last executing test programs: 7.143052298s ago: executing program 4 (id=1197): socket$inet(0x2, 0x1, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x20}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x1e, 0x95a3e13bfdd5ea7d, 0x8) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe], 0x0, [0x1, 0x2, 0x5e0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5c4, 0x8000, 0xbe, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket(0x400000000010, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f62, 0x1, 0xc4, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008041}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x18}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004070}, 0x810) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r12, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) socket$nl_generic(0x10, 0x3, 0x10) 6.565217798s ago: executing program 4 (id=1206): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ec0)=""/246, 0xf6}, {&(0x7f0000000040)=""/97, 0x61}, {&(0x7f00000026c0)=""/155, 0x9b}, {&(0x7f0000002780)=""/4108, 0x100c}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}}], 0x2, 0x40002122, 0x0) unshare(0x6a040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000008b2f00001c00128009000100626f6e64000000000c00028008000500ffedffff080003"], 0x44}}, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f00000003c0)={0x1, 0x0, 0x3, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, &(0x7f0000000780)}, 0x20) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000140)={0x0, 0xffff8001}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004680)=@newtaction={0x2e60, 0x30, 0xb, 0x0, 0x0, {}, [{0x2e4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0x2e00, 0x15, 0x0, 0x0, {{0xb}, {0x2d38, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x6, 0x6fbe, 0x8, 0x401, 0xfffffffb, 0xfffffeff, 0x7, 0x7, 0x7647, 0xd, 0x5, 0x0, 0xff, 0x37952057, 0x6, 0x100, 0x6, 0x8, 0x4, 0x0, 0x5, 0xe0d, 0x9, 0x5c7, 0x8, 0x3, 0x5f3, 0x3, 0x6, 0x6, 0xb, 0x1, 0x0, 0x57, 0xa11, 0x9, 0x2, 0x8, 0x1ff, 0x0, 0xfffffff8, 0x2, 0x0, 0x54, 0x3, 0x80000000, 0x9, 0x5, 0x1, 0x101, 0x8, 0x3, 0xffffff60, 0x2, 0xee, 0x5, 0x7, 0x7, 0x4, 0x7fffffff, 0x1000, 0xe0e, 0x5cef, 0x6, 0xb0, 0x2, 0x0, 0x7, 0x8, 0x40, 0x5c5d, 0x4, 0x7, 0x21da, 0x3, 0xec, 0x3, 0x3, 0x5, 0x8001, 0xb, 0xc649, 0x3, 0x2, 0x6, 0xfffffffc, 0x7, 0x1, 0x3, 0x7, 0x9, 0x4, 0x3ff, 0xfa, 0x36, 0xd1dd, 0x6, 0xbf59, 0xffff, 0x3, 0x8, 0x7b7b2f12, 0x8, 0x2, 0x9, 0xa, 0x4, 0x2, 0x200, 0x2, 0x5, 0x1, 0x3ff, 0xf1, 0xe87, 0x4, 0x6c55, 0x1a, 0x1, 0x1ff, 0x5, 0xff, 0x3, 0x8, 0x2, 0x0, 0x100, 0x2, 0x2, 0x5, 0x101, 0x20, 0x1, 0x2, 0x87c, 0x8, 0x0, 0x1, 0xb4, 0xf2, 0x74ce, 0x9, 0x4, 0x60bf, 0xb, 0x8, 0xff, 0x1, 0x7efdfc98, 0x2, 0x4, 0x5, 0x7, 0x4, 0x2, 0x0, 0x6, 0x0, 0x9, 0x1, 0x100, 0xfffffff5, 0xf, 0x1, 0x40, 0x100, 0x7, 0xffffffff, 0xe, 0x8, 0xeb51, 0xbfa, 0x5, 0x8, 0x2, 0xffffd962, 0x7, 0x1, 0xd5b, 0x80, 0x5, 0x0, 0xfffff000, 0x2, 0x3391429, 0x7, 0x2, 0x1, 0x407, 0x67, 0x7f, 0x49, 0xfff, 0x1, 0x7, 0x6, 0x9, 0x9, 0x8001000, 0x0, 0x0, 0x10000, 0x40, 0x14f, 0xb30, 0x9, 0x3, 0x7, 0x4, 0xf, 0x4, 0x3, 0x0, 0xb9, 0xff, 0x4, 0x9, 0x0, 0xd04, 0x9, 0x9, 0x7, 0x930b, 0x4, 0x2, 0xffffffff, 0xfffff258, 0x2, 0x8, 0x80000001, 0xe, 0x4, 0x4, 0x9f64, 0x2, 0x8a1, 0x6, 0x12d7, 0x715e7f7d, 0x7, 0xffff2b48, 0xad, 0x7, 0x0, 0xe, 0x3, 0x4, 0x1, 0x52e4, 0xffff, 0x100, 0x3, 0x1, 0x5, 0xfffffffa]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}], [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x4, 0x2, 0xff, 0x2e0, 0x2, 0x101, 0x401, 0xfffffffc, 0xa0, 0x3, 0x9, 0x7, 0xe, 0xffffff38, 0xfffffff8, 0x6, 0x3, 0x6, 0x8001, 0x8, 0x7, 0x2, 0x6, 0x1ad7, 0x7ff, 0x8ac, 0x5, 0x40, 0x3, 0x4, 0x2, 0x94, 0x9, 0xfff, 0x2, 0x3ff, 0xffff98aa, 0x0, 0x4, 0x5, 0xb, 0x1, 0x0, 0x7f, 0x7, 0x80, 0x7ff, 0x4, 0xfea, 0x66f6, 0x0, 0xe3, 0x3, 0x9064, 0x6, 0x1, 0x9, 0x6, 0x8, 0x0, 0x0, 0x4, 0x89, 0x7fff, 0x2, 0x1, 0x1, 0x3, 0x9, 0x5, 0xd, 0x2, 0xfffffff7, 0x80000000, 0x281, 0x1, 0x1, 0x10000, 0x3, 0xbd, 0x5, 0x674, 0x3, 0x8, 0x5, 0x4, 0xec, 0x5f3c, 0x1, 0x6b6, 0x8, 0x7, 0x2981, 0xf, 0x80, 0x9, 0x8, 0xffff0, 0x2b8, 0x6, 0x9, 0xfff, 0x0, 0x6ee29a74, 0x7, 0x5, 0x0, 0x7, 0x9, 0x3, 0x3, 0x1, 0x7ff, 0x4, 0x2, 0x10, 0x3ff, 0xab, 0x57e22332, 0x40, 0x4, 0x1229fd07, 0x6, 0x800, 0x9, 0x40103f1f, 0x6, 0x3, 0x10000, 0x7, 0x3, 0x6, 0x6, 0x6, 0x80, 0x2, 0x4b283e62, 0x7, 0x3, 0x5d0d, 0x4, 0x7fff, 0x1, 0x0, 0xfffffffc, 0x6, 0x7, 0x80000000, 0x7f5, 0x1, 0x7, 0x8, 0x6, 0x5, 0x2b6f, 0x5, 0x1f, 0xfffffff7, 0x1, 0x5, 0x3, 0xb, 0x9, 0x0, 0x6, 0x3, 0x8, 0x3, 0xa4e, 0x7, 0x1, 0x1, 0x4, 0x3ff, 0x8001, 0xfffffbff, 0x7, 0x9, 0x1, 0x0, 0xbf25, 0x3c, 0x1a42, 0x8, 0x3, 0x7, 0x40, 0x80, 0x1db9, 0xffff379e, 0x7, 0x8, 0x739e0165, 0x4df, 0x0, 0x8, 0x5, 0x3, 0x3bb, 0x3, 0x10, 0xa, 0x1, 0x8, 0x20200, 0x1, 0xfffffffe, 0x0, 0x6, 0x8, 0x1, 0xfffffffc, 0x2, 0x6, 0x5, 0xacd, 0x2, 0x4, 0x8, 0x3, 0x7, 0x1000, 0x0, 0x8000, 0x8fa, 0x800, 0x3c8, 0x4, 0x4, 0x6, 0xa, 0x1a27, 0x6912, 0x5, 0x6, 0x1, 0x8001, 0x9, 0xf, 0x8, 0xfffff5be, 0x91ac, 0x1, 0x50000000, 0xb66, 0x3, 0x55, 0xffffff2e, 0xfffffffa, 0xfb9, 0x5, 0x3, 0x6f, 0x0, 0x5c]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x6, 0x6, 0xfffffffa, 0x7, {0x2, 0x1, 0x3ff, 0x856, 0x0, 0x9}, {0x18, 0x0, 0x3, 0x1ff, 0x3, 0x1}, 0x3, 0x3, 0xf}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xfffffff8, 0x80000000, 0x40, 0x6, 0x80000001, 0x2, 0x5, 0x7, 0x7, 0x0, 0x5, 0x800, 0x4, 0x8b, 0x91, 0x3, 0x5, 0xb6, 0x4, 0x5, 0x9f30, 0x3876, 0x1, 0x7, 0x9e0, 0x5, 0xfffffff9, 0x1ff, 0x8, 0x2, 0x0, 0x0, 0xd, 0x7, 0x8, 0x2, 0x0, 0x9, 0x10, 0x2c148a02, 0x7, 0x621, 0x9, 0x2, 0x4, 0x5, 0x1, 0x640, 0x7ff, 0x3, 0x2, 0x6, 0x9, 0xece8, 0x3, 0x80000001, 0x2, 0x0, 0xbd3, 0x800, 0x7fff, 0xf69a, 0x2, 0x0, 0x8, 0xb48, 0x67, 0x614, 0x100, 0x3, 0x1, 0x8000, 0x9, 0x6, 0x7, 0xef, 0xc9, 0x4, 0x4, 0x6, 0x8, 0x8, 0x0, 0x4, 0x800000, 0x14e2, 0x5, 0x1, 0x2, 0x19c2, 0x0, 0xfffff26e, 0x3, 0xb, 0x90c, 0x0, 0xd7, 0xfffff001, 0x2, 0x1, 0xb, 0x34b, 0x0, 0xd, 0x4, 0x5, 0x8001, 0x4c528979, 0x0, 0x4, 0x12cbb4cb, 0x2, 0x34, 0x5, 0x6, 0xffffff5a, 0xc, 0x8, 0x3, 0x200, 0x80000000, 0x1000, 0xfffffffb, 0x0, 0x5, 0x10001, 0x5, 0x5, 0x51200000, 0xffffffff, 0x1, 0x6, 0x2, 0x1, 0x3, 0x7fffffff, 0x4d0f, 0x6, 0x3, 0x1000, 0x100, 0x8, 0x1, 0x55b, 0x6, 0x5, 0x10, 0x3, 0x5, 0x0, 0x5, 0x4, 0x6, 0x7, 0x8, 0x7f, 0x5013, 0xdc, 0x4, 0x1, 0x0, 0x3, 0x200, 0xf3, 0x6, 0x5, 0x4, 0x8, 0x8001, 0x280, 0x1, 0x5, 0x5, 0xffff, 0x200000, 0x9c, 0x9, 0x2, 0x3, 0x9, 0x3, 0x10, 0xfffffffa, 0x3, 0xd, 0xe9b2972, 0x4f, 0x80, 0xfffffff9, 0x5, 0x80000000, 0x10000, 0x40, 0x7f, 0x0, 0xe, 0xe, 0xd3, 0x8, 0x6, 0x6, 0x2, 0xf, 0x6, 0x38, 0xe9, 0x8, 0xab36, 0x0, 0x335, 0x2, 0x4, 0x7, 0x3e, 0x5, 0x8, 0x2, 0x70000, 0x6, 0x3, 0x8e4, 0x44, 0xe, 0x8, 0x4, 0xff, 0x81, 0x6, 0x80000000, 0x7, 0x101, 0x5, 0x0, 0x5, 0x88, 0xf4d, 0x0, 0xffffff01, 0x8, 0x3, 0x3, 0x1, 0x1ff, 0x8, 0x5, 0x9f, 0xd99b, 0x68, 0x5, 0x8, 0x2, 0x3, 0x8, 0x6, 0x6c2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xedf}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa4}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xbbc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x401}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x9, 0xd8b, 0x7, 0x0, 0x3, 0x4, 0x4, 0x8, 0x0, 0xfe18, 0x1, 0x8, 0x1, 0x9, 0x4, 0x10000, 0x5, 0x8206, 0x2bb, 0x6, 0x2, 0x4, 0x5, 0xfff, 0x0, 0x3, 0x77e, 0x9, 0x5, 0xa7e4, 0x2, 0x1, 0x800, 0x8, 0x4, 0x9, 0x80, 0x4, 0x3, 0x4, 0x9fb, 0xfffffff9, 0x1445, 0x8001, 0x9, 0x9, 0x7, 0x7, 0x1, 0x162, 0x6, 0x2, 0x7f, 0x9, 0x80000001, 0xfffffffa, 0x8, 0xd, 0xa71, 0x8, 0x800, 0x5, 0x6d, 0xb6, 0x2, 0x5, 0x80000001, 0x1, 0x29, 0x36, 0x1, 0x101, 0x2, 0x7, 0xc5, 0x4, 0xfffffff8, 0x27b, 0x0, 0x1, 0x800, 0x59, 0xbc68, 0x5, 0x3ff, 0x6, 0x7fff, 0xffffffa4, 0x6, 0x2b2, 0x7fffffff, 0xd, 0x480, 0x7, 0x9, 0x9, 0x80000001, 0x458e, 0xfffffff9, 0x3, 0x55, 0x8, 0xff, 0xe, 0x0, 0x1, 0x1000, 0x71df, 0x4, 0x2, 0x74, 0x5, 0x79, 0x5, 0x4, 0x5, 0x80000001, 0x16, 0x9, 0x5, 0x9, 0x2, 0x8000, 0x1, 0xed4, 0x69, 0x3ff, 0x5, 0x10, 0x9, 0x9, 0x2, 0x6, 0x1, 0xb, 0xf9af, 0x915c, 0xfffffffb, 0xffff2bda, 0x73, 0x9, 0x1000, 0xffffffff, 0x69b, 0x4, 0xe82, 0x3, 0x0, 0x9a, 0x7, 0x8, 0x6, 0x791, 0x10000, 0x7, 0x4758, 0x7, 0x8b, 0xc6cc, 0x101, 0x5, 0xf9, 0x5562, 0x400, 0x1, 0x1, 0x5, 0x80000000, 0x4, 0xffffff54, 0x4, 0x40000000, 0x0, 0x5, 0xfffffeff, 0xff, 0x5, 0x401, 0x10001, 0x2, 0x61, 0xdc8f, 0x4, 0x619, 0x6, 0x8, 0x8d0, 0x0, 0xf80, 0x2, 0xd, 0x800, 0x7f, 0xe, 0xfffffff9, 0xffff, 0x10, 0x6e, 0x6, 0xbf, 0x8, 0xb, 0x0, 0x4, 0x5, 0x0, 0x2, 0x2, 0x0, 0x1, 0x2, 0xff, 0x5, 0xffffffff, 0xd, 0x6, 0x6, 0x6, 0x80000000, 0x800, 0x1, 0x9, 0x8, 0x1, 0x7, 0xfffffffd, 0x0, 0xaa, 0x5, 0x40, 0x8, 0x0, 0x1, 0x5, 0x2, 0x8001, 0x100, 0x4, 0x2, 0x800, 0xfffffff7, 0x9, 0x2, 0x2, 0xac1, 0x44, 0x6be45587, 0xa, 0x4, 0x3, 0xfff, 0x6, 0x4, 0x80000001, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3ff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7ff}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0xff, 0x0, 0x8001, 0x1, 0xff, 0x19dd, 0x1, 0x4, 0x0, 0x1, 0x7fffffff, 0x401, 0x7, 0x12d, 0x9, 0x800, 0x0, 0x7fff, 0x10, 0x5, 0x1, 0x4, 0x7199, 0x80000001, 0x8, 0x3, 0x4, 0x2, 0xfffff800, 0x7, 0x9, 0xf7f, 0xf, 0xfffffffc, 0xffffffff, 0x9, 0x0, 0x3, 0x0, 0x2, 0x8, 0x6, 0x8000, 0xfff, 0x800, 0x10001, 0x4, 0x7, 0x9, 0x5, 0xfffffffa, 0xd, 0xb, 0x80000001, 0x1, 0x1d00, 0xd, 0xc, 0x1, 0x7, 0x0, 0x80a, 0x80, 0x5, 0x3, 0x0, 0x3ff, 0x1ff, 0x70f6, 0x5, 0x8, 0xffffffff, 0x40, 0xfffffeff, 0x2, 0x9, 0x3, 0x6, 0x5, 0x0, 0x6, 0x154, 0x72, 0x0, 0x80000000, 0x8, 0x0, 0x800, 0x10000, 0x2, 0xe, 0xa, 0x8000, 0x0, 0xffff, 0xd, 0x0, 0x2, 0x3, 0x7, 0x3, 0x5, 0x2, 0x3, 0x2, 0x3, 0x4, 0x0, 0x6, 0x0, 0x61e, 0x3, 0x81, 0xd4d, 0x0, 0x0, 0x965, 0x1f5, 0x9d, 0x7fff, 0x800, 0x7, 0x5, 0x1, 0x1, 0x351d19f4, 0x8, 0x9, 0x1, 0x2, 0x10000, 0x9, 0x6, 0x575df485, 0x7fff, 0x4, 0x8001, 0x4, 0x8, 0x8, 0x6, 0x0, 0x4, 0x10001, 0x0, 0x7, 0x6, 0xfffffffb, 0x8, 0x4, 0x0, 0x0, 0xd2, 0x69, 0x30, 0x8f, 0x793c5c4a, 0x9, 0x7c7, 0x9, 0x380, 0x1, 0x7, 0x0, 0x2, 0x3, 0x2, 0x7, 0xa, 0x0, 0x0, 0x8, 0x2, 0xb, 0x7, 0xfffffff7, 0xcf1, 0x4, 0x83, 0x4, 0x9a, 0x60000000, 0x4, 0xffff0001, 0x60, 0x1, 0x1, 0x4, 0x80, 0x2, 0x4, 0x8, 0x9, 0x9, 0x5, 0x2, 0x400, 0x3e91db71, 0x77, 0xb97c, 0xe1a4, 0x8, 0x1ff, 0x5, 0x8, 0x4, 0x10001, 0x3, 0x200, 0x4, 0x0, 0x6, 0x8, 0x8, 0x7, 0x5, 0x7fffffff, 0xfffff9bc, 0x0, 0x7, 0x4, 0x2, 0x10001, 0x4fbccf22, 0xaf9, 0x91, 0xffff7fca, 0x3f, 0x2e8, 0x100, 0xc, 0xff, 0xfffffff1, 0xfffffff0, 0xaa39, 0x0, 0x3, 0x1, 0x4, 0x40, 0x3, 0x11a, 0x6, 0x6, 0x2, 0x8, 0x2, 0x0, 0x9, 0xfffffffb, 0x10, 0x30, 0x482, 0xffffff81]}, @TCA_POLICE_RATE={0x404, 0x2, [0xc0000000, 0x1, 0xf0000000, 0xffff887c, 0x10, 0xfffffffa, 0x5, 0x4, 0x5, 0x10, 0x3, 0x6, 0x7, 0x7, 0x7f800, 0x3, 0xe, 0x5, 0x800, 0x6d, 0x5, 0x57f, 0x17000000, 0x7f72, 0x4, 0xffffffff, 0x1000, 0xf, 0x6c7, 0xffff5513, 0x6, 0x6, 0x9, 0x0, 0x100, 0x8, 0x2, 0x4, 0x6, 0x0, 0x5, 0x6, 0x8, 0x8f, 0x1ff, 0x8, 0xf313, 0x80, 0xa0, 0x5, 0x0, 0x5, 0x5, 0x6, 0x2, 0x7ff, 0x6, 0x7, 0x400, 0x8320, 0x6, 0x3, 0xe, 0x3, 0x6, 0x7, 0x100, 0x80000001, 0x10001, 0x1000, 0xffff2c69, 0x3, 0x10001, 0xfffffffe, 0x9, 0x1, 0xfffffc01, 0x5, 0x401, 0xffffffff, 0x200, 0x7, 0x5, 0x53f0faf5, 0x7fffffff, 0x23a25635, 0x3, 0x3, 0x5, 0xfff, 0x76, 0x0, 0x800, 0x4, 0x3, 0x2, 0x3, 0xfff, 0x2a8, 0x3, 0x1, 0x7ff, 0x8ca, 0x6, 0x4, 0x89, 0x9, 0x0, 0x8, 0x9, 0xffffffff, 0x4, 0x3, 0x5, 0x31, 0x2f, 0x800, 0x9, 0x9, 0x9, 0x8, 0x1eb, 0x0, 0x4, 0x6, 0x4, 0x1, 0x7ff, 0x2, 0x4, 0xb66, 0x4, 0xbd, 0x741, 0x8, 0x80, 0x5, 0x4, 0x7, 0x7, 0x7, 0x1ff, 0x1, 0x8, 0x1, 0x4, 0x7f, 0x4, 0x1, 0x7, 0x800, 0xba, 0x8000, 0x2, 0x3564, 0x4, 0x80, 0xfffffffd, 0x388f, 0x4, 0x5, 0x5, 0x5, 0x0, 0x2, 0x9, 0xf, 0xf567, 0x100, 0x0, 0x0, 0xfff, 0x3, 0x5, 0x6, 0x1, 0x1, 0x3, 0x3, 0x10000, 0x8, 0x0, 0x101, 0x89, 0x37b, 0x6, 0x2, 0x1, 0x7, 0x7, 0x8, 0x0, 0x8, 0x3ff, 0x8, 0x100, 0x7f, 0x200, 0x4, 0x9, 0x8, 0x7, 0x4, 0xff, 0x99b, 0x7f, 0x3, 0x3a05, 0x3800000, 0x5, 0x1, 0x931, 0x9, 0x9, 0xbbe9, 0x80000000, 0x10, 0xe, 0x1, 0x1, 0x7, 0x2, 0x2, 0xffffffff, 0x9, 0xc, 0x80, 0x2, 0x0, 0x3, 0x0, 0xfffffffc, 0x10, 0x46, 0xa, 0x0, 0x8, 0x49, 0xb, 0x1ff, 0x3, 0x6, 0x3f8, 0x401, 0x4, 0x850, 0x2, 0xab80000, 0x2, 0x0, 0x10, 0xa, 0x6, 0xe6f, 0x0, 0xf]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffa, 0x6, 0x0, 0x5, 0xd, 0x94, 0x2, 0x3, 0x2, 0x3346, 0x5, 0xacc9, 0x400, 0xd12, 0x1, 0x7, 0xffff, 0x0, 0x8, 0xa4a, 0x5066, 0x1, 0x13, 0x7fffffff, 0x0, 0xc, 0x3, 0xf, 0xfffffffd, 0x0, 0x5, 0x3, 0x1, 0xd921, 0x81, 0xd, 0xfffffffc, 0x3, 0xf, 0x9, 0x97, 0x4, 0x4, 0xee, 0x6, 0x1, 0x4, 0xa, 0xe, 0x8000, 0x2da, 0x4, 0x72ef, 0x1, 0x1, 0x5, 0x3, 0x5, 0x8be, 0x8, 0x9, 0x0, 0x489, 0x7, 0x4ec2, 0x1, 0x7, 0xe, 0x80000001, 0x0, 0x101, 0x40, 0x6, 0x2, 0x0, 0x9, 0xb, 0x8001, 0x2, 0x6, 0xf732, 0xa692, 0x8, 0x6, 0x2c, 0x7, 0x4, 0x8, 0x6, 0x8, 0x800, 0x7ff0, 0xf, 0x5, 0x4bd, 0xc30b, 0x2, 0x6, 0x4, 0x4004, 0x2, 0x7, 0x800, 0xb9, 0x8, 0x8, 0x5, 0x3, 0x6, 0xffe00, 0x7, 0x15, 0x8001, 0x1, 0x3, 0x5, 0x7, 0x7, 0x1df5, 0x101, 0x7, 0xfffffffd, 0x6, 0xa, 0x1, 0x1, 0x7, 0x1, 0x2, 0x0, 0xfffffffa, 0xffffffff, 0x27, 0xfffffff8, 0x9, 0x2, 0x6, 0x2, 0x6, 0xd821, 0x7, 0xce93, 0x81, 0x401, 0x7, 0x9, 0x9, 0x8, 0x9, 0x1, 0x200, 0xd, 0x4, 0x7, 0x8, 0x1, 0xfffffc00, 0x0, 0x8, 0x1, 0x3, 0xb, 0x6, 0xffff04e8, 0xffff0000, 0xb7, 0x6, 0x5, 0x1cb1, 0x9, 0x1, 0x7, 0x8, 0x5, 0x1, 0x6, 0x8, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x0, 0x2, 0x80000001, 0x0, 0xffff, 0x7, 0xe, 0x2, 0x8, 0x4cde, 0x7, 0x3, 0x3ff, 0x7f, 0x5, 0x9, 0x3, 0x7, 0x1, 0xffffff80, 0x9, 0x2, 0x3, 0x9, 0x9, 0x7ff, 0x0, 0x4, 0x3, 0x3, 0x9, 0x2, 0x6, 0x200, 0x7fff, 0x6, 0x9, 0x29, 0xffff41f7, 0x1, 0x4, 0x4, 0x7, 0x5, 0x40, 0x4, 0x7, 0x0, 0x3ff, 0x94, 0x3, 0xffffff00, 0x1, 0x7ff, 0x6, 0x7fff, 0x0, 0xc0e5, 0x1, 0x2, 0x5b, 0x4476, 0x7, 0x432, 0x7, 0x57, 0x800, 0x6a, 0x5876a3df, 0x1, 0x7ff, 0xffffffff, 0xf9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1f1, 0x6, 0x53, 0x9, 0x3, 0x1, 0xff, 0x3, 0x9, 0xfffffffe, 0x1, 0x0, 0x2, 0x80000000, 0x9, 0x401, 0x5, 0x6, 0x1398, 0x7ff, 0x80000000, 0x4, 0x9, 0x8, 0xb, 0x0, 0x81, 0x2, 0xb, 0xffffffff, 0x2a, 0xdec4, 0xa4, 0x2, 0x2ff, 0x200, 0x7f, 0x2, 0x6, 0x8, 0xc4, 0x0, 0x3, 0x3, 0x1000, 0x6, 0x2, 0x1, 0x7ff, 0x757e1525, 0x4, 0x9, 0x4, 0x0, 0x9c, 0x7, 0x9, 0x4, 0x3, 0x296, 0x4, 0x9, 0x0, 0xdf, 0x68b2, 0x8336, 0x4, 0x4, 0x4c, 0xffffffff, 0x26b, 0x280000, 0x72, 0xd, 0x6, 0x7, 0x3, 0x8d0b, 0x9, 0xf457, 0xa, 0xf65, 0x9, 0x7, 0x9, 0x4, 0x6, 0x5, 0x9, 0x1, 0x5, 0xeb07, 0x8ac4, 0x4, 0x3, 0x4, 0x4, 0xfffffff9, 0x8, 0x1000, 0x0, 0x8a, 0x919, 0x1c0, 0x9690, 0x10000, 0xe85, 0x9, 0x80000000, 0x7fff, 0x3, 0x81, 0x7, 0xce43, 0x800, 0x1, 0x2639a01e, 0xd, 0x7, 0x3, 0x10, 0x4, 0x6, 0xfffffff8, 0x80, 0xfff, 0xaeb, 0xffff, 0xa827, 0x5, 0x7, 0x3, 0x5, 0xd3, 0x5, 0x5, 0xe73, 0x5, 0x7, 0x0, 0x0, 0x9, 0x7, 0x10000, 0x0, 0x5, 0x12, 0x3, 0x400, 0x5, 0x9fb, 0x0, 0x523e, 0x2, 0x9, 0x9, 0x4, 0x8, 0x5, 0x17a, 0x401, 0x1000, 0x9, 0x0, 0x3, 0x7fff, 0xd2e, 0x1, 0x2, 0x6, 0x3, 0xfffff35b, 0x10, 0x4, 0x5, 0x4, 0x81, 0xf537, 0x1, 0x14a00, 0x4, 0x4, 0x6, 0xe, 0x7f, 0x7, 0x0, 0x1, 0x1, 0x0, 0x6, 0xd2, 0x5, 0x8000, 0x0, 0x80000001, 0x6, 0xfffffffe, 0x6, 0x5, 0x3, 0xfffffff9, 0xd, 0xffff, 0x5, 0x6, 0xb, 0x0, 0xa22, 0xfffffff9, 0xfffffc00, 0x6, 0x5a86, 0x8, 0x0, 0x8, 0xfffffc00, 0x9, 0x4a01, 0x2, 0x8, 0x80, 0xfffffff8, 0x7, 0x196c, 0x800, 0x5, 0x2, 0x3ff, 0x2, 0x8, 0x4, 0x40, 0x3ff, 0x4, 0x800, 0x80000000, 0xffff, 0x10, 0x6, 0x4, 0x4, 0x4, 0x9, 0x28000000, 0x7fff, 0x1, 0xffffff49, 0x9, 0x800, 0x80000001, 0x4, 0x10001, 0x1a8, 0x9, 0xfffffffa]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x65, 0x6, 0x10001, 0x58, 0x2, 0x53, 0x4127, 0x5, 0xfffffcaf, 0x8000, 0x3, 0x81, 0x84b, 0xef8, 0xc34, 0x400, 0x10, 0xa4e9, 0x5, 0x4, 0x3c, 0x0, 0x648, 0x0, 0xfffffffa, 0x6, 0x5, 0x400, 0x8, 0x36c, 0x6a19, 0x0, 0x0, 0x8, 0x80, 0x2, 0x2, 0x727, 0xd5, 0x3, 0x6, 0x4, 0x5, 0x5, 0x8, 0x5, 0x9, 0x7, 0x9, 0x7fff, 0x6, 0x1, 0x1, 0x1, 0x7fffffff, 0x800, 0x19, 0x7, 0x1, 0x2, 0x1, 0xfffffffe, 0xa9c, 0x10001, 0x4, 0x6, 0x1, 0x7, 0x2, 0x401, 0x0, 0x400, 0x80000001, 0xd833, 0x8, 0x2, 0x8, 0x7, 0x1, 0xe300000, 0x5c, 0x7, 0xff, 0x51, 0x4, 0x800, 0x2, 0x2, 0xcf, 0x4, 0x3, 0x2, 0x7, 0xfffffffa, 0x8000, 0x8, 0x2, 0xbdb5, 0xffff, 0xc, 0x3, 0xfffffffa, 0x1, 0x0, 0x8, 0xa, 0x5, 0x7, 0xe, 0x5, 0x5, 0x401, 0x980, 0x1, 0xfffffffb, 0x0, 0x9, 0x100, 0x5, 0x4, 0x1081, 0x7fffffff, 0xffffffff, 0x1, 0x6, 0xe6da, 0x400, 0x8, 0x9, 0xfffffffc, 0x60, 0x49, 0x9, 0x401, 0x2, 0x0, 0x6, 0x3, 0x1, 0x6, 0x81, 0x0, 0xc, 0x8eb, 0x2, 0x8000, 0xffffff9d, 0x81, 0xf3e9, 0x10, 0x4, 0x0, 0x8b5, 0xd, 0x7d3, 0x3, 0xfffffe00, 0xfffffffd, 0x9, 0x1, 0x6c, 0x2, 0x3, 0x9, 0x5, 0xffffffff, 0x98, 0x41, 0x8, 0x2, 0x9, 0xfffffffa, 0x70a, 0x8001, 0xf, 0x3, 0x8, 0x6, 0x0, 0x2, 0x2, 0x7, 0x7fffffff, 0x20000000, 0xd, 0x6, 0x1879, 0xfffffb27, 0x9, 0x74ee, 0xffffffff, 0xf22, 0x38, 0x4, 0x40, 0x4, 0x1, 0x4, 0x4, 0xffffffff, 0x100, 0x5, 0x6, 0x4, 0xc, 0x80, 0x2, 0x1, 0x3, 0xfffff2cb, 0x5, 0x4, 0x7fff, 0x3ee5, 0x6, 0x10001, 0x9, 0x42, 0xcf6, 0x6, 0x2, 0x9, 0x2, 0xc811, 0xae, 0xffff1e0a, 0x52, 0x3, 0x800000, 0x9, 0x9ef, 0x5, 0x9, 0x6, 0x4, 0x1ff, 0x6, 0x2, 0x8001, 0x2, 0x9, 0xf, 0x3, 0x8, 0xcc1f, 0x7fff, 0xc9, 0x4, 0x4, 0x6, 0x6, 0x5, 0xff, 0x2, 0x1, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x2, 0x7, 0x90000, 0x9, 0xfffffffe, 0x6, 0x3, 0xfffffff8, 0x1, 0x3, 0x6, 0x296, 0x10001, 0x10001, 0x8, 0x5, 0xa, 0x80000001, 0x1, 0x8, 0x6, 0x8, 0x0, 0x1, 0x3, 0x5, 0x1, 0x400, 0x6, 0xca94, 0x7c, 0x6, 0xc5, 0x9, 0x5, 0x0, 0x3, 0x8, 0x3, 0x1, 0x200, 0x4, 0x3, 0x200, 0x5, 0x0, 0x12, 0x8000, 0x400, 0x6, 0xc, 0x3, 0x460b, 0xffffffff, 0x1fbc, 0x8, 0x10, 0x7, 0x6, 0x5, 0x0, 0xfff, 0x7, 0xf, 0xc0, 0xa76, 0x4, 0x4c, 0x1, 0x6, 0xff, 0xd13, 0x7ff, 0x800, 0x3ff, 0x8, 0x3, 0x10, 0xc94, 0x8, 0x0, 0x400, 0x400, 0x7, 0x1000, 0x163d, 0x7f, 0x6c46, 0x500, 0x4e5, 0x6, 0x5, 0x7fff, 0x4, 0x9, 0xdce, 0xb2, 0x4, 0xd, 0x80000001, 0x7, 0x7, 0x9, 0x100, 0x8, 0x9, 0x10001, 0x0, 0x80, 0xff, 0xc00000, 0x4, 0x1000, 0xb9, 0x10001, 0x5, 0xfffffffa, 0x1, 0xf, 0x6a31, 0x50, 0xc890, 0x3, 0x2, 0x4, 0x0, 0x36, 0xfffffb6e, 0x992e, 0x93e, 0x7ffe, 0x0, 0x1, 0x2, 0xfffffff9, 0x6, 0x3ff, 0x5, 0x60000, 0x5, 0x6, 0x1, 0x0, 0x0, 0xb, 0x9, 0x1, 0x6, 0x9ec, 0xcc, 0x6, 0x6, 0x1, 0x2, 0x5, 0x1, 0xffffffff, 0x3, 0x2ef5, 0x3, 0x0, 0xb0, 0x1, 0x6, 0x4, 0x0, 0x5, 0x2, 0x8, 0x80000000, 0x0, 0x6, 0x0, 0x10, 0x45b17f80, 0x989d, 0x0, 0x9, 0x6a, 0xffffffff, 0xd, 0xffffff6b, 0x3, 0x0, 0x8001, 0x2, 0x8, 0x9, 0x80, 0x9, 0x6, 0x3, 0x80, 0x2, 0x1, 0x10001, 0x800, 0x9, 0x8, 0x893, 0x7, 0x1ff, 0xf10, 0x7cb, 0x8001, 0x6, 0x3, 0x9e, 0x7ff, 0x7, 0x1, 0x2, 0x3, 0xd, 0x18000000, 0x0, 0x1000, 0x14, 0x5531, 0x5, 0x9a, 0x1ff, 0x7, 0x23, 0x3, 0x80, 0x3, 0x5, 0x8f1, 0xd12, 0xffffffff, 0x2, 0x9, 0xa, 0x65, 0x7fffffff, 0x15f, 0x8, 0x5, 0x2, 0x2, 0x1000, 0x7, 0x6, 0x995, 0x5, 0xe804, 0x9, 0x1, 0x0, 0x5, 0x7, 0xfffffffd, 0x2, 0x6]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3ca}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x9, 0x8, 0xec, 0x5, 0x1, 0xfff, 0x4, 0x4, 0x0, 0x6, 0x5, 0x3, 0x0, 0x2, 0x6, 0x8b, 0x16, 0x40, 0x7, 0x2, 0x5, 0x84c, 0x4, 0x52, 0x7b188fca, 0x0, 0x9, 0xca28, 0x8, 0x1, 0x0, 0xb3c4, 0x7c9, 0x80000001, 0xfffffff7, 0x9, 0x40, 0x1, 0xb6, 0x7, 0x3ff, 0x2, 0xabe9, 0x2, 0x69, 0x9, 0x6, 0x81, 0x7, 0x8, 0x7, 0x2, 0xc, 0xfffffff8, 0xffffffff, 0x3, 0xb, 0x0, 0x9, 0x9, 0x3, 0x0, 0x5, 0x7974, 0x3, 0xecb, 0x3, 0x5, 0x8, 0x3, 0x1, 0x5, 0x10001, 0x37a, 0x0, 0x7, 0x6, 0x2, 0x1, 0x4, 0x1, 0x1000, 0x4fc, 0xfff, 0x4, 0x80000001, 0x800, 0x0, 0xc, 0xa, 0x8, 0x2, 0x2, 0x7, 0x2fa, 0x798, 0x4, 0xa, 0x8, 0x9e, 0x9, 0xd9a6ce5a, 0x8, 0x800, 0xfffffff8, 0x62d, 0x161, 0x8, 0x0, 0xe, 0x8, 0x9, 0x4, 0x1ff, 0xb66, 0xd, 0x0, 0x408, 0x5, 0x2b4a, 0x7, 0x3, 0x8, 0x10001, 0xfffffff8, 0xe10d, 0xfffffffe, 0x0, 0x0, 0xbb, 0x7, 0x9, 0x3, 0x5, 0x7, 0xffffff4c, 0x3573, 0x1, 0xfffffff8, 0x4, 0x1000, 0x7fff, 0x9, 0x3ff, 0x81, 0x1, 0x1, 0x81, 0xfffffffc, 0x1, 0x1, 0x4, 0xff, 0x2, 0x9, 0x583c, 0x9, 0xc09, 0x0, 0x1, 0x7, 0x100, 0x4, 0x3, 0x40000000, 0xc40, 0x4, 0x4, 0x496, 0xffffffff, 0xe4c, 0x2, 0x8, 0x2, 0x8000, 0x7, 0x400, 0x7f, 0x6, 0x9, 0x9, 0x5, 0xfff, 0x4, 0xfffffffe, 0x7fff, 0x5e6, 0x6, 0x7, 0x5, 0x3, 0x1000003, 0xc9, 0x7f, 0x1, 0x0, 0xff, 0x81, 0x937a, 0xffffffc0, 0x8, 0x7fffffff, 0xfff, 0x1, 0x8001, 0x5, 0x5, 0xd, 0xb, 0x7, 0x0, 0x1, 0xfffffff7, 0x7ff, 0xe1d, 0x1, 0x1, 0x4, 0x4, 0x8, 0x3, 0x6, 0x0, 0x10000, 0x2, 0x2, 0xed, 0x0, 0x3, 0x81, 0x80000000, 0x8001, 0xfffffffc, 0x1, 0x0, 0x9, 0x54a, 0x7, 0x6, 0x4, 0x10001, 0x3, 0x81, 0xe, 0xffffc803, 0x2c6701ec, 0x5, 0x60, 0x800, 0x80000001, 0x4, 0x1000, 0x0, 0x16c00000, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x23e}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8001}]]}, {0x9f, 0x6, "7f42c7df59e94b465e77b06857602a4f4ee901467707417048636ab5b6f14392d2d51d97fd9f3951f3ef9e56e46440d45e1771efaf5c87862a44e89a9d8e742ce199e9adfadf1cf7b5ac411c65a09eb15d37d805e418b1259522b0b1c9428fc260ba29767fff852f5479289af32d68d2d4a588517451286351e16447b7c9e57a05c29af8d5fefe0cd90b2093faf0ee7411166fda60d16b48bcf357"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x2e60}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000200012800800010073697400140002c005000400c600000008000300ac1414aa"], 0x40}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000000)='gact\x00', 0x230002, &(0x7f0000000040)={@align=0xf72, {0x7, 0x8, 0x2, 0x7f}}, 0xfffffffc, &(0x7f0000000080), &(0x7f0000000180)=0x7fff}) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r9, 0x8919, 0x0) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x5, 0x1}) 6.090005366s ago: executing program 4 (id=1213): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r1, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/144, 0x90}, {&(0x7f0000000500)=""/137, 0x89}, {&(0x7f00000005c0)=""/240, 0xf0}], 0x3, &(0x7f0000000800)=""/125, 0x7d}, 0x120) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) recvmmsg(r4, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000006040)=""/4086, 0xff6}, {0x0}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f0000001680)=[{0x0}, {&(0x7f0000001400)=""/75, 0x4b}], 0x2}, 0x35}], 0x2, 0x2, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000003a000b0026747000ffdbdf2512"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8010) 4.789364952s ago: executing program 2 (id=1231): unshare(0x22020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000010000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000001c00"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000080000000000000000000204500000000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x9, 0x42, 0x8}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, r3}, 0xc) unshare(0x22020400) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000010000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000001c00"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000080000000000000000000204500000000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x9, 0x42, 0x8}, 0x50) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, r3}, 0xc) (async) 4.51731975s