 609.377024][T17908] [ 609.699913][T17912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3373'. [ 609.762288][T17914] netlink: 'syz.0.3375': attribute type 1 has an invalid length. [ 609.788933][T17916] syz_tun: entered allmulticast mode [ 609.814593][T17916] dvmrp8: entered allmulticast mode [ 610.080804][T17924] tipc: Enabled bearer , priority 0 [ 610.104560][T17924] syzkaller0: entered promiscuous mode [ 610.110472][T17924] syzkaller0: entered allmulticast mode [ 610.205225][T17928] bridge1: entered promiscuous mode [ 610.211009][T17928] bridge1: entered allmulticast mode [ 610.225153][T17928] team0: Port device bridge1 added [ 610.241883][T17924] tipc: Resetting bearer [ 610.248585][T17926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3378'. [ 610.295933][T17923] tipc: Resetting bearer [ 610.339509][T17923] tipc: Disabling bearer [ 610.627202][T17915] syz_tun: left allmulticast mode [ 610.642872][T17915] dvmrp8: left allmulticast mode [ 610.765607][ T5876] Bluetooth: hci1: command tx timeout [ 611.066378][T17948] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 611.098286][T17946] netlink: 'syz.0.3383': attribute type 3 has an invalid length. [ 611.117499][T17950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3384'. [ 611.325302][T17954] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 612.501080][T17881] chnl_net:caif_netlink_parms(): no params data found [ 612.625112][T17881] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.632413][T17881] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.639624][T17881] bridge_slave_0: entered allmulticast mode [ 612.646925][T17881] bridge_slave_0: entered promiscuous mode [ 612.655148][T17881] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.662566][T17881] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.669817][T17881] bridge_slave_1: entered allmulticast mode [ 612.677125][T17881] bridge_slave_1: entered promiscuous mode [ 612.713635][T17881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.726380][T17881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.757064][T17881] team0: Port device team_slave_0 added [ 612.767410][T17881] team0: Port device team_slave_1 added [ 612.798593][T17881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.806259][T17881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.833600][T17881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.846347][T17881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.853546][ T5876] Bluetooth: hci1: command tx timeout [ 612.857085][T17881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.885383][T17881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.925164][T17881] hsr_slave_0: entered promiscuous mode [ 612.932124][T17881] hsr_slave_1: entered promiscuous mode [ 612.938259][T17881] debugfs: 'hsr0' already exists in 'hsr' [ 612.944397][T17881] Cannot create hsr debugfs directory [ 613.112038][T17881] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 613.120787][T17881] netdevsim netdevsim2 netdevsim2 (unregistering): left promiscuous mode [ 613.131335][T17881] bridge0: port 3(netdevsim2) entered disabled state [ 613.338718][T17881] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 613.349757][T17881] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 613.359411][T17881] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 613.369114][T17881] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 613.394786][T17881] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.402013][T17881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.409393][T17881] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.416702][T17881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.428535][ T8515] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.437916][ T8515] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.493086][T17881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.514118][T17881] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.526144][ T8515] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.533339][ T8515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.547992][ T6092] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.555181][ T6092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.722594][T17881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.763644][T17881] veth0_vlan: entered promiscuous mode [ 613.775169][T17881] veth1_vlan: entered promiscuous mode [ 613.801162][T17881] veth0_macvtap: entered promiscuous mode [ 613.810828][T17881] veth1_macvtap: entered promiscuous mode [ 613.829535][T17881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.843579][T17881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.857972][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.867902][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.878169][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.889659][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.956538][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.965557][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.006181][ T8515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.014933][ T8515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.921746][ T5876] Bluetooth: hci1: command tx timeout [ 617.013175][ T5876] Bluetooth: hci1: command tx timeout [ 624.524516][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 643.773884][T18004] tipc: Started in network mode [ 643.782852][T18004] tipc: Node identity f220ffdb9757, cluster identity 4711 [ 643.803357][T18006] netlink: 'syz.2.3397': attribute type 10 has an invalid length. [ 643.810624][T18004] tipc: Enabled bearer , priority 0 [ 643.811341][T18006] __nla_validate_parse: 2 callbacks suppressed [ 643.811354][T18006] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3397'. [ 643.864883][T18005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3396'. [ 643.870610][T18004] syzkaller0: entered promiscuous mode [ 643.910355][T18004] syzkaller0: entered allmulticast mode [ 643.948831][T18005] hsr_slave_0: left promiscuous mode [ 643.961211][T18005] hsr_slave_1: left promiscuous mode [ 644.012332][T18014] syzkaller0: entered promiscuous mode [ 644.018370][T18014] syzkaller0: entered allmulticast mode [ 644.072905][T18006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3397'. [ 644.075598][T18011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3400'. [ 644.135649][T18004] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 644.148605][T18004] tipc: Resetting bearer [ 644.162238][T18015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3394'. [ 644.183930][T18002] tipc: Resetting bearer [ 644.243875][T18019] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3401'. [ 644.269995][T18019] nbd: couldn't find a device at index 0 [ 644.280991][T18002] tipc: Disabling bearer [ 644.310410][T18015] netdevsim0: renamed from ip6_vti0 [ 644.417549][T18015] netdevsim0: entered promiscuous mode [ 644.466795][T18032] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 644.485519][T18032] netlink: 'syz.1.3405': attribute type 3 has an invalid length. [ 644.646718][T18037] FAULT_INJECTION: forcing a failure. [ 644.646718][T18037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.661191][T18037] CPU: 0 UID: 0 PID: 18037 Comm: syz.2.3408 Not tainted syzkaller #0 PREEMPT(full) [ 644.661217][T18037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 644.661230][T18037] Call Trace: [ 644.661237][T18037] [ 644.661246][T18037] dump_stack_lvl+0x189/0x250 [ 644.661269][T18037] ? __pfx____ratelimit+0x10/0x10 [ 644.661294][T18037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 644.661312][T18037] ? __pfx__printk+0x10/0x10 [ 644.661334][T18037] ? __might_fault+0xb0/0x130 [ 644.661366][T18037] should_fail_ex+0x414/0x560 [ 644.661397][T18037] _copy_from_user+0x2d/0xb0 [ 644.661419][T18037] ___sys_sendmsg+0x158/0x2a0 [ 644.661443][T18037] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.661501][T18037] ? __fget_files+0x2a/0x420 [ 644.661522][T18037] ? __fget_files+0x3a0/0x420 [ 644.661555][T18037] __x64_sys_sendmsg+0x19b/0x260 [ 644.661579][T18037] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 644.661609][T18037] ? __pfx_ksys_write+0x10/0x10 [ 644.661626][T18037] ? rcu_is_watching+0x15/0xb0 [ 644.661649][T18037] ? do_syscall_64+0xbe/0x3b0 [ 644.661678][T18037] do_syscall_64+0xfa/0x3b0 [ 644.661694][T18037] ? lockdep_hardirqs_on+0x9c/0x150 [ 644.661717][T18037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.661734][T18037] ? clear_bhb_loop+0x60/0xb0 [ 644.661755][T18037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.661771][T18037] RIP: 0033:0x7f486cd8eec9 [ 644.661788][T18037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.661803][T18037] RSP: 002b:00007f486dcc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.661823][T18037] RAX: ffffffffffffffda RBX: 00007f486cfe5fa0 RCX: 00007f486cd8eec9 [ 644.661840][T18037] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 644.661851][T18037] RBP: 00007f486dcc2090 R08: 0000000000000000 R09: 0000000000000000 [ 644.661863][T18037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.661873][T18037] R13: 00007f486cfe6038 R14: 00007f486cfe5fa0 R15: 00007ffdb8917f08 [ 644.661903][T18037] [ 645.652328][T18054] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3412'. [ 645.891299][T18079] FAULT_INJECTION: forcing a failure. [ 645.891299][T18079] name failslab, interval 1, probability 0, space 0, times 0 [ 645.906198][T18079] CPU: 0 UID: 0 PID: 18079 Comm: syz.2.3419 Not tainted syzkaller #0 PREEMPT(full) [ 645.906222][T18079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 645.906233][T18079] Call Trace: [ 645.906240][T18079] [ 645.906249][T18079] dump_stack_lvl+0x189/0x250 [ 645.906272][T18079] ? __pfx____ratelimit+0x10/0x10 [ 645.906295][T18079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 645.906312][T18079] ? __pfx__printk+0x10/0x10 [ 645.906334][T18079] ? __pfx___might_resched+0x10/0x10 [ 645.906355][T18079] ? fs_reclaim_acquire+0x7d/0x100 [ 645.906381][T18079] should_fail_ex+0x414/0x560 [ 645.906408][T18079] should_failslab+0xa8/0x100 [ 645.906429][T18079] __kmalloc_noprof+0xcb/0x4f0 [ 645.906448][T18079] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 645.906475][T18079] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 645.906503][T18079] genl_start+0x180/0x6c0 [ 645.906521][T18079] ? netlink_lookup+0x30/0x200 [ 645.906551][T18079] __netlink_dump_start+0x466/0x7e0 [ 645.906575][T18079] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 645.906599][T18079] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 645.906618][T18079] ? genl_get_cmd+0x67f/0x910 [ 645.906640][T18079] ? __pfx___mutex_lock+0x10/0x10 [ 645.906656][T18079] ? __pfx_genl_start+0x10/0x10 [ 645.906673][T18079] ? __pfx_genl_dumpit+0x10/0x10 [ 645.906690][T18079] ? __pfx_genl_done+0x10/0x10 [ 645.906714][T18079] ? stack_trace_save+0x9c/0xe0 [ 645.906736][T18079] genl_rcv_msg+0x5da/0x790 [ 645.906762][T18079] ? __pfx_genl_rcv_msg+0x10/0x10 [ 645.906782][T18079] ? __pfx_nfc_genl_dump_targets+0x10/0x10 [ 645.906801][T18079] ? __pfx_nfc_genl_dump_targets_done+0x10/0x10 [ 645.906834][T18079] netlink_rcv_skb+0x208/0x470 [ 645.906848][T18079] ? __lock_acquire+0xab9/0xd20 [ 645.906867][T18079] ? __pfx_genl_rcv_msg+0x10/0x10 [ 645.906888][T18079] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 645.906923][T18079] ? down_read+0x1ad/0x2e0 [ 645.906947][T18079] genl_rcv+0x28/0x40 [ 645.906965][T18079] netlink_unicast+0x82f/0x9e0 [ 645.906989][T18079] ? __pfx_netlink_unicast+0x10/0x10 [ 645.907006][T18079] ? netlink_sendmsg+0x642/0xb30 [ 645.907021][T18079] ? skb_put+0x11b/0x210 [ 645.907043][T18079] netlink_sendmsg+0x805/0xb30 [ 645.907069][T18079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.907090][T18079] ? aa_sock_msg_perm+0xf1/0x1d0 [ 645.907114][T18079] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 645.907129][T18079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.907146][T18079] __sock_sendmsg+0x21c/0x270 [ 645.907174][T18079] ____sys_sendmsg+0x505/0x830 [ 645.907199][T18079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 645.907226][T18079] ? import_iovec+0x74/0xa0 [ 645.907248][T18079] ___sys_sendmsg+0x21f/0x2a0 [ 645.907269][T18079] ? __pfx____sys_sendmsg+0x10/0x10 [ 645.907314][T18079] ? __fget_files+0x2a/0x420 [ 645.907334][T18079] ? __fget_files+0x3a0/0x420 [ 645.907360][T18079] __x64_sys_sendmsg+0x19b/0x260 [ 645.907380][T18079] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 645.907404][T18079] ? __pfx_ksys_write+0x10/0x10 [ 645.907419][T18079] ? rcu_is_watching+0x15/0xb0 [ 645.907438][T18079] ? do_syscall_64+0xbe/0x3b0 [ 645.907455][T18079] do_syscall_64+0xfa/0x3b0 [ 645.907470][T18079] ? lockdep_hardirqs_on+0x9c/0x150 [ 645.907490][T18079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.907506][T18079] ? clear_bhb_loop+0x60/0xb0 [ 645.907526][T18079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.907554][T18079] RIP: 0033:0x7f486cd8eec9 [ 645.907570][T18079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.907583][T18079] RSP: 002b:00007f486dcc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.907599][T18079] RAX: ffffffffffffffda RBX: 00007f486cfe5fa0 RCX: 00007f486cd8eec9 [ 645.907609][T18079] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000004 [ 645.907619][T18079] RBP: 00007f486dcc2090 R08: 0000000000000000 R09: 0000000000000000 [ 645.907627][T18079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.907636][T18079] R13: 00007f486cfe6038 R14: 00007f486cfe5fa0 R15: 00007ffdb8917f08 [ 645.907659][T18079] [ 646.318589][T18056] delete_channel: no stack [ 646.430879][T18082] netlink: 'syz.1.3418': attribute type 1 has an invalid length. [ 646.443583][T18082] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3418'. [ 646.482665][T18084] FAULT_INJECTION: forcing a failure. [ 646.482665][T18084] name failslab, interval 1, probability 0, space 0, times 0 [ 646.516493][T18084] CPU: 0 UID: 0 PID: 18084 Comm: syz.4.3420 Not tainted syzkaller #0 