ago: executing program 2 (id=1232): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x9, 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r0, 0x0) close(0x3) (async) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) connect$netrom(r0, &(0x7f00000001c0)={{0x3, @default, 0x4}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default]}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x1d, 0x3, 0x2, 0x9, 0x200, 0x1, 0x4, '\x00', r4, r0, 0x2, 0x5}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x1d, 0x3, 0x2, 0x9, 0x200, 0x1, 0x4, '\x00', r4, r0, 0x2, 0x5}, 0x50) close(0x3) (async) close(0x3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r2, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000580)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0x0) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) ioctl$XFS_IOC_READLINK_BY_HANDLE(r7, 0xc038586c, &(0x7f0000000c00)={r3, &(0x7f0000000b00)='hsr0\x00', 0x200802, &(0x7f0000000b40)={@_ha_fsid={[0x1, 0x4df]}, {0x8f0, 0xc, 0x6, 0x4}}, 0x171, &(0x7f0000000b80)={@_ha_fsid}, &(0x7f0000000bc0)=0x6f36}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r8, 0x0, 0x81, &(0x7f0000000d00)={'filter\x00', 0x0, 0x0, 0x0, [0x1000, 0x108, 0x9bc6, 0x8, 0x4, 0x7fffffff], 0x1, 0x0, 0x0, [{}]}, 0x88) getpeername$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000600)=0x14) (async) getpeername$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000600)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000006c0)={'erspan0\x00', &(0x7f0000000640)={'gre0\x00', 0x0, 0x8, 0x80, 0x0, 0x101, {{0x5, 0x4, 0x2, 0x3d, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @loopback, @multicast2}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000006c0)={'erspan0\x00', &(0x7f0000000640)={'gre0\x00', 0x0, 0x8, 0x80, 0x0, 0x101, {{0x5, 0x4, 0x2, 0x3d, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @loopback, @multicast2}}}}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r11, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r12, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r12, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @local, 0x6}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x5, 0x7d5, 0x9, @remote, @mcast1, 0x700, 0x1, 0xffffffff, 0xf3}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x5, 0x7d5, 0x9, @remote, @mcast1, 0x700, 0x1, 0xffffffff, 0xf3}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xd8, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xe, 0x4, 0x8, 0xb}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xe, 0x4, 0x8, 0xb}, 0x50) 3.914860574s ago: executing program 3 (id=1239): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x2d}, 0xa, 0x0, 0xff, 0x2, 0xfffd, 0xa001}, 0x20) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r3 = gettid() (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x3, 0x4, 0xfffff004}, {0x6, 0x7, 0x0, 0xfffffffd}]}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x5c2) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000240)=ANY=[], 0x12f4}}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000001c0)=""/254, 0xfe}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x3}, 0x0) (async) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0040ec0000"], 0x38}, 0x0) (async) r7 = syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/ipc\x00') openat$cgroup(r7, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) 3.820963266s ago: executing program 0 (id=1240): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x6, @multicast1}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000400)="5566fb8aa6e7fc637a0cc3c7758f553e532757dfd48614e6036ec798fba40a3629bb5a8d48c57166498e44e27a56a16948c032224b2fca088979a19bfdda90319ecc24bd9fc308a906055ea2722bbfd1b2caa9a495fc282a8127858714b923deda5063ef03b53398e695be8f038c8067df486e90c5aea6d475f460e5001a3e2d13bc7368610ceb70bedf00fac7c97605243d6a6e6ad4803a", 0x98}, {&(0x7f0000000100)="ff324d434ec75697a84d04", 0xb}, {&(0x7f0000000600)="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", 0xaf9}], 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x1100}, 0x1, 0x7}, 0x0) (async, rerun: 64) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(r0, &(0x7f0000002cc0)={&(0x7f0000000380)=@hci, 0x80, 0x0}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) (async, rerun: 32) r4 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x1405, 0x1, 0xf0bd23, 0x25dfdd02}, 0x10}, 0x1, 0x0, 0x0, 0x2000c458}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x4b4}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r7, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) bind$packet(r5, &(0x7f0000000040)={0x11, 0x1b, 0x0, 0x1, 0x3}, 0x14) (async, rerun: 64) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r8) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001240)={0x24, r9, 0x8, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x24}, 0x2, 0x34005, 0x0, 0x20080050}, 0x4000880) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x4) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$NFNL_MSG_COMPAT_GET(r10, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x3c, 0x0, 0xb, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x8, 0x1, 'unconfined\x00'}, @NFTA_COMPAT_NAME={0x6, 0x1, ')\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x88402e6274453c80}, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r11) (async, rerun: 64) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="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"/265], 0x14}}, 0x0) (rerun: 64) 3.730463789s ago: executing program 3 (id=1242): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001a00)=ANY=[@ANYBLOB="100d480dbd8c3b2400000012070000"], 0x10}, {&(0x7f0000000680)={0x10, 0x101d, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x10}], 0x2}, 0x1000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x2a, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$inet_sctp(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_icmp(0x2, 0x2, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.652359961s ago: executing program 0 (id=1243): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fcdbdf252500000005002a000000000008002f00ff07000008000200", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r5, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4054}, 0x200480c4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffa12}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000300)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4002}, 0x28) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x21f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_1\x00', 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r6, 0x300, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0xc00, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4085}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.53348181s ago: executing program 1 (id=1244): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r4 = socket(0x10, 0x803, 0x2) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x50, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x50}}, 0x0) (async) sendmsg$tipc(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000300)="520e4c9ab6ec53aa6fec4c16a1e173469d0b6c96f2b6f666a1d435244aa7b76063edc7e4c5072b950f9c359d0e43cf645b66a305b131ebc38fbbf513e65d5e27c4fc422bd1115a16568456ee0b4bf5c2bbba8f2c52132f8b599eda18fc51e955c9199bd7d8e220433460a43ad82dd2b38133538fee469e111fa38985caf7ba02362a0557d92e6ce05c2bc5fbf10b4739282d85ecf719", 0x96}, {&(0x7f0000000400)="0aa5f679326c546db404d75065b8e8accc6919d104fee4cfbc1f896da648799d3a3fc17d5c62c0f6e7482f20c6cba77c48c8b8a51bc3691b68ec713f1a5ad8757f2a502442df0563db33e0cf9f223ad170cb438bc841f87be12543369ae598fde00abe311c151789a561", 0x6a}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="3638090c7e09a26ab288b97be77d83aab4dec8c02ccbae363e863fe711f2d3ba31f4c7d64bef8131d8a5cb6001460a37e22ef47c60b6682ca1c9002c81a4f40b92ff2e5eee6ae454a538cc6bfe48bcc3bfff7b1bca2f88565db8037ded1b9ab7bf232ca535f4170b4f50a657900b6843aa3f4ad46d44bf2e93530cd0b53d0d690ae29f24b9c30607dfc091f3f0d2c02bce7d2cbe0b45c532e82ca4349aa4315e4c99cb2299249a6f565d2395fddb48b3601e1213d17f17dcd4cd280b7b777288c7d919305915fdfbe41463c36d0a19526b9c25e6f3294d", 0xd7}, {&(0x7f00000017c0)="6ef0c2259b3551adcc25900c021eeb22570055803f0e669f70d0f12f3846aa97bcab7fb79cf2de04a6b3", 0x2a}], 0x5, &(0x7f0000001880)="fd61007a32101d27f13e8e1567a26a221ebf8b5f2419ad", 0x17, 0x40000}, 0x800) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async, rerun: 32) r7 = socket(0x1, 0x803, 0x0) (rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 3.453216476s ago: executing program 2 (id=1245): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d60a0000feff000061111c71e7ae7c18a0ef86656b79a000000b2ad3bf864907406d18b5342c"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x1407, 0x1}, 0x10}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f00000003c0)=0x8, 0x4) read(r5, &(0x7f0000000000)=""/149, 0xaa) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002ab97000ffdbdf25040000000800020005000000080007007f0000e0070008"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24004854) listen(r6, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) socket(0x1f, 0x4, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$FS_IOC_FSGETXATTR(r10, 0x801c581f, &(0x7f0000000180)={0x5, 0x3, 0x7ff, 0x200, 0x400}) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000400)=0x40, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0xbc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.271287986s ago: executing program 3 (id=1246): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES8=r0, @ANYBLOB="2dd12bbd7000fedbdf25020000000900030073797a32000000000900010077790a0a"], 0x98}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r1, &(0x7f0000000fc0)=[{{&(0x7f00000003c0)=@generic, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/207}, {&(0x7f0000000540)=""/162}, {&(0x7f0000000600)=""/77}], 0x0, &(0x7f0000000680)=""/224}, 0x6}, {{&(0x7f0000000780)=@isdn, 0x0, &(0x7f0000000800)=[{&(0x7f0000001240)=""/4096}, {&(0x7f0000000240)=""/64}], 0x0, &(0x7f0000000ac0)=""/174}}, {{&(0x7f0000000b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x0, &(0x7f0000000840)=[{&(0x7f0000000cc0)=""/224}, {&(0x7f0000000c00)=""/87}, {&(0x7f0000000dc0)=""/209}], 0x0, &(0x7f0000000ec0)=""/195}, 0x81}], 0x101f2043b8267e, 0x10120, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) 3.221567705s ago: executing program 1 (id=1247): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000007c0)={0x8, 0xffffffff, 0x2, 0xfffffffc}, 0x10) unshare(0x66000080) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r7, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000a00000000", 0x1c) recvfrom$l2tp(r7, &(0x7f0000000000)=""/189, 0xbd, 0x409c6cec4c71bfa2, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) 3.220476013s ago: executing program 0 (id=1248): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000080)=[@in6={0xa, 0x4e64, 0x2b3, @mcast1, 0x9}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000100)=0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0xc801) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 32) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async, rerun: 32) close(r6) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={r0, 0x9}, &(0x7f0000000180)=0x8) socket$kcm(0x2, 0x3, 0x2) (async, rerun: 32) socket(0x15, 0x5, 0x0) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x6, 0x0, 0xff, 0x9, 0x0, 0xa001}, 0x20) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x30070800) (async, rerun: 32) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x7590efbe2f718a89, r9}, 0x18) (rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r10 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, 0x0, 0x0) 3.142424108s ago: executing program 2 (id=1249): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, r2, 0x1, 0x0, 0x0, {0x1d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, r2, 0x1, 0x0, 0x0, {0x1d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x400c0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000027c0)=ANY=[@ANYBLOB="4c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010067726574617000001c000280080005000800000008000100", @ANYRES32, @ANYBLOB="08000600ac"], 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x9c, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x2d}}}}, [@NL80211_ATTR_SSID={0x1d, 0x34, @random="4b96462df3087207e9f1147df1797b29a16ee52328c54fe3ff"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20000000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x9c, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x2d}}}}, [@NL80211_ATTR_SSID={0x1d, 0x34, @random="4b96462df3087207e9f1147df1797b29a16ee52328c54fe3ff"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20000000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 2.987327874s ago: executing program 0 (id=1250): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) getsockopt$inet_buf(r0, 0x0, 0x25, &(0x7f0000001180)=""/4096, &(0x7f0000002180)=0x1000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000010000305fcffffff0000040000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000280012800b0001006d61637365630000180002800c0004000400000100c28000050006000300000008000500", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x8890}, 0x0) 2.637705472s ago: executing program 2 (id=1251): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x100) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe80, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) accept4(r0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe08}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6eb, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x90}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) 2.631475181s ago: executing program 0 (id=1252): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x21) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e22, @local}}) sendmmsg(r2, &(0x7f0000007880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004d00)=ANY=[], 0x20}}], 0x2, 0x0) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000004040)={0x3}) r4 = socket(0x25, 0x4, 0x2) socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8930, &(0x7f0000000140)={'netdevsim0\x00', @multicast}) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) getpeername$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000001c0)=0x10) recvmmsg(r0, &(0x7f0000005340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/45, 0x2d}], 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/20, 0x14}, {&(0x7f0000002fc0)=""/167, 0xa7}, {&(0x7f0000003080)=""/238, 0xee}, {&(0x7f0000003180)=""/140, 0x8c}, {&(0x7f0000003240)=""/145, 0x91}], 0x6, &(0x7f0000003380)=""/232, 0xe8}, 0x1}, {{&(0x7f0000003480)=@caif=@dgm, 0x80, &(0x7f0000005280)=[{&(0x7f0000003500)=""/26, 0x1a}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/50, 0x32}, {&(0x7f00000050c0)=""/143, 0x8f}, {&(0x7f0000005180)=""/248, 0xf8}], 0x5, &(0x7f0000005300)}, 0x7df}], 0x3, 0x12003, 0x0) sendmsg$rds(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)=""/11, 0xb}, {&(0x7f0000000300)=""/143, 0x8f}, {&(0x7f0000001480)=""/197, 0xc5}, {&(0x7f0000001580)=""/118, 0x76}], 0x4, &(0x7f0000001900)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x5}, &(0x7f0000001640)=0x1ff, &(0x7f0000001680)=0x9, 0x7, 0x0, 0xd, 0x7, 0x4, 0x4}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000016c0)=""/198, 0xc6}, &(0x7f00000017c0), 0x32}}, @fadd={0x58, 0x114, 0x6, {{0x3, 0x1}, &(0x7f0000000240)=0xc, &(0x7f0000000280)=0x2, 0x1, 0x40, 0x12c3, 0x6, 0x8, 0x7fff}}, @mask_cswp={0x58, 0x114, 0x9, {{0x3, 0x1}, &(0x7f0000001800)=0xb, &(0x7f0000001840)=0x8, 0x7, 0x6, 0x0, 0x8000, 0x19, 0x81}}], 0x138, 0x4000040}, 0x4008011) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020c31af8ffa1000000bfa10000000000000701000000feffffb702000008000000b703000000000000a6000000ca00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.503818309s ago: executing program 1 (id=1253): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200008a0000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa10000000000000701000004ffffffb702000008000000b70300000002000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000520e0000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000000000000000009dc9000000", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x24, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0x1000, 0xd99d}}]}]}}}]}, 0x70}}, 0x8c814) (async) sendto$packet(r0, 0x0, 0x0, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@map, 0xffffffffffffffff, 0xa, 0x2039}, 0x20) 2.400990765s ago: executing program 3 (id=1254): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd0, &(0x7f0000001280)=0x8, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x5}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="0a000300010000", 0x7) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0xd94fd5c211a3c2ca}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x45004) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xee19}], 0x1}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x70, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xfffffffffffffee0, 0x4, @local}]}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56517f9f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xabbd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d7e1cd0]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x4}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 2.345250123s ago: executing program 1 (id=1255): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) r1 = accept4(r0, &(0x7f0000000100)=@rc={0x1f, @none}, &(0x7f0000000180)=0x80, 0x80000) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa4, 0x1, 0x7, 0xfef00a41a7d9ad6e, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFACCT_PKTS={0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xd17}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24082800}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000001440)={0x1, 0x3, 0x1000, 0x1000, &(0x7f0000000340)="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", 0xdd, 0x0, &(0x7f0000001340)="31c079e66b7b37cbdc3d1bd0ba97e85b4eabfd8a5fd45550d3b549f2328c8ce3f0c170175a931b02280bfdad7205a40cac591d4d1a2de65d2078bdba319d2e8de775f370da4faa0a527381840013544e6dca7a4ba5724a6458e68d57ade5c222bec29cf266200044a4d124913bf044ea6fd98b0d975da1f244735511917e1fb54631829f5209611096a14634af947e11c1c2d433ac0a299778d575717b2e24add14d881a82289982ebdd2fb6d47785c6d76c6bd41a844fd924d5962c44e32a3b89d0227883f45df1d73aca5c06c4d1c9976a8b72186c703f77a7911c25"}) r2 = openat$cgroup_ro(r0, &(0x7f00000014c0)='memory.stat\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000001500)=0x1, 0x4) ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000001540)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$netrom(r2, &(0x7f0000001580)={{0x3, @default, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) close(r3) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000001600)=0x9, 0x4) r4 = socket$caif_stream(0x25, 0x1, 0x3) ioctl$XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000001740)={r4, &(0x7f0000001640)=':[-\x00', 0x200000, &(0x7f0000001680)={@_ha_fsid={[0x3, 0x4]}, {0x18, 0x7fff, 0x10001, 0x8000}}, 0x7ff, &(0x7f00000016c0), &(0x7f0000001700)=0x7f}) write$cgroup_subtree(r2, &(0x7f0000001780)={[{0x2b, 'cpuacct'}, {0x2d, 'cpu'}, {0x2d, 'memory'}, {0x2b, 'devices'}, {0x2d, 'devices'}, {0x2d, 'memory'}, {0x2d, 'cpu'}]}, 0x35) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000017c0)={{0x0, 0x3, 0x0, 0x8000, 0x6, 0x864, 0x6, 0x6, 0x8, 0x8, 0x5, 0xcd3d, 0x7fffffff, 0x8, 0x3}}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000027c0)={r5, 0x1}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f00000037c0)={0x1, 0x1, 0x7fff}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000003800)={0x0, @adiantum, 0x0, @desc4}) socket$rds(0x15, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000003b40)={'gretap0\x00', &(0x7f00000039c0)={'erspan0\x00', 0x0, 0x20, 0x700, 0x2, 0xfffffe00, {{0x54, 0x4, 0x1, 0x3a, 0x150, 0x66, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x19}, {[@timestamp_addr={0x44, 0x44, 0x6e, 0x1, 0x7, [{@multicast2}, {@rand_addr=0x64010100, 0x7e5}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0xe0}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x4}, {@loopback, 0xef00}, {@loopback, 0xf}, {@remote, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @generic={0x94, 0x11, "65d53c3f271c5195e3bbb5e17b8da1"}, @end, @cipso={0x86, 0x2d, 0x1, [{0x5, 0xf, "f62372d35b866b13dcadbba184"}, {0x6, 0x10, "7e7c4e27157bc69549b74e18b6cd"}, {0x7, 0x8, "7ef97710f1a0"}]}, @timestamp_addr={0x44, 0x44, 0xaf, 0x1, 0x5, [{@broadcast, 0x2}, {@private=0xa010102, 0xd}, {@multicast2, 0x8ee}, {@remote, 0x4}, {@local, 0x3}, {@loopback, 0x1000}, {@multicast2, 0x2}, {@private=0xa010100, 0xc}]}, @cipso={0x86, 0x5a, 0xffffffffffffffff, [{0x0, 0x8, "5846450b0407"}, {0x5, 0x8, "9b04066955d3"}, {0x1, 0x3, '='}, {0x0, 0x9, "ea3ec39435b3f1"}, {0x2, 0x10, "11d6be85517c8bf3d4864c8252ba"}, {0x2, 0x3, 'v'}, {0x5, 0x6, "9c35e347"}, {0x1, 0x2}, {0x5, 0xc, "be34869abf7eb6b4b108"}, {0x1, 0x11, "c603b0dc34334e25acb394d0a81945"}]}, @timestamp_prespec={0x44, 0xc, 0xcd, 0x3, 0x8, [{@remote, 0x7fff}]}, @timestamp_addr={0x44, 0xc, 0xaa, 0x1, 0xb, [{@private=0xa010100, 0x579}]}, @end]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003c40)={0x18, 0x14, &(0x7f0000003840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003900)='syzkaller\x00', 0x200000, 0x58, &(0x7f0000003940)=""/88, 0x40f00, 0x22, '\x00', r7, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003b80)={0x5, 0x9, 0x0, 0x7fff}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000003bc0)=[{0x5, 0x2, 0x10, 0x1}, {0x0, 0x4, 0xc, 0xc}, {0x0, 0x3, 0x4, 0xa}, {0x1, 0x4, 0x5, 0xa}, {0x3, 0x2, 0x6, 0x6}, {0x3, 0x2, 0x9, 0x5}, {0x5, 0x4, 0xd, 0x2}, {0x2, 0x3, 0xa, 0x7}], 0x10, 0x5}, 0x94) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000003d00)={r2}, 0x8) ioctl$NILFS_IOCTL_GET_VINFO(r2, 0xc0186e86, &(0x7f0000003e80)={&(0x7f0000003d40)=[{0x5, 0x4dbb, 0x7, 0x9}, {0x8000000000000001, 0x6, 0x2, 0x6}, {0xfdff, 0x3, 0x576, 0x5}, {0xd, 0x1, 0xc, 0x1}, {0x6, 0x1, 0x8, 0xff}, {0x8, 0x3, 0x7, 0x6}, {0x9, 0x80, 0x7, 0x10001}, {0xa, 0x5, 0xfffffffffffffffa, 0x80}, {0x3, 0x100000001, 0x8, 0x8000000000000000}], 0x9, 0x20, 0x0, 0x8}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003f00), r1) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f00000042c0)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x8001}, 0xc, &(0x7f0000004280)={&(0x7f0000003f40)={0x304, r9, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6266}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd43}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x21}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ID={0x8f, 