PREEMPT(full) [ 646.516520][T18084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 646.516532][T18084] Call Trace: [ 646.516541][T18084] [ 646.516549][T18084] dump_stack_lvl+0x189/0x250 [ 646.516582][T18084] ? __pfx____ratelimit+0x10/0x10 [ 646.516605][T18084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 646.516625][T18084] ? __pfx__printk+0x10/0x10 [ 646.516660][T18084] ? __pfx___might_resched+0x10/0x10 [ 646.516689][T18084] should_fail_ex+0x414/0x560 [ 646.516718][T18084] should_failslab+0xa8/0x100 [ 646.516742][T18084] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 646.516765][T18084] ? __alloc_skb+0x112/0x2d0 [ 646.516788][T18084] __alloc_skb+0x112/0x2d0 [ 646.516811][T18084] netlink_sendmsg+0x5c6/0xb30 [ 646.516841][T18084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.516864][T18084] ? aa_sock_msg_perm+0xf1/0x1d0 [ 646.516891][T18084] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 646.516908][T18084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.516928][T18084] __sock_sendmsg+0x21c/0x270 [ 646.516957][T18084] ____sys_sendmsg+0x505/0x830 [ 646.516983][T18084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 646.517014][T18084] ? import_iovec+0x74/0xa0 [ 646.517044][T18084] ___sys_sendmsg+0x21f/0x2a0 [ 646.517067][T18084] ? __pfx____sys_sendmsg+0x10/0x10 [ 646.517124][T18084] ? __fget_files+0x2a/0x420 [ 646.517145][T18084] ? __fget_files+0x3a0/0x420 [ 646.517178][T18084] __x64_sys_sendmsg+0x19b/0x260 [ 646.517202][T18084] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 646.517233][T18084] ? __pfx_ksys_write+0x10/0x10 [ 646.517251][T18084] ? rcu_is_watching+0x15/0xb0 [ 646.517272][T18084] ? do_syscall_64+0xbe/0x3b0 [ 646.517293][T18084] do_syscall_64+0xfa/0x3b0 [ 646.517309][T18084] ? lockdep_hardirqs_on+0x9c/0x150 [ 646.517332][T18084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.517349][T18084] ? clear_bhb_loop+0x60/0xb0 [ 646.517371][T18084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.517387][T18084] RIP: 0033:0x7f4eadb8eec9 [ 646.517403][T18084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.517417][T18084] RSP: 002b:00007f4eae982038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 646.517435][T18084] RAX: ffffffffffffffda RBX: 00007f4eadde5fa0 RCX: 00007f4eadb8eec9 [ 646.517448][T18084] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 646.517463][T18084] RBP: 00007f4eae982090 R08: 0000000000000000 R09: 0000000000000000 [ 646.517474][T18084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.517483][T18084] R13: 00007f4eadde6038 R14: 00007f4eadde5fa0 R15: 00007ffd1e4c4e78 [ 646.517512][T18084] [ 647.051288][T18102] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 647.074595][T18108] netlink: 'syz.4.3428': attribute type 30 has an invalid length. [ 647.106123][T18102] netlink: 'syz.0.3426': attribute type 3 has an invalid length. [ 647.216044][T18117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3430'. [ 647.235009][T18117] erspan0: entered promiscuous mode [ 647.241127][T18116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3432'. [ 647.254135][T18117] erspan0: left promiscuous mode [ 647.284314][T18121] netlink: 'syz.1.3431': attribute type 1 has an invalid length. [ 647.299016][T18121] FAULT_INJECTION: forcing a failure. [ 647.299016][T18121] name failslab, interval 1, probability 0, space 0, times 0 [ 647.313116][T18121] CPU: 0 UID: 0 PID: 18121 Comm: syz.1.3431 Not tainted syzkaller #0 PREEMPT(full) [ 647.313143][T18121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 647.313154][T18121] Call Trace: [ 647.313162][T18121] [ 647.313171][T18121] dump_stack_lvl+0x189/0x250 [ 647.313197][T18121] ? __pfx____ratelimit+0x10/0x10 [ 647.313221][T18121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 647.313241][T18121] ? __pfx__printk+0x10/0x10 [ 647.313269][T18121] ? __pfx___might_resched+0x10/0x10 [ 647.313291][T18121] ? fs_reclaim_acquire+0x7d/0x100 [ 647.313318][T18121] should_fail_ex+0x414/0x560 [ 647.313343][T18121] should_failslab+0xa8/0x100 [ 647.313367][T18121] __kmalloc_cache_noprof+0x70/0x3d0 [ 647.313387][T18121] ? genl_start+0x1c9/0x6c0 [ 647.313414][T18121] genl_start+0x1c9/0x6c0 [ 647.313435][T18121] ? netlink_lookup+0x30/0x200 [ 647.313460][T18121] __netlink_dump_start+0x466/0x7e0 [ 647.313488][T18121] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 647.313514][T18121] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 647.313535][T18121] ? genl_get_cmd+0x67f/0x910 [ 647.313568][T18121] ? __pfx___mutex_lock+0x10/0x10 [ 647.313586][T18121] ? __pfx_genl_start+0x10/0x10 [ 647.313605][T18121] ? __pfx_genl_dumpit+0x10/0x10 [ 647.313624][T18121] ? __pfx_genl_done+0x10/0x10 [ 647.313650][T18121] ? stack_trace_save+0x9c/0xe0 [ 647.313677][T18121] genl_rcv_msg+0x5da/0x790 [ 647.313706][T18121] ? __pfx_genl_rcv_msg+0x10/0x10 [ 647.313727][T18121] ? __pfx_nfc_genl_dump_targets+0x10/0x10 [ 647.313747][T18121] ? __pfx_nfc_genl_dump_targets_done+0x10/0x10 [ 647.313794][T18121] netlink_rcv_skb+0x208/0x470 [ 647.313810][T18121] ? __lock_acquire+0xab9/0xd20 [ 647.313833][T18121] ? __pfx_genl_rcv_msg+0x10/0x10 [ 647.313856][T18121] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 647.313895][T18121] ? down_read+0x1ad/0x2e0 [ 647.313917][T18121] genl_rcv+0x28/0x40 [ 647.313935][T18121] netlink_unicast+0x82f/0x9e0 [ 647.313963][T18121] ? __pfx_netlink_unicast+0x10/0x10 [ 647.313989][T18121] ? netlink_sendmsg+0x642/0xb30 [ 647.314009][T18121] ? skb_put+0x11b/0x210 [ 647.314033][T18121] netlink_sendmsg+0x805/0xb30 [ 647.314064][T18121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.314086][T18121] ? aa_sock_msg_perm+0xf1/0x1d0 [ 647.314113][T18121] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 647.314130][T18121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.314155][T18121] __sock_sendmsg+0x21c/0x270 [ 647.314186][T18121] ____sys_sendmsg+0x505/0x830 [ 647.314213][T18121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 647.314244][T18121] ? import_iovec+0x74/0xa0 [ 647.314269][T18121] ___sys_sendmsg+0x21f/0x2a0 [ 647.314292][T18121] ? __pfx____sys_sendmsg+0x10/0x10 [ 647.314352][T18121] ? __fget_files+0x2a/0x420 [ 647.314373][T18121] ? __fget_files+0x3a0/0x420 [ 647.314406][T18121] __x64_sys_sendmsg+0x19b/0x260 [ 647.314431][T18121] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 647.314462][T18121] ? __pfx_ksys_write+0x10/0x10 [ 647.314480][T18121] ? rcu_is_watching+0x15/0xb0 [ 647.314508][T18121] ? do_syscall_64+0xbe/0x3b0 [ 647.314530][T18121] do_syscall_64+0xfa/0x3b0 [ 647.314545][T18121] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.314578][T18121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.314595][T18121] ? clear_bhb_loop+0x60/0xb0 [ 647.314617][T18121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.314634][T18121] RIP: 0033:0x7f3421d8eec9 [ 647.314651][T18121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.314664][T18121] RSP: 002b:00007f3422bc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.314682][T18121] RAX: ffffffffffffffda RBX: 00007f3421fe5fa0 RCX: 00007f3421d8eec9 [ 647.314696][T18121] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000004 [ 647.314708][T18121] RBP: 00007f3422bc0090 R08: 0000000000000000 R09: 0000000000000000 [ 647.314720][T18121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.314731][T18121] R13: 00007f3421fe6038 R14: 00007f3421fe5fa0 R15: 00007ffc9fb49588 [ 647.314762][T18121] [ 647.723328][T18123] sctp: [Deprecated]: syz.2.3434 (pid 18123) Use of int in maxseg socket option. [ 647.723328][T18123] Use struct sctp_assoc_value instead [ 647.827371][T18128] bridge_slave_0: left allmulticast mode [ 647.847708][T18128] bridge_slave_0: left promiscuous mode [ 647.855056][T18128] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.878510][T18128] bridge_slave_1: left allmulticast mode [ 647.884538][T18128] bridge_slave_1: left promiscuous mode [ 647.890423][T18128] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.908109][T18137] netlink: 'syz.2.3434': attribute type 10 has an invalid length. [ 647.932669][T18128] bond0: (slave bond_slave_0): Releasing backup interface [ 647.973120][T18128] bond0: (slave bond_slave_1): Releasing backup interface [ 648.067718][T18128] team0: Port device team_slave_0 removed [ 648.136195][T18128] team0: Port device team_slave_1 removed [ 648.137767][T18157] tipc: Can't bind to reserved service type 2 [ 648.143264][T18128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.159836][T18128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.170699][T18128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.178734][T18128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.190382][T18128] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 648.248799][T18137] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 648.276819][T18161] netlink: 'syz.3.3443': attribute type 3 has an invalid length. [ 648.306431][T18157] geneve2: entered promiscuous mode [ 648.313993][ T6092] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.341305][T18152] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 648.389672][ T6092] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.424757][ T6092] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.451849][ T6092] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.554735][T18177] FAULT_INJECTION: forcing a failure. [ 648.554735][T18177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.568683][T18176] bond0: entered promiscuous mode [ 648.585093][T18179] atomic_op ffff8880536bf198 conn xmit_atomic 0000000000000000 [ 648.601871][T18176] mac80211_hwsim hwsim69 wlan1: entered promiscuous mode [ 648.607820][T18177] CPU: 1 UID: 0 PID: 18177 Comm: syz.0.3450 Not tainted syzkaller #0 PREEMPT(full) [ 648.607848][T18177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 648.607860][T18177] Call Trace: [ 648.607867][T18177] [ 648.607875][T18177] dump_stack_lvl+0x189/0x250 [ 648.607899][T18177] ? __pfx____ratelimit+0x10/0x10 [ 648.607923][T18177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 648.607941][T18177] ? __pfx__printk+0x10/0x10 [ 648.607962][T18177] ? __might_fault+0xb0/0x130 [ 648.607994][T18177] should_fail_ex+0x414/0x560 [ 648.608022][T18177] _copy_from_iter+0x1de/0x1790 [ 648.608047][T18177] ? rcu_is_watching+0x15/0xb0 [ 648.608065][T18177] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 648.608087][T18177] ? __pfx__copy_from_iter+0x10/0x10 [ 648.608107][T18177] ? __build_skb_around+0x257/0x3e0 [ 648.608130][T18177] ? netlink_sendmsg+0x642/0xb30 [ 648.608147][T18177] ? skb_put+0x11b/0x210 [ 648.608168][T18177] netlink_sendmsg+0x6b2/0xb30 [ 648.608196][T18177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 648.608218][T18177] ? aa_sock_msg_perm+0xf1/0x1d0 [ 648.608244][T18177] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 648.608260][T18177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 648.608286][T18177] __sock_sendmsg+0x21c/0x270 [ 648.608313][T18177] ____sys_sendmsg+0x505/0x830 [ 648.608340][T18177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 648.608368][T18177] ? import_iovec+0x74/0xa0 [ 648.608391][T18177] ___sys_sendmsg+0x21f/0x2a0 [ 648.608414][T18177] ? __pfx____sys_sendmsg+0x10/0x10 [ 648.608469][T18177] ? __fget_files+0x2a/0x420 [ 648.608490][T18177] ? __fget_files+0x3a0/0x420 [ 648.608521][T18177] __x64_sys_sendmsg+0x19b/0x260 [ 648.608544][T18177] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 648.608574][T18177] ? __pfx_ksys_write+0x10/0x10 [ 648.608592][T18177] ? rcu_is_watching+0x15/0xb0 [ 648.608612][T18177] ? do_syscall_64+0xbe/0x3b0 [ 648.608633][T18177] do_syscall_64+0xfa/0x3b0 [ 648.608649][T18177] ? lockdep_hardirqs_on+0x9c/0x150 [ 648.608670][T18177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.608687][T18177] ? clear_bhb_loop+0x60/0xb0 [ 648.608707][T18177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.608724][T18177] RIP: 0033:0x7fcf86f8eec9 [ 648.608740][T18177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.608754][T18177] RSP: 002b:00007fcf87ee5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 648.608773][T18177] RAX: ffffffffffffffda RBX: 00007fcf871e5fa0 RCX: 00007fcf86f8eec9 [ 648.608786][T18177] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 648.608797][T18177] RBP: 00007fcf87ee5090 R08: 0000000000000000 R09: 0000000000000000 [ 648.608808][T18177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.608819][T18177] R13: 00007fcf871e6038 R14: 00007fcf871e5fa0 R15: 00007ffec2487908 [ 648.608847][T18177] [ 648.921903][T18176] bond0: left promiscuous mode [ 648.926727][T18176] mac80211_hwsim hwsim69 wlan1: left promiscuous mode [ 648.990324][T18197] tipc: Enabling of bearer rejected, failed to enable media [ 649.013895][T18179] __nla_validate_parse: 3 callbacks suppressed [ 649.013917][T18179] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3452'. [ 649.113311][T18183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3452'. [ 649.468186][T18211] netlink: 'syz.0.3458': attribute type 10 has an invalid length. [ 649.497030][T18211] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 649.634036][T18216] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 649.666036][T18216] batman_adv: batadv0: Adding interface: gretap1 [ 649.684848][T18216] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.714472][T18216] batman_adv: batadv0: Interface activated: gretap1 [ 649.754575][T18216] netlink: 'syz.2.3459': attribute type 3 has an invalid length. [ 649.782088][T18219] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 649.905646][T18230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3464'. [ 649.959276][T18232] netlink: 'syz.3.3465': attribute type 1 has an invalid length. [ 650.002940][T18235] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3467'. [ 650.277580][T18260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.873879][T18283] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 650.989915][T18291] netlink: 'syz.2.3479': attribute type 1 has an invalid length. [ 651.042609][T18291] FAULT_INJECTION: forcing a failure. [ 651.042609][T18291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.070148][T18291] CPU: 1 UID: 0 PID: 18291 Comm: syz.2.3479 Not tainted syzkaller #0 PREEMPT(full) [ 651.070175][T18291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 651.070185][T18291] Call Trace: [ 651.070192][T18291] [ 651.070201][T18291] dump_stack_lvl+0x189/0x250 [ 651.070225][T18291] ? __pfx____ratelimit+0x10/0x10 [ 651.070246][T18291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 651.070265][T18291] ? __pfx__printk+0x10/0x10 [ 651.070299][T18291] should_fail_ex+0x414/0x560 [ 651.070326][T18291] _copy_to_user+0x31/0xb0 [ 651.070349][T18291] simple_read_from_buffer+0xe1/0x170 [ 651.070377][T18291] proc_fail_nth_read+0x1b3/0x220 [ 651.070400][T18291] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 651.070421][T18291] ? rw_verify_area+0x2a6/0x4d0 [ 651.070440][T18291] ? __lock_acquire+0xab9/0xd20 [ 651.070460][T18291] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 651.070480][T18291] vfs_read+0x1fd/0xa30 [ 651.070498][T18291] ? fdget_pos+0x247/0x320 [ 651.070523][T18291] ? __pfx___mutex_lock+0x10/0x10 [ 651.070540][T18291] ? __pfx_vfs_read+0x10/0x10 [ 651.070561][T18291] ? __fget_files+0x2a/0x420 [ 651.070585][T18291] ? __fget_files+0x3a0/0x420 [ 651.070604][T18291] ? __fget_files+0x2a/0x420 [ 651.070633][T18291] ksys_read+0x145/0x250 [ 651.070655][T18291] ? __pfx_ksys_read+0x10/0x10 [ 651.070672][T18291] ? rcu_is_watching+0x15/0xb0 [ 651.070691][T18291] ? do_syscall_64+0xbe/0x3b0 [ 651.070713][T18291] do_syscall_64+0xfa/0x3b0 [ 651.070729][T18291] ? lockdep_hardirqs_on+0x9c/0x150 [ 651.070752][T18291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.070767][T18291] ? clear_bhb_loop+0x60/0xb0 [ 651.070787][T18291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.070803][T18291] RIP: 0033:0x7f486cd8d8dc [ 651.070820][T18291] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 651.070834][T18291] RSP: 002b:00007f486dcc2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 651.070852][T18291] RAX: ffffffffffffffda RBX: 00007f486cfe5fa0 RCX: 00007f486cd8d8dc [ 651.070865][T18291] RDX: 000000000000000f RSI: 00007f486dcc20a0 RDI: 0000000000000003 [ 651.070876][T18291] RBP: 00007f486dcc2090 R08: 0000000000000000 R09: 0000000000000000 [ 651.070887][T18291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.070898][T18291] R13: 00007f486cfe6038 R14: 00007f486cfe5fa0 R15: 00007ffdb8917f08 [ 651.070932][T18291] [ 651.072072][T18295] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 651.350664][T18301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3481'. [ 651.364168][T18300] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3480'. [ 651.414692][T18293] netlink: 'syz.0.3478': attribute type 3 has an invalid length. [ 651.870680][T18339] FAULT_INJECTION: forcing a failure. [ 651.870680][T18339] name failslab, interval 1, probability 0, space 0, times 0 [ 651.903751][T18339] CPU: 0 UID: 0 PID: 18339 Comm: syz.2.3494 Not tainted syzkaller #0 PREEMPT(full) [ 651.903777][T18339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 651.903788][T18339] Call Trace: [ 651.903796][T18339] [ 651.903804][T18339] dump_stack_lvl+0x189/0x250 [ 651.903827][T18339] ? __pfx____ratelimit+0x10/0x10 [ 651.903852][T18339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 651.903868][T18339] ? __pfx__printk+0x10/0x10 [ 651.903894][T18339] ? __pfx___might_resched+0x10/0x10 [ 651.903914][T18339] ? fs_reclaim_acquire+0x7d/0x100 [ 651.903941][T18339] should_fail_ex+0x414/0x560 [ 651.903967][T18339] should_failslab+0xa8/0x100 [ 651.903999][T18339] __kmalloc_cache_noprof+0x70/0x3d0 [ 651.904017][T18339] ? genl_start+0x1c9/0x6c0 [ 651.904041][T18339] genl_start+0x1c9/0x6c0 [ 651.904061][T18339] ? netlink_lookup+0x30/0x200 [ 651.904086][T18339] __netlink_dump_start+0x466/0x7e0 [ 651.904114][T18339] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 651.904140][T18339] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 651.904161][T18339] ? genl_get_cmd+0x67f/0x910 [ 651.904184][T18339] ? __pfx___mutex_lock+0x10/0x10 [ 651.904203][T18339] ? __pfx_genl_start+0x10/0x10 [ 651.904220][T18339] ? __pfx_genl_dumpit+0x10/0x10 [ 651.904237][T18339] ? __pfx_genl_done+0x10/0x10 [ 651.904273][T18339] genl_rcv_msg+0x5da/0x790 [ 651.904303][T18339] ? __pfx_genl_rcv_msg+0x10/0x10 [ 651.904323][T18339] ? __pfx_mptcp_pm_nl_get_addr_dumpit+0x10/0x10 [ 651.904351][T18339] ? __asan_memcpy+0x40/0x70 [ 651.904369][T18339] ? __pfx_ref_tracker_free+0x10/0x10 [ 651.904401][T18339] netlink_rcv_skb+0x208/0x470 [ 651.904418][T18339] ? __lock_acquire+0xab9/0xd20 [ 651.904440][T18339] ? __pfx_genl_rcv_msg+0x10/0x10 [ 651.904463][T18339] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 651.904502][T18339] ? down_read+0x1ad/0x2e0 [ 651.904523][T18339] genl_rcv+0x28/0x40 [ 651.904543][T18339] netlink_unicast+0x82f/0x9e0 [ 651.904570][T18339] ? __pfx_netlink_unicast+0x10/0x10 [ 651.904590][T18339] ? netlink_sendmsg+0x642/0xb30 [ 651.904606][T18339] ? skb_put+0x11b/0x210 [ 651.904630][T18339] netlink_sendmsg+0x805/0xb30 [ 651.904660][T18339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.904683][T18339] ? aa_sock_msg_perm+0xf1/0x1d0 [ 651.904710][T18339] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 651.904728][T18339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.904748][T18339] __sock_sendmsg+0x21c/0x270 [ 651.904776][T18339] ____sys_sendmsg+0x505/0x830 [ 651.904803][T18339] ? __pfx_____sys_sendmsg+0x10/0x10 [ 651.904835][T18339] ? import_iovec+0x74/0xa0 [ 651.904860][T18339] ___sys_sendmsg+0x21f/0x2a0 [ 651.904883][T18339] ? __pfx____sys_sendmsg+0x10/0x10 [ 651.904944][T18339] ? __fget_files+0x2a/0x420 [ 651.904965][T18339] ? __fget_files+0x3a0/0x420 [ 651.905002][T18339] __x64_sys_sendmsg+0x19b/0x260 [ 651.905026][T18339] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 651.905057][T18339] ? __pfx_ksys_write+0x10/0x10 [ 651.905075][T18339] ? rcu_is_watching+0x15/0xb0 [ 651.905098][T18339] ? do_syscall_64+0xbe/0x3b0 [ 651.905119][T18339] do_syscall_64+0xfa/0x3b0 [ 651.905135][T18339] ? lockdep_hardirqs_on+0x9c/0x150 [ 651.905157][T18339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.905175][T18339] ? clear_bhb_loop+0x60/0xb0 [ 651.905197][T18339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.905213][T18339] RIP: 0033:0x7f486cd8eec9 [ 651.905230][T18339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.905245][T18339] RSP: 002b:00007f486dcc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 651.905265][T18339] RAX: ffffffffffffffda RBX: 00007f486cfe5fa0 RCX: 00007f486cd8eec9 [ 651.905278][T18339] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 651.905289][T18339] RBP: 00007f486dcc2090 R08: 0000000000000000 R09: 0000000000000000 [ 651.905300][T18339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.905310][T18339] R13: 00007f486cfe6038 R14: 00007f486cfe5fa0 R15: 00007ffdb8917f08 [ 651.905340][T18339] [ 652.930763][T18363] netlink: 'syz.3.3502': attribute type 29 has an invalid length. [ 652.977341][T18363] netlink: 'syz.3.3502': attribute type 29 has an invalid length. [ 652.987977][T18363] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3502'. [ 653.245763][T18371] netlink: 'syz.3.3503': attribute type 30 has an invalid length. [ 653.500659][T18374] netlink: 'syz.2.3504': attribute type 1 has an invalid length. [ 653.534526][T18374] 8021q: adding VLAN 0 to HW filter on device bond1 [ 653.581222][T18374] bond1: (slave veth3): Enslaving as an active interface with a down link [ 653.605859][T18374] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 653.613162][T18374] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 654.087013][T18396] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3510'. [ 654.121083][T18392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3510'. [ 654.506697][T18382] netlink: 'syz.3.3505': attribute type 2 has an invalid length. [ 654.583996][T18382] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3505'. [ 654.596251][T18413] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3516'. [ 654.622556][T18382] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 654.635831][T18414] atomic_op ffff88805f090198 conn xmit_atomic 0000000000000000 [ 654.737982][T18417] netlink: 'syz.4.3515': attribute type 10 has an invalid length. [ 654.767123][T18417] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3515'. [ 654.950996][T18417] batman_adv: batadv0: Adding interface: virt_wifi0 [ 654.959209][T18417] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.002385][T18417] batman_adv: batadv0: Interface activated: virt_wifi0 [ 655.387175][T18424] tipc: Enabled bearer , priority 0 [ 655.443741][T18425] netlink: 'syz.0.3527': attribute type 10 has an invalid length. [ 655.462348][T18425] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3527'. [ 655.494049][T18424] syzkaller0: entered promiscuous mode [ 655.499706][T18424] syzkaller0: entered allmulticast mode [ 655.554675][T18424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3527'. [ 655.575640][T18424] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 655.597969][T18424] tipc: Resetting bearer [ 655.617067][T18421] tipc: Resetting bearer [ 655.658802][T18421] tipc: Disabling bearer [ 655.887571][T18431] netlink: 'syz.0.3519': attribute type 30 has an invalid length. [ 656.090885][T18434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3520'. [ 656.118829][T18434] 8021q: VLANs not supported on vcan0 [ 656.124823][ T5861] Bluetooth: hci1: command 0x0405 tx timeout [ 656.368117][T18438] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3522'. [ 656.714072][T18452] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 656.931717][T18464] netlink: 'syz.4.3531': attribute type 30 has an invalid length. [ 656.990121][T18472] netlink: 'syz.3.3533': attribute type 1 has an invalid length. [ 657.002135][T18472] netlink: 600 bytes leftover after parsing attributes in process `syz.3.3533'. [ 657.086755][T18472] tun0: tun_chr_ioctl cmd 1074025675 [ 657.098102][T18472] tun0: persist enabled [ 657.108936][T18472] tun0: tun_chr_ioctl cmd 1074025675 [ 657.121081][T18472] tun0: persist disabled [ 658.052946][T18498] batadv_slave_0: entered promiscuous mode [ 658.139832][ T5861] Bluetooth: hci1: link tx timeout [ 658.146654][ T5861] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 658.157334][ T5876] Bluetooth: hci1: link tx timeout [ 658.162696][ T5876] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 658.170759][ T5876] Bluetooth: hci1: link tx timeout [ 658.175974][ T5876] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 658.198028][ T5876] Bluetooth: hci1: link tx timeout [ 658.203390][ T5876] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 658.290171][T18509] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.297950][T18509] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.388275][T18509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.403991][T18509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.486169][T18509] batman_adv: batadv0: Interface deactivated: gretap1 [ 658.499047][ T8518] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.508508][ T8518] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.522176][ T8518] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.530642][ T8513] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.472004][T18516] __nla_validate_parse: 3 callbacks suppressed [ 659.472023][T18516] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3544'. [ 659.765238][T18523] syz_tun: entered allmulticast mode [ 660.085594][T18534] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3550'. [ 660.095234][T18534] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3550'. [ 660.104805][T18534] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3550'. [ 660.204726][ T5876] Bluetooth: hci1: command 0x0405 tx timeout [ 660.370579][T18557] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3557'. [ 660.386065][T18558] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 660.498390][T18567] gre1: entered allmulticast mode [ 660.506127][T18567] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3562'. [ 660.578905][T18522] syz_tun: left allmulticast mode [ 660.680382][T18579] netlink: 'syz.1.3566': attribute type 1 has an invalid length. [ 660.706530][T18579] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3566'. [ 660.808940][T18588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3567'. [ 660.940327][T18593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3571'. [ 660.953066][T18593] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3571'. [ 661.018583][T18599] netdevsim0: left promiscuous mode [ 661.032838][T18599] bridge1: left promiscuous mode [ 661.037983][T18599] bridge1: left allmulticast mode [ 661.402960][T18621] bridge_slave_0: left allmulticast mode [ 661.417540][T18621] bridge_slave_0: left promiscuous mode [ 661.436654][T18621] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.469689][T18621] bridge_slave_1: left allmulticast mode [ 661.494542][T18621] bridge_slave_1: left promiscuous mode [ 661.505323][T18621] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.520828][T18621] bond0: (slave bond_slave_0): Releasing backup interface [ 661.598988][T18621] bond0: (slave bond_slave_1): Releasing backup interface [ 661.676342][T18621] team0: Port device team_slave_0 removed [ 661.689920][T18621] team0: Port device team_slave_1 removed [ 661.700158][T18621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.718063][T18621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.735967][T18621] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 662.100888][T18653] bond0: (slave syz_tun): Releasing backup interface [ 662.250826][T18656] ip6tnl1: entered promiscuous mode [ 662.261568][T18656] ip6tnl1: entered allmulticast mode [ 662.268540][T18656] team0: Device ip6tnl1 is of different type [ 662.477754][T18665] nbd: couldn't find a device at index 0 [ 662.835132][T18673] netlink: 'syz.4.3593': attribute