0x3, "b08b2cbb671a2f5d3413e548ecf0a5ec3aef82876b7d3c0457a79ac64e90bd19bdb31bdaccc0ead7741d97d39f4648420de6029cf5b74ec6e68a0a14c6c1812c4c69da38c71c40f11cda4be41b1380aa878224b498efd7adc85d5ffca39f8eb81c9c2743e9a21939594cde24b8024c8691b794f73a2d53a1e47a33acfb0069f4f78798e7169eade0d4ee40"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x12}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffc0}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffca}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x378000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x727, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x48081}, 0x11) clock_gettime(0x0, &(0x7f00000043c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000004300)={0x6424, 0x2d61, 0x1000, 0x9, 0x3, 0x10, 0x1}, &(0x7f0000004340)={0x0, 0x7, 0x2, 0x4, 0x200, 0x2, 0x2}, &(0x7f0000004380)={0x7, 0x1, 0x4, 0x1, 0x1000, 0xfffffffffffffff9, 0x4fe, 0x100000000}, &(0x7f0000004400)={r10, r11+10000000}, &(0x7f0000004480)={&(0x7f0000004440)={[0x8]}, 0x8}) setsockopt$inet6_group_source_req(r1, 0x29, 0xfdc1b6c9e25fef1b, &(0x7f00000044c0)={0xfffffffe, {{0xa, 0xf2, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}}, {{0xa, 0x4e21, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}}, 0x108) 2.219082511s ago: executing program 1 (id=1256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0xd0eb) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5bad}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}}, 0x4000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x68}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @broadcast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x4) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000002180)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r7, 0x1b}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)="27030200dc0f24000e00033c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141b", 0x3e}], 0x1}, 0x8bb3a301eb005b) 2.149674504s ago: executing program 3 (id=1257): socket$inet(0x2, 0x2, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x40000142, 0x0, 0x0) (async, rerun: 32) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, 0x0, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x6, @local}, 0xfffffeab) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000a00000000000000feffffff950000000000ef009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x1, 0x7d, &(0x7f0000000180)=""/125, 0x41000, 0x4}, 0x94) (async) setsockopt$packet_add_memb(r3, 0x107, 0x2, &(0x7f00000003c0)={0x0, 0x1, 0x6, @remote}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r6}, 0x4) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1f1c000002060101000000000000000000000001000000000a000000090002008d001f106f194eb3050001"], 0x30}, 0x1, 0x0, 0x0, 0x40840}, 0x40) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0x20, &(0x7f0000001c00)={&(0x7f0000000b40)=""/4096, 0x1000, 0x0, &(0x7f0000001b40)=""/164, 0xa4}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000340)=ANY=[@ANYRES64=r6], &(0x7f0000000000)='GPL\x00', 0xc000, 0x9, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0}, 0x94) (async, rerun: 64) r10 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (rerun: 64) bind$llc(r10, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) (async, rerun: 32) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_int(r11, &(0x7f0000000000), 0xffffff6a) sendfile(r10, r11, 0x0, 0xffffffff000) recvmmsg(r10, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/238, 0xee}], 0x1}, 0xffffffff}], 0x1, 0x10002, 0x0) ioctl$int_in(r10, 0x5452, &(0x7f00000001c0)=0x3) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.708652536s ago: executing program 2 (id=1258): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x800, 0xfb4}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000055a60701000000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70000000001000000030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendfile(r3, r2, 0x0, 0xf03a0005) openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @dev={0xfe, 0x80, '\x00', 0xa}, 0x401, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)="5a4aae006008a6eb720535515967c28a537a585db42b244d8499ed0ef0077d89e0b3be61afbced5eb545a817f431afdb584bb8", 0x33}, {&(0x7f00000016c0)="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", 0xffd}], 0x2}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) 1.633004119s ago: executing program 0 (id=1259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x80801, 0x1) getpeername$packet(r1, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000001080)=0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r6, 0x8000}, 0x8) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000080)=0x150a, 0xe) getsockopt$bt_hci(r4, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x10, 0x1, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002e00b376722a135760a6baf28a6476e6141a6070bff341b4cfa1ec761fdf0b4c4297d0a6f8eecdb1a3e5950fe89ece449dfd52092601417dde33afa783c20562045f7ef38fcb42cf1d37e65100c9b8f893e71851214dec3975b8cad04a8c5551fdd27c9d1807f6a715a0634b08a687d390a229a085d7ad5f9813e9789833963886d19c47bf9cef424a573e914edbde118054204a143c7abeb3bb64d0d1de73f5782bebdf3bb0730ed3219e61acefeb", @ANYRES32=r7, @ANYBLOB="0a0034000202020202020000080026006c090000"], 0x30}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x989680}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000010800110002000802110000001000000002000000"], 0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000001880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000626596cf3ddfbf9f5e7e63af8000000000000000000933f9611e0b4232c5806264d72ff6b379e8555d13f61238bc555bb0f189d461aa57943d9f422cf330779ffdfa2a7589d6e13f3b0c78043160a39d6b4c179745e8c35dfac4cbd"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r8, 0x913e0000) syz_80211_inject_frame(&(0x7f00000011c0)=@broadcast, &(0x7f0000001200)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x4e}, @device_b, @broadcast, @device_a, {0x5, 0x4}, @broadcast, @void, @value=@ver_80211n={0x0, 0x7, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, @random="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"}, 0x5a9) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) 835.349752ms ago: executing program 4 (id=1260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd29, 0x25dfdbfc, {0x2, 0x80, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10005}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040040}, 0x4004804) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3100000000180007800c00018003000140e000000108000800ff00000005000500020000000500010006"], 0x64}, 0x1, 0x0, 0x0, 0x4810}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100ac14140008000200ac1e00010c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c000200050001000000000008000740000000001c0018"], 0x90}}, 0x0) 621.560749ms ago: executing program 4 (id=1261): r0 = socket$netlink(0x10, 0x3, 0x8000000004) unshare(0x24020400) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000340)={r0, &(0x7f0000000200)='devlink\x00', 0x100, &(0x7f0000000240)={@_ha_fsid={[0x4, 0x7]}, {0x8, 0x3, 0x3, 0x100000000}}, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=0x3}) connect$vsock_stream(r1, &(0x7f0000000380)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000280)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0xfffffffe}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpid() r7 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r7, &(0x7f00000004c0)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, "46c4"}], 0x18}}], 0x1, 0x24008000) sendmmsg$unix(r5, &(0x7f00000017c0)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000001780)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}], 0x38, 0x40004}}], 0x1, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000705500000000000009000000fff5dd00000010000100050808004149014003000000", 0x58}], 0x1) read(0xffffffffffffffff, &(0x7f00000000c0)=""/34, 0x22) 528.319423ms ago: executing program 4 (id=1262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=ANY=[@ANYBLOB="202b00003e0007012bbd700000000000017c00000400fc80140001800d0006002d2f7b5b5d7b2d2d00000000542402"], 0x2b20}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xfff3, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x40010) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xe) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'hsr0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40530, 0x5a1b5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004804}, 0x40000) 25.237873ms ago: executing program 3 (id=1263): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=@delsa={0x13c, 0x11, 0x200, 0x70bd2c, 0x25dfdbfb, {@in=@local, 0x4d5, 0xa, 0x33}, [@extra_flags={0x8, 0x18, 0x8}, @algo_crypt={0x73, 0x2, {{'pcbc-aes-aesni\x00'}, 0x158, "33de23bf77352a90da57b1b294a310c537e7883d25475de78acfb7c8dc5a8814d9bfdfca20bba4713f5b1f"}}, @extra_flags={0x8, 0x18, 0x9}, @algo_crypt={0x90, 0x2, {{'cbc-aes-neonbs\x00'}, 0x240, "ce7f9fbc6948b04dcc0504fc37f7cd09223a1c32beaf9a46137a6fe2c14f5e96e48a6658b444c7c4b76dafd80f3be110e776a6adf64edf6a28d9ee324ce1ffb9d07b87d46d40e56f"}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40810}, 0x24000001) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f00000010c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7, @default, @bpq0, 0x6, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 0s ago: executing program 1 (id=1264): r0 = socket$kcm(0x10, 0x100000000002, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), 0x0}, 0x20) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x50) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) openat$nci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x87, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae0dd3d3a415cb19b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a8563e43c12f461560a2972063700000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed", 0x40}], 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={r1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a80)={'ip6gre0\x00', &(0x7f0000000a00)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x0, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x16}, 0x1, 0x7800, 0x3, 0x4}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000ac0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x1c, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x93, 0x0, 0x0, 0x0, 0xe2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='GPL\x00', 0x81, 0xfb, &(0x7f0000000900)=""/251, 0x40f00, 0x89, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000b00)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000b40)={0x0, 0xa, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r2, r1, r1, r2, r2, r2], &(0x7f0000000bc0)=[{0x3, 0x3, 0xe, 0xa}, {0x2, 0x2, 0xd, 0xa}, {0x2, 0x4, 0xd, 0x9}], 0x10, 0x2}, 0x94) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r8, &(0x7f0000004040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=[@sndinfo={0x20, 0x84, 0x2, {0x5, 0x1, 0xfffffffa}}, @authinfo={0x12, 0x84, 0x6, {0xc000}}], 0x38, 0x4000}], 0x1, 0x10) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000000cc0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xd9, 0x7ff, 0x0, 0x4, 0x100, r4}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000680)={r2, &(0x7f0000000540)='TIPCv2\x00', 0x60a480, &(0x7f0000000580)={@align=0x51, {0xfffa, 0xfff7, 0x47c, 0x21ae}}, 0x1, &(0x7f0000000600)={@_ha_fsid}, &(0x7f0000000640)=0x2}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r9}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) kernel console output (not intermixed with test programs): Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.527615][ T5145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.535235][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.542013][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.548180][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.555361][ T5145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.570507][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.579051][ T5145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.586256][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.596316][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.604644][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.209332][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 85.231542][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 85.363213][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 85.388473][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 85.540612][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.548753][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.555939][ T5823] bridge_slave_0: entered allmulticast mode [ 85.563296][ T5823] bridge_slave_0: entered promiscuous mode [ 85.571637][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 85.617323][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.624527][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.631804][ T5823] bridge_slave_1: entered allmulticast mode [ 85.639172][ T5823] bridge_slave_1: entered promiscuous mode [ 85.675858][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.683204][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.690495][ T5824] bridge_slave_0: entered allmulticast mode [ 85.697575][ T5824] bridge_slave_0: entered promiscuous mode [ 85.741164][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.748734][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.755895][ T5832] bridge_slave_0: entered allmulticast mode [ 85.763168][ T5832] bridge_slave_0: entered promiscuous mode [ 85.770434][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.777680][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.785760][ T5824] bridge_slave_1: entered allmulticast mode [ 85.792976][ T5824] bridge_slave_1: entered promiscuous mode [ 85.831109][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.839030][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.846449][ T5832] bridge_slave_1: entered allmulticast mode [ 85.853895][ T5832] bridge_slave_1: entered promiscuous mode [ 85.873861][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.890379][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.897525][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.905834][ T5833] bridge_slave_0: entered allmulticast mode [ 85.913144][ T5833] bridge_slave_0: entered promiscuous mode [ 85.943533][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.958995][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.966186][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.973757][ T5833] bridge_slave_1: entered allmulticast mode [ 85.980931][ T5833] bridge_slave_1: entered promiscuous mode [ 85.999689][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.037414][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.050312][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.092196][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.117599][ T5823] team0: Port device team_slave_0 added [ 86.136471][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.166748][ T5823] team0: Port device team_slave_1 added [ 86.172645][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.180620][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.187808][ T5831] bridge_slave_0: entered allmulticast mode [ 86.195189][ T5831] bridge_slave_0: entered promiscuous mode [ 86.205024][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.226682][ T5832] team0: Port device team_slave_0 added [ 86.234002][ T5824] team0: Port device team_slave_0 added [ 86.250912][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.258113][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.265752][ T5831] bridge_slave_1: entered allmulticast mode [ 86.273331][ T5831] bridge_slave_1: entered promiscuous mode [ 86.293402][ T5832] team0: Port device team_slave_1 added [ 86.319064][ T5824] team0: Port device team_slave_1 added [ 86.367173][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.374775][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.401370][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.424278][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.431462][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.457792][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.472954][ T5833] team0: Port device team_slave_0 added [ 86.481423][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.491620][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.499835][ T51] Bluetooth: hci0: command tx timeout [ 86.499973][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.508691][ T51] Bluetooth: hci1: command tx timeout [ 86.537366][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.566503][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.573606][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.599710][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.612474][ T5833] team0: Port device team_slave_1 added [ 86.627685][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.637762][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.645110][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.671748][ T51] Bluetooth: hci3: command tx timeout [ 86.677465][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.688122][ T51] Bluetooth: hci2: command tx timeout [ 86.690833][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.694346][ T51] Bluetooth: hci4: command tx timeout [ 86.701127][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.732062][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.807501][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.815193][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.841384][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.864932][ T5831] team0: Port device team_slave_0 added [ 86.891555][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.898699][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.925101][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.941678][ T5824] hsr_slave_0: entered promiscuous mode [ 86.948185][ T5824] hsr_slave_1: entered promiscuous mode [ 86.956666][ T5831] team0: Port device team_slave_1 added [ 87.012714][ T5832] hsr_slave_0: entered promiscuous mode [ 87.019945][ T5832] hsr_slave_1: entered promiscuous mode [ 87.027823][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 87.034313][ T5832] Cannot create hsr debugfs directory [ 87.045707][ T5823] hsr_slave_0: entered promiscuous mode [ 87.052501][ T5823] hsr_slave_1: entered promiscuous mode [ 87.069053][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 87.074840][ T5823] Cannot create hsr debugfs directory [ 87.146775][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.154343][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.181449][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.282372][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.290372][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.317349][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.372958][ T5833] hsr_slave_0: entered promiscuous mode [ 87.380467][ T5833] hsr_slave_1: entered promiscuous mode [ 87.386911][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 87.393215][ T5833] Cannot create hsr debugfs directory [ 87.532835][ T5831] hsr_slave_0: entered promiscuous mode [ 87.539481][ T5831] hsr_slave_1: entered promiscuous mode [ 87.545707][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 87.551499][ T5831] Cannot create hsr debugfs directory [ 87.972047][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.986007][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.996322][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.015330][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.098076][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.122764][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.152599][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.181304][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.257721][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.283354][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.294502][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.327231][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.368624][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.380067][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.392594][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.406050][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.424094][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.507663][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.545372][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.552884][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.578943][ T51] Bluetooth: hci1: command tx timeout [ 88.584445][ T5826] Bluetooth: hci0: command tx timeout [ 88.594322][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.627090][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.634269][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.650573][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.672692][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.697752][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.748663][ T51] Bluetooth: hci4: command tx timeout [ 88.754133][ T51] Bluetooth: hci2: command tx timeout [ 88.760256][ T5826] Bluetooth: hci3: command tx timeout [ 88.772337][ T5832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.783979][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.813490][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.829757][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.917628][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.942922][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.957592][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.997013][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.004283][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.025869][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.033116][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.044756][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.070832][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.077996][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.089825][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.097047][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.126627][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.133980][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.180794][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.187913][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.237530][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.287775][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.343532][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.443382][ T215] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.450620][ T215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.469529][ T215] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.476727][ T215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.653808][ T5832] veth0_vlan: entered promiscuous mode [ 89.717085][ T5832] veth1_vlan: entered promiscuous mode [ 89.762135][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.854394][ T5832] veth0_macvtap: entered promiscuous mode [ 89.878173][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.905983][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.916751][ T5832] veth1_macvtap: entered promiscuous mode [ 89.984506][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.007930][ T5833] veth0_vlan: entered promiscuous mode [ 90.025558][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.092941][ T5833] veth1_vlan: entered promiscuous mode [ 90.143772][ T5831] veth0_vlan: entered promiscuous mode [ 90.152743][ T1111] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.164833][ T1111] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.185480][ T1111] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.210525][ T1111] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.230501][ T5831] veth1_vlan: entered promiscuous mode [ 90.258011][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.331634][ T5833] veth0_macvtap: entered promiscuous mode [ 90.400133][ T5833] veth1_macvtap: entered promiscuous mode [ 90.419324][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.427308][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.450401][ T5831] veth0_macvtap: entered promiscuous mode [ 90.467691][ T5831] veth1_macvtap: entered promiscuous mode [ 90.518936][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.537562][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.547758][ T5824] veth0_vlan: entered promiscuous mode [ 90.576703][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.611167][ T5824] veth1_vlan: entered promiscuous mode [ 90.626208][ T5823] veth0_vlan: entered promiscuous mode [ 90.636796][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.651172][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.669614][ T51] Bluetooth: hci1: command tx timeout [ 90.675835][ T5839] Bluetooth: hci0: command tx timeout [ 90.694236][ T78] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.696807][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.707336][ T78] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.729215][ T3023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.737986][ T3023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.752005][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.760077][ T5823] veth1_vlan: entered promiscuous mode [ 90.820537][ T5839] Bluetooth: hci3: command tx timeout [ 90.826442][ T5826] Bluetooth: hci4: command tx timeout [ 90.832208][ T51] Bluetooth: hci2: command tx timeout [ 90.859653][ T3023] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.871152][ T3023] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.900522][ T3023] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.910099][ T3023] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.920236][ T5824] veth0_macvtap: entered promiscuous mode [ 90.942890][ T5824] veth1_macvtap: entered promiscuous mode [ 91.011299][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.026087][ T5823] veth0_macvtap: entered promiscuous mode [ 91.051912][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.084977][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.109931][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.121161][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.139880][ T5823] veth1_macvtap: entered promiscuous mode [ 91.148003][ T215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.167674][ T215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.179370][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.232170][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.263340][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.272839][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.323814][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.340291][ T3023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.347638][ T5949] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 91.351428][ T3023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.375356][ T215] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.411816][ T215] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.422812][ T5948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6'. [ 91.431900][ T215] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.451499][ T3023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.480491][ T215] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.494811][ T3023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.583408][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.610993][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.753379][ T3023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.762117][ T3023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.827202][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.846411][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.984088][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.004161][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.027360][ T5961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8'. [ 92.186151][ T9] cfg80211: failed to load regulatory.db [ 92.331395][ T5965] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 92.389312][ T5973] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 92.744039][ T51] Bluetooth: hci1: command tx timeout [ 92.749649][ T5826] Bluetooth: hci0: command tx timeout [ 92.814473][ T5985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10'. [ 92.824693][ T5985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10'. [ 92.905616][ T5826] Bluetooth: hci4: command tx timeout [ 92.911282][ T5839] Bluetooth: hci3: command tx timeout [ 92.916757][ T51] Bluetooth: hci2: command tx timeout [ 92.931985][ T5993] netlink: 'syz.3.12': attribute type 1 has an invalid length. [ 92.984092][ T5993] Zero length message leads to an empty skb [ 93.175087][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 93.212292][ T5999] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14'. [ 93.266776][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 93.315670][ T6004] geneve2: entered promiscuous mode [ 93.332727][ T6004] geneve2: entered allmulticast mode [ 93.350283][ T3023] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 93.368895][ T3023] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 93.407667][ T3023] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 93.432963][ T3023] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 94.710866][ T6033] syzkaller0: entered promiscuous mode [ 94.716411][ T6033] syzkaller0: entered allmulticast mode [ 95.621278][ T5977] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.903740][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 95.921063][ T6044] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 95.934556][ T6037] netlink: 'syz.3.25': attribute type 10 has an invalid length. [ 95.972184][ T6040] bond0: entered promiscuous mode [ 95.980426][ T6040] bond_slave_0: entered promiscuous mode [ 95.986354][ T6040] bond_slave_1: entered promiscuous mode [ 96.031067][ T6040] batadv_slave_0: entered promiscuous mode [ 96.044768][ T6040] batadv_slave_0: left promiscuous mode [ 96.058227][ T6040] bond0: left promiscuous mode [ 96.076793][ T6040] bond_slave_0: left promiscuous mode [ 96.089007][ T6040] bond_slave_1: left promiscuous mode [ 96.134304][ T6037] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.146730][ T6037] bond0: (slave team0): Enslaving as an active interface with an up link [ 96.380014][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35'. [ 96.523351][ T6071] syzkaller0: entered promiscuous mode [ 96.548875][ T6071] syzkaller0: entered allmulticast mode [ 96.564782][ T6076] syz.2.34 uses obsolete (PF_INET,SOCK_PACKET) [ 96.820889][ T6080] syzkaller0: entered promiscuous mode [ 96.837633][ T6080] syzkaller0: entered allmulticast mode [ 97.355248][ T6116] netlink: 'syz.2.43': attribute type 4 has an invalid length. [ 98.020208][ T6104] warning: `syz.2.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.246132][ T6123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.47'. [ 98.286833][ T6123] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 98.437291][ T6133] syzkaller0: entered promiscuous mode [ 98.443010][ T6133] syzkaller0: entered allmulticast mode [ 98.481403][ T6138] netlink: 16 bytes leftover after parsing attributes in process `syz.4.52'. [ 98.905328][ T6149] xt_hashlimit: size too large, truncated to 1048576 [ 99.444922][ T6174] netlink: 'syz.0.61': attribute type 1 has an invalid length. [ 99.636080][ T6187] netlink: 48 bytes leftover after parsing attributes in process `syz.1.64'. [ 99.649257][ T6187] netlink: 48 bytes leftover after parsing attributes in process `syz.1.64'. [ 99.895215][ T6195] netlink: 208 bytes leftover after parsing attributes in process `syz.4.67'. [ 99.915587][ T6195] netlink: 208 bytes leftover after parsing attributes in process `syz.4.67'. [ 99.926027][ T6201] netlink: 144 bytes leftover after parsing attributes in process `syz.0.69'. [ 99.928750][ T6195] netlink: 204 bytes leftover after parsing attributes in process `syz.4.67'. [ 99.949008][ T6195] openvswitch: netlink: Message has 16 unknown bytes. [ 99.962444][ T6196] syzkaller0: entered promiscuous mode [ 99.970377][ T6196] syzkaller0: entered allmulticast mode [ 99.980530][ T6195] netlink: 84 bytes leftover after parsing attributes in process `syz.4.67'. [ 99.990440][ T6195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.364251][ T6219] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 100.378830][ T6220] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 100.395829][ T6219] netlink: 'syz.2.73': attribute type 4 has an invalid length. [ 100.441705][ T6220] netlink: 'syz.2.73': attribute type 4 has an invalid length. [ 101.045018][ T6247] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20004 [ 101.068717][ T6242] netlink: 156 bytes leftover after parsing attributes in process `syz.1.79'. [ 101.793790][ T6271] syzkaller0: entered promiscuous mode [ 101.819468][ T6271] syzkaller0: entered allmulticast mode [ 102.082668][ T6284] xt_CT: No such helper "netbios-ns" [ 102.244384][ T6300] netlink: 'syz.1.90': attribute type 1 has an invalid length. [ 103.327824][ T6310] sctp: [Deprecated]: syz.4.96 (pid 6310) Use of int in max_burst socket option deprecated. [ 103.327824][ T6310] Use struct sctp_assoc_value instead [ 103.986205][ T6339] __nla_validate_parse: 5 callbacks suppressed [ 103.986224][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.102'. [ 104.624214][ T6353] syzkaller0: entered promiscuous mode [ 104.640250][ T6353] syzkaller0: entered allmulticast mode [ 104.679654][ T6354] tipc: Started in network mode [ 104.684959][ T6354] tipc: Node identity 5ea250a04608, cluster identity 4711 [ 104.693991][ T6354] tipc: Enabled bearer , priority 0 [ 104.777726][ T6358] tipc: Resetting bearer [ 104.800388][ T6358] tipc: Disabling bearer [ 104.850830][ T6357] syzkaller0: entered promiscuous mode [ 104.856501][ T6357] syzkaller0: entered allmulticast mode [ 105.064214][ T6363] netlink: 'syz.0.107': attribute type 9 has an invalid length. [ 105.077491][ T6363] netlink: 211256 bytes leftover after parsing attributes in process `syz.0.107'. [ 105.600743][ T6382] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.669482][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.115'. [ 105.940723][ T6397] FAULT_INJECTION: forcing a failure. [ 105.940723][ T6397] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.967096][ T6397] CPU: 1 UID: 0 PID: 6397 Comm: syz.0.116 Not tainted syzkaller #0 PREEMPT(full) [ 105.967124][ T6397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 105.967136][ T6397] Call Trace: [ 105.967143][ T6397] [ 105.967151][ T6397] dump_stack_lvl+0xe8/0x150 [ 105.967200][ T6397] should_fail_ex+0x412/0x560 [ 105.967236][ T6397] _copy_to_user+0x31/0xb0 [ 105.967262][ T6397] simple_read_from_buffer+0xe1/0x170 [ 105.967304][ T6397] proc_fail_nth_read+0x1bb/0x230 [ 105.967336][ T6397] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.967368][ T6397] ? rw_verify_area+0x2a6/0x4d0 [ 105.967390][ T6397] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.967420][ T6397] vfs_read+0x20c/0xa70 [ 105.967441][ T6397] ? fdget_pos+0x246/0x320 [ 105.967465][ T6397] ? __pfx___mutex_lock+0x10/0x10 [ 105.967487][ T6397] ? __pfx_vfs_read+0x10/0x10 [ 105.967512][ T6397] ? __fget_files+0x2a/0x420 [ 105.967536][ T6397] ? __fget_files+0x3a0/0x420 [ 105.967553][ T6397] ? __fget_files+0x2a/0x420 [ 105.967582][ T6397] ksys_read+0x150/0x270 [ 105.967608][ T6397] ? __pfx_ksys_read+0x10/0x10 [ 105.967644][ T6397] do_syscall_64+0x14d/0xf80 [ 105.967664][ T6397] ? trace_irq_disable+0x3b/0x150 [ 105.967683][ T6397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.967703][ T6397] ? clear_bhb_loop+0x40/0x90 [ 105.967729][ T6397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.967748][ T6397] RIP: 0033:0x7f682575d04e [ 105.967768][ T6397] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 105.967784][ T6397] RSP: 002b:00007f6826597fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.967805][ T6397] RAX: ffffffffffffffda RBX: 00007f68265986c0 RCX: 00007f682575d04e [ 105.967819][ T6397] RDX: 000000000000000f RSI: 00007f68265980a0 RDI: 0000000000000004 [ 105.967831][ T6397] RBP: 00007f6826598090 R08: 0000000000000000 R09: 0000000000000000 [ 105.967842][ T6397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.967854][ T6397] R13: 00007f6825a16128 R14: 00007f6825a16090 R15: 00007ffdb13f09c8 [ 105.967887][ T6397] [ 106.412430][ T6386] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.466439][ T6394] bond1: (slave batadv1): Opening slave failed [ 106.530806][ T6406] tipc: Started in network mode [ 106.536489][ T6406] tipc: Node identity ac1414aa, cluster identity 4711 [ 106.546335][ T6406] tipc: New replicast peer: 100.1.1.1 [ 106.553831][ T6406] tipc: Enabled bearer , priority 10 [ 106.703250][ T6410] syzkaller0: entered promiscuous mode [ 106.718447][ T6410] syzkaller0: entered allmulticast mode [ 106.753821][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'. [ 107.002218][ T6423] netlink: 'syz.0.123': attribute type 6 has an invalid length. [ 107.253340][ T6430] netlink: 48 bytes leftover after parsing attributes in process `syz.2.126'. [ 107.329725][ T6434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.128'. [ 107.678913][ T5930] tipc: Node number set to 2886997162 [ 107.752970][ T6459] syzkaller0: entered promiscuous mode [ 107.788406][ T6459] syzkaller0: entered allmulticast mode [ 108.113739][ T6467] netlink: 24 bytes leftover after parsing attributes in process `syz.2.135'. [ 108.268029][ T6484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.139'. [ 108.285807][ T6488] netlink: 40 bytes leftover after parsing attributes in process `syz.3.142'. [ 108.511078][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'. [ 108.790947][ T6516] syzkaller0: entered promiscuous mode [ 108.800724][ T6516] syzkaller0: entered allmulticast mode [ 108.827698][ T6516] 0: reclassify loop, rule prio 0, protocol 800 [ 109.097641][ T6521] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.275375][ T6527] syzkaller0: entered promiscuous mode [ 109.281225][ T6527] syzkaller0: entered allmulticast mode [ 109.331884][ T6521] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.737445][ T6521] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.783769][ T6555] tipc: Enabling of bearer rejected, failed to enable media [ 110.808409][ T6567] __nla_validate_parse: 3 callbacks suppressed [ 110.808428][ T6567] netlink: 20 bytes leftover after parsing attributes in process `syz.3.159'. [ 110.862908][ T6569] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.162'. [ 110.953932][ T6521] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.047956][ T6573] netlink: 'syz.4.164': attribute type 4 has an invalid length. [ 111.191374][ T6582] netlink: 'syz.4.164': attribute type 4 has an invalid length. [ 111.223063][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 111.261701][ T6584] netlink: 292 bytes leftover after parsing attributes in process `syz.3.167'. [ 111.285567][ T6584] netlink: 292 bytes leftover after parsing attributes in process `syz.3.167'. [ 111.302198][ T3023] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.334668][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.427933][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.463013][ T6588] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20001 [ 111.469589][ T3023] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.665664][ T6596] syzkaller0: entered promiscuous mode [ 111.679619][ T6596] syzkaller0: entered allmulticast mode [ 111.710737][ T6600] syzkaller0: entered promiscuous mode [ 111.716371][ T6600] syzkaller0: entered allmulticast mode [ 111.952793][ T6613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.178'. [ 112.009978][ T6610] netlink: 68 bytes leftover after parsing attributes in process `syz.1.175'. [ 112.019182][ T6610] netlink: 68 bytes leftover after parsing attributes in process `syz.1.175'. [ 112.429050][ T6628] tipc: Enabling of bearer rejected, failed to enable media [ 112.464575][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'. [ 112.473967][ T6636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.182'. [ 112.557111][ T6644] netlink: 'syz.3.184': attribute type 1 has an invalid length. [ 112.813538][ T6644] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.495282][ T6689] netlink: 'syz.3.193': attribute type 3 has an invalid length. [ 113.807401][ T6695] xt_CT: You must specify a L4 protocol and not use inversions on it [ 113.979584][ T6700] netlink: 'syz.2.197': attribute type 25 has an invalid length. [ 114.052313][ T6700] netlink: 'syz.2.197': attribute type 25 has an invalid length. [ 114.290496][ T6713] netlink: 'syz.1.199': attribute type 1 has an invalid length. [ 114.599224][ T6734] trusted_key: syz.4.207 sent an empty control message without MSG_MORE. [ 114.695288][ T6734] syzkaller0: entered promiscuous mode [ 114.701311][ T6734] syzkaller0: entered allmulticast mode [ 114.950274][ T6744] raw_sendmsg: syz.4.211 forgot to set AF_INET. Fix it! [ 115.423914][ T9] hid-generic 0005:0002:0043.0001: unknown main item tag 0x3 [ 115.443225][ T6755] nbd: illegal input index -1113835520 [ 115.457593][ T9] hid-generic 0005:0002:0043.0001: unexpected long global item [ 115.479096][ T9] hid-generic 0005:0002:0043.0001: probe with driver hid-generic failed with error -22 [ 116.539947][ T6788] __nla_validate_parse: 18 callbacks suppressed [ 116.539967][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 116.704379][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'. [ 116.715731][ T6796] netlink: 'syz.0.223': attribute type 10 has an invalid length. [ 116.745454][ T6796] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.753495][ T6796] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.835580][ T6796] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.842944][ T6796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.850571][ T6796] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.857714][ T6796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.926468][ T6796] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 117.034258][ T6804] bond1: option ad_select: invalid value (34) [ 117.089668][ T6815] netlink: 120 bytes leftover after parsing attributes in process `syz.0.227'. [ 117.090614][ T6804] bond1 (unregistering): Released all slaves [ 117.179225][ T6816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.227'. [ 117.729453][ T6832] netlink: 176 bytes leftover after parsing attributes in process `syz.1.232'. [ 117.818566][ T6827] nbd0: detected capacity change from 0 to 63 [ 117.932019][ T51] block nbd0: Receive control failed (result -104) [ 117.945406][ T5826] block nbd0: Receive control failed (result -32) [ 118.282592][ T6844] netlink: 'syz.3.235': attribute type 4 has an invalid length. [ 118.304205][ T6844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.235'. [ 118.305310][ T6845] syzkaller0: entered promiscuous mode [ 118.335397][ T6845] syzkaller0: entered allmulticast mode [ 118.353900][ T6844] team0: entered promiscuous mode [ 118.366414][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.235'. [ 118.388449][ T6844] team_slave_0: entered promiscuous mode [ 118.400053][ T6844] team_slave_1: entered promiscuous mode [ 118.425186][ T6844] team0: entered allmulticast mode [ 118.445609][ T6844] team_slave_0: entered allmulticast mode [ 118.465112][ T6844] team_slave_1: entered allmulticast mode [ 118.691109][ T6848] netlink: 'syz.3.237': attribute type 2 has an invalid length. [ 118.733005][ T6852] netlink: 'syz.3.237': attribute type 2 has an invalid length. [ 118.754062][ T6850] syzkaller0: entered promiscuous mode [ 118.779009][ T6850] syzkaller0: entered allmulticast mode [ 118.799101][ T6850] 0: reclassify loop, rule prio 0, protocol 800 [ 119.357632][ T6873] netlink: 128 bytes leftover after parsing attributes in process `syz.1.244'. [ 119.750814][ T6884] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.007433][ T6885] syzkaller0: entered promiscuous mode [ 120.014557][ T6885] syzkaller0: entered allmulticast mode [ 120.819774][ T6903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.252'. [ 121.650535][ T6911] syzkaller0: entered promiscuous mode [ 121.656099][ T6911] syzkaller0: entered allmulticast mode [ 121.784307][ T6922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.254'. [ 122.919719][ T6926] veth3: entered allmulticast mode [ 122.939916][ T6926] bond3: (slave veth3): Enslaving as an active interface with an up link [ 123.033210][ T6929] bond3 (unregistering): (slave veth3): Releasing backup interface [ 123.061498][ T6929] bond3 (unregistering): Released all slaves [ 123.097959][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.258'. [ 123.097959][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.258'. [ 123.108525][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.126882][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.258'. [ 123.173186][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.173400][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'. [ 