type 12 has an invalid length. [ 662.856780][T18678] netlink: 'syz.3.3595': attribute type 30 has an invalid length. [ 663.168340][T18689] netlink: 'syz.3.3599': attribute type 30 has an invalid length. [ 663.188888][T18685] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 663.217404][T18685] netlink: 'syz.1.3597': attribute type 3 has an invalid length. [ 663.251223][T18696] netlink: 'syz.4.3600': attribute type 1 has an invalid length. [ 663.544130][T18716] netlink: 'syz.4.3605': attribute type 1 has an invalid length. [ 663.560464][T18716] IPVS: length: 66 != 8 [ 663.566306][T18715] nbd: couldn't find a device at index 0 [ 663.605815][T18701] syzkaller0: entered promiscuous mode [ 663.624298][T18701] syzkaller0: entered allmulticast mode [ 663.762970][T18723] netlink: 'syz.0.3608': attribute type 13 has an invalid length. [ 663.778142][T18723] netlink: 'syz.0.3608': attribute type 17 has an invalid length. [ 663.897366][T18723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.930050][T18723] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.979823][T18723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 666.309930][T18752] pimreg: entered allmulticast mode [ 666.584001][T18798] netlink: 'syz.2.3623': attribute type 30 has an invalid length. [ 666.680216][T18805] syzkaller1: entered promiscuous mode [ 666.692243][T18805] syzkaller1: entered allmulticast mode [ 666.813157][T18810] tipc: Enabling of bearer rejected, failed to enable media [ 666.886608][T18810] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 666.918756][T18818] __nla_validate_parse: 14 callbacks suppressed [ 666.918774][T18818] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3628'. [ 667.004009][T18821] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 667.077477][T18824] bond0: (slave gretap0): Opening slave failed [ 667.743626][T18835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3631'. [ 670.106976][T18842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3633'. [ 670.342893][T18842] vlan3: entered allmulticast mode [ 670.408738][T18861] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3640'. [ 670.426832][T18842] tipc: Enabled bearer , priority 0 [ 670.439802][T18861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3640'. [ 670.492586][T18851] syzkaller0: entered promiscuous mode [ 670.521874][T18851] syzkaller0: entered allmulticast mode [ 670.614069][T18865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3641'. [ 670.618332][T18842] tipc: Resetting bearer [ 670.667361][T18865] 8021q: VLANs not supported on vcan0 [ 670.942787][T18840] tipc: Resetting bearer [ 671.011535][T18840] tipc: Disabling bearer [ 671.054792][T18883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3648'. [ 671.490622][T18910] netlink: 'syz.1.3655': attribute type 1 has an invalid length. [ 671.509020][T18903] tap0: tun_chr_ioctl cmd 1074025678 [ 671.514772][T18903] tap0: group set to 0 [ 671.530578][T18910] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3655'. [ 671.548397][T18910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3655'. [ 671.667383][T18918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3657'. [ 672.125042][T18933] __nla_validate_parse: 1 callbacks suppressed [ 672.125063][T18933] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3663'. [ 672.161488][T18933] nbd: couldn't find a device at index 0 [ 672.293498][T18938] netlink: 376 bytes leftover after parsing attributes in process `syz.3.3661'. [ 672.315235][T18941] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 672.325882][T18944] netlink: 376 bytes leftover after parsing attributes in process `syz.3.3661'. [ 672.352712][T18943] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3666'. [ 672.400655][T18947] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 672.535865][T18955] tap0: tun_chr_ioctl cmd 1074025677 [ 672.542126][T18955] tap0: linktype set to 774 [ 672.605420][T18957] netlink: 'syz.4.3668': attribute type 3 has an invalid length. [ 672.618562][T18961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3671'. [ 672.652876][T18961] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3671'. [ 672.840393][T18973] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3675'. [ 672.857451][T18973] nbd: couldn't find a device at index 0 [ 672.867251][T18975] netlink: 'syz.0.3676': attribute type 1 has an invalid length. [ 672.875755][T18975] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3676'. [ 672.953617][T18983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3677'. [ 673.049648][T18983] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3677'. [ 673.276593][T18947] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 673.293682][T18947] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 673.423520][T18947] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 673.431809][T18947] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 673.465022][T18947] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 673.471109][T18947] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 673.526154][T18947] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 673.537120][T18947] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 673.745382][T19015] nbd: couldn't find a device at index 0 [ 673.873435][T19023] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 673.893910][T19022] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 674.312616][T19049] netlink: 'syz.2.3698': attribute type 1 has an invalid length. [ 674.352135][T19054] nbd: couldn't find a device at index 0 [ 674.940590][T19087] nbd: couldn't find a device at index 0 [ 674.973486][T19090] tipc: Enabled bearer , priority 0 [ 674.983188][T19090] syzkaller0: entered promiscuous mode [ 674.991165][T19090] syzkaller0: entered allmulticast mode [ 675.062209][T19093] !: renamed from dummy0 (while UP) [ 675.079778][T19090] tipc: Resetting bearer [ 675.143487][T19089] tipc: Resetting bearer [ 675.193820][T19089] tipc: Disabling bearer [ 675.550532][T19114] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 676.514886][T19138] nbd: couldn't find a device at index 0 [ 677.176938][ T30] audit: type=1800 audit(1758725095.253:8): pid=19150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3726" name="cgroup.controllers" dev="tmpfs" ino=398 res=0 errno=0 [ 677.664707][T19174] __nla_validate_parse: 21 callbacks suppressed [ 677.664725][T19174] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3734'. [ 677.688888][T19169] netlink: 'syz.4.3733': attribute type 3 has an invalid length. [ 677.709455][ T6092] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.715986][T19174] nbd: couldn't find a device at index 0 [ 677.718577][ T6092] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.735864][T19179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3736'. [ 677.744251][ T6092] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.757265][ T6092] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.905360][T19186] netlink: 'syz.3.3737': attribute type 1 has an invalid length. [ 677.944828][T19192] netlink: 'syz.4.3742': attribute type 30 has an invalid length. [ 678.006264][T19186] 8021q: adding VLAN 0 to HW filter on device bond4 [ 678.057569][T19196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3741'. [ 678.310958][T19211] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3747'. [ 678.329155][T19219] syz_tun: entered allmulticast mode [ 678.340716][T19211] nbd: couldn't find a device at index 0 [ 678.394314][T19219] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3744'. [ 678.419230][T19207] syz_tun: left allmulticast mode [ 678.516227][T19229] netlink: 'syz.0.3749': attribute type 142 has an invalid length. [ 678.618350][T19240] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3753'. [ 678.629809][T19240] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3753'. [ 678.648565][T19240] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3753'. [ 678.662128][T19240] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3753'. [ 678.674827][T19240] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3753'. [ 678.698124][T19247] netlink: 'syz.1.3756': attribute type 1 has an invalid length. [ 678.823985][T19243] syzkaller0: entered promiscuous mode [ 678.829515][T19243] syzkaller0: entered allmulticast mode [ 678.863443][T19252] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 678.938440][T19264] xt_socket: unknown flags 0x50 [ 681.309651][T19342] netlink: 'syz.4.3769': attribute type 1 has an invalid length. [ 681.417628][T19335] batman_adv: batadv0: Interface deactivated: gretap1 [ 681.462159][T19335] geneve2: left promiscuous mode [ 681.505059][T18619] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.523410][T18619] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.609554][T18619] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.629849][T18619] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.652003][T18619] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.662663][T18619] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.735381][T19354] netlink: 'syz.4.3771': attribute type 10 has an invalid length. [ 681.768907][T18619] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.782070][T18619] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.808697][T19354] netlink: 'syz.4.3771': attribute type 10 has an invalid length. [ 681.861088][T19354] netlink: 'syz.4.3771': attribute type 10 has an invalid length. [ 681.921207][T19354] netlink: 'syz.4.3771': attribute type 10 has an invalid length. [ 682.290949][T19384] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 683.190961][T19403] __nla_validate_parse: 113 callbacks suppressed [ 683.190982][T19403] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3779'. [ 683.521928][T19413] validate_nla: 30 callbacks suppressed [ 683.521946][T19413] netlink: 'syz.4.3782': attribute type 39 has an invalid length. [ 683.583448][T19416] netlink: 'syz.4.3782': attribute type 1 has an invalid length. [ 683.638030][T19419] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3783'. [ 683.650835][T19416] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3782'. [ 683.660094][T19419] nbd: couldn't find a device at index 0 [ 683.703395][T19416] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3782'. [ 683.714119][T19416] netlink: 'syz.4.3782': attribute type 5 has an invalid length. [ 683.722374][T19416] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3782'. [ 683.973639][T19429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3785'. [ 684.027349][T19430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3785'. [ 684.481919][T19444] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 684.595917][T19453] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3792'. [ 684.642824][T19459] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3795'. [ 684.677649][T19459] nbd: couldn't find a device at index 0 [ 684.703899][T19462] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3796'. [ 684.995031][T19478] netlink: 'syz.1.3800': attribute type 21 has an invalid length. [ 685.031011][T19482] bond0: entered promiscuous mode [ 685.038285][T19482] bond_slave_0: entered promiscuous mode [ 685.044368][T19482] bond_slave_1: entered promiscuous mode [ 685.050371][T19482] !: entered promiscuous mode [ 685.057367][T19482] bond0: left promiscuous mode [ 685.062853][T19482] bond_slave_0: left promiscuous mode [ 685.068472][T19482] bond_slave_1: left promiscuous mode [ 685.074685][T19482] !: left promiscuous mode [ 685.456419][T19508] IPv6: addrconf: prefix option has invalid lifetime [ 685.967069][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.482516][T19521] nbd: couldn't find a device at index 0 [ 687.266849][T19534] !: renamed from dummy0 [ 687.302113][T19530] tipc: Enabled bearer , priority 0 [ 687.325957][T19530] syzkaller0: entered promiscuous mode [ 687.345555][T19530] syzkaller0: entered allmulticast mode [ 687.446989][T19543] tipc: Resetting bearer [ 687.513897][T19528] tipc: Resetting bearer [ 687.561845][T19528] tipc: Disabling bearer [ 688.419173][T19590] netlink: 'syz.4.3825': attribute type 3 has an invalid length. [ 688.427349][T19590] __nla_validate_parse: 7 callbacks suppressed [ 688.427429][T19590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3825'. [ 688.578758][T19598] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3826'. [ 688.590319][T19598] nbd: couldn't find a device at index 0 [ 689.123124][T19615] netlink: 'syz.2.3832': attribute type 1 has an invalid length. [ 689.137515][T19615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3832'. [ 689.150969][T19615] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3832'. [ 689.270636][T19622] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3835'. [ 689.368569][T19308] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 689.392232][T19308] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 689.411750][T19308] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 689.428732][T19308] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 689.815018][T19654] netlink: 'syz.3.3843': attribute type 16 has an invalid length. [ 689.825322][T19654] netlink: 'syz.3.3843': attribute type 17 has an invalid length. [ 689.894219][T19655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3843'. [ 689.919092][T19306] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 689.947341][T19306] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 689.972084][T19306] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 690.003466][T19306] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 690.030250][T19657] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3844'. [ 690.145286][T19663] veth0: entered promiscuous mode [ 690.151176][T19663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3846'. [ 690.205064][T19663] veth0 (unregistering): left promiscuous mode [ 691.467921][T19690] dvmrp0: entered allmulticast mode [ 691.580814][T19695] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3856'. [ 