123.183059][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.230382][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.240652][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.258'. [ 123.263378][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'. [ 123.571830][ T6959] tipc: Enabled bearer , priority 0 [ 123.578820][ T6961] Bluetooth: MGMT ver 1.23 [ 123.591380][ T6959] syzkaller0: entered promiscuous mode [ 123.628818][ T6959] syzkaller0: entered allmulticast mode [ 123.700665][ T6959] veth1_macvtap: mtu less than device minimum [ 123.731436][ T6958] tipc: Resetting bearer [ 123.755390][ T6958] tipc: Disabling bearer [ 123.848859][ T6976] syzkaller0: entered promiscuous mode [ 123.854550][ T6976] syzkaller0: entered allmulticast mode [ 123.862349][ T6977] tipc: Started in network mode [ 123.882108][ T6977] tipc: Node identity , cluster identity 4711 [ 123.891381][ T6977] tipc: Failed to obtain node identity [ 123.896923][ T6977] tipc: Enabling of bearer rejected, failed to enable media [ 124.174283][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 124.209768][ T6984] xt_hashlimit: size too large, truncated to 1048576 [ 124.720668][ T7006] netlink: 'syz.0.281': attribute type 2 has an invalid length. [ 124.795944][ T7006] hmac(sha224: entered promiscuous mode [ 126.306372][ T7095] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 126.315588][ T7099] netlink: 'syz.3.294': attribute type 1 has an invalid length. [ 126.396132][ T7099] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.435434][ T7101] vlan3: entered allmulticast mode [ 126.440982][ T7101] bond3: entered allmulticast mode [ 126.523912][ T7099] bond3: (slave geneve3): making interface the new active one [ 126.555871][ T7099] geneve3: entered allmulticast mode [ 126.566149][ T7099] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 126.637185][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.299'. [ 126.910908][ T7127] netlink: 60 bytes leftover after parsing attributes in process `syz.2.301'. [ 127.095573][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'. [ 127.252025][ T7142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.304'. [ 127.417507][ T7150] netlink: 'syz.4.308': attribute type 3 has an invalid length. [ 127.461008][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'. [ 127.799704][ T7166] xt_ecn: cannot match TCP bits for non-tcp packets [ 127.893695][ T7173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.317'. [ 128.315047][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.320'. [ 128.472808][ T7201] delete_channel: no stack [ 128.490539][ T7203] Bluetooth: MGMT ver 1.23 [ 128.606371][ T7206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 128.628231][ T7206] tipc: Enabling of bearer rejected, failed to enable media [ 128.814019][ T7218] tipc: Started in network mode [ 128.820679][ T7218] tipc: Node identity 5e8469855c77, cluster identity 4711 [ 128.828172][ T7218] tipc: Enabled bearer , priority 0 [ 128.837860][ T7218] syzkaller0: entered promiscuous mode [ 128.844217][ T7218] syzkaller0: entered allmulticast mode [ 128.854029][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'. [ 128.876617][ T7218] tipc: Resetting bearer [ 129.057438][ T7217] tipc: Resetting bearer [ 129.102332][ T7217] tipc: Disabling bearer [ 129.149270][ T7224] syzkaller0: entered promiscuous mode [ 129.172919][ T7224] syzkaller0: entered allmulticast mode [ 129.251645][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'. [ 129.373694][ T7231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.335'. [ 129.652218][ T7247] ieee802154 phy1 wpan1: encryption failed: -22 [ 129.695010][ T7253] Cannot find add_set index 3 as target [ 129.907828][ T7259] openvswitch: netlink: Flow actions attr not present in new flow. [ 130.134673][ T7267] tc_dump_action: action bad kind [ 130.150956][ T7272] team0: entered promiscuous mode [ 130.156087][ T7272] team_slave_0: entered promiscuous mode [ 130.176101][ T7272] team_slave_1: entered promiscuous mode [ 130.186393][ T7272] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 130.340676][ T7273] syzkaller0: entered promiscuous mode [ 130.346901][ T7273] syzkaller0: entered allmulticast mode [ 131.918175][ T7328] bond0: (slave team0): Releasing backup interface [ 131.945634][ T7328] bridge_slave_0: left allmulticast mode [ 131.960562][ T7328] bridge_slave_0: left promiscuous mode [ 131.976794][ T7328] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.999978][ T7328] bridge_slave_1: left allmulticast mode [ 132.005693][ T7328] bridge_slave_1: left promiscuous mode [ 132.011736][ T7328] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.024748][ T7328] bond0: (slave bond_slave_0): Releasing backup interface [ 132.049645][ T7328] bond0: (slave bond_slave_1): Releasing backup interface [ 132.063638][ T7328] team_slave_0: left promiscuous mode [ 132.069617][ T7328] team_slave_0: left allmulticast mode [ 132.077706][ T7328] team0: Port device team_slave_0 removed [ 132.089877][ T7328] team_slave_1: left promiscuous mode [ 132.096115][ T7328] team_slave_1: left allmulticast mode [ 132.114752][ T7328] team0: Port device team_slave_1 removed [ 132.121949][ T7328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.129628][ T7328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.138171][ T7328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.145880][ T7328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.156086][ T7328] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 132.174063][ T7329] team0: Mode changed to "broadcast" [ 132.284493][ T7332] bond1: option tlb_dynamic_lb: invalid value (5) [ 132.294500][ T7332] bond1 (unregistering): Released all slaves [ 132.507801][ T7348] __nla_validate_parse: 7 callbacks suppressed [ 132.507823][ T7348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.367'. [ 132.521865][ T7346] netlink: 34 bytes leftover after parsing attributes in process `syz.1.366'. [ 132.584527][ T7358] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 132.592297][ T7358] netlink: 203848 bytes leftover after parsing attributes in process `syz.3.369'. [ 132.647996][ T7362] netlink: 16 bytes leftover after parsing attributes in process `syz.4.367'. [ 132.692910][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.367'. [ 132.770100][ T7346] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ýà^!‚Y‡°”õÛí [ 132.770100][ T7346] 3ìUH†5rºBnœæ [ 132.789188][ T7357] netlink: 128 bytes leftover after parsing attributes in process `syz.4.367'. [ 132.887670][ T7348] netlink: 'syz.4.367': attribute type 2 has an invalid length. [ 132.895798][ T7348] netlink: 'syz.4.367': attribute type 2 has an invalid length. [ 133.075900][ T7373] syzkaller0: entered promiscuous mode [ 133.090036][ T7373] syzkaller0: entered allmulticast mode [ 133.131848][ T7373] 0: reclassify loop, rule prio 0, protocol 800 [ 133.143074][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.627473][ T7393] netlink: 32 bytes leftover after parsing attributes in process `syz.4.380'. [ 133.797192][ T7402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 134.323774][ T7434] syzkaller0: entered promiscuous mode [ 134.329501][ T7434] syzkaller0: entered allmulticast mode [ 134.341620][ T7434] 0: reclassify loop, rule prio 0, protocol 800 [ 134.434143][ T7440] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003 [ 134.614801][ T7449] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.394'. [ 134.630625][ T7449] netlink: Conntrack attr has 3 unknown bytes [ 135.351551][ T7470] syzkaller0: entered promiscuous mode [ 135.377618][ T7470] syzkaller0: entered allmulticast mode [ 135.396781][ T7470] 0: reclassify loop, rule prio 0, protocol 800 [ 136.009147][ T7494] bond1: entered allmulticast mode [ 136.448181][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'. [ 136.485695][ T7508] unsupported nlmsg_type 40 [ 136.744647][ T7522] netlink: 'syz.3.414': attribute type 1 has an invalid length. [ 136.778253][ T7514] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.799606][ T7514] team0: Port device bond2 added [ 136.811578][ T7515] netlink: 'syz.2.415': attribute type 1 has an invalid length. [ 136.959332][ T7515] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 137.626554][ T7537] bond3: entered promiscuous mode [ 137.641607][ T7537] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.722631][ T7541] __nla_validate_parse: 3 callbacks suppressed [ 137.722652][ T7541] netlink: 72 bytes leftover after parsing attributes in process `syz.1.420'. [ 137.763766][ T7541] netlink: 680 bytes leftover after parsing attributes in process `syz.1.420'. [ 137.793122][ T7541] netlink: 72 bytes leftover after parsing attributes in process `syz.1.420'. [ 137.886247][ T7543] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 137.981994][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.422'. [ 138.028119][ T7548] team_slave_0: entered promiscuous mode [ 138.034053][ T7548] team_slave_1: entered promiscuous mode [ 138.051226][ T7548] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 138.215470][ T7556] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 138.335593][ T7561] netlink: 52 bytes leftover after parsing attributes in process `syz.4.426'. [ 138.560026][ T7565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.428'. [ 138.623169][ T7565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.428'. [ 139.013663][ T7577] netlink: 'syz.4.431': attribute type 2 has an invalid length. [ 139.067767][ T7577] hmac(sha224: entered promiscuous mode [ 139.303207][ T7573] netlink: 'syz.2.429': attribute type 1 has an invalid length. [ 139.350104][ T7573] bond4: entered promiscuous mode [ 139.355716][ T7573] bond4: entered allmulticast mode [ 139.361444][ T7573] 8021q: adding VLAN 0 to HW filter on device bond4 [ 139.635180][ T7588] vlan4: entered promiscuous mode [ 139.653017][ T7588] bridge0: entered promiscuous mode [ 140.236375][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'. [ 140.329349][ T7603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'. [ 140.391797][ T7600] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.432627][ T7603] bond4: entered allmulticast mode [ 140.720893][ T7599] syz.4.437 (7599) used greatest stack depth: 17472 bytes left [ 141.343478][ T7632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.520173][ T7630] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 141.683701][ T7642] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.449'. [ 141.762032][ T7642] openvswitch: netlink: Missing key (keys=40, expected=100) [ 142.375426][ T7660] tipc: Enabling of bearer rejected, failed to enable media [ 142.555221][ T7667] ipt_REJECT: TCP_RESET invalid for non-tcp [ 142.714037][ T7675] tipc: Enabled bearer , priority 0 [ 142.738022][ T7675] syzkaller0: entered promiscuous mode [ 142.768257][ T7675] syzkaller0: entered allmulticast mode [ 142.810060][ T7675] __nla_validate_parse: 1 callbacks suppressed [ 142.810082][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 142.839832][ T7678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.458'. [ 142.893564][ T7675] 8021q: adding VLAN 0 to HW filter on device bond4 [ 142.927098][ T7675] netlink: 36 bytes leftover after parsing attributes in process `syz.3.457'. [ 142.968899][ T7675] netlink: 44 bytes leftover after parsing attributes in process `syz.3.457'. [ 143.013034][ T7685] netlink: 'syz.1.460': attribute type 3 has an invalid length. [ 143.035090][ T7675] tipc: Resetting bearer [ 143.039519][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.460'. [ 143.069932][ T7674] tipc: Resetting bearer [ 143.146434][ T7674] tipc: Disabling bearer [ 143.405416][ T7695] netlink: 'syz.4.462': attribute type 1 has an invalid length. [ 143.551824][ T7695] bond1: entered promiscuous mode [ 143.570778][ T7695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.665242][ T7701] syzkaller1: entered promiscuous mode [ 143.671050][ T7701] syzkaller1: entered allmulticast mode [ 144.238438][ T7716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.300060][ T7716] netlink: 'syz.1.467': attribute type 10 has an invalid length. [ 144.341605][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 144.430837][ T7716] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 144.461424][ T7719] vlan5: entered promiscuous mode [ 144.930726][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'. [ 144.970102][ T7742] netlink: 20 bytes leftover after parsing attributes in process `syz.0.474'. [ 144.999596][ T7742] netlink: 20 bytes leftover after parsing attributes in process `syz.0.474'. [ 145.035215][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.474'. [ 145.790594][ T30] audit: type=1107 audit(1775964339.602:2): pid=7776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ã' [ 146.081768][ T7784] xt_l2tp: v2 tid > 0xffff: 37482740 [ 146.315896][ T7789] tipc: Started in network mode [ 146.331850][ T7789] tipc: Node identity 222325027d0c, cluster identity 4711 [ 146.352268][ T7789] tipc: Enabled bearer , priority 0 [ 146.437068][ T7788] tipc: Disabling bearer [ 147.366769][ T7832] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 147.515999][ T7832] team0: Failed to send options change via netlink (err -105) [ 147.532574][ T7832] team0: Mode changed to "loadbalance" [ 147.659545][ T7838] vxcan3: entered promiscuous mode [ 147.802032][ T7845] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.882569][ T7852] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 147.882569][ T7852] Please contact the netfilter-devel mailing list or update your nftables rules. [ 147.928548][ T7855] __nla_validate_parse: 4 callbacks suppressed [ 147.928568][ T7855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.499'. [ 148.042434][ T7864] netlink: zone id is out of range [ 148.047648][ T7864] netlink: zone id is out of range [ 148.050458][ T7863] xt_hashlimit: size too large, truncated to 1048576 [ 148.080794][ T7864] netlink: zone id is out of range [ 148.086027][ T7864] netlink: zone id is out of range [ 148.105378][ T7864] netlink: zone id is out of range [ 148.130746][ T7866] ieee802154 phy1 wpan1: encryption failed: -22 [ 148.145814][ T7864] netlink: zone id is out of range [ 148.160894][ T7864] netlink: zone id is out of range [ 148.181468][ T7864] netlink: zone id is out of range [ 148.192505][ T7864] netlink: zone id is out of range [ 148.237872][ T7867] syzkaller1: entered promiscuous mode [ 148.265232][ T7867] syzkaller1: entered allmulticast mode [ 148.521325][ T1680] block nbd0: Connection timed out, retrying (0/2 alive) [ 148.530827][ T1680] block nbd0: Connection timed out, retrying (0/2 alive) [ 148.538058][ T1680] block nbd0: Connection timed out, retrying (0/2 alive) [ 148.548032][ T1680] block nbd0: Connection timed out, retrying (0/2 alive) [ 148.556175][ T1680] block nbd0: Dead connection, failed to find a fallback [ 148.564620][ T1680] block nbd0: shutting down sockets [ 148.570650][ T1680] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.571768][ T7879] netlink: 'syz.1.507': attribute type 8 has an invalid length. [ 148.581409][ T1680] Buffer I/O error on dev nbd0, logical block 3, async page read [ 148.596473][ T1680] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.606279][ T1680] Buffer I/O error on dev nbd0, logical block 2, async page read [ 148.614112][ T1680] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.623699][ T1680] Buffer I/O error on dev nbd0, logical block 1, async page read [ 148.624690][ T7876] netlink: 32 bytes leftover after parsing attributes in process `syz.0.506'. [ 148.631802][ T1680] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.651501][ T1680] Buffer I/O error on dev nbd0, logical block 0, async page read [ 148.660556][ T5829] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.687824][ T5829] Buffer I/O error on dev nbd0, logical block 0, async page read [ 148.709388][ T5829] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.728477][ T5829] Buffer I/O error on dev nbd0, logical block 1, async page read [ 148.731513][ T7876] netlink: 'syz.0.506': attribute type 10 has an invalid length. [ 148.738624][ T5829] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.778374][ T5829] Buffer I/O error on dev nbd0, logical block 2, async page read [ 148.786243][ T5829] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.808495][ T5829] Buffer I/O error on dev nbd0, logical block 3, async page read [ 148.816381][ T5829] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.845075][ T5829] Buffer I/O error on dev nbd0, logical block 0, async page read [ 148.861994][ T5829] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.882832][ T5829] Buffer I/O error on dev nbd0, logical block 1, async page read [ 148.907793][ T5829] ldm_validate_partition_table(): Disk read failed. [ 148.915207][ T7876] team0: left promiscuous mode [ 148.925435][ T7876] team_slave_0: left promiscuous mode [ 148.945904][ T7876] team_slave_1: left promiscuous mode [ 148.952079][ T5829] Dev nbd0: unable to read RDB block 0 [ 148.979612][ T5829] nbd0: unable to read partition table [ 149.010149][ T5829] ldm_validate_partition_table(): Disk read failed. [ 149.030571][ T5829] Dev nbd0: unable to read RDB block 0 [ 149.093054][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.510'. [ 149.109375][ T5829] nbd0: unable to read partition table [ 149.229985][ T7893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.511'. [ 149.322344][ T30] audit: type=1800 audit(1775964343.142:3): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.511" name="blkio.bfq.time_recursive" dev="tmpfs" ino=451 res=0 errno=0 [ 149.360530][ T7893] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.446459][ T7897] bond3: entered promiscuous mode [ 149.471907][ T7897] bond3: entered allmulticast mode [ 149.503232][ T7897] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.512594][ T7897] team0: Port device bond3 added [ 149.676676][ T7905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.515'. [ 149.953725][ T7919] netlink: 64 bytes leftover after parsing attributes in process `syz.2.518'. [ 150.101211][ T7923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.220469][ T7923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.305789][ T7930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.521'. [ 150.327992][ T7930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.521'. [ 150.341158][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.522'. [ 150.347278][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'. [ 150.504104][ T7946] netlink: 'syz.3.525': attribute type 4 has an invalid length. [ 150.555560][ T7951] netlink: 'syz.3.525': attribute type 4 has an invalid length. [ 151.553481][ T8013] syzkaller0: entered promiscuous mode [ 151.575393][ T8013] syzkaller0: entered allmulticast mode [ 152.107111][ T8027] syzkaller0: entered promiscuous mode [ 152.128809][ T8027] syzkaller0: entered allmulticast mode [ 152.710563][ T8061] xt_recent: Unsupported userspace flags (000000b1) [ 152.763045][ T8063] Bluetooth: MGMT ver 1.23 [ 153.110212][ T8076] syzkaller0: entered promiscuous mode [ 153.124860][ T8076] syzkaller0: entered allmulticast mode [ 153.218414][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 153.410265][ T8087] __nla_validate_parse: 6 callbacks suppressed [ 153.410288][ T8087] netlink: 160 bytes leftover after parsing attributes in process `syz.4.557'. [ 153.430877][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'. [ 153.440013][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'. [ 153.595507][ T8096] netlink: 20 bytes leftover after parsing attributes in process `syz.2.562'. [ 153.642739][ T8100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.561'. [ 153.784019][ T8094] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.791873][ T8094] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.095229][ T8109] Bluetooth: MGMT ver 1.23 [ 154.102643][ T8109] netlink: 44 bytes leftover after parsing attributes in process `syz.3.563'. [ 154.229535][ T8115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.563'. [ 154.511213][ T8094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.573261][ T8094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.241183][ T8115] bond0: entered promiscuous mode [ 155.338589][ T8115] bond0: left promiscuous mode [ 155.458632][ T78] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.520048][ T78] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.633775][ T78] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.670217][ T1111] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.756064][ T8152] syzkaller0: entered promiscuous mode [ 155.763232][ T8152] syzkaller0: entered allmulticast mode [ 156.244158][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'. [ 156.661531][ T8200] netlink: 32 bytes leftover after parsing attributes in process `syz.4.577'. [ 157.368686][ T8194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.384741][ T8194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.693636][ T8214] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 157.786819][ T8214] bond5 (unregistering): Released all slaves [ 158.180304][ T8248] netlink: 108 bytes leftover after parsing attributes in process `syz.4.589'. [ 158.321147][ T8245] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.440218][ T8245] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.837180][ T8245] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.917971][ T8276] syzkaller0: entered promiscuous mode [ 158.924058][ T8276] syzkaller0: entered allmulticast mode [ 158.990365][ T8245] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.087956][ T8279] IPVS: Scheduler module ip_vs_ not found [ 159.340638][ T8294] xt_CT: No such helper "syz1" [ 160.745450][ T8283] net_ratelimit: 336 callbacks suppressed [ 160.745474][ T8283] Set syz1 is full, maxelem 65536 reached [ 160.778436][ T8291] 8021q: VLANs not supported on ip6gre0 [ 160.953329][ T8303] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20017 [ 160.967353][ T5884] IPVS: starting estimator thread 0... [ 160.986157][ T8303] IPVS: lc: FWM 3 0x00000003 - no destination available [ 161.062792][ T8306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.599'. [ 161.088469][ T8304] IPVS: using max 27 ests per chain, 64800 per kthread [ 161.096698][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.190893][ T1086] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.261318][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.441438][ T78] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.708188][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 162.190302][ T8365] syzkaller0: entered promiscuous mode [ 162.216312][ T8365] syzkaller0: entered allmulticast mode [ 162.345709][ T8369] netlink: 'syz.2.610': attribute type 2 has an invalid length. [ 162.531609][ T8381] netlink: 'syz.1.615': attribute type 1 has an invalid length. [ 162.707736][ T8392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.619'. [ 162.756256][ T8392] tipc: Started in network mode [ 162.766985][ T8392] tipc: Node identity ac14140f, cluster identity 4711 [ 162.793152][ T8392] tipc: New replicast peer: 255.255.255.255 [ 162.810643][ T8392] tipc: Enabled bearer , priority 10 [ 162.877302][ T8396] bridge3: entered promiscuous mode [ 162.891403][ T8396] bridge3: entered allmulticast mode [ 162.901000][ T8398] veth1_to_bridge: entered allmulticast mode [ 163.034283][ T8401] syzkaller0: entered promiscuous mode [ 163.041300][ T8401] syzkaller0: entered allmulticast mode [ 163.295655][ T8417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.628'. [ 163.451687][ T8404] syzkaller0: entered promiscuous mode [ 163.458894][ T8410] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.623'. [ 163.481663][ T8404] syzkaller0: entered allmulticast mode [ 164.949575][ T5884] tipc: Node number set to 2886997007 [ 165.098933][ T8449] netlink: 220 bytes leftover after parsing attributes in process `syz.0.633'. [ 165.168910][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.636'. [ 165.174192][ T8449] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 165.215298][ T8449] bond1 (unregistering): Released all slaves [ 165.290648][ T8466] netlink: 'syz.1.638': attribute type 1 has an invalid length. [ 165.467350][ T8469] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.490235][ T8469] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.618094][ T8480] netlink: 'syz.0.642': attribute type 13 has an invalid length. [ 165.694925][ T8469] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.711556][ T8469] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.752419][ T8487] geneve1: entered promiscuous mode [ 165.802703][ T8469] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.830709][ T8469] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.037073][ T8506] netlink: 'syz.4.649': attribute type 3 has an invalid length. [ 166.045063][ T8506] netlink: 'syz.4.649': attribute type 1 has an invalid length. [ 166.050982][ T8469] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.055977][ T8506] netlink: 224 bytes leftover after parsing attributes in process `syz.4.649'. [ 166.083992][ T8469] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.127409][ T8501] team0: Port device bridge0 added [ 166.137248][ T8511] netlink: 68 bytes leftover after parsing attributes in process `syz.0.650'. [ 166.157349][ T8511] netlink: 156 bytes leftover after parsing attributes in process `syz.0.650'. [ 166.180012][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.291679][ T8515] x_tables: duplicate underflow at hook 3 [ 166.474466][ T8521] syzkaller0: entered promiscuous mode [ 166.481833][ T8521] syzkaller0: entered allmulticast mode [ 166.490064][ T78] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.499712][ T78] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.576030][ T78] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.585194][ T78] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.686689][ T36] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.710076][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.749461][ T36] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.762571][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.865097][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.656'. [ 166.947661][ T8528] macvtap0: entered promiscuous mode [ 166.957539][ T8528] virtio_net virtio1 eth0: entered promiscuous mode [ 166.970598][ T8528] macvtap0: entered allmulticast mode [ 167.008365][ T8528] virtio_net virtio1 eth0: entered allmulticast mode [ 167.211573][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'. [ 167.221080][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.333301][ T8550] hsr_slave_1 (unregistering): left promiscuous mode [ 167.456597][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.656'. [ 167.505616][ T8528] virtio_net virtio1 eth0: left allmulticast mode [ 167.538619][ T8528] virtio_net virtio1 eth0: left promiscuous mode [ 167.651245][ T8561] netlink: 'syz.0.666': attribute type 1 has an invalid length. [ 167.701656][ T8106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.774529][ T8561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.857198][ T8568] netlink: 14 bytes leftover after parsing attributes in process `syz.0.666'. [ 167.939244][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.948870][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.958652][ T8567] bond1: (slave veth5): Enslaving as an active interface with a down link [ 168.024458][ T8561] bond1: (slave dummy0): making interface the new active one [ 168.033514][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.035271][ T8561] dummy0: entered promiscuous mode [ 168.051857][ T8579] netlink: 32 bytes leftover after parsing attributes in process `syz.4.670'. [ 168.065387][ T8561] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 168.113785][ T8573] team0: left promiscuous mode [ 168.120251][ T8573] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.133944][ T8573] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.152041][ T8580] netlink: 44 bytes leftover after parsing attributes in process `syz.4.670'. [ 168.172522][ T8580] netlink: 43 bytes leftover after parsing attributes in process `syz.4.670'. [ 168.182411][ T8568] bond1: (slave dummy0): Releasing active interface [ 168.189401][ T8568] dummy0 (unregistering): left promiscuous mode [ 168.197110][ T8580] netlink: 'syz.4.670': attribute type 5 has an invalid length. [ 168.215999][ T8580] netlink: 43 bytes leftover after parsing attributes in process `syz.4.670'. [ 168.259689][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.808595][ T8602] syz_tun: entered allmulticast mode [ 168.843038][ T8601] syz_tun: left allmulticast mode [ 169.198625][ T8625] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 169.299315][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.586739][ T8645] netlink: 'syz.3.685': attribute type 3 has an invalid length. [ 169.716856][ T8657] netlink: 'syz.4.688': attribute type 1 has an invalid length. [ 169.735321][ T8657] netlink: 'syz.4.688': attribute type 3 has an invalid length. [ 169.768963][ T8657] netlink: 'syz.4.688': attribute type 1 has an invalid length. [ 169.788217][ T8661] netlink: 'syz.4.688': attribute type 1 has an invalid length. [ 169.954371][ T8657] bond4: (slave geneve2): making interface the new active one [ 170.005614][ T8657] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 170.067444][ T78] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 170.080966][ T78] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 170.249414][ T8685] vlan6: entered allmulticast mode [ 170.272713][ T8685] macvtap0: entered allmulticast mode [ 170.291042][ T8685] veth0_macvtap: entered allmulticast mode [ 170.441542][ T78] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 170.467422][ T78] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 171.379481][ T24] net_ratelimit: 2 callbacks suppressed [ 171.379502][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.462994][ T8744] __nla_validate_parse: 13 callbacks suppressed [ 171.463015][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.701'. [ 171.804750][ T8757] netlink: 68 bytes leftover after parsing attributes in process `syz.4.705'. [ 171.919287][ T8753] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.927175][ T8753] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.981828][ T8776] netlink: 'syz.3.704': attribute type 1 has an invalid length. [ 172.015056][ T8753] team_slave_0: left promiscuous mode [ 172.039112][ T8753] team_slave_1: left promiscuous mode [ 172.197082][ T8753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.214383][ T8753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.377195][ T7056] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.405667][ T7056] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 172.420449][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.487649][ T7056] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.527555][ T7056] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 172.531932][ T8794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.567073][ T7056] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.596779][ T7056] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 172.772429][ T7056] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.787211][ T8807] netlink: 40 bytes leftover after parsing attributes in process `syz.0.715'. [ 172.796322][ T7056] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 172.808592][ T8808] netlink: 40 bytes leftover after parsing attributes in process `syz.0.715'. [ 172.863115][ T8807] netlink: 'syz.0.715': attribute type 21 has an invalid length. [ 172.884689][ T8807] IPv6: NLM_F_CREATE should be specified when creating new route [ 172.949197][ T8808] netlink: 'syz.0.715': attribute type 11 has an invalid length. [ 173.077405][ T8816] syzkaller0: entered promiscuous mode [ 173.100232][ T8816] syzkaller0: entered allmulticast mode [ 173.288539][ T8822] geneve2: entered promiscuous mode [ 173.302623][ T8822] geneve2: entered allmulticast mode [ 173.460905][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.688231][ T8843] IPVS: lc: FWM 3 0x00000003 - no destination available [ 173.828169][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.728'. [ 173.865617][ T8852] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 174.065545][ T8860] netlink: 332 bytes leftover after parsing attributes in process `syz.0.731'. [ 174.161787][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.259601][ T7056] nci: nci_ntf_packet: unknown ntf opcode 0x703 [ 174.287383][ T8874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.735'. [ 174.499484][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.682985][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.737'. [ 174.698602][ T8884] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 174.763659][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 174.774680][ T8887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.737'. [ 174.799134][ T8887] netlink: 'syz.2.737': attribute type 2 has an invalid length. [ 174.841227][ T8889] vlan0: entered promiscuous mode [ 174.862520][ T8871] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 175.016553][ T8896] xt_connbytes: Forcing CT accounting to be enabled [ 175.032175][ T8896] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 175.087143][ T8894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.426720][ T8907] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 175.464178][ T8907] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.475823][ T8907] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 175.583317][ T8907] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.609011][ T8907] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 175.672206][ T8907] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.685659][ T8907] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 175.755294][ T8907] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.770017][ T8907] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 175.918167][ T78] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 175.933659][ T78] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 176.040820][ T8922] syzkaller0: entered promiscuous mode [ 176.049377][ T8922] syzkaller0: entered allmulticast mode [ 176.081152][ T78] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 176.094699][ T78] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 176.579359][ T5946] net_ratelimit: 1 callbacks suppressed [ 176.579381][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.656406][ T8936] __nla_validate_parse: 8 callbacks suppressed [ 176.656427][ T8936] netlink: 884 bytes leftover after parsing attributes in process `syz.1.753'. [ 177.229664][ T8104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.302990][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.544007][ T78] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 177.552745][ T78] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.621738][ T78] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 177.621834][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.633952][ T78] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.715244][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.756'. [ 177.776493][ T8946] chnl_net:caif_netlink_parms(): no params data found [ 177.816415][ T8955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'. [ 177.830685][ T8948] netlink: 'syz.2.756': attribute type 1 has an invalid length. [ 177.840544][ T8948] netlink: 'syz.2.756': attribute type 2 has an invalid length. [ 178.029579][ T8966] netlink: 'syz.1.759': attribute type 21 has an invalid length. [ 178.037576][ T8966] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.046791][ T8966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.049676][ T8967] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3545991146/3545991148 [ 178.054832][ T8966] IPv6: NLM_F_CREATE should be set when creating new route [ 178.071821][ T8966] IPv6: NLM_F_CREATE should be set when creating new route [ 178.079133][ T8966] IPv6: NLM_F_CREATE should be set when creating new route [ 178.082966][ T8968] netlink: 'syz.1.759': attribute type 21 has an invalid length. [ 178.101482][ T30] audit: type=1107 audit(1775964371.922:4): pid=8965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 178.115794][ T8968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.182876][ T8966] 8021q: adding VLAN 0 to HW filter on device bond5 [ 178.215211][ T8955] team_slave_0: entered promiscuous mode [ 178.221626][ T8955] team_slave_1: entered promiscuous mode [ 178.233557][ T8955] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.245984][ T8955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.327149][ T8970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.627801][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'. [ 178.659948][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.683624][ T8985] veth9: entered promiscuous mode [ 178.692333][ T8994] netlink: 16 bytes leftover after parsing attributes in process `syz.3.767'. [ 178.997846][ T9004] netlink: 36 bytes leftover after parsing attributes in process `syz.4.764'. [ 179.020388][ T9003] netlink: 176 bytes leftover after parsing attributes in process `syz.3.770'. [ 179.038560][ T9004] netlink: 36 bytes leftover after parsing attributes in process `syz.4.764'. [ 179.148964][ T9017] netlink: 96 bytes leftover after parsing attributes in process `syz.0.771'. [ 179.305115][ T9022] syzkaller0: entered promiscuous mode [ 179.310940][ T9022] syzkaller0: entered allmulticast mode [ 179.612866][ T9027] netlink: 16 bytes leftover after parsing attributes in process `syz.1.777'. [ 179.701935][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.174395][ T9057] netlink: 'syz.1.787': attribute type 29 has an invalid length. [ 180.250431][ T24] IPVS: starting estimator thread 0... [ 180.271541][ T8106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.338490][ T9064] IPVS: using max 30 ests per chain, 72000 per kthread [ 180.347375][ T9066] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 180.378554][ T9066] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 180.604837][ T9086] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 65, id = 0 [ 180.633951][ T9085] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 180.716374][ T9066] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 180.727534][ T9066] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 180.740855][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.752501][ T1086] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 180.761325][ T1086] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 180.771970][ T1086] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 180.784605][ T9070] 8021q: adding VLAN 0 to HW filter on device bond6 [ 180.796930][ T1086] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 180.821605][ T9066] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 180.831864][ T9066] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 180.907090][ T9066] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 180.920295][ T9066] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 180.943765][ T9094] syzkaller0: entered promiscuous mode [ 180.949788][ T9094] syzkaller0: entered allmulticast mode [ 181.006426][ T1106] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 181.016156][ T1106] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 181.043666][ T1106] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 181.052338][ T1106] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 181.073635][ T1106] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 181.082411][ T1106] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 181.103517][ T1106] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 181.113817][ T1106] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 181.702702][ T9127] FAULT_INJECTION: forcing a failure. [ 181.702702][ T9127] name failslab, interval 1, probability 0, space 0, times 0 [ 181.730385][ T9127] CPU: 0 UID: 0 PID: 9127 Comm: syz.1.801 Not tainted syzkaller #0 PREEMPT(full) [ 181.730413][ T9127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 181.730425][ T9127] Call Trace: [ 181.730432][ T9127] [ 181.730440][ T9127] dump_stack_lvl+0xe8/0x150 [ 181.730476][ T9127] should_fail_ex+0x412/0x560 [ 181.730513][ T9127] should_failslab+0xa8/0x100 [ 181.730550][ T9127] ? ptlock_alloc+0x20/0x70 [ 181.730569][ T9127] kmem_cache_alloc_noprof+0x87/0x650 [ 181.730600][ T9127] ptlock_alloc+0x20/0x70 [ 181.730620][ T9127] pte_alloc_one+0x7a/0x370 [ 181.730653][ T9127] do_pte_missing+0x12c2/0x3490 [ 181.730697][ T9127] handle_mm_fault+0x1bec/0x3310 [ 181.730717][ T9127] ? mt_find+0x186/0x630 [ 181.730752][ T9127] ? handle_mm_fault+0xee/0x3310 [ 181.730778][ T9127] ? __pfx_handle_mm_fault+0x10/0x10 [ 181.730823][ T9127] __get_user_pages+0x165b/0x29d0 [ 181.730886][ T9127] populate_vma_page_range+0x2be/0x3c0 [ 181.730919][ T9127] ? __pfx_populate_vma_page_range+0x10/0x10 [ 181.730953][ T9127] ? down_read+0x272/0x2e0 [ 181.730974][ T9127] ? __mm_populate+0x173/0x390 [ 181.731005][ T9127] __mm_populate+0x25f/0x390 [ 181.731035][ T9127] ? __pfx___mm_populate+0x10/0x10 [ 181.731074][ T9127] vm_mmap_pgoff+0x3aa/0x4f0 [ 181.731108][ T9127] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 181.731138][ T9127] ? __fget_files+0x2a/0x420 [ 181.731162][ T9127] ? __fget_files+0x3a0/0x420 [ 181.731179][ T9127] ? __fget_files+0x2a/0x420 [ 181.731202][ T9127] ksys_mmap_pgoff+0x51e/0x760 [ 181.731229][ T9127] do_syscall_64+0x14d/0xf80 [ 181.731247][ T9127] ? trace_irq_disable+0x3b/0x150 [ 181.731264][ T9127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.731284][ T9127] ? clear_bhb_loop+0x40/0x90 [ 181.731308][ T9127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.731327][ T9127] RIP: 0033:0x7f466499c819 [ 181.731347][ T9127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.731363][ T9127] RSP: 002b:00007f4665795028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 181.731391][ T9127] RAX: ffffffffffffffda RBX: 00007f4664c15fa0 RCX: 00007f466499c819 [ 181.731405][ T9127] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 181.731417][ T9127] RBP: 00007f4665795090 R08: 0000000000000003 R09: 0000000005431000 [ 181.731429][ T9127] R10: 0000000000022051 R11: 0000000000000246 R12: 0000000000000002 [ 181.731441][ T9127] R13: 00007f4664c16038 R14: 00007f4664c15fa0 R15: 00007ffd90902288 [ 181.731474][ T9127] [ 181.986564][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.160614][ T9135] netlink: 'syz.1.804': attribute type 6 has an invalid length. [ 182.184274][ T9135] __nla_validate_parse: 9 callbacks suppressed [ 182.184295][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.804'. [ 182.192608][ T9139] netlink: 44 bytes leftover after parsing attributes in process `syz.0.805'. [ 182.501280][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 182.640958][ T9160] netlink: 104 bytes leftover after parsing attributes in process `syz.1.808'. [ 182.680723][ T9156] netlink: 88 bytes leftover after parsing attributes in process `syz.1.808'. [ 182.821791][ T9166] netlink: 'syz.2.807': attribute type 4 has an invalid length. [ 183.060868][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.322230][ T8104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.533623][ T9189] netlink: zone id is out of range [ 183.578654][ T9189] netlink: zone id is out of range [ 183.613181][ T9189] netlink: zone id is out of range [ 183.629310][ T9189] netlink: zone id is out of range [ 183.657733][ T9189] netlink: zone id is out of range [ 183.668540][ T9189] netlink: zone id is out of range [ 183.682602][ T9189] netlink: zone id is out of range [ 183.744494][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'. [ 183.904413][ T9195] bond7 (unregistering): Released all slaves [ 184.321562][ T9219] syzkaller0: entered promiscuous mode [ 184.327197][ T9219] syzkaller0: entered allmulticast mode [ 184.550560][ T9238] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.831'. [ 184.807700][ T9242] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.817258][ T9242] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.856836][ T9242] veth9: left promiscuous mode [ 185.026343][ T9261] IPv6: Can't replace route, no match found [ 185.273250][ T9250] netlink: 48 bytes leftover after parsing attributes in process `syz.2.833'. [ 185.324813][ T9273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.838'. [ 185.417534][ T9273] team0: Device vlan3 is up. Set it down before adding it as a team port [ 185.521582][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'. [ 185.558881][ T9269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.837'. [ 185.755831][ T9293] netlink: 'syz.1.844': attribute type 5 has an invalid length. [ 185.761354][ T9289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.789103][ T9289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.907741][ T9292] syzkaller0: entered promiscuous mode [ 185.954996][ T9292] syzkaller0: entered allmulticast mode [ 186.837774][ T9325] netlink: 'syz.2.852': attribute type 3 has an invalid length. [ 186.874218][ T9322] xt_hashlimit: size too large, truncated to 1048576 [ 187.224979][ T5945] net_ratelimit: 1077 callbacks suppressed [ 187.225001][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.654243][ T9368] __nla_validate_parse: 4 callbacks suppressed [ 187.654262][ T9368] netlink: 76 bytes leftover after parsing attributes in process `syz.1.859'. [ 188.014315][ T9388] netlink: 68 bytes leftover after parsing attributes in process `syz.1.865'. [ 188.029995][ T9390] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 188.056374][ T9390] hsr0: entered promiscuous mode [ 188.072476][ T9391] netlink: 'syz.4.864': attribute type 6 has an invalid length. [ 188.263988][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.290939][ T9401] xt_addrtype: ipv6 does not support BROADCAST matching [ 188.339966][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.863'. [ 188.365104][ T9401] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 188.370788][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.867'. [ 188.494186][ T9405] syzkaller1: entered promiscuous mode [ 188.511112][ T9405] syzkaller1: entered allmulticast mode [ 188.624769][ T9408] netlink: 132 bytes leftover after parsing attributes in process `syz.2.868'. [ 188.928099][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.873'. [ 189.215982][ T9435] netlink: 1076 bytes leftover after parsing attributes in process `syz.1.875'. [ 189.267118][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.875'. [ 189.300130][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.312074][ T9444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.877'. [ 189.363802][ T9447] netlink: 36 bytes leftover after parsing attributes in process `syz.3.877'. [ 189.379509][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.699011][ T9458] batadv_slave_0: entered promiscuous mode [ 189.838559][ T9458] batadv_slave_0: left promiscuous mode [ 189.913292][ T9472] netlink: 'syz.4.884': attribute type 4 has an invalid length. [ 190.339039][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.353587][ T9492] batman_adv: batadv0: Adding interface: gretap1 [ 190.365635][ T9492] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.399205][ T9492] batman_adv: batadv0: Interface activated: gretap1 [ 190.442246][ T9490] syzkaller0: entered promiscuous mode [ 190.447844][ T9490] syzkaller0: entered allmulticast mode [ 190.832745][ T9515] bond0: entered promiscuous mode [ 190.853196][ T9515] bond_slave_0: entered promiscuous mode [ 190.854843][ T9517] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 190.874240][ T9515] bond_slave_1: entered promiscuous mode [ 190.901910][ T9515] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 190.920372][ T9515] gretap0: entered promiscuous mode [ 190.930528][ T9515] hsr1: entered promiscuous mode [ 191.067854][ T9535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.381511][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.489149][ T9556] syzkaller0: entered promiscuous mode [ 191.517788][ T9556] syzkaller0: entered allmulticast mode [ 191.837582][ T9571] tipc: Enabling of bearer rejected, failed to enable media [ 192.418787][ T8104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.428187][ T8104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.806018][ T9612] netlink: 'syz.4.922': attribute type 1 has an invalid length. [ 192.909490][ T9619] __nla_validate_parse: 7 callbacks suppressed [ 192.909510][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.921'. [ 192.925279][ T9619] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 192.997942][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.923'. [ 193.009608][ T9623] netlink: 28 bytes leftover after parsing attributes in process `syz.4.922'. [ 193.276142][ T9618] bond5: (slave veth9): Enslaving as an active interface with a down link [ 193.344812][ T9620] bond5: (slave veth11): Enslaving as an active interface with a down link [ 193.374072][ T9623] 8021q: adding VLAN 0 to HW filter on device bond5 [ 193.461083][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.501640][ T9626] syzkaller0: entered promiscuous mode [ 193.507281][ T9626] syzkaller0: entered allmulticast mode [ 193.599751][ T9630] netlink: 'syz.4.926': attribute type 11 has an invalid length. [ 193.737397][ T9635] netlink: 'syz.3.928': attribute type 142 has an invalid length. [ 193.973084][ T9646] netlink: 'syz.1.933': attribute type 12 has an invalid length. [ 193.988540][ T9646] netlink: 120 bytes leftover after parsing attributes in process `syz.1.933'. [ 194.372617][ T9660] netlink: 'syz.1.937': attribute type 1 has an invalid length. [ 194.383095][ T9657] netlink: 'syz.1.937': attribute type 1 has an invalid length. [ 194.462096][ T9660] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 194.465113][ T9657] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 194.490992][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.938'. [ 194.508949][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.520698][ T9664] netlink: 'syz.4.938': attribute type 13 has an invalid length. [ 194.547812][ T9664] netlink: 'syz.4.938': attribute type 17 has an invalid length. [ 194.583835][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.780699][ T9664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.790957][ T9664] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.819170][ T9664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.071830][ T9682] syzkaller0: entered promiscuous mode [ 195.118485][ T9682] syzkaller0: entered allmulticast mode [ 195.458656][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.475321][ T9687] netlink: 24 bytes leftover after parsing attributes in process `syz.0.944'. [ 195.538740][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.589178][ T9690] nbd: must specify at least one socket [ 195.844805][ T9704] netlink: 'syz.0.949': attribute type 16 has an invalid length. [ 195.864623][ T9704] netlink: 'syz.0.949': attribute type 17 has an invalid length. [ 195.976505][ T9704] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.983899][ T9704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.019323][ T9706] netlink: 20 bytes leftover after parsing attributes in process `syz.4.950'. [ 196.019959][ T9704] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.035647][ T9704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.062627][ T9708] netlink: 20 bytes leftover after parsing attributes in process `syz.4.950'. [ 196.240282][ T8104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.290227][ T9698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.949'. [ 196.488747][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.897291][ T9727] syzkaller0: entered promiscuous mode [ 196.914886][ T9727] syzkaller0: entered allmulticast mode [ 197.031389][ T9744] netlink: 104 bytes leftover after parsing attributes in process `syz.2.956'. [ 197.838686][ T5946] net_ratelimit: 2 callbacks suppressed [ 197.838716][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.503175][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.900506][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.321503][ T9744] veth2: entered allmulticast mode [ 199.619027][ T9779] syzkaller1: entered promiscuous mode [ 199.635092][ T9779] syzkaller1: entered allmulticast mode [ 199.814898][ T9793] netlink: 'syz.1.968': attribute type 1 has an invalid length. [ 199.823166][ T9793] netlink: 224 bytes leftover after parsing attributes in process `syz.1.968'. [ 199.833578][ T9795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.868896][ T9795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.881764][ T9795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.892969][ T9795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.903133][ T9797] netlink: 'syz.2.971': attribute type 1 has an invalid length. [ 199.913118][ T9795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.938868][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.960181][ T9795] netlink: 68 bytes leftover after parsing attributes in process `syz.0.970'. [ 199.967041][ T9797] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.986598][ T9801] bond5: (slave dummy0): making interface the new active one [ 199.997004][ T9801] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 200.030096][ T9794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.074383][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'. [ 200.083707][ T9805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.973'. [ 200.092801][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'. [ 200.250539][ T9808] syzkaller0: entered promiscuous mode [ 200.256127][ T9808] syzkaller0: entered allmulticast mode [ 200.603671][ T9812] syzkaller0: entered promiscuous mode [ 200.613818][ T9812] syzkaller0: entered allmulticast mode [ 202.344275][ T9871] netlink: 'syz.3.988': attribute type 1 has an invalid length. [ 202.352767][ T9871] netlink: 96 bytes leftover after parsing attributes in process `syz.3.988'. [ 202.362187][ T9871] netlink: 658 bytes leftover after parsing attributes in process `syz.3.988'. [ 202.371276][ T9871] netlink: 1 bytes leftover after parsing attributes in process `syz.3.988'. [ 202.801572][ T9856] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 202.818582][ T9856] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 202.852124][ T9856] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 202.991513][ T5946] net_ratelimit: 182 callbacks suppressed [ 202.991535][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.068632][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.093855][ T9881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.992'. [ 203.120080][ T9881] netlink: 40 bytes leftover after parsing attributes in process `syz.1.992'. [ 203.168816][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.802698][ T9916] netlink: 'syz.0.998': attribute type 6 has an invalid length. [ 204.105044][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.245233][ T9940] netlink: 'syz.0.1003': attribute type 1 has an invalid length. [ 204.425335][ T9941] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 204.437276][ T9941] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 204.579131][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.095565][ T9990] __nla_validate_parse: 8 callbacks suppressed [ 205.095586][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'. [ 205.124837][ T9990] bridge0: entered promiscuous mode [ 205.133205][ T9990] bridge0: port 3(macsec1) entered blocking state [ 205.140488][ T9990] bridge0: port 3(macsec1) entered disabled state [ 205.149270][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.154485][ T9990] macsec1: entered allmulticast mode [ 205.165206][ T9990] bridge0: entered allmulticast mode [ 205.175223][ T9990] macsec1: left allmulticast mode [ 205.180830][ T9990] bridge0: left allmulticast mode [ 205.187088][ T9990] bridge0: left promiscuous mode [ 205.406873][T10003] bond6: option lp_interval: invalid value (0) [ 205.413373][T10003] bond6: option lp_interval: allowed values 1 - 2147483647 [ 205.422744][T10003] bond6 (unregistering): Released all slaves [ 206.033641][ T9881] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.119138][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.149626][T10006] syzkaller0: entered promiscuous mode [ 206.168474][T10006] syzkaller0: entered allmulticast mode [ 206.190011][T10006] 0: reclassify loop, rule prio 0, protocol 800 [ 206.231619][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.237578][T10008] netlink: 71 bytes leftover after parsing attributes in process `syz.4.1016'. [ 206.348786][T10017] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1018'. [ 206.478436][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1020'. [ 206.491910][T10024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.593602][T10029] syzkaller0: entered promiscuous mode [ 206.599777][T10030] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1022'. [ 206.606268][T10029] syzkaller0: entered allmulticast mode [ 206.641501][T10031] netlink: 'syz.1.1023': attribute type 3 has an invalid length. [ 206.650131][T10029] FAULT_INJECTION: forcing a failure. [ 206.650131][T10029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.708325][T10029] CPU: 1 UID: 0 PID: 10029 Comm: syz.0.1021 Not tainted syzkaller #0 PREEMPT(full) [ 206.708364][T10029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 206.708376][T10029] Call Trace: [ 206.708384][T10029] [ 206.708393][T10029] dump_stack_lvl+0xe8/0x150 [ 206.708429][T10029] should_fail_ex+0x412/0x560 [ 206.708465][T10029] _copy_from_user+0x2d/0xb0 [ 206.708491][T10029] ___sys_sendmsg+0x1c6/0x360 [ 206.708527][T10029] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.708595][T10029] ? __fget_files+0x2a/0x420 [ 206.708612][T10029] ? __fget_files+0x3a0/0x420 [ 206.708642][T10029] __x64_sys_sendmsg+0x1bd/0x2a0 [ 206.708674][T10029] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 206.708714][T10029] ? __pfx_ksys_write+0x10/0x10 [ 206.708749][T10029] do_syscall_64+0x14d/0xf80 [ 206.708769][T10029] ? trace_irq_disable+0x3b/0x150 [ 206.708787][T10029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.708807][T10029] ? clear_bhb_loop+0x40/0x90 [ 206.708832][T10029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.708852][T10029] RIP: 0033:0x7f682579c819 [ 206.708870][T10029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.708886][T10029] RSP: 002b:00007f68265b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.708908][T10029] RAX: ffffffffffffffda RBX: 00007f6825a15fa0 RCX: 00007f682579c819 [ 206.708922][T10029] RDX: 008bb3a301eb005b RSI: 0000200000002180 RDI: 0000000000000006 [ 206.708936][T10029] RBP: 00007f68265b9090 R08: 0000000000000000 R09: 0000000000000000 [ 206.708947][T10029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.708959][T10029] R13: 00007f6825a16038 R14: 00007f6825a15fa0 R15: 00007ffdb13f09c8 [ 206.708990][T10029] [ 206.917788][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 206.923967][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 206.930141][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 206.936245][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 207.203709][T10055] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1028'. [ 207.224997][T10058] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1028'. [ 207.274734][T10056] syzkaller0: entered promiscuous mode [ 207.280993][T10056] syzkaller0: entered allmulticast mode [ 207.360654][T10061] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1030'. [ 207.643366][T10075] syzkaller0: entered promiscuous mode [ 207.649093][T10075] syzkaller0: entered allmulticast mode [ 207.869453][T10082] syzkaller0: entered promiscuous mode [ 207.879409][T10082] syzkaller0: entered allmulticast mode [ 208.338627][ T5946] net_ratelimit: 3 callbacks suppressed [ 208.338643][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.378798][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.418813][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.658554][ T8104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.458842][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.499306][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.538813][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.698875][ T8104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.578703][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.059185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.067982][ T8106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.618707][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.699319][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.659802][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.698894][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.098852][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.738928][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.778936][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.818934][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.138849][ T8104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.858665][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.899450][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.949140][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.178729][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.988874][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.304938][ T8104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.313882][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.322704][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.332304][ T7058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.342474][ T8104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.353013][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.018683][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.424160][T10098] ip6t_srh: unknown srh match flags 4000 [ 227.446835][T10099] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 227.500184][T10099] IPVS: set_ctl: invalid protocol: 8 10.1.1.2:20001 [ 227.516650][ T8104] IPVS: starting estimator thread 0... [ 227.535375][T10110] netlink: 'syz.4.1042': attribute type 1 has an invalid length. [ 227.618465][T10106] IPVS: using max 36 ests per chain, 86400 per kthread [ 227.671096][T10110] 8021q: adding VLAN 0 to HW filter on device bond6 [ 228.291001][T10114] bond6: (slave veth13): Enslaving as an active interface with a down link [ 228.383729][T10134] syzkaller0: entered promiscuous mode [ 228.398428][T10134] syzkaller0: entered allmulticast mode [ 228.496824][T10137] syzkaller0: entered promiscuous mode [ 228.504934][T10137] syzkaller0: entered allmulticast mode [ 228.621494][T10139] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1051'. [ 228.742617][T10145] netlink: 'syz.0.1053': attribute type 11 has an invalid length. [ 228.773657][T10145] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.1053'. [ 228.994806][T10164] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 229.299798][ T29] net_ratelimit: 1030 callbacks suppressed [ 229.299818][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.521191][T10184] netlink: 'syz.1.1062': attribute type 1 has an invalid length. [ 229.530255][T10184] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1062'. [ 229.668055][T10181] syzkaller0: entered promiscuous mode [ 229.673821][T10181] syzkaller0: entered allmulticast mode [ 229.747393][T10192] netlink: 'syz.4.1060': attribute type 2 has an invalid length. [ 229.756241][T10192] netlink: 119 bytes leftover after parsing attributes in process `syz.4.1060'. [ 230.340466][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.437951][ T8106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.454661][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.464685][ T8106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.474409][ T8104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.144040][T10203] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1064'. [ 231.292470][T10206] mac80211_hwsim hwsim5 ªªªªª;: renamed from wlan0 [ 231.383929][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.459281][ T8104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.747463][T10244] syzkaller0: entered promiscuous mode [ 231.753244][T10244] syzkaller0: entered allmulticast mode [ 231.854471][T10250] netlink: 'syz.1.1079': attribute type 9 has an invalid length. [ 231.980349][T10249] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 232.065558][T10270] netlink: 'syz.1.1085': attribute type 1 has an invalid length. [ 232.172181][T10276] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1084'. [ 232.240622][T10255] veth0_macvtap: left allmulticast mode [ 232.286081][T10255] batman_adv: batadv0: Interface deactivated: gretap1 [ 232.355379][T10270] 8021q: adding VLAN 0 to HW filter on device bond7 [ 232.409572][T10273] bond7: (slave geneve3): making interface the new active one [ 232.421994][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.434362][T10273] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 232.446872][ T78] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 232.469337][ T78] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 232.477796][ T78] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 232.501483][ T78] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 232.530977][ T78] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 232.546064][ T78] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 232.556942][ T78] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 232.578775][ T78] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 232.587434][ T78] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 232.608644][ T78] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 232.640553][ T78] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 232.671507][ T78] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 232.881704][T10298] syzkaller0: entered promiscuous mode [ 232.898563][T10298] syzkaller0: entered allmulticast mode [ 233.197207][T10312] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1096'. [ 233.258081][T10322] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1098'. [ 233.461878][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.479927][T10326] netlink: 'syz.4.1099': attribute type 10 has an invalid length. [ 233.489060][T10326] syz_tun: entered promiscuous mode [ 233.500259][T10326] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 233.699260][T10334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.790875][T10337] sit0: entered promiscuous mode [ 233.806405][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'. [ 234.019008][T10353] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1108'. [ 234.044201][T10355] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 234.068884][T10355] bridge2: entered allmulticast mode [ 234.277409][T10354] syzkaller0: entered promiscuous mode [ 234.283372][T10354] syzkaller0: entered allmulticast mode [ 234.327340][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1109'. [ 234.499393][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.510446][ T8104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.048684][T10373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1112'. [ 235.196167][T10396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.205226][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.226226][T10396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.235769][ T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.244637][T10395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.253934][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.272423][T10395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.543229][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.996069][T10447] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1130'. [ 237.237195][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1134'. [ 237.260930][T10462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1134'. [ 237.285651][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1134'. [ 237.315229][T10462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1134'. [ 237.786127][T10489] netlink: 'syz.1.1141': attribute