691.799567][T19705] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3859'. [ 692.325855][T19720] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 692.372782][T19720] netlink: 'syz.2.3862': attribute type 3 has an invalid length. [ 692.410593][T19723] netlink: 'syz.4.3863': attribute type 9 has an invalid length. [ 692.620258][T19731] netlink: 'syz.0.3865': attribute type 12 has an invalid length. [ 693.350963][T19754] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 693.375237][T19754] netlink: 'syz.0.3874': attribute type 3 has an invalid length. [ 694.588145][T19774] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 694.624210][T19778] __nla_validate_parse: 4 callbacks suppressed [ 694.624230][T19778] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3881'. [ 694.660583][T19778] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3881'. [ 694.931632][T19787] netlink: 'syz.1.3884': attribute type 3 has an invalid length. [ 694.991055][T19789] tipc: Cannot configure node identity twice [ 696.100787][T19806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3887'. [ 696.133123][T19806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3887'. [ 696.225303][T19799] syzkaller0: entered promiscuous mode [ 696.230878][T19799] syzkaller0: entered allmulticast mode [ 696.391076][T19813] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3889'. [ 696.410859][T19813] nbd: couldn't find a device at index 0 [ 696.815054][T19827] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3893'. [ 696.851477][T19827] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3893'. [ 696.866995][T19824] delete_channel: no stack [ 697.281181][T19852] netlink: 'syz.1.3900': attribute type 1 has an invalid length. [ 697.295795][T19854] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3901'. [ 697.303452][T19852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 697.337074][T19854] nbd: couldn't find a device at index 0 [ 697.902317][T19881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3908'. [ 698.341192][T19902] bond0: (slave dummy0): Releasing backup interface [ 698.428721][T19902] bridge_slave_0: left promiscuous mode [ 698.438129][T19902] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.471626][T19902] bridge_slave_1: left allmulticast mode [ 698.491111][T19902] bridge_slave_1: left promiscuous mode [ 698.497564][T19902] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.542481][T19902] bond0: (slave bond_slave_0): Releasing backup interface [ 698.570029][T19902] bond0: (slave bond_slave_1): Releasing backup interface [ 698.611259][T19902] team0: Port device team_slave_0 removed [ 698.630361][T19920] netlink: 296 bytes leftover after parsing attributes in process `syz.3.3917'. [ 698.631263][T19902] team0: Port device team_slave_1 removed [ 698.684160][T19902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.699964][T19902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.723866][T19927] netlink: 'syz.1.3914': attribute type 1 has an invalid length. [ 698.724765][T19902] batman_adv: batadv0: Interface deactivated: gretap1 [ 698.752573][T19902] batman_adv: batadv0: Removing interface: gretap1 [ 698.905433][T19938] netlink: 'syz.3.3921': attribute type 21 has an invalid length. [ 698.991174][T19941] netlink: 'syz.2.3922': attribute type 10 has an invalid length. [ 698.999307][T19940] netlink: 'syz.2.3922': attribute type 10 has an invalid length. [ 699.456991][T19969] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 699.521820][T19960] netlink: 'syz.3.3929': attribute type 3 has an invalid length. [ 699.824634][T19988] netlink: 'syz.4.3934': attribute type 10 has an invalid length. [ 699.834537][T19988] bond0: (slave 0!): Releasing backup interface [ 699.947947][T19993] __nla_validate_parse: 5 callbacks suppressed [ 699.947968][T19993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3936'. [ 700.204842][T20011] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3939'. [ 700.222352][T20011] nbd: couldn't find a device at index 0 [ 700.326531][T20014] nbd: socks must be embedded in a SOCK_ITEM attr [ 700.565229][T20020] syzkaller1: entered promiscuous mode [ 700.581190][T20020] syzkaller1: entered allmulticast mode [ 700.827158][T20039] netlink: 'syz.4.3943': attribute type 3 has an invalid length. [ 701.124890][T20052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3948'. [ 701.196920][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f854400: rx timeout, send abort [ 701.205744][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f854400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 701.222158][T20052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3948'. [ 701.297954][T20054] netlink: 'syz.1.3949': attribute type 15 has an invalid length. [ 701.326700][T20054] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3949'. [ 701.337144][T20057] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3950'. [ 701.348714][T20057] nbd: couldn't find a device at index 0 [ 701.678758][T20067] netlink: 'syz.0.3953': attribute type 1 has an invalid length. [ 701.694893][T20067] netlink: 'syz.0.3953': attribute type 4 has an invalid length. [ 701.721670][T20067] netlink: 8518 bytes leftover after parsing attributes in process `syz.0.3953'. [ 702.061197][T20080] netlink: 'syz.4.3956': attribute type 13 has an invalid length. [ 702.261981][T20094] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3961'. [ 702.295840][T20094] nbd: couldn't find a device at index 0 [ 702.404311][T20106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3964'. [ 702.574668][T20120] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3968'. [ 702.737644][T20125] 8021q: adding VLAN 0 to HW filter on device bond7 [ 702.978656][ T30] audit: type=1800 audit(1758725120.973:9): pid=20126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3969" name="memory.events" dev="tmpfs" ino=1020 res=0 errno=0 [ 703.545155][T20150] nbd: couldn't find a device at index 0 [ 704.088044][T20166] netlink: 'syz.1.3980': attribute type 5 has an invalid length. [ 704.143059][T20168] IPVS: Error connecting to the multicast addr [ 704.752660][T20191] syzkaller0: entered promiscuous mode [ 704.758484][T20191] syzkaller0: entered allmulticast mode [ 704.949989][T20194] netlink: 'syz.1.3989': attribute type 11 has an invalid length. [ 704.976827][T20194] __nla_validate_parse: 3 callbacks suppressed [ 704.976848][T20194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3989'. [ 705.048539][T20196] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3990'. [ 705.058496][T20196] nbd: couldn't find a device at index 0 [ 705.185113][T20205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3992'. [ 705.472241][T20219] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3996'. [ 705.741205][T20226] netlink: 'syz.0.3997': attribute type 4 has an invalid length. [ 705.752150][T20226] netlink: 'syz.0.3997': attribute type 2 has an invalid length. [ 706.101615][T20237] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 706.157354][T20235] netlink: 'syz.3.4000': attribute type 3 has an invalid length. [ 706.284726][T20245] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4002'. [ 706.335907][T20251] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4005'. [ 706.351941][T20249] Bluetooth: MGMT ver 1.23 [ 706.552662][T20259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4009'. [ 706.562984][T20259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4009'. [ 706.723690][T20272] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4011'. [ 706.848538][T20277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4012'. [ 706.906207][T19308] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 706.937507][T19308] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 706.977194][T19308] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.005595][T19308] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.036479][T20291] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 707.053870][T20291] netlink: 'syz.3.4015': attribute type 3 has an invalid length. [ 707.589908][T20318] 8021q: adding VLAN 0 to HW filter on device bond3 [ 707.619669][T20330] pimreg5: entered allmulticast mode [ 707.745081][T20339] netlink: 'syz.4.4027': attribute type 1 has an invalid length. [ 707.827171][T20339] 8021q: adding VLAN 0 to HW filter on device bond10 [ 707.897886][T20345] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 707.941023][T20345] netlink: 'syz.3.4028': attribute type 3 has an invalid length. [ 708.666460][T20384] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.728424][T20386] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.741083][T20386] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.774195][T20384] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.813804][T20389] netlink: 'syz.0.4038': attribute type 5 has an invalid length. [ 708.823559][T20373] tipc: Enabling of bearer rejected, failed to enable media [ 708.887327][T20386] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.898271][T20386] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.925867][T20384] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.982982][T20386] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.997019][T20386] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.016197][T20384] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.076024][T20386] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.095155][T20386] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.152898][T19304] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.200373][T19304] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.251504][T20403] mac80211_hwsim hwsim62 wlan0: entered promiscuous mode [ 709.258897][T20403] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 709.275332][T19304] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.309903][T19290] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.377715][T19290] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.394774][T19290] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.438141][T19290] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.454265][T19290] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.471908][T20417] sit0: entered promiscuous mode [ 709.489063][T20417] netlink: 'syz.1.4045': attribute type 1 has an invalid length. [ 709.544987][T19290] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.556545][T19290] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.600792][T19290] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.629054][T19290] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.748740][T20475] netlink: 'syz.3.4059': attribute type 1 has an invalid length. [ 710.764100][T20475] __nla_validate_parse: 12 callbacks suppressed [ 710.764120][T20475] netlink: 236 bytes leftover after parsing attributes in process `syz.3.4059'. [ 711.028597][T20486] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20002 [ 711.282361][T19308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 711.294211][T19308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 711.374636][T19308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 711.423393][T19308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 711.443704][T20511] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4067'. [ 711.585495][T20524] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 711.791030][T20526] tipc: Enabled bearer , priority 0 [ 711.805213][T20526] syzkaller0: entered promiscuous mode [ 711.811127][T20526] syzkaller0: entered allmulticast mode [ 711.993234][T20530] gretap2: entered promiscuous mode [ 712.012197][T20545] tipc: Started in network mode [ 712.018248][T20545] tipc: Node identity 080211000001, cluster identity 4711 [ 712.038895][T20545] tipc: Enabled bearer , priority 0 [ 712.146720][T20526] tipc: Resetting bearer [ 712.158888][T20544] mac80211_hwsim hwsim61 syzkaller0: entered promiscuous mode [ 712.179460][T20544] mac80211_hwsim hwsim61 syzkaller0: entered allmulticast mode [ 712.235686][T20551] sit0: entered promiscuous mode [ 712.264097][T20551] netlink: 'syz.0.4077': attribute type 1 has an invalid length. [ 712.273069][T20551] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4077'. [ 712.328467][T20523] tipc: Resetting bearer [ 712.413162][T20523] tipc: Disabling bearer [ 712.423839][T20556] netlink: 'syz.3.4079': attribute type 2 has an invalid length. [ 712.435996][T20558] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607) [ 712.453417][T20558] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 712.508267][T20561] netlink: 'syz.0.4081': attribute type 1 has an invalid length. [ 712.517597][T20561] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.4081'. [ 712.550517][T20566] netlink: 'syz.2.4083': attribute type 27 has an invalid length. [ 712.685040][T20574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4086'. [ 712.829264][T20575] netlink: 'syz.4.4085': attribute type 3 has an invalid length. [ 713.006566][T20566] batman_adv: batadv0: Interface deactivated: gretap1 [ 713.040311][T20574] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5) [ 713.052474][T19304] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.071304][T19304] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.145732][T19304] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.156801][T19304] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.165375][ T979] tipc: Node number set to 134418688 [ 713.180675][T19304] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.199000][T19304] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.208463][T19304] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.230539][T19304] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.514672][T20593] syzkaller0: entered promiscuous mode [ 713.529797][T20593] syzkaller0: entered allmulticast mode [ 713.544382][T20598] netlink: 'syz.1.4091': attribute type 6 has an invalid length. [ 713.707970][T20613] tipc: Started in network mode [ 713.719338][T20613] tipc: Node identity 5aace9e7b0ae, cluster identity 4711 [ 713.734477][T20613] tipc: Enabled bearer , priority 0 [ 713.762880][T20613] syzkaller0: entered promiscuous mode [ 713.768493][T20613] syzkaller0: entered allmulticast mode [ 713.884528][T20613] tipc: Resetting bearer [ 713.951314][T20612] tipc: Resetting bearer [ 714.008516][T20612] tipc: Disabling bearer [ 714.055486][T20636] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 714.090102][T20626] netlink: 'syz.1.4099': attribute type 3 has an invalid length. [ 714.289463][T20644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4102'. [ 716.869772][T20660] netlink: 'syz.1.4106': attribute type 1 has an invalid length. [ 716.869772][T20661] netlink: 'syz.1.4106': attribute type 1 has an invalid length. [ 716.974309][T20661] 8021q: adding VLAN 0 to HW filter on device bond2 [ 717.093364][T20660] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 717.539176][T20684] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 717.582365][T20678] netlink: 'syz.0.4112': attribute type 3 has an invalid length. [ 718.534774][T20729] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4122'. [ 718.595670][T20729] batadv1: entered promiscuous mode [ 718.600928][T20729] batadv1: entered allmulticast mode [ 718.696142][T20739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4128'. [ 718.780101][T20742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4129'. [ 718.859697][T20747] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4129'. [ 718.896684][T20747] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4129'. [ 718.913379][T20747] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4129'. [ 718.949398][T20753] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4133'. [ 718.990864][T20753] nbd: couldn't find a device at index 0 [ 719.352584][T20776] netlink: 'syz.2.4140': attribute type 1 has an invalid length. [ 719.467846][T20776] 8021q: adding VLAN 0 to HW filter on device bond4 [ 719.539859][T20780] bond4: (slave veth5): Enslaving as an active interface with a down link [ 719.649110][T20776] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 719.711939][T20776] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 719.748327][T20799] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4145'. [ 719.766137][T20799] nbd: couldn't find a device at index 0 [ 719.771690][T20801] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4146'. [ 719.811629][T20801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4146'. [ 719.857024][T20801] bond11: entered promiscuous mode [ 719.863895][T20801] bond11: entered allmulticast mode [ 719.869545][T20801] 8021q: adding VLAN 0 to HW filter on device bond11 [ 719.946395][T20807] vlan2: entered allmulticast mode [ 719.958580][T20807] bridge_slave_0: entered allmulticast mode [ 720.448870][T20842] nbd: couldn't find a device at index 0 [ 720.587159][T20846] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 720.624494][T20846] netlink: 'syz.0.4162': attribute type 3 has an invalid length. [ 720.702755][T20861] netlink: 'syz.1.4165': attribute type 30 has an invalid length. [ 720.933741][T20880] netlink: 'syz.4.4170': attribute type 6 has an invalid length. [ 721.061986][T20891] nbd: couldn't find a device at index 0 [ 721.199110][T20900] tipc: Enabling of bearer rejected, already enabled [ 721.237962][T20900] tipc: Resetting bearer [ 721.506368][T20920] netlink: 'syz.1.4183': attribute type 30 has an invalid length. [ 721.653507][T20930] dvmrp8: entered allmulticast mode [ 722.243913][T20957] tipc: Enabled bearer , priority 0 [ 722.255933][T20957] syzkaller0: entered promiscuous mode [ 722.262156][T20957] syzkaller0: entered allmulticast mode [ 722.349904][T20957] tipc: Resetting bearer [ 722.469824][T20928] dvmrp8: left allmulticast mode [ 722.781979][ T979] IPVS: starting estimator thread 0... [ 722.891033][T20996] IPVS: using max 30 ests per chain, 72000 per kthread [ 722.932525][T20997] netlink: 'syz.3.4202': attribute type 4 has an invalid length. [ 722.950742][T20997] netlink: 'syz.3.4202': attribute type 4 has an invalid length. [ 723.331776][ T8304] tipc: Node number set to 1702363099 [ 724.159014][T21031] netlink: 'syz.4.4211': attribute type 3 has an invalid length. [ 724.308231][T21021] __nla_validate_parse: 18 callbacks suppressed [ 724.308254][T21021] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4210'. [ 724.327128][T21024] tipc: Enabling of bearer rejected, already enabled [ 724.607747][T21046] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20002 [ 724.647649][T21051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4216'. [ 724.871201][T21066] netlink: 'syz.4.4218': attribute type 1 has an invalid length. [ 724.920710][T21066] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4218'. [ 724.936114][T21054] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4216'. [ 725.164892][T21076] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4223'. [ 725.210321][T21076] nbd: couldn't find a device at index 0 [ 725.211645][T21080] netlink: 'syz.1.4225': attribute type 30 has an invalid length. [ 725.508384][T21097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4230'. [ 725.616012][T21103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4231'. [ 725.661195][T21097] bridge2: port 1(veth7) entered blocking state [ 725.694535][T21097] bridge2: port 1(veth7) entered disabled state [ 725.713229][T21097] veth7: entered allmulticast mode [ 725.741971][T21097] veth7: entered promiscuous mode [ 725.785169][T21105] bridge2: port 2(veth0_to_bond) entered blocking state [ 725.813904][T21105] bridge2: port 2(veth0_to_bond) entered disabled state [ 725.821236][T21105] veth0_to_bond: entered allmulticast mode [ 725.848556][T21105] veth0_to_bond: entered promiscuous mode [ 726.057112][T21121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4235'. [ 726.073422][T21121] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4235'. [ 726.143251][T21130] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4237'. [ 726.179271][T21133] netlink: 'syz.0.4238': attribute type 15 has an invalid length. [ 726.187566][T21134] netlink: 'syz.0.4238': attribute type 15 has an invalid length. [ 726.311727][T21136] nbd: couldn't find a device at index 0 [ 726.354365][T21138] netlink: 'syz.3.4240': attribute type 30 has an invalid length. [ 726.460851][T21149] tap0: tun_chr_ioctl cmd 1074025677 [ 726.471118][T21149] tap0: linktype set to 0 [ 726.479745][T21151] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 726.632611][T21154] netlink: 'syz.4.4244': attribute type 3 has an invalid length. [ 726.784524][T21173] tipc: Enabling of bearer rejected, already enabled [ 726.959687][T21182] : renamed from bond_slave_0 [ 726.972846][T21183] netlink: 'syz.1.4251': attribute type 7 has an invalid length. [ 727.366285][T21207] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 727.401087][T21212] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 727.878522][T21249] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 727.886228][T21249] IPv6: NLM_F_CREATE should be set when creating new route [ 727.907258][T21250] tipc: Cannot configure node identity twice [ 727.985996][T21237] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 728.040715][T21252] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 728.065135][T21252] validate_nla: 2 callbacks suppressed [ 728.065155][T21252] netlink: 'syz.1.4274': attribute type 3 has an invalid length. [ 728.700591][T21282] netlink: 'syz.2.4282': attribute type 30 has an invalid length. [ 729.049436][T21293] nbd: couldn't find a device at index 0 [ 729.399000][T21312] syzkaller1: entered promiscuous mode [ 729.405061][T21312] syzkaller1: entered allmulticast mode [ 729.434188][T21312] netlink: 'syz.2.4291': attribute type 9 has an invalid length. [ 730.071544][T21334] netlink: 'syz.2.4295': attribute type 30 has an invalid length. [ 730.228609][T21338] pim6reg1: entered promiscuous mode [ 730.271674][T21338] pim6reg1: entered allmulticast mode [ 730.343000][T21345] __nla_validate_parse: 113 callbacks suppressed [ 730.343020][T21345] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4299'. [ 730.365158][T21345] nbd: couldn't find a device at index 0 [ 730.526431][T21352] pim6reg1: entered promiscuous mode [ 730.532949][T21352] pim6reg1: entered allmulticast mode [ 730.835504][T21354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 731.028690][T21364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4304'. [ 731.052189][T21364] netlink: 'syz.4.4304': attribute type 5 has an invalid length. [ 731.085539][T21364] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4304'. [ 731.127302][T21364] geneve3: entered promiscuous mode [ 731.169184][T21364] geneve3: entered allmulticast mode [ 731.221812][T21374] netlink: 284 bytes leftover after parsing attributes in process `syz.3.4305'. [ 731.233652][T19308] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 731.240814][T21376] netlink: 'syz.2.4308': attribute type 30 has an invalid length. [ 731.250514][T19306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 731.409641][T21382] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4310'. [ 732.706110][T21393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4313'. [ 732.718112][T21393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4313'. [ 733.843753][T21361] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 733.925420][T21361] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 734.080638][T21421] netlink: 'syz.0.4320': attribute type 30 has an invalid length. [ 734.389603][T19290] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 734.471300][T19308] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 734.480313][T19308] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 734.516419][T19308] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 734.552864][T21430] netlink: 'syz.1.4323': attribute type 12 has an invalid length. [ 734.634020][T21434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4333'. [ 734.692554][T21431] IPVS: Scheduler module ip_vs_sip not found [ 734.724598][T21438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4324'. [ 734.807844][T21438] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4324'. [ 735.766796][T21480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4338'. [ 736.153820][T21501] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.184352][T21501] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 736.530747][T21511] netlink: 'syz.0.4345': attribute type 11 has an invalid length. [ 736.544098][ T30] audit: type=1800 audit(1758725154.613:10): pid=21512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4344" name="x000000000000000900000000000000000000011" dev="tmpfs" ino=1177 res=0 errno=0 [ 736.570011][ T30] audit: type=1804 audit(1758725154.623:11): pid=21512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4344" name="x000000000000000900000000000000000000011" dev="tmpfs" ino=1177 res=1 errno=0 [ 736.677739][T21516] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.698257][T21516] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 736.764189][T21517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4346'. [ 736.793685][T21517] netlink: 'syz.1.4346': attribute type 5 has an invalid length. [ 736.803778][T21516] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.814986][T21517] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4346'. [ 736.826649][T21516] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 736.869158][T21517] geneve4: entered promiscuous mode [ 736.880272][T21517] geneve4: entered allmulticast mode [ 736.896086][T21527] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4348'. [ 736.914044][T19306] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 736.929454][T21527] netlink: zone id is out of range [ 736.936290][T19306] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 736.945367][T21527] netlink: get zone limit has 8 unknown bytes [ 737.008484][T21516] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 737.035522][T21516] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 737.060091][T21516] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 737.167036][T21534] netlink: 201916 bytes leftover after parsing attributes in process `syz.0.4349'. [ 737.236041][T21516] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 737.249877][T21516] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 737.267018][T21516] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 737.338781][T21536] netlink: 'syz.4.4350': attribute type 12 has an invalid length. [ 737.361898][T21539] netlink: 'syz.4.4350': attribute type 14 has an invalid length. [ 737.423083][T21539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4350'. [ 737.432488][T21539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4350'. [ 737.510349][T21545] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 737.531091][T21536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4350'. [ 737.533237][T21545] netlink: 'syz.3.4352': attribute type 3 has an invalid length. [ 737.541874][T19290] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.561225][T19290] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 737.584861][T19290] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20001 - 0 [ 737.627814][T19310] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.647407][T19310] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 737.680802][T19310] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20001 - 0 [ 737.708747][T19310] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.720596][T19310] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 737.732895][T19310] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20001 - 0 [ 737.753599][T19310] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.762348][T19310] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 737.770715][T19310] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20001 - 0 [ 737.942654][T21561] netlink: 'syz.4.4356': attribute type 1 has an invalid length. [ 737.971332][T21561] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4356'. [ 737.995502][T21564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4357'. [ 738.108839][T21569] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 738.307511][T21573] netlink: 'syz.1.4357': attribute type 3 has an invalid length. [ 738.374824][T21573] netlink: 'syz.1.4357': attribute type 1 has an invalid length. [ 739.041023][T21594] tipc: Enabled bearer , priority 0 [ 739.156438][T21594] syzkaller0: entered promiscuous mode [ 739.164323][T21594] syzkaller0: entered allmulticast mode [ 739.243082][T21594] tipc: Resetting bearer [ 739.260274][T21604] syzkaller1: entered allmulticast mode [ 739.274799][T21593] tipc: Resetting bearer [ 739.343345][T21593] tipc: Disabling bearer [ 739.575297][T21624] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 739.584694][ T979] IPVS: starting estimator thread 0... [ 739.691782][T21626] IPVS: using max 32 ests per chain, 76800 per kthread [ 739.820055][T21638] veth0_to_bond: left allmulticast mode [ 739.829928][T21638] veth0_to_bond: left promiscuous mode [ 739.838289][T21638] bridge2: port 2(veth0_to_bond) entered disabled state [ 739.919248][T21629] vlan2: entered allmulticast mode [ 739.924670][T21629] veth1: entered allmulticast mode [ 739.930834][T21629] bridge3: port 1(vlan2) entered blocking state [ 739.938488][T21629] bridge3: port 1(vlan2) entered disabled state [ 739.948308][T21629] vlan2: entered promiscuous mode [ 739.955801][T21629] veth1: entered promiscuous mode [ 740.057906][T21654] nbd: couldn't find a device at index 0 [ 740.188805][T21660] netlink: 'syz.1.4382': attribute type 30 has an invalid length. [ 740.252060][T21665] netlink: 'syz.3.4384': attribute type 13 has an invalid length. [ 740.279904][T21667] netlink: 'syz.4.4385': attribute type 21 has an invalid length. [ 740.409384][T21676] netlink: 'syz.2.4386': attribute type 10 has an invalid length. [ 740.539911][T21683] netlink: 'syz.0.4390': attribute type 33 has an invalid length. [ 740.557461][T21683] netlink: 'syz.0.4390': attribute type 10 has an invalid length. [ 740.632176][T21689] nbd: couldn't find a device at index 0 [ 740.784791][T21695] syzkaller1: entered promiscuous mode [ 740.786307][T21697] netlink: 'syz.3.4397': attribute type 30 has an invalid length. [ 740.790437][T21695] syzkaller1: entered allmulticast mode [ 741.018131][T21711] __nla_validate_parse: 14 callbacks suppressed [ 741.018151][T21711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4400'. [ 741.075964][T21712] ip6gretap1: entered allmulticast mode [ 741.267169][T21720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4404'. [ 741.285034][T21720] macvtap0: entered promiscuous mode [ 741.290471][T21720] veth0: entered promiscuous mode [ 741.298310][T21720] macvtap0: entered allmulticast mode [ 741.306013][T21720] veth0: entered allmulticast mode [ 741.320324][T21720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4404'. [ 741.341620][T21720] macvtap0: left promiscuous mode [ 741.346704][T21720] veth0: left promiscuous mode [ 741.363522][T21720] macvtap0: left allmulticast mode [ 741.368687][T21720] veth0: left allmulticast mode [ 741.394334][T21729] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4406'. [ 741.426287][T21729] nbd: couldn't find a device at index 0 [ 741.499028][T21734] netlink: 'syz.4.4408': attribute type 30 has an invalid length. [ 741.569514][T21737] netlink: 'syz.3.4409': attribute type 30 has an invalid length. [ 742.007891][T21769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4418'. [ 742.120877][T21771] sit0: left promiscuous mode [ 742.211126][T21771] geneve0: left promiscuous mode [ 742.215499][T21783] netlink: 'syz.4.4422': attribute type 30 has an invalid length. [ 742.216439][T21771] geneve0: left allmulticast mode [ 742.270101][T21771] vlan3: left allmulticast mode [ 742.382559][T19310] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.392246][T19310] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.435738][T19310] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.474194][T19310] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.504233][T21793] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4426'. [ 742.594293][T21801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4428'. [ 742.859109][T21816] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4433'. [ 743.109051][T21835] gretap0: left promiscuous mode [ 743.170455][T21835] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.194066][T21835] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 743.337852][T21846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4443'. [ 743.350817][T21846] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 744.041032][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4457'. [ 745.405970][T21988] validate_nla: 6 callbacks suppressed [ 745.405987][T21988] netlink: 'syz.2.4487': attribute type 1 has an invalid length. [ 745.427981][T21988] netlink: 'syz.2.4487': attribute type 11 has an invalid length. [ 745.612983][T21995] sctp: [Deprecated]: syz.2.4490 (pid 21995) Use of int in maxseg socket option. [ 745.612983][T21995] Use struct sctp_assoc_value instead [ 745.636466][T22002] netlink: 'syz.0.4493': attribute type 30 has an invalid length. [ 745.700302][T22006] nbd: couldn't find a device at index 50331648 [ 745.762491][T22008] openvswitch: netlink: Key type 163 is out of range max 32 [ 746.014094][T22021] tipc: Enabling of bearer rejected, already enabled [ 746.052028][T22021] tipc: Enabling of bearer rejected, already enabled [ 746.116750][T22027] __nla_validate_parse: 40 callbacks suppressed [ 746.116769][T22027] netlink: 788 bytes leftover after parsing attributes in process `syz.4.4501'. [ 746.254695][T22024] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 746.345616][T22043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4503'. [ 746.496790][T22056] netlink: 'syz.0.4503': attribute type 10 has an invalid length. [ 746.660883][T22061] @ÿ: renamed from veth0_vlan [ 746.685978][T22059] netlink: 'syz.1.4507': attribute type 30 has an invalid length. [ 746.872115][T22071] block nbd7: Unsupported socket: shutdown callout must be supported. [ 746.987011][T22071] netlink: 'syz.4.4510': attribute type 3 has an invalid length. [ 746.988342][T22083] netlink: 'syz.3.4513': attribute type 1 has an invalid length. [ 747.114100][T22086] vlan2: entered promiscuous mode [ 747.151845][T22086] gretap0: entered promiscuous mode [ 747.229280][T22087] bond9: (slave gretap2): making interface the new active one [ 747.258993][T22087] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 747.350745][T22083] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 747.407385][T22094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4519'. [ 747.417232][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.747865][T22105] netlink: 'syz.4.4522': attribute type 30 has an invalid length. [ 748.627182][T22154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4531'. [ 749.055145][T22164] netlink: 'syz.4.4533': attribute type 10 has an invalid length. [ 749.079469][T22164] bond0: (slave wlan1): Opening slave failed [ 749.157632][T22166] caif0: Master is either lo or non-ether device [ 749.195928][T22164] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 749.242726][T22164] bridge4: entered allmulticast mode [ 749.251889][T22168] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4535'. [ 749.324928][T22173] netlink: 'syz.1.4536': attribute type 30 has an invalid length. [ 749.436677][T22179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4538'. [ 749.709608][T22185] pimreg: entered allmulticast mode [ 749.761822][T22185] dvmrp0: left allmulticast mode [ 749.767145][T22185] pimreg: left allmulticast mode [ 749.994880][T22201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4542'. [ 750.037804][T22201] batman_adv: batadv0: Adding interface: ipvlan5 [ 750.074394][T22201] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.111543][T22201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 750.152950][T22201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.165906][T22201] batman_adv: batadv0: Not using interface ipvlan5 (retrying later): interface not active [ 750.254368][T22211] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4546'. [ 750.392894][T22224] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4550'. [ 750.490271][T22229] validate_nla: 2 callbacks suppressed [ 750.490290][T22229] netlink: 'syz.1.4551': attribute type 3 has an invalid length. [ 750.511600][T22229] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4551'. [ 750.525031][T22229] nbd: couldn't find a device at index 0 [ 750.588244][T22232] netlink: 'syz.1.4552': attribute type 3 has an invalid length. [ 750.596443][T22232] nbd: couldn't find a device at index 0 [ 750.654670][T22235] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 750.796222][T22233] IPVS: sh: FWM 3 0x00000003 - no destination available [ 750.985949][T22245] vlan2: entered allmulticast mode [ 750.991098][T22245] bond9: entered allmulticast mode [ 751.033981][T22243] vlan2: entered allmulticast mode [ 751.039776][T22243] veth1: entered allmulticast mode [ 751.102173][T22249] netlink: 'syz.1.4558': attribute type 4 has an invalid length. [ 751.110413][T22250] netlink: 'syz.1.4558': attribute type 4 has an invalid length. [ 751.155592][T22250] macsec1: entered promiscuous mode [ 751.160995][T22250] macsec1: entered allmulticast mode [ 751.186881][T22253] __nla_validate_parse: 4 callbacks suppressed [ 751.186898][T22253] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4559'. [ 751.239060][T22255] netlink: 'syz.1.4561': attribute type 1 has an invalid length. [ 751.248104][T22255] netlink: 15 bytes leftover after parsing attributes in process `syz.1.4561'. [ 751.307053][T22259] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4562'. [ 751.327795][T22259] nbd: couldn't find a device at index 0 [ 751.624736][T22278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4568'. [ 751.637268][T22280] netlink: 'syz.1.4566': attribute type 13 has an invalid length. [ 751.646479][T22280] netlink: 'syz.1.4566': attribute type 17 has an invalid length. [ 751.675280][T22280] sit0: left promiscuous mode [ 751.715633][T22280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.716030][T18619] bond0: (slave bond_slave_0): interface is now down [ 751.725337][T22280] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.734930][T18619] bond0: (slave bond_slave_1): interface is now down [ 751.746510][T22280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 751.764973][T18619] bond0: (slave bond_slave_0): interface is now down [ 751.773451][T18619] bond0: (slave bond_slave_1): interface is now down [ 751.802355][T18619] bond0: (slave bond_slave_0): interface is now down [ 751.809290][T18619] bond0: (slave bond_slave_1): interface is now down [ 751.832526][T19306] bond0: (slave bond_slave_0): interface is now down [ 751.839278][T19306] bond0: (slave bond_slave_1): interface is now down [ 751.862104][T19306] bond0: (slave bond_slave_0): interface is now down [ 751.869166][T19306] bond0: (slave bond_slave_1): interface is now down [ 751.885467][T19306] bond0: now running without any active interface! [ 752.074746][T22298] macvlan3: entered promiscuous mode [ 752.080084][T22298] bond0: entered promiscuous mode [ 752.088331][T22298] macvlan3: entered allmulticast mode [ 752.093842][T22298] bond0: entered allmulticast mode [ 752.100776][T22298] bond0: left allmulticast mode [ 752.106358][T22298] bond0: left promiscuous mode [ 752.270609][T22308] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4575'. [ 752.285696][T22308] nbd: couldn't find a device at index 0 [ 752.783902][T22329] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4582'. [ 752.802410][T22329] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4582'. [ 752.822273][T22329] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4582'. [ 753.307392][T22342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4585'. [ 753.517700][T22345] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.4586'. [ 754.319213][T22367] tipc: Enabled bearer , priority 0 [ 754.354420][T22373] netlink: 'syz.2.4597': attribute type 30 has an invalid length. [ 754.452579][T22377] syzkaller0: entered promiscuous mode [ 754.458681][T22377] syzkaller0: entered allmulticast mode [ 755.182978][T22367] tipc: Resetting bearer [ 755.220200][T22367] tipc: Disabling bearer [ 755.220892][T22414] netlink: 'syz.0.4611': attribute type 30 has an invalid length. [ 755.444439][T22424] nbd: couldn't find a device at index 0 [ 755.502406][T22429] netlink: 'syz.0.4616': attribute type 1 has an invalid length. [ 755.576974][T22429] 8021q: adding VLAN 0 to HW filter on device bond11 [ 755.668100][T22431] 8021q: adding VLAN 0 to HW filter on device bond11 [ 755.714643][T22431] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 755.753953][T22431] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 755.917567][T22429] veth5: entered promiscuous mode [ 755.935704][T22429] bond11: (slave veth5): Enslaving as an active interface with a down link [ 756.264617][T22453] __nla_validate_parse: 8 callbacks suppressed [ 756.264634][T22453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4620'. [ 756.303764][T22453] bond0: entered promiscuous mode [ 756.314762][T22453] bond0: left promiscuous mode [ 756.461208][T22465] netlink: 'syz.2.4624': attribute type 30 has an invalid length. [ 756.512960][T22468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4626'. [ 756.545268][T22470] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4627'. [ 756.557038][T22470] 0ªX¹¦À: renamed from caif0 [ 756.566058][T22470] 0ªX¹¦À: entered allmulticast mode [ 756.571320][T22470] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 757.220706][T22508] sock: sock_timestamping_bind_phc: sock not bind to device [ 757.303323][T22513] netlink: 'syz.2.4637': attribute