type 1 has an invalid length. [ 237.826962][T10489] bond8: (slave bridge4): Enslaving as a backup interface with an up link [ 238.054704][T10471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 238.080620][T10505] syzkaller0: entered promiscuous mode [ 238.086243][T10505] syzkaller0: entered allmulticast mode [ 239.649445][T10514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1145'. [ 239.674986][T10520] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1147'. [ 239.710078][T10514] sctp: [Deprecated]: syz.1.1145 (pid 10514) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.710078][T10514] Use struct sctp_sack_info instead [ 239.722827][ T29] net_ratelimit: 5 callbacks suppressed [ 239.722847][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.021059][ T8106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.022602][T10528] syzkaller0: entered promiscuous mode [ 240.035058][T10528] syzkaller0: entered allmulticast mode [ 240.588790][ T8104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.739526][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.460151][T10547] pim6reg: entered allmulticast mode [ 241.779552][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.611656][T10517] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 242.820172][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.093754][T10578] syzkaller0: entered promiscuous mode [ 243.099488][T10578] syzkaller0: entered allmulticast mode [ 243.604713][T10595] syzkaller0: entered promiscuous mode [ 243.610505][T10595] syzkaller0: entered allmulticast mode [ 243.623725][ T8106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.677997][T10598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.686654][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.852710][T10606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.027631][T10613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1170'. [ 244.037033][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1170'. [ 244.046528][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1170'. [ 244.056204][T10613] netlink: 'syz.3.1170': attribute type 3 has an invalid length. [ 244.064736][T10613] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1170'. [ 244.074264][T10613] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1170'. [ 244.348902][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1170'. [ 244.900977][ T29] net_ratelimit: 2 callbacks suppressed [ 244.900994][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.612220][T10632] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1175'. [ 245.884865][T10647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1179'. [ 245.939108][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.969844][T10654] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 246.197694][T10658] netlink: 'syz.2.1181': attribute type 13 has an invalid length. [ 246.590859][T10673] syzkaller0: entered promiscuous mode [ 246.610115][T10673] syzkaller0: entered allmulticast mode [ 246.677788][ T8106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.856047][T10696] netlink: 'syz.1.1191': attribute type 3 has an invalid length. [ 246.877773][T10696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.887795][T10696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.900018][T10696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.911898][T10696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.920877][T10696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.929949][T10696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.940015][T10696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.674317][T10736] syzkaller0: entered promiscuous mode [ 248.679933][T10736] syzkaller0: entered allmulticast mode [ 248.705553][T10731] syzkaller0: entered promiscuous mode [ 248.711324][T10731] syzkaller0: entered allmulticast mode [ 248.906264][T10745] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 248.917810][T10741] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1202'. [ 249.166559][T10758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1207'. [ 249.200548][T10758] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1207'. [ 249.601554][T10777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.803915][T10787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1216'. [ 249.914485][ T5840] block nbd1: Receive control failed (result -1) [ 250.985467][T10842] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 251.218113][T10846] Unsupported ieee802154 address type: 0 [ 251.887459][T10880] netlink: 184020 bytes leftover after parsing attributes in process `syz.1.1241'. [ 252.104898][T10891] netlink: 'syz.1.1244': attribute type 1 has an invalid length. [ 252.228732][T10891] bond9: entered promiscuous mode [ 252.254847][T10891] 8021q: adding VLAN 0 to HW filter on device bond9 [ 252.740284][T10916] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1249'. [ 252.815933][T10915] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 252.826247][ C0] net_ratelimit: 40 callbacks suppressed [ 252.826271][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.143642][T10931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1253'. [ 253.253425][T10934] syzkaller0: entered promiscuous mode [ 253.259737][T10934] syzkaller0: entered allmulticast mode [ 253.481811][T10943] xt_hashlimit: size too large, truncated to 1048576 [ 253.495863][T10946] veth0_to_bridge: entered promiscuous mode [ 253.678828][T10944] syzkaller0: entered promiscuous mode [ 253.693527][T10944] syzkaller0: entered allmulticast mode [ 253.993919][T10951] netlink: 'syz.2.1258': attribute type 39 has an invalid length. [ 254.113968][T10954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1259'. [ 254.185562][T10955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.203851][T10955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.853872][T10960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1260'. [ 254.865115][T10960] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1260'. [ 255.288072][T10966] netlink: 'syz.4.1262': attribute type 2 has an invalid length. [ 255.302499][T10966] netlink: 1696 bytes leftover after parsing attributes in process `syz.4.1262'. [ 255.526671][T10943] veth0_to_bridge: left promiscuous mode [ 255.538772][T10951] veth0_macvtap: left promiscuous mode [ 255.611198][T10951] [ 255.613611][T10951] ====================================================== [ 255.620657][T10951] WARNING: possible circular locking dependency detected [ 255.627712][T10951] syzkaller #0 Not tainted [ 255.632153][T10951] ------------------------------------------------------ [ 255.639184][T10951] syz.2.1258/10951 is trying to acquire lock: [ 255.645457][T10951] ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove+0x30/0x60 [ 255.654694][T10951] [ 255.654694][T10951] but task is already holding lock: [ 255.662083][T10951] ffffffff8f17d368 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 255.670805][T10951] [ 255.670805][T10951] which lock already depends on the new lock. [ 255.670805][T10951] [ 255.681386][T10951] [ 255.681386][T10951] the existing dependency chain (in reverse order) is: [ 255.690400][T10951] [ 255.690400][T10951] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 255.697626][T10951] __mutex_lock+0x19f/0x1300 [ 255.702750][T10951] get_device_parent+0x16f/0x3a0 [ 255.708217][T10951] device_add+0x2e1/0xb70 [ 255.713082][T10951] device_create+0x269/0x300 [ 255.718339][T10951] msr_device_create+0x33/0x50 [ 255.723901][T10951] cpuhp_invoke_callback+0x445/0x860 [ 255.729730][T10951] cpuhp_thread_fun+0x36b/0x780 [ 255.735133][T10951] smpboot_thread_fn+0x541/0xa50 [ 255.740619][T10951] kthread+0x388/0x470 [ 255.745224][T10951] ret_from_fork+0x51e/0xb90 [ 255.750346][T10951] ret_from_fork_asm+0x1a/0x30 [ 255.755645][T10951] [ 255.755645][T10951] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 255.763226][T10951] cpuhp_thread_fun+0x127/0x780 [ 255.768686][T10951] smpboot_thread_fn+0x541/0xa50 [ 255.774337][T10951] kthread+0x388/0x470 [ 255.778971][T10951] ret_from_fork+0x51e/0xb90 [ 255.784123][T10951] ret_from_fork_asm+0x1a/0x30 [ 255.789423][T10951] [ 255.789423][T10951] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 255.797556][T10951] cpus_read_lock+0x42/0x160 [ 255.802689][T10951] static_key_slow_inc+0x12/0x30 [ 255.808164][T10951] tcp_md5_do_add+0x1d4/0x390 [ 255.813376][T10951] tcp_v6_parse_md5_keys+0x562/0x680 [ 255.819335][T10951] do_tcp_setsockopt+0x12ec/0x2060 [ 255.825062][T10951] do_sock_setsockopt+0x17c/0x1b0 [ 255.830704][T10951] __x64_sys_setsockopt+0x13d/0x1b0 [ 255.836457][T10951] do_syscall_64+0x14d/0xf80 [ 255.841582][T10951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.847997][T10951] [ 255.847997][T10951] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 255.855999][T10951] lock_sock_nested+0x41/0x100 [ 255.861295][T10951] inet_shutdown+0x6a/0x390 [ 255.866345][T10951] nbd_mark_nsock_dead+0x2e9/0x560 [ 255.872098][T10951] recv_work+0x1c7f/0x1d90 [ 255.877046][T10951] process_scheduled_works+0xb6e/0x18c0 [ 255.883119][T10951] worker_thread+0xa53/0xfc0 [ 255.888245][T10951] kthread+0x388/0x470 [ 255.892849][T10951] ret_from_fork+0x51e/0xb90 [ 255.897966][T10951] ret_from_fork_asm+0x1a/0x30 [ 255.903437][T10951] [ 255.903437][T10951] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 255.911097][T10951] __mutex_lock+0x19f/0x1300 [ 255.916221][T10951] nbd_queue_rq+0x37b/0x1100 [ 255.921346][T10951] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 255.927423][T10951] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 255.934367][T10951] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 255.940875][T10951] blk_mq_run_hw_queue+0x348/0x4f0 [ 255.946515][T10951] blk_mq_dispatch_list+0xd16/0xe10 [ 255.952415][T10951] blk_mq_flush_plug_list+0x48d/0x570 [ 255.958315][T10951] __blk_flush_plug+0x3ed/0x4d0 [ 255.963699][T10951] __submit_bio+0x28d/0x580 [ 255.968735][T10951] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 255.974901][T10951] block_read_full_folio+0x599/0x830 [ 255.980717][T10951] filemap_read_folio+0x137/0x3b0 [ 255.986355][T10951] do_read_cache_folio+0x358/0x590 [ 255.992020][T10951] read_part_sector+0xb6/0x2b0 [ 255.997314][T10951] adfspart_check_ICS+0xa5/0xa40 [ 256.002784][T10951] bdev_disk_changed+0x7ba/0x1550 [ 256.008340][T10951] blkdev_get_whole+0x380/0x510 [ 256.013804][T10951] bdev_open+0x31e/0xd30 [ 256.018575][T10951] blkdev_open+0x470/0x610 [ 256.023627][T10951] do_dentry_open+0x785/0x14e0 [ 256.029211][T10951] vfs_open+0x3b/0x340 [ 256.033932][T10951] path_openat+0x2e08/0x3860 [ 256.039171][T10951] do_file_open+0x23e/0x4a0 [ 256.044207][T10951] do_sys_openat2+0x113/0x200 [ 256.049422][T10951] __x64_sys_openat+0x138/0x170 [ 256.054813][T10951] do_syscall_64+0x14d/0xf80 [ 256.059927][T10951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.066351][T10951] [ 256.066351][T10951] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 256.073576][T10951] __mutex_lock+0x19f/0x1300 [ 256.078701][T10951] nbd_queue_rq+0xc6/0x1100 [ 256.083737][T10951] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 256.089898][T10951] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 256.096846][T10951] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 256.103359][T10951] blk_mq_run_hw_queue+0x348/0x4f0 [ 256.108996][T10951] blk_mq_dispatch_list+0xd16/0xe10 [ 256.114729][T10951] blk_mq_flush_plug_list+0x48d/0x570 [ 256.120643][T10951] __blk_flush_plug+0x3ed/0x4d0 [ 256.126044][T10951] __submit_bio+0x28d/0x580 [ 256.131082][T10951] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 256.137287][T10951] block_read_full_folio+0x599/0x830 [ 256.143120][T10951] filemap_read_folio+0x137/0x3b0 [ 256.148674][T10951] do_read_cache_folio+0x358/0x590 [ 256.154322][T10951] read_part_sector+0xb6/0x2b0 [ 256.159610][T10951] adfspart_check_ICS+0xa5/0xa40 [ 256.165080][T10951] bdev_disk_changed+0x7ba/0x1550 [ 256.170631][T10951] blkdev_get_whole+0x380/0x510 [ 256.176013][T10951] bdev_open+0x31e/0xd30 [ 256.180780][T10951] blkdev_open+0x470/0x610 [ 256.185732][T10951] do_dentry_open+0x785/0x14e0 [ 256.191024][T10951] vfs_open+0x3b/0x340 [ 256.195623][T10951] path_openat+0x2e08/0x3860 [ 256.200735][T10951] do_file_open+0x23e/0x4a0 [ 256.205780][T10951] do_sys_openat2+0x113/0x200 [ 256.211076][T10951] __x64_sys_openat+0x138/0x170 [ 256.216459][T10951] do_syscall_64+0x14d/0xf80 [ 256.221570][T10951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.227995][T10951] [ 256.227995][T10951] -> #4 (set->srcu){.+.+}-{0:0}: [ 256.235127][T10951] __synchronize_srcu+0xca/0x300 [ 256.240594][T10951] elevator_switch+0x1e8/0x7a0 [ 256.245889][T10951] elevator_change+0x2cc/0x450 [ 256.251181][T10951] elevator_set_default+0x36c/0x430 [ 256.256907][T10951] blk_register_queue+0x366/0x430 [ 256.262467][T10951] __add_disk+0x677/0xd50 [ 256.267334][T10951] add_disk_fwnode+0xfb/0x480 [ 256.272550][T10951] nbd_dev_add+0x72c/0xb50 [ 256.277496][T10951] nbd_init+0x168/0x1f0 [ 256.282192][T10951] do_one_initcall+0x250/0x8d0 [ 256.287597][T10951] do_initcall_level+0x104/0x190 [ 256.293075][T10951] do_initcalls+0x59/0xa0 [ 256.297954][T10951] kernel_init_freeable+0x2a6/0x3e0 [ 256.303689][T10951] kernel_init+0x1d/0x1d0 [ 256.308724][T10951] ret_from_fork+0x51e/0xb90 [ 256.313847][T10951] ret_from_fork_asm+0x1a/0x30 [ 256.319144][T10951] [ 256.319144][T10951] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 256.326971][T10951] __mutex_lock+0x19f/0x1300 [ 256.332187][T10951] elevator_change+0x1b3/0x450 [ 256.337569][T10951] elevator_set_none+0xb5/0x140 [ 256.342948][T10951] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 256.349291][T10951] nbd_start_device+0x17f/0xb10 [ 256.354670][T10951] nbd_genl_connect+0x165b/0x1cf0 [ 256.360312][T10951] genl_family_rcv_msg_doit+0x22a/0x330 [ 256.366470][T10951] genl_rcv_msg+0x61c/0x7a0 [ 256.371498][T10951] netlink_rcv_skb+0x232/0x4b0 [ 256.376790][T10951] genl_rcv+0x28/0x40 [ 256.381302][T10951] netlink_unicast+0x80f/0x9b0 [ 256.386593][T10951] netlink_sendmsg+0x813/0xb40 [ 256.391888][T10951] ____sys_sendmsg+0x972/0x9f0 [ 256.397186][T10951] ___sys_sendmsg+0x2a5/0x360 [ 256.402399][T10951] __x64_sys_sendmsg+0x1bd/0x2a0 [ 256.408049][T10951] do_syscall_64+0x14d/0xf80 [ 256.413185][T10951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.419635][T10951] [ 256.419635][T10951] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 256.428352][T10951] blk_alloc_queue+0x546/0x680 [ 256.433965][T10951] __blk_mq_alloc_disk+0x197/0x390 [ 256.439636][T10951] nbd_dev_add+0x499/0xb50 [ 256.444604][T10951] nbd_init+0x168/0x1f0 [ 256.449295][T10951] do_one_initcall+0x250/0x8d0 [ 256.454620][T10951] do_initcall_level+0x104/0x190 [ 256.460102][T10951] do_initcalls+0x59/0xa0 [ 256.464967][T10951] kernel_init_freeable+0x2a6/0x3e0 [ 256.470696][T10951] kernel_init+0x1d/0x1d0 [ 256.475557][T10951] ret_from_fork+0x51e/0xb90 [ 256.480677][T10951] ret_from_fork_asm+0x1a/0x30 [ 256.485973][T10951] [ 256.485973][T10951] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 256.493194][T10951] fs_reclaim_acquire+0x71/0x100 [ 256.498665][T10951] kmem_cache_alloc_lru_noprof+0x45/0x640 [ 256.504921][T10951] alloc_inode+0xb8/0x1b0 [ 256.509780][T10951] iget_locked+0x131/0x6a0 [ 256.514719][T10951] kernfs_get_inode+0x4f/0x780 [ 256.520015][T10951] kernfs_get_tree+0x5cd/0x980 [ 256.525307][T10951] sysfs_get_tree+0x46/0x110 [ 256.530430][T10951] vfs_get_tree+0x92/0x2a0 [ 256.535468][T10951] do_new_mount+0x341/0xd30 [ 256.540693][T10951] __se_sys_mount+0x31d/0x420 [ 256.545912][T10951] do_syscall_64+0x14d/0xf80 [ 256.551053][T10951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.557492][T10951] [ 256.557492][T10951] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 256.565511][T10951] __lock_acquire+0x15a5/0x2cf0 [ 256.570921][T10951] lock_acquire+0xf0/0x2e0 [ 256.576060][T10951] down_write+0x96/0x200 [ 256.581757][T10951] kernfs_remove+0x30/0x60 [ 256.586722][T10951] __kobject_del+0xe1/0x330 [ 256.591758][T10951] kobject_del+0x45/0x60 [ 256.596535][T10951] cleanup_glue_dir+0x1a3/0x220 [ 256.601916][T10951] device_del+0x780/0x8f0 [ 256.606862][T10951] device_destroy+0xb2/0x1a0 [ 256.611982][T10951] macvtap_device_event+0x226/0x400 [ 256.617710][T10951] notifier_call_chain+0x1be/0x400 [ 256.623357][T10951] unregister_netdevice_many_notify+0x17a5/0x22c0 [ 256.630306][T10951] rtnl_dellink+0x5d4/0x820 [ 256.635354][T10951] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 256.640865][T10951] netlink_rcv_skb+0x232/0x4b0 [ 256.646184][T10951] netlink_unicast+0x80f/0x9b0 [ 256.651487][T10951] netlink_sendmsg+0x813/0xb40 [ 256.656793][T10951] ____sys_sendmsg+0x972/0x9f0 [ 256.662091][T10951] ___sys_sendmsg+0x2a5/0x360 [ 256.667304][T10951] __x64_sys_sendmsg+0x1bd/0x2a0 [ 256.672777][T10951] do_syscall_64+0x14d/0xf80 [ 256.677898][T10951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.684323][T10951] [ 256.684323][T10951] other info that might help us debug this: [ 256.684323][T10951] [ 256.694559][T10951] Chain exists of: [ 256.694559][T10951] &root->kernfs_rwsem --> cpuhp_state-up --> gdp_mutex [ 256.694559][T10951] [ 256.707350][T10951] Possible unsafe locking scenario: [ 256.707350][T10951] [ 256.714803][T10951] CPU0 CPU1 [ 256.720170][T10951] ---- ---- [ 256.725627][T10951] lock(gdp_mutex); [ 256.729530][T10951] lock(cpuhp_state-up); [ 256.736382][T10951] lock(gdp_mutex); [ 256.742806][T10951] lock(&root->kernfs_rwsem); [ 256.747575][T10951] [ 256.747575][T10951] *** DEADLOCK *** [ 256.747575][T10951] [ 256.755715][T10951] 2 locks held by syz.2.1258/10951: [ 256.760912][T10951] #0: ffffffff8fbcb188 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x42a/0x820 [ 256.769891][T10951] #1: ffffffff8f17d368 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 256.779061][T10951] [ 256.779061][T10951] stack backtrace: [ 256.784968][T10951] CPU: 0 UID: 0 PID: 10951 Comm: syz.2.1258 Not tainted syzkaller #0 PREEMPT(full) [ 256.784988][T10951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 256.784999][T10951] Call Trace: [ 256.785005][T10951] [ 256.785012][T10951] dump_stack_lvl+0xe8/0x150 [ 256.785036][T10951] print_circular_bug+0x2e1/0x300 [ 256.785063][T10951] check_noncircular+0x12e/0x150 [ 256.785090][T10951] __lock_acquire+0x15a5/0x2cf0 [ 256.785113][T10951] ? __lock_acquire+0x6b5/0x2cf0 [ 256.785134][T10951] ? rcu_is_watching+0x15/0xb0 [ 256.785159][T10951] lock_acquire+0xf0/0x2e0 [ 256.785179][T10951] ? kernfs_remove+0x30/0x60 [ 256.785198][T10951] down_write+0x96/0x200 [ 256.785217][T10951] ? kernfs_remove+0x30/0x60 [ 256.785231][T10951] ? __pfx_down_write+0x10/0x10 [ 256.785248][T10951] ? kernfs_root+0x1c/0x230 [ 256.785271][T10951] ? kernfs_root+0x1c/0x230 [ 256.785292][T10951] ? kernfs_root+0x1c/0x230 [ 256.785315][T10951] ? kernfs_root+0x1ea/0x230 [ 256.785338][T10951] kernfs_remove+0x30/0x60 [ 256.785353][T10951] __kobject_del+0xe1/0x330 [ 256.785373][T10951] kobject_del+0x45/0x60 [ 256.785397][T10951] cleanup_glue_dir+0x1a3/0x220 [ 256.785421][T10951] device_del+0x780/0x8f0 [ 256.785445][T10951] ? __pfx_device_del+0x10/0x10 [ 256.785469][T10951] device_destroy+0xb2/0x1a0 [ 256.785491][T10951] ? __pfx_device_destroy+0x10/0x10 [ 256.785517][T10951] macvtap_device_event+0x226/0x400 [ 256.785540][T10951] ? __pfx_macvtap_device_event+0x10/0x10 [ 256.785562][T10951] ? igmp_netdev_event+0x7c/0x750 [ 256.785586][T10951] notifier_call_chain+0x1be/0x400 [ 256.785614][T10951] unregister_netdevice_many_notify+0x17a5/0x22c0 [ 256.785635][T10951] ? unregister_netdevice_queue+0x19b/0x360 [ 256.785651][T10951] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 256.785670][T10951] ? netdev_upper_dev_unlink+0x99/0xe0 [ 256.785691][T10951] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 256.785712][T10951] ? macvlan_dellink+0x3e2/0x470 [ 256.785729][T10951] ? __pfx_macvtap_dellink+0x10/0x10 [ 256.785750][T10951] ? __pfx_macvtap_dellink+0x10/0x10 [ 256.785771][T10951] rtnl_dellink+0x5d4/0x820 [ 256.785792][T10951] ? __pfx_rtnl_dellink+0x10/0x10 [ 256.785840][T10951] ? __pfx_rtnl_dellink+0x10/0x10 [ 256.785859][T10951] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 256.785880][T10951] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 256.785899][T10951] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 256.785918][T10951] ? ref_tracker_free+0x693/0x840 [ 256.785934][T10951] ? __copy_skb_header+0xa3/0x4a0 [ 256.785958][T10951] ? __pfx_ref_tracker_free+0x10/0x10 [ 256.785977][T10951] netlink_rcv_skb+0x232/0x4b0 [ 256.785999][T10951] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 256.786019][T10951] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 256.786043][T10951] ? netlink_deliver_tap+0x2e/0x1b0 [ 256.786066][T10951] netlink_unicast+0x80f/0x9b0 [ 256.786087][T10951] ? __pfx_netlink_unicast+0x10/0x10 [ 256.786105][T10951] ? netlink_sendmsg+0x650/0xb40 [ 256.786126][T10951] ? skb_put+0x11b/0x210 [ 256.786148][T10951] netlink_sendmsg+0x813/0xb40 [ 256.786172][T10951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.786195][T10951] ? aa_sock_msg_perm+0xf1/0x1b0 [ 256.786210][T10951] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 256.786230][T10951] ____sys_sendmsg+0x972/0x9f0 [ 256.786256][T10951] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.786283][T10951] ? import_iovec+0x73/0xa0 [ 256.786303][T10951] ___sys_sendmsg+0x2a5/0x360 [ 256.786328][T10951] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.786353][T10951] ? futex_wake+0x4ac/0x580 [ 256.786385][T10951] ? __fget_files+0x2a/0x420 [ 256.786405][T10951] ? __fget_files+0x3a0/0x420 [ 256.786422][T10951] __x64_sys_sendmsg+0x1bd/0x2a0 [ 256.786446][T10951] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 256.786473][T10951] ? rcu_is_watching+0x15/0xb0 [ 256.786498][T10951] do_syscall_64+0x14d/0xf80 [ 256.786513][T10951] ? trace_irq_disable+0x3b/0x150 [ 256.786527][T10951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.786543][T10951] ? clear_bhb_loop+0x40/0x90 [ 256.786562][T10951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.786577][T10951] RIP: 0033:0x7fa37979c819 [ 256.786593][T10951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.786608][T10951] RSP: 002b:00007fa37a71d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.786625][T10951] RAX: ffffffffffffffda RBX: 00007fa379a15fa0 RCX: 00007fa37979c819 [ 256.786637][T10951] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 256.786649][T10951] RBP: 00007fa379832c91 R08: 0000000000000000 R09: 0000000000000000 [ 256.786658][T10951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.786669][T10951] R13: 00007fa379a16038 R14: 00007fa379a15fa0 R15: 00007ffe026fae48 [ 256.786686][T10951] [ 257.254699][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.294517][T10970] ipvlan2: entered promiscuous mode [ 257.308424][T10970] team0: Device ipvlan2 failed to register rx_handler