type 30 has an invalid length. [ 757.456054][T22523] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4640'. [ 757.465952][T22523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4640'. [ 757.503281][T22523] netlink: 'syz.3.4640': attribute type 3 has an invalid length. [ 757.520468][T22523] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4640'. [ 757.548344][T22527] vlan2: entered promiscuous mode [ 757.558136][T22527] vlan2: entered allmulticast mode [ 757.564632][T22527] hsr_slave_1: entered allmulticast mode [ 757.627239][T22527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4642'. [ 758.075624][T22542] netlink: 'syz.2.4645': attribute type 21 has an invalid length. [ 758.102401][T22542] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4645'. [ 758.473394][T22559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4647'. [ 758.547379][T22561] netlink: 'syz.3.4649': attribute type 30 has an invalid length. [ 758.762124][T22570] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4651'. [ 759.444394][T22612] IPVS: Scheduler module ip_vs_sip not found [ 759.460740][T22613] IPVS: length: 141 != 8 [ 759.469905][T22619] IPVS: length: 141 != 8 [ 759.574082][T22625] netlink: 'syz.0.4663': attribute type 30 has an invalid length. [ 759.694455][T22626] nbd: socks must be embedded in a SOCK_ITEM attr [ 759.977242][T22646] netlink: 'syz.1.4669': attribute type 1 has an invalid length. [ 760.669278][T22681] netlink: 'syz.2.4678': attribute type 30 has an invalid length. [ 760.870444][T22686] nbd: couldn't find a device at index 0 [ 761.013558][T22698] syzkaller1: entered promiscuous mode [ 761.019849][T22698] syzkaller1: entered allmulticast mode [ 761.133129][T22709] netlink: 'syz.1.4687': attribute type 1 has an invalid length. [ 761.337019][T22715] bond10: (slave vcan1): The slave device specified does not support setting the MAC address [ 761.363569][T22715] bond10: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 761.403198][T22715] bond10: (slave vcan1): making interface the new active one [ 761.430718][T22715] bond10: (slave vcan1): Enslaving as an active interface with an up link [ 761.476496][T22709] bond10: (slave vcan2): The slave device specified does not support setting the MAC address [ 761.513237][T22709] bond10: (slave vcan2): Enslaving as a backup interface with an up link [ 761.526774][T22721] 8021q: adding VLAN 0 to HW filter on device bond10 [ 761.588209][T22727] tipc: Enabled bearer , priority 0 [ 761.597912][T22727] syzkaller0: entered promiscuous mode [ 761.604071][T22727] syzkaller0: entered allmulticast mode [ 761.632344][T22727] tipc: Resetting bearer [ 761.641874][T22726] tipc: Resetting bearer [ 761.664332][T22726] tipc: Disabling bearer [ 762.107134][T22750] macsec2: entered promiscuous mode [ 762.124214][T22750] macvlan0: entered promiscuous mode [ 762.146832][T22750] macvlan0: left promiscuous mode [ 762.437251][T22764] netlink: 'syz.0.4702': attribute type 30 has an invalid length. [ 762.636620][T22779] __nla_validate_parse: 74 callbacks suppressed [ 762.636641][T22779] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4706'. [ 762.672553][T22779] nbd: couldn't find a device at index 0 [ 762.779381][T22786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4707'. [ 762.811088][T22786] macvtap1: entered promiscuous mode [ 762.834636][T22786] team0: entered promiscuous mode [ 762.839719][T22786] team_slave_0: entered promiscuous mode [ 762.849898][T22786] team_slave_1: entered promiscuous mode [ 762.872816][T22786] macvtap1: entered allmulticast mode [ 762.878245][T22786] team0: entered allmulticast mode [ 762.903291][T22786] team_slave_0: entered allmulticast mode [ 762.919522][T22786] team_slave_1: entered allmulticast mode [ 762.932156][T22786] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 762.960051][T22787] macvtap1: left promiscuous mode [ 762.976182][T22794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4708'. [ 762.994437][T22787] team0: left promiscuous mode [ 763.003647][T22794] netlink: 'syz.2.4708': attribute type 16 has an invalid length. [ 763.012429][T22794] netlink: 'syz.2.4708': attribute type 17 has an invalid length. [ 763.025836][T22787] team_slave_0: left promiscuous mode [ 763.032002][T22787] team_slave_1: left promiscuous mode [ 763.037874][T22787] macvtap1: left allmulticast mode [ 763.044125][T22787] team0: left allmulticast mode [ 763.050022][T22787] team_slave_0: left allmulticast mode [ 763.107695][T22787] team_slave_1: left allmulticast mode [ 763.174694][T22794] tipc: Resetting bearer [ 763.205018][T22801] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 763.215307][T22801] dvmrp1: linktype set to 804 [ 763.296761][T22794] IPv6: NLM_F_REPLACE set, but no existing node found! [ 763.398840][T22808] ipvlan6: entered promiscuous mode [ 763.509830][T22816] netlink: 'syz.0.4716': attribute type 30 has an invalid length. [ 763.650864][T22825] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4720'. [ 763.659959][T22825] nbd: couldn't find a device at index 0 [ 763.833783][T22842] netlink: 'syz.0.4722': attribute type 13 has an invalid length. [ 764.004030][T22853] tipc: Enabled bearer , priority 0 [ 764.093326][T22857] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 764.151067][T22861] syzkaller0: entered promiscuous mode [ 764.198339][T22861] syzkaller0: entered allmulticast mode [ 764.488961][T22870] netlink: 'syz.3.4732': attribute type 30 has an invalid length. [ 765.121656][ T5942] tipc: Node number set to 740288918 [ 765.203760][T22883] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4734'. [ 765.226608][T22885] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4735'. [ 765.374821][T22892] netem: change failed [ 765.407221][ T30] audit: type=1107 audit(1758725183.483:12): pid=22893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Á(^Úcþ ’H;ÜEÖ>xFARäã±1!Æ;+*O¬yÒÄ:i_Ñ;' [ 765.610637][T22906] netlink: 57 bytes leftover after parsing attributes in process `syz.1.4744'. [ 765.622355][T22909] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4743'. [ 765.640593][T22906] netlink: 'syz.1.4744': attribute type 1 has an invalid length. [ 765.657440][T22909] netlink: 'syz.4.4743': attribute type 1 has an invalid length. [ 765.715852][T22915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4743'. [ 765.725358][T22915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4743'. [ 765.798214][T22909] vlan3: entered allmulticast mode [ 765.814623][T22909] bond15: entered allmulticast mode [ 766.013167][T22932] netlink: 'syz.3.4750': attribute type 10 has an invalid length. [ 766.082659][T22932] bond0: (slave 0!): Enslaving as an active interface with an up link [ 766.125047][T22937] netlink: 'syz.4.4751': attribute type 1 has an invalid length. [ 766.178973][T22937] 8021q: adding VLAN 0 to HW filter on device bond16 [ 766.453959][T22960] netlink: 'syz.0.4758': attribute type 1 has an invalid length. [ 766.565247][T22965] netdevsim0: entered allmulticast mode [ 766.818481][T22978] netlink: 'syz.4.4764': attribute type 7 has an invalid length. [ 766.852675][T22978] sctp: [Deprecated]: syz.4.4764 (pid 22978) Use of struct sctp_assoc_value in delayed_ack socket option. [ 766.852675][T22978] Use struct sctp_sack_info instead [ 767.099614][ T5942] IPVS: starting estimator thread 0... [ 767.235275][T22990] IPVS: using max 30 ests per chain, 72000 per kthread [ 767.599169][T23014] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000083: 0000 [#1] SMP KASAN PTI [ 767.611104][T23014] KASAN: null-ptr-deref in range [0x0000000000000418-0x000000000000041f] [ 767.619532][T23014] CPU: 1 UID: 0 PID: 23014 Comm: syz.4.4773 Not tainted syzkaller #0 PREEMPT(full) [ 767.628998][T23014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 767.639111][T23014] RIP: 0010:fib_lookup_good_nhc+0x85/0x3d0 [ 767.644943][T23014] Code: 4c 89 24 24 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 cb 6d 19 f8 41 bc 18 04 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 ac 6d 19 f8 4d 8b 24 24 e8 03 2f [ 767.664582][T23014] RSP: 0018:ffffc90002f26e70 EFLAGS: 00010202 [ 767.670654][T23014] RAX: 0000000000000083 RBX: ffff88806c746120 RCX: 0000000000000002 [ 767.678629][T23014] RDX: ffff88802b5e0000 RSI: 0000000000000000 RDI: 0000000000000000 [ 767.686684][T23014] RBP: ffff88806c746137 R08: 0000000000000000 R09: ffffffff8a0fb98f [ 767.694655][T23014] R10: 0000000000000008 R11: 0000000000000002 R12: 0000000000000418 [ 767.702618][T23014] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff1100d8e8c26 [ 767.710752][T23014] FS: 00007f4eae9826c0(0000) GS:ffff888125d3d000(0000) knlGS:0000000000000000 [ 767.719675][T23014] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 767.726252][T23014] CR2: 000055556f8295c8 CR3: 0000000031cc4000 CR4: 00000000003526f0 [ 767.734229][T23014] Call Trace: [ 767.737500][T23014] [ 767.740462][T23014] nexthop_get_nhc_lookup+0x1af/0x400 [ 767.745835][T23014] fib_table_lookup+0xf26/0x16e0 [ 767.750770][T23014] ? fib4_rule_action+0x8f/0x330 [ 767.755693][T23014] fib4_rule_action+0x1fb/0x330 [ 767.760535][T23014] ? __pfx_fib4_rule_action+0x10/0x10 [ 767.765983][T23014] fib_rules_lookup+0x8a6/0xe90 [ 767.770829][T23014] ? fib_rules_lookup+0x96/0xe90 [ 767.775754][T23014] ? __pfx_fib_rules_lookup+0x10/0x10 [ 767.781120][T23014] ? l3mdev_update_flow+0x29/0x640 [ 767.786217][T23014] ? l3mdev_update_flow+0x4d1/0x640 [ 767.791414][T23014] __fib_lookup+0xf9/0x200 [ 767.795819][T23014] ? __pfx___fib_lookup+0x10/0x10 [ 767.800854][T23014] ? __lock_acquire+0xab9/0xd20 [ 767.805733][T23014] ? fib_lookup+0x49/0x440 [ 767.810153][T23014] ? ip_route_output_key_hash_rcu+0x2fc/0x23e0 [ 767.816342][T23014] ip_route_output_key_hash_rcu+0x31b/0x23e0 [ 767.822322][T23014] ? ip_route_output_key_hash+0xc1/0x280 [ 767.827943][T23014] ? ip_route_output_key_hash+0xc1/0x280 [ 767.833563][T23014] ip_route_output_key_hash+0x174/0x280 [ 767.839135][T23014] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 767.844945][T23014] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 767.851003][T23014] ? crng_make_state+0x34c/0x700 [ 767.855929][T23014] ? lockdep_hardirqs_on+0x9c/0x150 [ 767.861118][T23014] ip_route_output_flow+0x2a/0x150 [ 767.866218][T23014] sctp_v4_get_dst+0x3c7/0x1200 [ 767.871061][T23014] ? __pfx_sctp_v4_get_dst+0x10/0x10 [ 767.876330][T23014] ? _get_random_bytes+0x1bd/0x210 [ 767.881432][T23014] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 767.887758][T23014] ? dst_release+0x72/0x1b0 [ 767.892298][T23014] sctp_transport_route+0x115/0x2f0 [ 767.897578][T23014] sctp_assoc_add_peer+0x657/0x13b0 [ 767.902770][T23014] sctp_connect_new_asoc+0x30a/0x690 [ 767.908050][T23014] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 767.913877][T23014] ? __local_bh_enable_ip+0x12d/0x1c0 [ 767.919242][T23014] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 767.924771][T23014] ? security_sctp_bind_connect+0x7e/0x2e0 [ 767.930566][T23014] sctp_sendmsg+0x155c/0x2810 [ 767.935258][T23014] ? __pfx_sctp_sendmsg+0x10/0x10 [ 767.940288][T23014] ? aa_sk_perm+0x81e/0x950 [ 767.944849][T23014] ? __pfx_aa_sk_perm+0x10/0x10 [ 767.949968][T23014] ? sock_rps_record_flow+0x19/0x410 [ 767.955243][T23014] ? inet_sendmsg+0x2f4/0x370 [ 767.960143][T23014] __sock_sendmsg+0x19c/0x270 [ 767.964842][T23014] ____sys_sendmsg+0x505/0x830 [ 767.969634][T23014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 767.974927][T23014] ? import_iovec+0x74/0xa0 [ 767.979440][T23014] ___sys_sendmsg+0x21f/0x2a0 [ 767.984128][T23014] ? __pfx____sys_sendmsg+0x10/0x10 [ 767.989359][T23014] ? __fget_files+0x2a/0x420 [ 767.993948][T23014] ? __fget_files+0x3a0/0x420 [ 767.998621][T23014] __x64_sys_sendmsg+0x19b/0x260 [ 768.003650][T23014] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 768.009114][T23014] ? do_syscall_64+0xbe/0x3b0 [ 768.013781][T23014] do_syscall_64+0xfa/0x3b0 [ 768.018382][T23014] ? lockdep_hardirqs_on+0x9c/0x150 [ 768.023587][T23014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.029648][T23014] ? clear_bhb_loop+0x60/0xb0 [ 768.034309][T23014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.040185][T23014] RIP: 0033:0x7f4eadb8eec9 [ 768.044586][T23014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.064202][T23014] RSP: 002b:00007f4eae982038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 768.072602][T23014] RAX: ffffffffffffffda RBX: 00007f4eadde5fa0 RCX: 00007f4eadb8eec9 [ 768.080573][T23014] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000007 [ 768.088654][T23014] RBP: 00007f4eadc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 768.096663][T23014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.104638][T23014] R13: 00007f4eadde6038 R14: 00007f4eadde5fa0 R15: 00007ffd1e4c4e78 [ 768.112606][T23014] [ 768.115621][T23014] Modules linked in: [ 768.121565][T23014] ---[ end trace 0000000000000000 ]--- [ 768.127275][T23014] RIP: 0010:fib_lookup_good_nhc+0x85/0x3d0 [ 768.133158][T23014] Code: 4c 89 24 24 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 cb 6d 19 f8 41 bc 18 04 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 ac 6d 19 f8 4d 8b 24 24 e8 03 2f [ 768.153431][T23014] RSP: 0018:ffffc90002f26e70 EFLAGS: 00010202 [ 768.159531][T23014] RAX: 0000000000000083 RBX: ffff88806c746120 RCX: 0000000000000002 [ 768.167593][T23014] RDX: ffff88802b5e0000 RSI: 0000000000000000 RDI: 0000000000000000 [ 768.175752][T23014] RBP: ffff88806c746137 R08: 0000000000000000 R09: ffffffff8a0fb98f [ 768.184221][T23014] R10: 0000000000000008 R11: 0000000000000002 R12: 0000000000000418 [ 768.195237][T23014] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff1100d8e8c26 [ 768.203453][T23014] FS: 00007f4eae9826c0(0000) GS:ffff888125d3d000(0000) knlGS:0000000000000000 [ 768.213098][T23014] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 768.219714][T23014] CR2: 00007f37df8a3f98 CR3: 0000000031cc4000 CR4: 00000000003526f0 [ 768.227850][T23014] Kernel panic - not syncing: Fatal exception [ 768.234290][T23014] Kernel Offset: disabled [ 768.238602][T23014] Rebooting in 86400 seconds..